PHP Security::Link方法代码示例

 /**
  * Replaces variables inside an email template according to {@link TEMPLATE_NOTE}.
  *
  * @param  string $string
  * @param  Member $member
  * @return string
  */
 public static function get_parsed_string($string, $member, $page)
 {
     $variables = array('$SiteName' => SiteConfig::current_site_config()->Title, '$LoginLink' => Director::absoluteURL(Security::Link('login')), '$ConfirmLink' => Director::absoluteURL(Controller::join_links($page->Link('confirm'), $member->ID, "?key={$member->ValidationKey}")), '$LostPasswordLink' => Director::absoluteURL(Security::Link('lostpassword')), '$Member.Created' => $member->obj('Created')->Nice());
     foreach (array('Name', 'FirstName', 'Surname', 'Email') as $field) {
         $variables["\$Member.{$field}"] = $member->{$field};
     }
     return str_replace(array_keys($variables), array_values($variables), $string);
 }

 /**
  * Change the password
  *
  * @param array $data The user submitted data
  */
 function doChangePassword(array $data)
 {
     if ($member = Member::currentUser()) {
         // The user was logged in, check the current password
         if (isset($data['OldPassword']) && $member->checkPassword($data['OldPassword']) == false) {
             $this->clearMessage();
             $this->sessionMessage(_t('Member.ERRORPASSWORDNOTMATCH', "Your current password does not match, please try again"), "bad");
             Director::redirectBack();
             return;
         }
     }
     if (!$member) {
         if (Session::get('AutoLoginHash')) {
             $member = Member::member_from_autologinhash(Session::get('AutoLoginHash'));
         }
         // The user is not logged in and no valid auto login hash is available
         if (!$member) {
             Session::clear('AutoLoginHash');
             Director::redirect('loginpage');
             return;
         }
     }
     // Check the new password
     if ($data['NewPassword1'] == $data['NewPassword2']) {
         $isValid = $member->changePassword($data['NewPassword1']);
         if ($isValid->valid()) {
             $this->clearMessage();
             $this->sessionMessage(_t('Member.PASSWORDCHANGED', "Your password has been changed, and a copy emailed to you."), "good");
             Session::clear('AutoLoginHash');
             $redirectURL = HTTP::setGetVar('BackURL', urlencode(Director::absoluteBaseURL()), Security::Link('login'));
             Director::redirect($redirectURL);
         } else {
             $this->clearMessage();
             $this->sessionMessage(nl2br("We couldn't accept that password:\n" . $isValid->starredList()), "bad");
             Director::redirectBack();
         }
     } else {
         $this->clearMessage();
         $this->sessionMessage(_t('Member.ERRORNEWPASSWORD', "Your have entered your new password differently, try again"), "bad");
         Director::redirectBack();
     }
 }

 /**
  * Change the password
  *
  * @param array $data The user submitted data
  */
 function doChangePassword(array $data)
 {
     if ($member = Member::currentUser()) {
         // The user was logged in, check the current password
         if ($member->checkPassword($data['OldPassword']) == false) {
             $this->clearMessage();
             $this->sessionMessage(_t('Member.ERRORPASSWORDNOTMATCH', "Your current password does not match, please try again"), "bad");
             Director::redirectBack();
         }
     }
     if (!$member) {
         if (Session::get('AutoLoginHash')) {
             $member = Member::autoLoginHash(Session::get('AutoLoginHash'));
         }
         // The user is not logged in and no valid auto login hash is available
         if (!$member) {
             Session::clear('AutoLoginHash');
             Director::redirect('loginpage');
         }
     }
     // Check the new password
     if ($data['NewPassword1'] == $data['NewPassword2']) {
         $member->Password = $data['NewPassword1'];
         $member->AutoLoginHash = null;
         $member->write();
         $member->sendinfo('changePassword', array('CleartextPassword' => $data['NewPassword1']));
         $this->clearMessage();
         $this->sessionMessage(_t('Member.PASSWORDCHANGED', "Your password has been changed, and a copy emailed to you."), "good");
         Session::clear('AutoLoginHash');
         Director::redirect(Security::Link('login'));
     } else {
         $this->clearMessage();
         $this->sessionMessage(_t('Member.ERRORNEWPASSWORD', "Your have entered your new password differently, try again"), "bad");
         Director::redirectBack();
     }
 }

    /**
     * @covers MemberConfirmationEmail::get_parsed_string
     */
    public function testGetParsedString()
    {
        $page = new MemberProfilePage();
        $member = new Member();
        $member->Email = 'Test Email';
        $member->FirstName = 'Test';
        $member->LastName = 'User';
        $member->write();
        $raw = '<ul>
			<li>Cost: $10</li>
			<li>Site Name: $SiteName</li>
			<li>Login Link: $LoginLink</li>
			<li>Member:
				<ul>
					<li>Since: $Member.Created</li>
					<li>Email: $Member.Email</li>
					<li>Name: $Member.Name</li>
					<li>Surname: $Member.Surname</li>
				</ul>
			</li>
		</ul>';
        $expected = "<ul>\n\t\t\t<li>Cost: \$10</li>\n\t\t\t<li>Site Name: " . SiteConfig::current_site_config()->Title . "</li>\n\t\t\t<li>Login Link: " . Director::absoluteURL(Security::Link('login')) . "</li>\n\t\t\t<li>Member:\n\t\t\t\t<ul>\n\t\t\t\t\t<li>Since: " . $member->obj('Created')->Nice() . "</li>\n\t\t\t\t\t<li>Email: {$member->Email}</li>\n\t\t\t\t\t<li>Name: {$member->Name}</li>\n\t\t\t\t\t<li>Surname: {$member->Surname}</li>\n\t\t\t\t</ul>\n\t\t\t</li>\n\t\t</ul>";
        $this->assertEquals($expected, MemberConfirmationEmail::get_parsed_string($raw, $member, $page), 'All allowed variables are parsed into the string.');
    }

 /**
  * Login form handler method
  *
  * This method is called when the user clicks on "Log in"
  *
  * @param array $data Submitted data
  */
 public function dologin($data)
 {
     if ($this->performLogin($data)) {
         Session::clear('SessionForms.MemberLoginForm.Email');
         Session::clear('SessionForms.MemberLoginForm.Remember');
         if (Member::currentUser()->isPasswordExpired()) {
             if (isset($_REQUEST['BackURL']) && ($backURL = $_REQUEST['BackURL'])) {
                 Session::set('BackURL', $backURL);
             }
             $cp = new ChangePasswordForm($this->controller, 'ChangePasswordForm');
             $cp->sessionMessage('Your password has expired.  Please choose a new one.', 'good');
             Director::redirect('Security/changepassword');
         } elseif (isset($_REQUEST['BackURL']) && $_REQUEST['BackURL'] && Director::is_site_url($_REQUEST['BackURL'])) {
             Director::redirect($_REQUEST['BackURL']);
         } elseif (Security::default_login_dest()) {
             Director::redirect(Director::absoluteBaseURL() . Security::default_login_dest());
         } else {
             $member = Member::currentUser();
             if ($member) {
                 $firstname = Convert::raw2xml($member->FirstName);
                 if (!empty($data['Remember'])) {
                     Session::set('SessionForms.MemberLoginForm.Remember', '1');
                     $member->logIn(true);
                 } else {
                     $member->logIn();
                 }
                 Session::set('Security.Message.message', sprintf(_t('Member.WELCOMEBACK', "Welcome Back, %s"), $firstname));
                 Session::set("Security.Message.type", "good");
             }
             Director::redirectBack();
         }
     } else {
         Session::set('SessionForms.MemberLoginForm.Email', $data['Email']);
         Session::set('SessionForms.MemberLoginForm.Remember', isset($data['Remember']));
         if (isset($_REQUEST['BackURL'])) {
             $backURL = $_REQUEST['BackURL'];
         } else {
             $backURL = null;
         }
         if ($backURL) {
             Session::set('BackURL', $backURL);
         }
         if ($badLoginURL = Session::get("BadLoginURL")) {
             Director::redirect($badLoginURL);
         } else {
             // Show the right tab on failed login
             $loginLink = Director::absoluteURL(Security::Link("login"));
             if ($backURL) {
                 $loginLink .= '?BackURL=' . urlencode($backURL);
             }
             Director::redirect($loginLink . '#' . $this->FormName() . '_tab');
         }
     }
 }

 /**
  * @param  string $context
  * @return FieldSet
  */
 protected function getProfileFields($context)
 {
     $profileFields = $this->Fields();
     $fields = new FieldSet();
     // depending on the context, load fields from the current member
     if (Member::currentUser() && $context != 'Add') {
         $memberFields = Member::currentUser()->getMemberFormFields();
     } else {
         $memberFields = singleton('Member')->getMemberFormFields();
     }
     if ($context == 'Registration') {
         $fields->push(new HeaderField('LogInHeader', _t('MemberProfiles.LOGIN_HEADER', 'Log In')));
         $fields->push(new LiteralField('LogInNote', '<p>' . sprintf(_t('MemberProfiles.LOGIN', 'If you already have an account you can <a href="%s">log in here</a>.'), Security::Link('login') . '?BackURL=' . $this->Link()) . '</p>'));
         $fields->push(new HeaderField('RegisterHeader', _t('MemberProfiles.REGISTER', 'Register')));
     }
     if ($context == 'Profile' && $this->AllowAdding && singleton('Member')->canCreate()) {
         $fields->push(new HeaderField('AddHeader', _t('MemberProfiles.ADDUSER', 'Add User')));
         $fields->push(new LiteralField('AddMemberNote', '<p>' . sprintf(_t('MemberProfiles.ADDMEMBERNOTE', 'You can use this page to <a href="%s">add a new member</a>.'), $this->Link('add')) . '</p>'));
         $fields->push(new HeaderField('YourProfileHeader', _t('MemberProfiles.YOURPROFILE', 'Your Profile')));
     }
     // use the default registration fields for adding members
     if ($context == 'Add') {
         $context = 'Registration';
     }
     if ($this->AllowProfileViewing && $profileFields->find('PublicVisibility', 'MemberChoice')) {
         $fields->push(new LiteralField('VisibilityNote', '<p>' . _t('MemberProfiles.CHECKVISNOTE', 'Check fields below to make them visible on your public ' . 'profile.') . '</p>'));
     }
     foreach ($profileFields as $profileField) {
         $visibility = $profileField->{$context . 'Visibility'};
         $name = $profileField->MemberField;
         $memberField = $memberFields->dataFieldByName($name);
         // handle the special case of the Groups control so that only allowed groups can be selected
         if ($name == 'Groups') {
             $availableGroups = $this->data()->SelectableGroups();
             $memberField->setSource($availableGroups);
         }
         if (!$memberField || $visibility == 'Hidden') {
             continue;
         }
         $field = clone $memberField;
         if ($visibility == 'Readonly') {
             $field = $field->performReadonlyTransformation();
         }
         $field->setTitle($profileField->Title);
         $field->setRightTitle($profileField->Note);
         if ($context == 'Registration' && $profileField->DefaultValue) {
             $field->setValue($profileField->DefaultValue);
         }
         if ($profileField->CustomError) {
             $field->setCustomValidationMessage($profileField->CustomError);
         }
         $canSetVisibility = $this->AllowProfileViewing && $profileField->PublicVisibility != 'Hidden';
         if ($canSetVisibility) {
             $field = new CheckableVisibilityField($field);
             if ($profileField->PublicVisibility == 'Display') {
                 $field->makeAlwaysVisible();
             } else {
                 $field->getCheckbox()->setValue($profileField->PublicVisibilityDefault);
             }
         }
         $fields->push($field);
     }
     $this->extend('updateProfileFields', $fields);
     return $fields;
 }

 /**
  * Login form handler method
  *
  * This method is called when the user clicks on "Log in"
  *
  * @param array $data Submitted data
  */
 public function createorupdateaccount($data, $form)
 {
     $passwordOK = true;
     if (!$passwordOK) {
         Session::set('Security.Message.message', _t('Member.PASSWORDINVALID', "Your password is not valid."));
         $loginLink = Director::absoluteURL(Security::Link("login"));
         if ($backURL) {
             $loginLink .= '?BackURL=' . urlencode($backURL);
         }
         Director::redirect($loginLink . '#' . $this->FormName() . '_tab');
     }
     if ($this->createOrUpdateUser($data, $form)) {
         Session::clear('SessionForms.MemberLoginForm.EmailSignup');
         Session::clear('SessionForms.MemberLoginForm.FirstNameSignup');
         Session::clear('SessionForms.MemberLoginForm.SurnameSignup');
         Session::clear('SessionForms.MemberLoginForm.RememberSignup');
         if (!isset($_REQUEST['BackURL'])) {
             if (Session::get("BackURL")) {
                 $_REQUEST['BackURL'] = Session::get("BackURL");
             }
         }
         Session::clear("BackURL");
         if (isset($_REQUEST['BackURL']) && $_REQUEST['BackURL'] && Director::is_site_url($_REQUEST['BackURL'])) {
             Director::redirect($_REQUEST['BackURL']);
         } elseif (Security::default_login_dest()) {
             Director::redirect(Director::absoluteBaseURL() . Security::default_login_dest());
         } else {
             $member = Member::currentUser();
             if ($member) {
                 $firstname = Convert::raw2xml($member->FirstName);
                 if (!empty($data['RememberSignup'])) {
                     Session::set('SessionForms.MemberLoginForm.RememberSignup', '1');
                     $member->logIn(true);
                 } else {
                     $member->logIn();
                 }
                 Session::set('Security.Message.message', sprintf(_t('Member.THANKYOUFORCREATINGACCOUNT', "Thank you for creating an account, %s"), $firstname));
                 Session::set("Security.Message.type", "good");
             }
             Director::redirectBack();
         }
     } else {
         Session::set('Security.Message.message', _t('Member.MEMBERALREADYEXISTS', "A member with this email already exists."));
         Session::set("Security.Message.type", "error");
         Session::set('SessionForms.MemberLoginFormWithSignup.EmailSignupSignup', $data['EmailSignup']);
         Session::set('SessionForms.MemberLoginFormWithSignup.FirstNameSignup', $data['FirstNameSignup']);
         Session::set('SessionForms.MemberLoginFormWithSignup.SurnameSignup', $data['SurnameSignup']);
         Session::set('SessionForms.MemberLoginFormWithSignup.RememberSignup', isset($data['RememberSignup']));
         if (isset($_REQUEST['BackURL'])) {
             $backURL = $_REQUEST['BackURL'];
         } else {
             $backURL = null;
         }
         if ($backURL) {
             Session::set('BackURL', $backURL);
         }
         if ($badLoginURL = Session::get("BadLoginURL")) {
             Director::redirect($badLoginURL);
         } else {
             // Show the right tab on failed login
             $loginLink = Director::absoluteURL(Security::Link("login"));
             if ($backURL) {
                 $loginLink .= '?BackURL=' . urlencode($backURL);
             }
             Director::redirect($loginLink . '#' . $this->FormName() . '_tab');
         }
     }
 }

 /**
  * Login form handler method
  *
  * This method is called when the user clicks on "Log in"
  *
  * @param array $data Submitted data
  */
 public function dologin($data)
 {
     if ($this->performLogin($data)) {
         Session::clear('SessionForms.ExternalLoginForm.External_Anchor');
         Session::clear('SessionForms.ExternalLoginForm.External_MailAddr');
         Session::clear('SessionForms.ExternalLoginForm.External_SourceID');
         Session::clear('SessionForms.ExternalLoginForm.Remember');
         if (isset($_REQUEST['BackURL'])) {
             $backURL = $_REQUEST['BackURL'];
             Session::clear('BackURL');
             Controller::curr()->redirect($backURL);
         } else {
             Controller::curr()->redirectBack();
         }
     } else {
         Session::set('SessionForms.ExternalLoginForm.External_Anchor', $data['External_Anchor']);
         Session::set('SessionForms.ExternalLoginForm.External_MailAddr', $data['External_MailAddr']);
         Session::set('SessionForms.ExternalLoginForm.External_SourceID', $data['External_SourceID']);
         Session::set('SessionForms.ExternalLoginForm.Remember', isset($data['Remember']));
         if ($badLoginURL = Session::get("BadLoginURL")) {
             Controller::curr()->redirect($badLoginURL);
         } else {
             // Show the right tab on failed login
             Controller::curr()->redirect(Director::absoluteURL(Security::Link('login')) . '#' . $this->FormName() . '_tab');
         }
     }
 }

 /**
  * Change the password
  *
  * @param array $data The user submitted data
  */
 function doChangePassword(array $data)
 {
     if ($member = Member::currentUser()) {
         // The user was logged in, check the current password
         if (empty($data['OldPassword']) || !$member->checkPassword($data['OldPassword'])->valid()) {
             $this->clearMessage();
             $this->sessionMessage(_t('Member.ERRORPASSWORDNOTMATCH', "Your current password does not match, please try again"), "bad");
             Director::redirectBack();
             return;
         }
     }
     if (!$member) {
         if (Session::get('AutoLoginHash')) {
             $member = Member::member_from_autologinhash(Session::get('AutoLoginHash'));
         }
         // The user is not logged in and no valid auto login hash is available
         if (!$member) {
             Session::clear('AutoLoginHash');
             Director::redirect('loginpage');
             return;
         }
     }
     // Check the new password
     if (empty($data['NewPassword1'])) {
         $this->clearMessage();
         $this->sessionMessage(_t('Member.EMPTYNEWPASSWORD', "The new password can't be empty, please try again"), "bad");
         Director::redirectBack();
         return;
     } else {
         if ($data['NewPassword1'] == $data['NewPassword2']) {
             $isValid = $member->changePassword($data['NewPassword1']);
             if ($isValid->valid()) {
                 $this->clearMessage();
                 $this->sessionMessage(_t('Member.PASSWORDCHANGED', "Your password has been changed, and a copy emailed to you."), "good");
                 Session::clear('AutoLoginHash');
                 if (isset($_REQUEST['BackURL']) && $_REQUEST['BackURL'] && Director::is_site_url($_REQUEST['BackURL'])) {
                     Director::redirect($_REQUEST['BackURL']);
                 } else {
                     // Redirect to default location - the login form saying "You are logged in as..."
                     $redirectURL = HTTP::setGetVar('BackURL', Director::absoluteBaseURL(), Security::Link('login'));
                     Director::redirect($redirectURL);
                 }
             } else {
                 $this->clearMessage();
                 $this->sessionMessage(sprintf(_t('Member.INVALIDNEWPASSWORD', "We couldn't accept that password: %s"), nl2br("\n" . $isValid->starredList())), "bad");
                 Director::redirectBack();
             }
         } else {
             $this->clearMessage();
             $this->sessionMessage(_t('Member.ERRORNEWPASSWORD', "You have entered your new password differently, try again"), "bad");
             Director::redirectBack();
         }
     }
 }

 /**
  * Login form handler method
  *
  * This method is called when the user clicks on "Log in"
  *
  * @param array $data Submitted data
  */
 public function dologin($data)
 {
     Session::set('SessionForms.OpenIDLoginForm.Remember', isset($data['Remember']));
     OpenIDAuthenticator::authenticate($data, $this);
     // If the OpenID authenticator returns, an error occured!
     Session::set('SessionForms.OpenIDLoginForm.OpenIDURL', $data['OpenIDURL']);
     if (isset($_REQUEST['BackURL']) && ($backURL = $_REQUEST['BackURL'])) {
         Session::set('BackURL', $backURL);
     }
     if ($badLoginURL = Session::get("BadLoginURL")) {
         Director::redirect($badLoginURL);
     } else {
         // Show the right tab on failed login
         Director::redirect(Director::absoluteURL(Security::Link("login")) . '#' . $this->FormName() . '_tab');
     }
 }

 /**
  * LogoutLink
  * Return a logout link 
  *
  * @param String $location The location to direct to. i.e. storefront, basket, placeorder
  * @return URL
  */
 public function LogoutLink($location = null)
 {
     $security = new Security();
     /* Set $BackURL based on $location */
     switch ($location) {
         /* Basket */
         case "basket":
             $Store_BasketController = new Store_BasketController();
             $BackURL = $Store_BasketController->link();
             break;
             /* Order Step 1 */
         /* Order Step 1 */
         case "placeorder":
             $Store_OrderController = new Store_OrderController();
             $BackURL = $Store_OrderController->link() . "/place/one";
             break;
             /* Storefront */
         /* Storefront */
         default:
             $BackURL = self::get_link();
             break;
     }
     return $security->Link('logout') . "?BackURL=" . $BackURL;
 }

 /**
  * Login form handler method
  *
  * This method is called when the user clicks on "Log in"
  *
  * @param array $data Submitted data
  */
 public function dologin($data)
 {
     if ($this->performLogin($data)) {
         Session::clear('SessionForms.MemberLoginForm.Email');
         Session::clear('SessionForms.MemberLoginForm.Remember');
         if (isset($_REQUEST['BackURL']) && ($backURL = $_REQUEST['BackURL'])) {
             Session::clear("BackURL");
             Director::redirect($backURL);
         } else {
             Director::redirectBack();
         }
     } else {
         Session::set('SessionForms.MemberLoginForm.Email', $data['Email']);
         Session::set('SessionForms.MemberLoginForm.Remember', isset($data['Remember']));
         if (isset($_REQUEST['BackURL']) && ($backURL = $_REQUEST['BackURL'])) {
             Session::set('BackURL', $backURL);
         }
         if ($badLoginURL = Session::get("BadLoginURL")) {
             Director::redirect($badLoginURL);
         } else {
             // Show the right tab on failed login
             Director::redirect(Director::absoluteURL(Security::Link("login")) . '#' . $this->FormName() . '_tab');
         }
     }
 }