initial commit

2025-11-24 14:06:57 +01:00
commit 4fce91b055
81 changed files with 7718 additions and 0 deletions
--- a/application/controller/UserController.php
+++ b/application/controller/UserController.php
@@ -0,0 +1,157 @@
+<?php
+
+/**
+ * UserController
+ * Controls everything that is user-related
+ */
+class UserController extends Controller
+{
+    /**
+     * Construct this object by extending the basic Controller class.
+     */
+    public function __construct()
+    {
+        parent::__construct();
+
+        // VERY IMPORTANT: All controllers/areas that should only be usable by logged-in users
+        // need this line! Otherwise not-logged in users could do actions.
+        Auth::checkAuthentication();
+    }
+
+    /**
+     * Show user's PRIVATE profile
+     */
+    public function index()
+    {
+        $this->View->render('user/index', array(
+            'user_name' => Session::get('user_name'),
+            'user_email' => Session::get('user_email'),
+            'user_gravatar_image_url' => Session::get('user_gravatar_image_url'),
+            'user_avatar_file' => Session::get('user_avatar_file'),
+            'user_account_type' => Session::get('user_account_type')
+        ));
+    }
+
+    /**
+     * Show edit-my-username page
+     */
+    public function editUsername()
+    {
+        $this->View->render('user/editUsername');
+    }
+
+    /**
+     * Edit user name (perform the real action after form has been submitted)
+     */
+    public function editUsername_action()
+    {
+        // check if csrf token is valid
+        if (!Csrf::isTokenValid()) {
+            LoginModel::logout();
+            Redirect::home();
+            exit();
+        }
+
+        UserModel::editUserName(Request::post('user_name'));
+        Redirect::to('user/editUsername');
+    }
+
+    /**
+     * Show edit-my-user-email page
+     */
+    public function editUserEmail()
+    {
+        $this->View->render('user/editUserEmail');
+    }
+
+    /**
+     * Edit user email (perform the real action after form has been submitted)
+     */
+    // make this POST
+    public function editUserEmail_action()
+    {
+        UserModel::editUserEmail(Request::post('user_email'));
+        Redirect::to('user/editUserEmail');
+    }
+
+    /**
+     * Edit avatar
+     */
+    public function editAvatar()
+    {
+        $this->View->render('user/editAvatar', array(
+            'avatar_file_path' => AvatarModel::getPublicUserAvatarFilePathByUserId(Session::get('user_id'))
+        ));
+    }
+
+    /**
+     * Perform the upload of the avatar
+     * POST-request
+     */
+    public function uploadAvatar_action()
+    {
+        AvatarModel::createAvatar();
+        Redirect::to('user/editAvatar');
+    }
+
+    /**
+     * Delete the current user's avatar
+     */
+    public function deleteAvatar_action()
+    {
+        AvatarModel::deleteAvatar(Session::get("user_id"));
+        Redirect::to('user/editAvatar');
+    }
+
+    /**
+     * Show the change-account-type page
+     */
+    public function changeUserRole()
+    {
+        $this->View->render('user/changeUserRole');
+    }
+
+    /**
+     * Perform the account-type changing
+     * POST-request
+     */
+    public function changeUserRole_action()
+    {
+        if (Request::post('user_account_upgrade')) {
+            // "2" is quick & dirty account type 2, something like "premium user" maybe. you got the idea :)
+            UserRoleModel::changeUserRole(2);
+        }
+
+        if (Request::post('user_account_downgrade')) {
+            // "1" is quick & dirty account type 1, something like "basic user" maybe.
+            UserRoleModel::changeUserRole(1);
+        }
+
+        Redirect::to('user/changeUserRole');
+    }
+
+    /**
+     * Password Change Page
+     */
+    public function changePassword()
+    {
+        $this->View->render('user/changePassword');
+    }
+
+    /**
+     * Password Change Action
+     * Submit form, if retured positive redirect to index, otherwise show the changePassword page again
+     */
+    public function changePassword_action()
+    {
+        $result = PasswordResetModel::changePassword(
+            Session::get('user_name'), Request::post('user_password_current'),
+            Request::post('user_password_new'), Request::post('user_password_repeat')
+        );
+
+        if($result)
+            Redirect::to('user/index');
+        else
+            Redirect::to('user/changePassword');
+    }
+}