be3a44651c
Added a checkbox on login or register to remember the current user. If the login is successful, this sets a cookie with a random code (saved in the DB). If they come back, and they aren't logged in "normally", we check to see if they have a rememberme cookie. If so, we log them in. However, they can't change settings -- cookie theft is too prevalent. So we mark a session as having a "real" (password or OpenID) login, or not. In settings pages, we check to see if the login is "real", and if not, we redirect to the login page. darcs-hash:20080624025234-34904-ad20001bf35bf41fcb63a0c357fd929aacc55fdb.gz
87 lines
2.8 KiB
PHP
87 lines
2.8 KiB
PHP
<?php
|
|
/*
|
|
* Laconica - a distributed open-source microblogging tool
|
|
* Copyright (C) 2008, Controlez-Vous, Inc.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
if (!defined('LACONICA')) { exit(1); }
|
|
|
|
class SettingsAction extends Action {
|
|
|
|
function handle($args) {
|
|
parent::handle($args);
|
|
if (!common_logged_in()) {
|
|
common_user_error(_t('Not logged in.'));
|
|
return;
|
|
} else if (!common_is_real_login()) {
|
|
# Cookie theft means that automatic logins can't
|
|
# change important settings or see private info, and
|
|
# _all_ our settings are important
|
|
common_set_returnto($this->self_url());
|
|
common_redirect(common_local_url('login'));
|
|
} else if ($_SERVER['REQUEST_METHOD'] == 'POST') {
|
|
$this->handle_post();
|
|
} else {
|
|
$this->show_form();
|
|
}
|
|
}
|
|
|
|
# override!
|
|
function handle_post() {
|
|
return false;
|
|
}
|
|
|
|
function show_form($msg=NULL, $success=false) {
|
|
return false;
|
|
}
|
|
|
|
function message($msg, $success) {
|
|
if ($msg) {
|
|
common_element('div', ($success) ? 'success' : 'error',
|
|
$msg);
|
|
}
|
|
}
|
|
|
|
function settings_menu() {
|
|
# action => array('prompt', 'title')
|
|
static $menu =
|
|
array('profilesettings' =>
|
|
array('Profile',
|
|
'Change your profile settings'),
|
|
'avatar' =>
|
|
array('Avatar',
|
|
'Upload a new profile image'),
|
|
'password' =>
|
|
array('Password',
|
|
'Change your password'),
|
|
'openidsettings' =>
|
|
array('OpenID',
|
|
'Add or remove OpenIDs'),
|
|
'imsettings' =>
|
|
array('IM',
|
|
'Updates by instant messenger (IM)'));
|
|
|
|
$action = $this->trimmed('action');
|
|
common_element_start('ul', array('id' => 'nav_views'));
|
|
foreach ($menu as $menuaction => $menudesc) {
|
|
common_menu_item(common_local_url($menuaction),
|
|
_t($menudesc[0]),
|
|
_t($menudesc[1]));
|
|
}
|
|
common_element_end('ul');
|
|
}
|
|
}
|