gnu-social/actions/confirmaddress.php

<?php
/**
 * Laconica, the distributed open-source microblogging tool
 *
 * Confirm an address
 *
 * PHP version 5
 *
 * LICENCE: This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 * @category  Confirm
 * @package   Laconica
 * @author    Evan Prodromou <evan@controlyourself.ca>
 * @copyright 2008-2009 Control Yourself, Inc.
 * @license   http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
 * @link      http://laconi.ca/
 */

if (!defined('LACONICA')) {
    exit(1);
}

/**
 * Confirm an address
 *
 * When users change their SMS, email, Jabber, or other addresses, we send out
 * a confirmation code to make sure the owner of that address approves. This class
 * accepts those codes.
 *
 * @category Confirm
 * @package  Laconica
 * @author   Evan Prodromou <evan@controlyourself.ca>
 * @license  http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
 * @link     http://laconi.ca/
 */

class ConfirmaddressAction extends Action
{
    /** type of confirmation. */

    var $type = null;

    /**
     * Accept a confirmation code
     *
     * Checks the code and confirms the address in the
     * user record
     *
     * @param args $args $_REQUEST array
     *
     * @return void
     */

    function handle($args)
    {
        parent::handle($args);
        if (!common_logged_in()) {
            common_set_returnto($this->selfUrl());
            if (!common_config('site', 'openidonly')) {
                common_redirect(common_local_url('login'));
            } else {
                common_redirect(common_local_url('openidlogin'));
            }
            return;
        }
        $code = $this->trimmed('code');
        if (!$code) {
            $this->clientError(_('No confirmation code.'));
            return;
        }
        $confirm = Confirm_address::staticGet('code', $code);
        if (!$confirm) {
            $this->clientError(_('Confirmation code not found.'));
            return;
        }
        $cur = common_current_user();
        if ($cur->id != $confirm->user_id) {
            $this->clientError(_('That confirmation code is not for you!'));
            return;
        }
        $type = $confirm->address_type;
        if (!in_array($type, array('email', 'jabber', 'sms'))) {
            $this->serverError(sprintf(_('Unrecognized address type %s'), $type));
            return;
        }
        if ($cur->$type == $confirm->address) {
            $this->clientError(_('That address has already been confirmed.'));
            return;
        }

        $cur->query('BEGIN');

        $orig_user = clone($cur);

        $cur->$type = $confirm->address;

        if ($type == 'sms') {
            $cur->carrier  = ($confirm->address_extra)+0;
            $carrier       = Sms_carrier::staticGet($cur->carrier);
            $cur->smsemail = $carrier->toEmailAddress($cur->sms);
        }

        $result = $cur->updateKeys($orig_user);

        if (!$result) {
            common_log_db_error($cur, 'UPDATE', __FILE__);
            $this->serverError(_('Couldn\'t update user.'));
            return;
        }

        if ($type == 'email') {
            $cur->emailChanged();
        }

        $result = $confirm->delete();

        if (!$result) {
            common_log_db_error($confirm, 'DELETE', __FILE__);
            $this->serverError(_('Couldn\'t delete email confirmation.'));
            return;
        }

        $cur->query('COMMIT');

        $this->type = $type;
        $this->showPage();
    }

    /**
     * Title of the page
     *
     * @return string title
     */

    function title()
    {
        return _('Confirm Address');
    }

    /**
     * Show a confirmation message.
     *
     * @return void
     */

    function showContent()
    {
        $cur  = common_current_user();
        $type = $this->type;

        $this->element('p', null,
                       sprintf(_('The address "%s" has been '.
                                 'confirmed for your account.'),
                               $cur->$type));
    }
}