config=$config;
$this->db=$db;
// Clean Request
if(isset($_GET)) $_GET=array_map("Main::clean", $_GET);
if(isset($_GET["page"]) && is_numeric($_GET["page"]) && $_GET["page"]>0) $this->page=Main::clean($_GET["page"]);
$this->http=((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443)?"https":"http");
$this->check();
}
/**
* Run User Methods
* @since 4.0
**/
protected function initiate($do,$id){
$this->id=$id;
return $this->$do();
}
/**
* User Login
* @since 4.0
**/
protected function login(){
if(!empty($this->id)){
// Check if private
if($this->config["private"] || !$this->config["user"] || $this->config["maintenance"]) Main::redirect("?error",array("danger",e("Sorry, we are not accepting users right now.")));
// Get method
$fn = "login_{$this->id}";
if(in_array($this->id, array("facebook","google","twitter")) && method_exists("User",$fn)){
return $this->$fn();
}else{
return $this->_404();
}
}
// Login Count
if(!isset($_SESSION["login_count"])){
$_SESSION["login_count"]=0;
}
// Check if form is posted
if(isset($_POST["token"])){
// Prevent Bots from submitting the form
if(Main::bot()) return $this->_404();
// Validate CSRF Token
if(!Main::validate_csrf_token($_POST["token"])){
return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("Invalid token. Please try again.")));
}
// Clean Current Session
$this->logout(FALSE);
// Block User
if(Main::cookie("__bl")){
return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("You have been blocked for 1 hour due to many unsuccessful login attempts.")));
}
// Validate Email
if(empty($_POST["email"])) return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("Please enter a valid email or username.")));
// Validate Password
if(empty($_POST["password"]) || strlen($_POST["password"])<5) return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("Wrong email and password combination.")));
// Check if user exists - Check username and email
if(!Main::email($_POST["email"])){
$user = $this->db->get("user",array("username"=>"?"),array("limit"=>1),array($_POST["email"]));
}else{
$user = $this->db->get("user",array("email"=>"?"),array("limit"=>1),array($_POST["email"]));
}
if(!$user){
return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("Wrong email and password combination")));
}
// Upgrade password from MD5
if($user->password===md5($this->config["security"].Main::clean($_POST["password"],3,FALSE))){
$this->db->update("user",array("password"=>"?"),array("id"=>$user->id),array(Main::encode($_POST["password"])));
}else{
// Check new Password
if(!Main::validate_pass($_POST["password"],$user->password)){
// Login Attempt Count
$max=5;
$_SESSION["login_count"]++;
if($_SESSION["login_count"] >= $max){
// Block user for 1 hour
Main::cookie("__bl",1,60);
}
return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("Wrong email and password combination")));
}
}
// Check Auth Key: If empty generate one
if(empty($user->auth_key)){
$user->auth_key=Main::encode(Main::strrand(12));
// Update database
$this->db->update("user",array("auth_key"=>"?"),array("id"=>$user->id),array($user->auth_key));
}
// Check if banned
if($user->banned){
return Main::redirect(Main::href("user/login","",FALSE),array("warning",e("You have been banned due to abuse. Please contact us for clarification.")));
}
// Check if inactive
if(!$user->active){
return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("You haven't activated your account. Please check your email for the activation link. If you haven't received any emails from us, please contact us.")));
}
// Check if expired
if(strtotime($user->expiration) < time()){
$this->db->update("user",array("pro"=>0),array("id"=>$user->id));
}
// Set Session
$json=base64_encode(json_encode(array("loggedin"=>TRUE,"key"=>$user->auth_key.$user->id)));
if(isset($_POST["rememberme"]) && $_POST["rememberme"]=="1"){
// Set Cookie for 14 days
setcookie("login",$json, time()+60*60*24*14, "/","",FALSE,TRUE);
}else{
$_SESSION["login"]=$json;
}
// Return to /user
return Main::redirect("",array("success",e("You have been successfully logged in.")));
}
// Set meta info
Main::set("title",e("Login to your account"));
Main::set("description","Login to your account and bookmark your favorite sites.");
Main::set("url","{$this->config["url"]}/user/login");
$this->headerShow=FALSE;
$this->footerShow=FALSE;
$this->header();
include($this->t(__FUNCTION__));
$this->footer();
}
/**
* User Login with Facebook
* @since 4.0
**/
private function login_facebook(){
//Facebook Auth
if(!$this->config["fb_connect"]) Main::redirect("",array("danger",e("Sorry, Facebook connect is not available right now.")));
if(isset($_GET["error"])) Main::redirect("",array("danger",e("You must grant access to this application to use your facebook account.")));
require(ROOT."/includes/library/auth/facebook.php");
// Creating the facebook object
$facebook = new Facebook(array(
'appId' => $this->config["facebook_app_id"],
'secret' => $this->config["facebook_secret"],
'cookie' => true
));
// Let's see if we have an active session
$session = $facebook->getUser();
if(!empty($session)) {
$fb = $facebook->api('/me');
if(!isset($fb["email"])) Main::redirect("",array("danger",e("You must grant permission to this application to use your profile information.")));
// Check if email is already taken
if($this->db->get("user","auth!='facebook' AND email='{$fb["email"]}'",array("limit"=>1))){
return Main::redirect("user/login",array("danger",e("The email linked to your account has been already used. If you have used that, please login to you existing account otherwise please contact us.")));
}
// Let's see if the user is registered
if($user=$this->db->get("user","auth='facebook' AND (email='{$fb["email"]}' OR auth_id='{$fb["id"]}')",array("limit"=>1))){
// Check Auth Key: If empty generate one
if(empty($user->auth_key)){
$user->auth_key=Main::encode(Main::strrand(12));
// Update database
$this->db->update("user",array("auth_key"=>"?"),array("id"=>$user->id),array($user->auth_key));
}
// Inser AuthID
if(empty($user->auth_id) && isset($fb["auth_id"])){
// Update database
$this->db->update("user",array("auth_id"=>"?"),array("id"=>$user->id),array($fb["auth_id"]));
}
// Check if banned
if($user->banned){
return Main::redirect(Main::href("user/login","",FALSE),array("warning",e("You have been banned due to abuse. Please contact us for clarification.")));
}
// Check if inactive
if(!$user->active){
return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("You haven't activated your account. Please check your email for the activation link. If you haven't received any emails from us, please contact us.")));
}
}else{
// Let's register the user
$auth_key = Main::encode(Main::strrand(12));
$data = array(
":email" => Main::clean($fb["email"],3,TRUE),
":username" => isset($fb["username"]) ? Main::clean($fb["username"],3,TRUE) : "",
":password" => Main::encode(Main::strrand(12)),
":date" => "NOW()",
":auth" => "facebook",
":auth_id" => isset($fb["id"]) ? Main::clean($fb["id"],3,TRUE) : "",
":api" => Main::strrand(12),
":auth_key" => $auth_key
);
if($this->db->insert("user",$data)){
$user=$this->db->get("user",array("auth"=>"facebook","email"=>$fb["email"]),array("limit"=>1));
}
}
// Ok Let's login te user
$json=base64_encode(json_encode(array("loggedin"=>TRUE,"key"=>$user->auth_key.$user->id)));
$_SESSION["login"]=$json;
// Return to /user
return Main::redirect("",array("success",e("You have been successfully logged in.")));
}else{
// Redirect to facebook
$login_url = $facebook->getLoginUrl(array('scope' => 'email'));
header("Location: ".$login_url);
return;
}
}
/**
* User Login with Twitter
* @since 4.0
**/
private function login_twitter(){
// Check for error
if(isset($_GET["denied"])) Main::redirect("",array("danger",e("You must grant permission to this application to use your twitter account.")));
if(!$this->config["tw_connect"]) Main::redirect("",array("danger",e("Sorry, Twitter connect is not available right now.")));
// Get Library
require(ROOT."/includes/library/auth/twitter.php");
if(!empty($_GET['oauth_verifier']) && !empty($_SESSION['oauth_token']) && !empty($_SESSION['oauth_token_secret'])){
$twitteroauth = new TwitterOAuth($this->config["twitter_key"], $this->config["twitter_secret"], $_SESSION['oauth_token'], $_SESSION['oauth_token_secret']);
$access_token = $twitteroauth->getAccessToken($_GET['oauth_verifier']);
// Save it in a session var
$_SESSION['access_token'] = $access_token;
// Let's get the user's info
$tw = $twitteroauth->get('account/verify_credentials');
if(!isset($tw->id)) Main::redirect("",array("danger",e("An error occured, please try again later.")));
// Let's see if the user is registered
if($user=$this->db->get("user","auth='twitter' AND auth_id='{$tw->id}'",array("limit"=>1))){
// Check Auth Key: If empty generate one
if(empty($user->auth_key)){
$user->auth_key=Main::encode(Main::strrand(12));
// Update database
$this->db->update("user",array("auth_key"=>"?"),array("id"=>$user->id),array($user->auth_key));
}
// Check if banned
if($user->banned){
return Main::redirect(Main::href("user/login","",FALSE),array("warning",e("You have been banned due to abuse. Please contact us for clarification.")));
}
// Check if inactive
if(!$user->active){
return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("You haven't activated your account. Please check your email for the activation link. If you haven't received any emails from us, please contact us.")));
}
}else{
// Let's register the user
$auth_key = Main::encode(Main::strrand(12));
$data = array(
":email" => "",
":username" => isset($tw->screen_name) ? Main::clean($tw->screen_name,3,TRUE) : "",
":password" => Main::encode(Main::strrand(12)),
":date" => "NOW()",
":auth" => "twitter",
":auth_id" => isset($tw->id) ? Main::clean($tw->id,3,TRUE) : "",
":api" => Main::strrand(12),
":auth_key" => $auth_key
);
if($this->db->insert("user",$data)){
$user=$this->db->get("user",array("auth"=>"twitter","auth_id"=>$tw->id),array("limit"=>1));
}
}
// Ok Let's login te user
$json=base64_encode(json_encode(array("loggedin"=>TRUE,"key"=>$user->auth_key.$user->id)));
$_SESSION["login"]=$json;
// Return to /user
return Main::redirect("",array("success",e("You have been successfully logged in.")));
}
// The TwitterOAuth instance
$twitteroauth = new TwitterOAuth($this->config["twitter_key"],$this->config["twitter_secret"]);
// Requesting authentication tokens, the parameter is the URL we will be redirected to
$request_token = $twitteroauth->getRequestToken("{$this->config["url"]}/user/login/twitter");
// Saving them into the session
$_SESSION['oauth_token'] = $request_token['oauth_token'];
$_SESSION['oauth_token_secret'] = $request_token['oauth_token_secret'];
// If everything goes well..
if($twitteroauth->http_code==200){
// Let's generate the URL and redirect
$url = $twitteroauth->getAuthorizeURL($request_token['oauth_token']);
header('Location: '. $url);
exit;
} else {
Main::redirect("user/login",array('danger','An error has occured! Please make sure that you have set up this application as instructed.'));
}
}
/**
* User Login with Google
* @since 4.0
**/
private function login_google(){
require(ROOT."/includes/library/auth/openid.php");
try {
$openid = new LightOpenID($this->config["url"]);
$openid->returnUrl = $this->config["url"]."/user/login/google";
if(!$openid->mode) {
$openid->identity = 'https://www.google.com/accounts/o8/id';
$openid->required = array(
'namePerson/first',
'namePerson/last',
'contact/email',
);
header('Location: ' . $openid->authUrl());
} elseif($openid->mode == 'cancel') {
Main::redirect("",array("danger",e("You must grant permission to this application to use your google account.")));
} else {
if($openid->validate()){
$gl=$openid->getAttributes();
if(!isset($gl["contact/email"])) Main::redirect("",array("danger",e("You must grant permission to this application to use your profile information.")));
// Check if email is already taken
if($this->db->get("user","auth!='google' AND email='{$gl["contact/email"]}'",array("limit"=>1))){
return Main::redirect("user/login",array("danger",e("The email linked to your account has been already used. If you have used that, please login to you existing account otherwise please contact us.")));
}
// Let's see if the user is registered
if($user=$this->db->get("user",array("auth"=>"google","email"=>$gl["contact/email"]),array("limit"=>1))){
// Check Auth Key: If empty generate one
if(empty($user->auth_key)){
$user->auth_key=Main::encode(Main::strrand(12));
// Update database
$this->db->update("user",array("auth_key"=>"?"),array("id"=>$user->id),array($user->auth_key));
}
// Check if banned
if($user->banned){
return Main::redirect(Main::href("user/login","",FALSE),array("warning",e("You have been banned due to abuse. Please contact us for clarification.")));
}
// Check if inactive
if(!$user->active){
return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("You haven't activated your account. Please check your email for the activation link. If you haven't received any emails from us, please contact us.")));
}
}else{
// Let's register the user
$auth_key = Main::encode(Main::strrand(12));
$data = array(
":email" => Main::clean($gl["contact/email"],3,TRUE),
":username" => isset($gl["namePerson/first"]) ? Main::slug($gl["namePerson/first"]).rand(1,100) : "",
":password" => Main::encode(Main::strrand(12)),
":date" => "NOW()",
":auth" => "google",
":api" => Main::strrand(12),
":auth_key" => $auth_key
);
if($this->db->insert("user",$data)){
$user=$this->db->get("user",array("auth"=>"google","email"=>$gl["contact/email"]),array("limit"=>1));
}
}
// Ok Let's login te user
$json=base64_encode(json_encode(array("loggedin"=>TRUE,"key"=>$user->auth_key.$user->id)));
$_SESSION["login"]=$json;
// Return to /user
return Main::redirect("",array("success",e("You have been successfully logged in.")));
}else{
Main::redirect("",array("danger",e("An error occured, please try again later.")));
}
}
} catch(ErrorException $e) {
Main::redirect("",array("danger",e("An error occured, please try again later.")));
}
exit;
}
/**
* User Logout
* @since 4.0
**/
protected function logout($redirect=TRUE){
// Destroy Cookie
if(isset($_COOKIE["login"])) setcookie('login','',time()-3600,'/');
// Destroy Session
if(isset($_SESSION["login"])) unset($_SESSION["login"]);
if($redirect) return Main::redirect("");
}
/**
* User Register
* @since 1.0
**/
protected function register(){
// Don't let bots register
if(Main::bot()) $this->_404();
// If user Module is disabled
if(!$this->config["user"] || $this->config["private"] || $this->config["maintenance"]) return Main::redirect("",array("danger",e("We are not accepting users at this time.")));
// Filter ID
$this->filter($this->id);
// Check if form is posted
if(isset($_POST["token"])){
// Validate CSRF Token
if(!Main::validate_csrf_token($_POST["token"])){
return Main::redirect(Main::href("user/register","",FALSE),array("danger",e("Invalid token. Please try again.")));
}
$error="";
// Validate Email
if(empty($_POST["email"]) || !Main::email($_POST["email"])) $error.="".e("Please enter a valid email.")."";
// Check email in database
if($this->db->get("user",array("email"=>"?"),"",array($_POST["email"]))) return Main::redirect(Main::href("user/register","",FALSE),array("danger",e("An account is already associated with this email.")));
// Check Password
if(empty($_POST["password"]) || strlen($_POST["password"])<5) $error.="".e("Password must contain at least 5 characters.")."";
// Check second password
if(empty($_POST["cpassword"]) || $_POST["password"]!==$_POST["cpassword"]) $error.="".e("Passwords don't match.")."";
// Check captcha
// Check Captcha
if($this->config["captcha"]){
$captcha=Main::check_captcha($_POST);
if($captcha!='ok'){
$error.="".$captcha."";
}
}
// Check terms
if(!isset($_POST["terms"]) || (empty($_POST["terms"]) || $_POST["terms"]!=="1")) $error.="".e("You must agree to our terms of service.")."";
// Generate unique auth key
$auth_key=Main::encode($this->config["security"].Main::strrand());
$unique=Main::strrand(12);
// Prepare Data
$data=array(
":email"=>Main::clean($_POST["email"],3),
":password"=>Main::encode($_POST["password"]),
":auth_key"=>$auth_key,
":api"=>$unique,
":date"=>"NOW()"
);
// Validate Name
if(!empty($_POST["username"])){
if (!Main::username($_POST["username"])){
$error.="".e("Please enter a valid username.")."";
}elseif($this->db->get("user",array("username"=>"?"),array("limit"=>1),array($_POST["username"]))){
$error.="".e("An account is already associated with this username.")."";
}else{
$data[":username"]=Main::slug(Main::clean($_POST["username"],3,TRUE));
}
}
// Return errors
if(!empty($error)) Main::redirect(Main::href("user/register","",FALSE),array("danger",$error));
// Check if user activation is required
if($this->config["user_activate"]) $data[":active"]="0";
// Register User
if($this->db->insert("user",$data)){
// Send Activation Email
if($this->config["user_activate"]){
// Send Email
$mail["to"]=Main::clean($_POST["email"],3);
$key=str_replace("=","",base64_encode("P1U2{$unique}".Main::strrand(5)));
$activate="{$this->config["url"]}/user/activate/$key?email={$mail["to"]}";
$mail["subject"]="[{$this->config["title"]}] Registration has been successful.";
$mail["message"]="Hello!
You have been successfully registered at {$this->config["title"]}. To login you will have to activate your account by clicking the URL below.
$activate
";
Main::send($mail);
return Main::redirect(Main::href("user/login","",FALSE),array("success",e("An email has been sent to activate your account. Please check your spam folder if you didn't receive it.")));
}
// Send Email
$mail["to"]=Main::clean($_POST["email"],3);
$mail["subject"]="[{$this->config["title"]}] Registration has been successful.";
$mail["message"]="Hello
You have been successfully registered at {$this->config["title"]}. You can now login to our site at {$this->config["url"]}
";
Main::send($mail);
return Main::redirect(Main::href("user/login","",FALSE),array("success",e("You have been successfully registered.")));
}
}
// Set Meta titles
Main::set("body_class","dark");
Main::set("title",e("Register and manage your polls."));
Main::set("description","Register an account and gain control over your polls. Manage them, edit them or remove them without hassle.");
$this->headerShow=FALSE;
$this->footerShow=FALSE;
$this->header();
include($this->t(__FUNCTION__));
$this->footer();
}
/**
* User Activate
* @since 1.0
**/
protected function activate(){
if(Main::bot()) $this->_404();
if(!empty($this->id)){
$email=Main::clean($_GET["email"],3,TRUE);
$id=str_replace("P1U2","",base64_decode($this->id));
$id=substr($id, 0,12);
if($user=$this->db->get("user",array("api"=>"?","active"=>"0","email"=>"?"),array("limit"=>1),array($id,$email))){
$this->db->update("user",array("active"=>"1"),array("id"=>$user->id));
// Send Email
$mail["to"]=Main::clean($user->email,3);
$mail["subject"]="[{$this->config["title"]}] Your account has been activated.";
$mail["message"]="HelloYour account has been successfully activated at {$this->config["title"]}.
";
Main::send($mail);
return Main::redirect(Main::href("user/login","",FALSE),array("success",e("Your account has been successfully activated.")));
}
}
return Main::redirect(Main::href("user/login","",FALSE),array("danger",e("Wrong activation token or account already activated.")));
}
/**
* User Forgot
* @since 1.0
**/
protected function forgot(){
// Change Password if valid token
if(isset($this->id) && !empty($this->id)){
$new=base64_decode($this->id);
$key=substr($new, 12);
$unique=substr($new, 0,12);
if($key==Main::encode($this->config["security"].": Expires on".strtotime(date('Y-m-d')),"md5")){
// Change Password
if(isset($_POST["token"])){
// Validate CSRF Token
if(!Main::validate_csrf_token($_POST["token"])){
return Main::redirect(Main::href("user/forgot/{$this->id}","",FALSE),array("danger",e("Invalid token. Please try again.")));
}
// Check Password
if(empty($_POST["password"]) || strlen($_POST["password"])<5) return Main::redirect(Main::href("user/forgot/{$this->id}","",FALSE),array("danger",e("Password must contain at least 5 characters.")));
// Check second password
if(empty($_POST["cpassword"]) || $_POST["password"]!==$_POST["cpassword"]) return Main::redirect(Main::href("user/forgot/{$this->id}","",FALSE),array("danger",e("Passwords don't match.")));
// Add to database
$auth_key=Main::encode(Main::strrand(12));
if($this->db->update("user",array("password"=>"?","auth_key"=>"?"),array("api"=>"?"),array(Main::encode($_POST["password"]),$auth_key,$unique))){
return Main::redirect(Main::href("user/login","",FALSE),array("success",e("Your password has been changed.")));
}
}
// Set Meta titles
Main::set("body_class","dark");
Main::set("title",e("Reset Password"));
$this->headerShow=FALSE;
$this->footerShow=FALSE;
$this->header();
include($this->t(__FUNCTION__));
$this->footer();
return;
}
return Main::redirect(Main::href("user/login#forgot","",FALSE),array("danger",e("Token has expired, please request another link.")));
}
// Check if form is posted to send token
if(isset($_POST["token"])){
// Validate CSRF Token
if(!Main::validate_csrf_token($_POST["token"])){
return Main::redirect(Main::href("user/login#forgot","",FALSE),array("danger",e("Invalid token. Please try again.")));
}
// Validate email
if(empty($_POST["email"]) || !Main::email($_POST["email"])) return Main::redirect(Main::href("user/login#forgot","",FALSE),array("danger",e("Please enter a valid email.")));
// Check email
if($user=$this->db->get("user",array("email"=>"?","banned"=>"0"),array("limit"=>1),array($_POST["email"]))){
// Generate key
$forgot_url=Main::href("user/forgot/".str_replace("=","", base64_encode($user->api.Main::encode($this->config["security"].": Expires on".strtotime(date('Y-m-d')),"md5"))));
$mail["to"] = Main::clean($user->email);
$mail["subject"] = "[{$this->config["title"]}] Password Reset Instructions";
$mail["message"] = "
A request to reset your password was made. If you didn't make this request, please ignore and delete this email otherwise click the link below to reset your password.
Click here to reset your password.
If you cannot click on the link above, simply copy & paste the following link into your browser.
$forgot_url
Note: This link is only valid for one day. If it expires, you can request another one.
";
// Send email
Main::send($mail);
}
return Main::redirect(Main::href("user/login","",FALSE),array("success",e("If an active account is associated with this email, you should receive an email shortly.")));
}
return Main::redirect(Main::href("user/login#forgot","",FALSE));
}
/**
* Search URLs (AJAX only)
* @since v4.0
*/
private function search(){
if(!isset($_POST["token"]) || $_POST["token"]!==$this->config["public_token"]) return $this->_404();
// Prevent Bots from submitting the form
if(Main::bot()) return $this->_404();
$q=Main::clean($_POST["q"],3);
if(!empty($q) && strlen($q)>=3){
if($urls=$this->db->search("url",array(array("userid",$this->userid),"url"=>":q","alias"=>":q","custom"=>":q","meta_title"=>":q","description"=>":q"),array("order"=>"date"),array(":q"=>"%{$q}%"))){
echo "".e('Clear Search')."";
foreach ($urls as $url) {
include(TEMPLATE."/components/url_loop.php");
}
return;
}
}
echo "".e('Clear Search')."
";
}
/**
* Arhive
* @since 4.0
**/
protected function archive(){
// Get URLs
$order=array("date",FALSE,"newest");
if(isset($_GET["sort"])){
if(Main::clean($_GET["sort"],3,TRUE)=="popular"){
$order=array("click",FALSE,"popular");
}elseif(Main::clean($_GET["sort"],3,TRUE)=="oldest"){
$order=array("date",TRUE,"oldest");
}
}
$urls=$this->db->get("url",array("userid"=>"?","archived"=>"1"),array("order"=>$order[0],"limit"=>(($this->page-1)*$this->limit).", {$this->limit}","count"=>TRUE,"asc"=>$order[1]),array($this->userid));
if(($this->db->rowCount%$this->limit)<>0) {
$max=floor($this->db->rowCount/$this->limit)+1;
} else {
$max=floor($this->db->rowCount/$this->limit);
}
if($this->page > 1 && $this->page > $max) Main::redirect("user",array("danger","No URLs found."));
$pagination = Main::pagination($max,$this->page,Main::href("user/archive?filter={$order[2]}&page=%d"));
// Show Template
$this->isUser=TRUE;
Main::set("title",e("Archived URLs"));
$this->header();
include($this->t("user"));
$this->footer();
}
/**
* Bundles
* @since 4.0
**/
protected function bundles(){
if(isset($_POST["token"])){
if($this->id=="add"){
// Validate CSRF Token
if(!Main::validate_csrf_token($_POST["token"])){
return Main::redirect(Main::href("user/bundles","",FALSE),array("danger",e("Invalid token. Please try again.")));
}
if(empty($_POST["name"]) || strlen(Main::clean($_POST["name"]))<2){
return Main::redirect(Main::href("user/bundles","",FALSE),array("danger",e("Bundle name cannot be empty and must have at least 2 characters.")));
}
if($this->db->get("bundle",array("name"=>"?","userid"=>"?"),"",array(Main::clean(trim($_POST["name"])),$this->userid))){
return Main::redirect(Main::href("user/bundles","",FALSE),array("danger",e("You already have a bundle with that name.")));
}
$data = array(
":name"=> ucfirst(Main::clean($_POST["name"],3,TRUE)),
":access"=> in_array(Main::clean($_POST["access"],3,TRUE), array("public","private"))?Main::clean($_POST["access"],3,TRUE):"private",
":userid"=> $this->userid,
":date"=>"NOW()"
);
if($this->db->insert("bundle",$data)){
return Main::redirect(Main::href("user/bundles","",FALSE),array("success",e("Bundle was successfully created. You may start adding URLs in it now.")));
}
}
if($this->id=="edit"){
// Validate CSRF Token
if(!Main::validate_csrf_token($_POST["token"])){
return Main::redirect(Main::href("user/bundles","",FALSE),array("danger",e("Invalid token. Please try again.")));
}
if(empty($_POST["name"]) || strlen(Main::clean($_POST["name"]))<2){
return Main::redirect(Main::href("user/bundles","",FALSE),array("danger",e("Bundle name cannot be empty and must have at least 2 characters.")));
}
if($this->db->get("bundle","name=? AND userid=? AND id!=?","",array(Main::clean(trim($_POST["name"])),$this->userid,Main::clean($_POST["id"])))){
return Main::redirect(Main::href("user/bundles","",FALSE),array("danger",e("You already have a bundle with that name.")));
}
$data = array(
":name"=> ucfirst(Main::clean($_POST["name"],3,TRUE)),
":access"=> in_array(Main::clean($_POST["access"],3,TRUE), array("public","private"))?Main::clean($_POST["access"],3,TRUE):"private"
);
if($this->db->update("bundle","",array("userid"=>$this->userid,"id"=>Main::clean($_POST["id"],3,TRUE)),$data)){
return Main::redirect(Main::href("user/bundles","",FALSE),array("success",e("Bundle has been updated.")));
}
}
if($this->id=="update"){
if(!Main::validate_csrf_token($_POST["token"])){
Main::redirect(Main::href("user/bundles","",FALSE),array("danger",e("Something went wrong, please try again.")));
return;
}
// Check if user owns bundle
if(!empty($_POST["bundle_id"]) && !$this->db->get("bundle",array("id"=>"?","userid"=>"?"),"",array(Main::clean($_POST["bundle_id"],3,TRUE),$this->userid))){
return Main::redirect(Main::href("user/bundles","",FALSE),array("danger",e("Something went wrong, please try again.")));
}
if($this->db->update("url",array("bundle"=>"?"),array("id"=>"?","userid"=>"?"),array(Main::clean($_POST["bundle_id"],3,TRUE),Main::clean($_POST["url_id"],3,TRUE),$this->userid))){
Main::redirect(Main::href("user/bundles","",FALSE),array("success",e("This URL has been added to the bundle.")));
return;
}
}
return Main::redirect(Main::href("user/bundles","",FALSE));
}
$this->filter($this->id);
$bundles=$this->db->get("bundle",array("userid"=>"?"),array("order"=>"date","limit"=>($this->page-1)*$this->limit.", {$this->limit}"),array($this->userid));
if(($this->db->rowCount%$this->limit)<>0) {
$max=floor($this->db->rowCount/$this->limit)+1;
} else {
$max=floor($this->db->rowCount/$this->limit);
}
if($this->page > 1 && $this->page > $max) Main::redirect("user/bundles",array("danger",e("No URLs found.")));
$pagination = Main::pagination($max,$this->page,Main::href("user/bundles?page=%d"));
// Show Template
$this->isUser=TRUE;
Main::set("title",e("Manage your bundles"));
Main::set("description","Manage your bundles, share them or delete them.");
$this->header();
include($this->t(__FUNCTION__));
$this->footer();
}
/**
* Delete URL
* @since 4.0
**/
private function delete(){
// Mass Delete URLs
if(isset($_POST["token"]) && isset($_POST["delete-id"]) && is_array($_POST["delete-id"])){
// Validate Token
if(!Main::validate_csrf_token($_POST["token"])){
return Main::redirect(Main::href("user","",FALSE),array("danger",e("Invalid token. Please try again.")));
}
$query="(";
$query2="(";
$c=count($_POST["delete-id"]);
$p="";
$i=1;
foreach ($_POST["delete-id"] as $id) {
if($i>=$c){
$query.="(`alias` = :id$i OR `custom`= :id$i)";
$query2.="`short` = :id$i";
}else{
$query.="(`alias` = :id$i OR `custom`= :id$i) OR ";
$query2.="`short` = :id$i OR ";
}
$p[":id$i"]=$id;
$i++;
}
$p[":user"]=$this->userid;
$query.=") AND userid=:user";
$query2.=") AND urluserid=:user";
$this->db->delete("url",$query,$p);
$this->db->delete("stats",$query2,$p);
return Main::redirect(Main::href("user","",FALSE),array("success",e("Selected URLs have been deleted.")));
}
// Delete single URL
if(!empty($this->id) && is_numeric($this->id)){
// Validated Nonce
if(Main::validate_nonce("delete_url-{$this->id}")){
$url=$this->db->get("url",array("id"=>"?","userid"=>"?"),array("limit"=>1),array($this->id,$this->userid));
$this->db->delete("url",array("id"=>"?","userid"=>"?"),array($this->id,$this->userid));
$this->db->delete("stats",array("short"=>"?"),array($url->alias.$url->custom));
return Main::redirect(Main::href("user","",FALSE),array("success",e("URL has been deleted.")));
}
// Validated Nonce
if(Main::validate_nonce("delete_bundle-{$this->id}")){
$this->db->update("url",array("bundle"=>"?"),array("userid"=>"?","bundle"=>"?"),array("",$this->userid,$this->id));
$this->db->delete("bundle",array("userid"=>"?","id"=>"?"),array($this->userid,$this->id));
return Main::redirect(Main::href("user/bundles","",FALSE),array("success",e("This bundle has been deleted.")));
}
// Validated Nonce
if(Main::validate_nonce("delete_splash-{$this->id}")){
return $this->splash_delete();
}
}
return Main::redirect(Main::href("user","",FALSE),array("danger",e("Security token expired. Please try again.")));
}
/**
* Edit URLs
* @since 4.0
**/
private function edit(){
// Edit URL
if(isset($_POST["token"])){
if(!Main::validate_csrf_token($_POST["token"])) {
Main::redirect(Main::href("user/edit/{$this->id}","",FALSE),array("danger",e("Something went wrong, please try again.")));
return;
}
if(empty($_POST["url"]) || !Main::is_url($_POST["url"])) return Main::redirect(Main::href("user/edit/{$this->id}","",FALSE),array("danger",e("Please enter a valid URL.")));
if(!empty($_POST['location'][0]) && !empty($_POST['target'][0])){
foreach ($_POST['location'] as $i => $country) {
if(!empty($country) && !empty($_POST['target'][$i]) && Main::is_url($_POST['target'][$i])){
$countries[strtolower(Main::clean($country,3,TRUE))]=$_POST['target'][$i];
}
}
$countries=json_encode($countries);
}else{
$countries='';
}
$data = array(
":url" => Main::clean($_POST["url"],3,TRUE),
":location" => $countries,
":pass" => Main::clean($_POST["pass"],3,TRUE),
":description"=> Main::clean($_POST["description"],3,TRUE),
":public" => in_array($_POST["public"], array("0","1")) ? Main::clean($_POST["public"]) : 0
);
if($this->pro() && (in_array($_POST["type"], array("direct","frame","splash")) || is_numeric($_POST["type"]))){
$data[":type"]=Main::clean($_POST["type"],3,TRUE);
}
if($this->db->update("url","",array("id"=>$this->id, "userid"=>$this->userid),$data)){
return Main::redirect(Main::href("user/edit/{$this->id}","",FALSE),array("success",e("This URL has been successfully updated.")));
}
return Main::redirect(Main::href("user/edit/{$this->id}","",FALSE));
}
if(empty($this->id) || !is_numeric($this->id)) return Main::redirect("user",array("danger",e("This URL doesn't exist.")));
if(!$url = $this->db->get("url",array("id"=>"?"),array("limit"=>1),array($this->id))) return Main::redirect("user",array("danger",e("This URL doesn't exist.")));
$before="";
$header=e("Edit URL");
$content="
";
$this->isUser=TRUE;
$this->header();
include($this->t("components/user_template"));
$this->footer();
}
/**
* Create Splash Page
* @since 4.0
**/
private function splash_edit(){
if(!$splash = $this->db->get("splash",array("userid"=>"?","id"=>"?"),array("limit"=>1),array($this->userid,$this->id))) return Main::redirect(Main::href("user/splash","",FALSE),array("danger",e("This splash page doesn't exist.")));
$data = json_decode($splash->data);
// Edit Splash
if(isset($_POST["token"])){
if(!Main::validate_csrf_token($_POST["token"])){
Main::redirect(Main::href("user/splash/{$this->id}","",FALSE),array("danger",e("Something went wrong, please try again.")));
return;
}
$upload_path=ROOT."/content/";
$ext=array("image/png"=>"png","image/jpeg"=>"jpg","image/jpg"=>"jpg");
$_POST["title"]=Main::clean($_POST["title"],3,TRUE);
$_POST["message"]=Main::clean($_POST["message"],3,TRUE);
$_POST["product"]=Main::clean($_POST["product"],3,TRUE);
if(empty($_POST["title"]) || empty($_POST["message"]) || empty($_POST["product"]) || empty($_POST["name"])) return Main::redirect(Main::href("user/splash/{$this->id}","",FALSE),array("danger",e("The name, title, message and link cannot be empty.")));
if(!Main::is_url($_POST["product"])) return Main::redirect("user/splash/{$this->id}",array("danger",e("Please enter a valid URL.")));
$array=array(
"title" => Main::truncate($_POST["title"],50),
"message" => Main::truncate($_POST["message"],140),
"product" => $_POST["product"],
"avatar" => $data->avatar,
"banner" => $data->banner
);
$avatar = $banner = 0;
// Valid avatar
if(!empty($_FILES["avatar"]["name"])){
if(!isset($ext[$_FILES["avatar"]["type"]])) return Main::redirect("user/splash/{$this->id}",array("danger",e("Avatar must be either a PNG or a JPEG.")));
if($_FILES["avatar"]["size"]>300*1024) return Main::redirect("user/splash/{$this->id}",array("danger",e("Avatar must be either a 100x100 PNG or a JPEG (Max 300KB).")));
list($width, $height) = getimagesize($_FILES["avatar"]["tmp_name"]);
if($width!=100 && $height!=100) return Main::redirect("user/splash/{$this->id}",array("danger",e("Avatar must be either a 100x100 PNG or a JPEG (Max 300KB).")));
$name = explode(".", $data->avatar);
$array["avatar"] = $name[0].".".$ext[$_FILES["banner"]["type"]];
$avatar = 1;
}
// Valid Banner
if(!empty($_FILES["banner"]["name"])){
if(!isset($ext[$_FILES["banner"]["type"]])) return Main::redirect("user/splash/{$this->id}",array("danger",e("Banner must be either a PNG or a JPEG.")));
if($_FILES["banner"]["size"]>500*1024) return Main::redirect("user/splash/{$this->id}",array("danger",e("Banner must be either a 980x300 PNG or a JPEG (Max 500KB).")));
list($width, $height) = getimagesize($_FILES["banner"]["tmp_name"]);
if($width < 980 || ($height<250 || $height >500)) return Main::redirect("user/splash/{$this->id}",array("danger",e("Banner must be either a 980x300 PNG or a JPEG (Max 500KB).")));
$name = explode(".", $data->banner);
$array["banner"] = $name[0].".".$ext[$_FILES["banner"]["type"]];
$banner = 1;
}
if($avatar){
move_uploaded_file($_FILES["avatar"]['tmp_name'], $upload_path.$array["avatar"]);
}
if($banner){
move_uploaded_file($_FILES["banner"]['tmp_name'], $upload_path.$array["banner"]);
}
$array=json_encode($array);
$data = array(
":userid" => $this->userid,
":name" => Main::clean($_POST["name"],3,TRUE),
":data" => $array,
);
if($this->db->update("splash","",array("id"=>$this->id,"userid"=>$this->userid),$data)){
return Main::redirect(Main::href("user/splash/{$this->id}","",FALSE),array("success",e("Splash page has been updated.")));
}
return Main::redirect(Main::href("user/splash/{$this->id}","",FALSE),array("danger",e("Security token expired. Please try again.")));
}
Main::set("title",e("Edit Custom Splash Page"));
$header=e("Edit splash page");
$data->banner = Main::href("content/{$data->banner}");
$data->avatar = Main::href("content/{$data->avatar}");
$before="";
$widgets='';
$widgets.='
'.e("Info").'
';
$widgets.="
".e("A custom splash page is a transitional page where you can add a banner and an avatar along with a message to represent your brand or company. You can have up to a maximum of 5 splash pages and you can choose one for each URL.")."
";
$widgets.='
';
$html .= '
';
$html .='
| ID |
Transaction ID |
User ID |
Status |
Amount |
Date |
Expiration |
';
foreach ($payments as $payment){
$html .='
| '.$payment->id.' |
'.$payment->tid.' |
'.$payment->amount.' |
'.$payment->date.' |
'.$payment->expiry.' |
';
}
$html .='
';
$html .= '
';
$html .='