X-Git-Url: https://ruin.nu/git/?a=blobdiff_plain;f=lib%2FNDWeb%2FController%2FSettings.pm;h=03dc7824687a9bd21282ceadc38b9fd233e427c9;hb=3b0d1d881162c5bcc1a18e8a43c807cc1fe52bc3;hp=d6743fb1f6afebcc985d0ac201f775cd8574a07c;hpb=eb3bda37d084c0e6b13c97f88f06d5563c40d2fb;p=ndwebbie.git diff --git a/lib/NDWeb/Controller/Settings.pm b/lib/NDWeb/Controller/Settings.pm index d6743fb..03dc782 100644 --- a/lib/NDWeb/Controller/Settings.pm +++ b/lib/NDWeb/Controller/Settings.pm @@ -2,11 +2,14 @@ package NDWeb::Controller::Settings; use strict; use warnings; +use feature ":5.10"; use parent 'Catalyst::Controller'; use NDWeb::Include; use DateTime::TimeZone; +use Mail::Sendmail; +use Email::Valid; =head1 NAME @@ -40,10 +43,12 @@ sub index :Path :Args(0) { } $c->stash(stylesheets => \@stylesheets); - my ($birthday,$timezone) = $dbh->selectrow_array(q{ -SELECT birthday,timezone FROM users WHERE uid = $1 + my ($birthday,$timezone,$email,$discord_id) = $dbh->selectrow_array(q{ +SELECT birthday,timezone,email,discord_id FROM users WHERE uid = $1 },undef,$c->user->id); $c->stash(birthday => $birthday); + $c->stash(email => $c->flash->{email} // $email); + $c->stash(discord_id => $c->flash->{discord_id} // $discord_id); my @timezone = split m{/},$timezone,2; $c->stash(timezone => \@timezone); @@ -63,7 +68,8 @@ sub changeStylesheet : Local { my $query = $dbh->prepare(q{UPDATE users SET css = NULLIF($2,'Default') WHERE uid = $1 }); - $query->execute($c->user->id,html_escape $c->req->param('stylesheet')); + my $css = html_escape $c->req->param('stylesheet'); + $query->execute($c->user->id,$css); $c->res->redirect($c->uri_for('')); } @@ -76,7 +82,8 @@ sub changeBirthday : Local { WHERE uid = $1 }); eval{ - $query->execute($c->user->id,html_escape $c->req->param('birthday')); + my $birthday = html_escape $c->req->param('birthday'); + $query->execute($c->user->id,$birthday); }; if ($@){ if ($@ =~ /invalid input syntax for type date/){ @@ -92,8 +99,7 @@ sub changeTimezone : Local { my ( $self, $c ) = @_; my $dbh = $c->model; - my $timezone = $c->req->param('category'); - $timezone .= '/' . $c->req->param('country') if $c->req->param('country'); + my $timezone = $c->req->param('timezone'); my $query = $dbh->prepare(q{UPDATE users SET timezone = $2 WHERE uid = $1}); eval{ $dbh->selectrow_array(q{SELECT NOW() AT TIME ZONE $1},undef,$timezone); @@ -109,11 +115,138 @@ sub changePassword : Local { my ( $self, $c ) = @_; my $dbh = $c->model; - my $query = $dbh->prepare(q{UPDATE users SET password = MD5($1) - WHERE password = MD5($2) AND uid = $3 + my $pass = $c->req->param('pass'); + if (length $pass < 4) { + $c->flash(error => "Your password need to be at least 4 characters"); + } else { + my $query = $dbh->prepare(q{UPDATE users SET password = $1 + WHERE password = crypt($2,password) AND uid = $3 }); - $query->execute($c->req->param('pass'),$c->req->param('oldpass'),$c->user->id); + my $oldpass = $c->req->param('oldpass'); + $query->execute($pass,$oldpass,$c->user->id); + $c->flash(error => "Old password was invalid") unless $query->rows; + } + + $c->res->redirect($c->uri_for('')); +} + +sub changeEmail : Local { + my ( $self, $c ) = @_; + my $dbh = $c->model; + + my $email = $c->req->param('email'); + + if ($email =~ /^\s*$/) { + my $update = $dbh->prepare(q{ +UPDATE users SET email = NULL WHERE uid = $1; + }); + $update->execute($c->user->id); + $c->flash(error => 'email cleared'); + $c->res->redirect($c->uri_for('')); + return, + } + + unless (Email::Valid->address($email)){ + $c->flash(email => $email); + $c->flash(error => 'Invalid email address'); + $c->res->redirect($c->uri_for('')); + return, + } + + eval{ + my $insert = $dbh->prepare(q{ +INSERT INTO email_change (uid,email) VALUES ($1,$2) RETURNING id; + }); + $insert->execute($c->user->id,$email); + + my ($id) = $insert->fetchrow_array; + + my %mail = ( + smtp => 'localhost', + To => $email, + From => 'NewDawn Command ', + 'Content-type' => 'text/plain; charset="UTF-8"', + Subject => 'Change email address', + Message => qq{ +You have requested to change email address on the NewDawn website. +If that is not the case, then feel free to ignore this email. Otherwise +use the following url to confirm the change: + +}.$c->uri_for('confirmEmail',$id)."\n", + ); + + if (sendmail %mail) { + $c->flash(error => 'Sent mail for confirmation.'); + }else { + $c->flash(error => $Mail::Sendmail::error); + } + }; + if($@){ + if($@ =~ /duplicate key value violates unique constraint/){ + $c->flash(email => $email); + $c->flash(error => 'Something went wrong, try to set the email again'); + }else{ + die $@; + } + } + $c->res->redirect($c->uri_for('')); +} + +sub changeDiscordId : Local { + my ( $self, $c ) = @_; + my $dbh = $c->model; + + my $discord_id = $c->req->param('discord_id'); + + if ($discord_id =~ /^\s*$/) { + my $update = $dbh->prepare(q{ +UPDATE users SET discord_id = NULL WHERE uid = $1; + }); + $update->execute($c->user->id); + $c->flash(error => 'discord id cleared'); + $c->res->redirect($c->uri_for('')); + return, + } + + eval{ + my $update = $dbh->prepare(q{ +UPDATE users SET discord_id = $2 WHERE uid = $1; + }); + $update->execute($c->user->id,$discord_id); + }; + if($@){ + if($@ =~ /duplicate key value violates unique constraint/){ + $c->flash(discord_id => $discord_id); + $c->flash(error => 'Someone else is using this discord id, duplicate account?'); + }else{ + die $@; + } + } + $c->res->redirect($c->uri_for('')); +} + +sub confirmEmail : Local { + my ( $self, $c, $id ) = @_; + my $dbh = $c->model; + + $dbh->begin_work; + my $query = $dbh->prepare(q{ +UPDATE email_change SET confirmed = TRUE +WHERE uid = $1 AND id = $2 AND NOT confirmed +RETURNING email + }); + $query->execute($c->user->id,$id); + my ($email) = $query->fetchrow_array; + + if ($email){ + $dbh->do(q{UPDATE users SET email = $2 WHERE uid = $1} + ,undef,$c->user->id,$email); + $c->flash(error => "Email updated."); + }else{ + $c->flash(error => "$id is not a valid change id for your account, or already confirmed"); + } + $dbh->commit; $c->res->redirect($c->uri_for('')); }