base-ticket.inc.php

Go to the documentation of this file.

<?
abstract class BaseTicket extends MyModule
{
    private $hash;

    private $url;

    private $user;
    
    private $table;
    
    function __construct($hash = null, $table = 'tickets')
    {
        $this->hash = $hash;
        $this->table = $table;
        
        parent::__construct();
    }

    function getPagesXml()
    {
        $xml = parent::getPagesXml();
        $xml .= "<page name=\"gate\">\n";
        $xml .= "\t<param name=\"ticket\" required=\"1\" regex=\"/^[0-9a-f]{16}$/\" />\n";
        $xml .= "\t<param name=\"url\" />\n";
        $xml .= "</page>";

        return $xml;
    }

    function getCreateTableSql()
    {
        return <<<SQL
CREATE TABLE `$this->table` (
  `hash` varchar(16) NOT NULL default '',
  `user_id` int(11) NOT NULL default '0',
  `url` varchar(255) NOT NULL default '',
  `expire` datetime NOT NULL default '0000-00-00 00:00:00',
  PRIMARY KEY  (`hash`),
  KEY `user_id` (`user_id`)
) ENGINE=InnoDB;
SQL;
        return $sql;
    }

    public function initGatePage()
    {
        $this->hash = $this->params('ticket');
    
        if (!$this->process())
        {
            if ($this->params('url'))
                Util::redirect(base64_decode($this->params('url')));
            else
                throw new PageError("No fallback url found.  You must use the entire link contained in the email.");
        }
    }

    public function drawMainPage()
    {
        global $me;
    }

    public function verify()
    {
        $hashRs = dbQuery("
            SELECT *
            FROM $this->table
            WHERE hash = '$this->hash'
        ");
        if (dbGetNumRows($hashRs))
            return dbFetchAssoc($hashRs);
        return false;
    }

    public function generate($url, $user, $expire = null)
    {
        //nice big hash.
        $this->hash = substr(sha1(mt_rand()), 0, 16);
        $this->url = $url;
        $this->user = $user;
        
        //default 2 months
        if ($expire === null)
            $this->expire = date('Y-m-d H:i:s', strtotime('+2 month'));

        //create it.
        dbExecute("
            INSERT INTO $this->table
                (user_id, hash, url, expire)
            VALUES
                ('$user->id', '$this->hash', '$this->url', '$this->expire')
        ");
        
        return $hash;
    }

    public function url()
    {
        //return $this->getUrl(array('module' => 'ticket', 'page' => 'gate', 'ticket' => $this->hash), null, true);
        return $this->getUrl(".gate?ticket=$this->hash&url=" . base64_encode($this->url), null, true);
    }

    public function process()
    {
        if ($hash = $this->verify())
        {
            //if we verify... create it!
            $user = new User($hash['user_id']);
            $user->doLogin();
        
            //destroy!
            $this->destroy();
            
            //redirect..
            Util::redirect($hash['url']);

            return true;
        }
        
        return false;
    }

    public function destroy()
    {
        dbExecute("
            DELETE FROM $this->table
            WHERE hash = '$this->hash'
        ");
    }
}
?>

---