/app/controllers/users_controller.php

<?php

/**

 * Users Controller

 *

 * PHP version 5

 *

 * @category Controller

 * @package  Croogo

 * @version  1.0

 * @author   Fahad Ibnay Heylaal <contact@fahad19.com>

 * @license  http://www.opensource.org/licenses/mit-license.php The MIT License

 * @link     http://www.croogo.org

 */

class UsersController extends AppController {

/**

 * Controller name

 *

 * @var string

 * @access public

 */

    var $name = 'Users';

/**

 * Components

 *

 * @var array

 * @access public

 */

    var $components = array(

        'Email',

    );

/**

 * Models used by the Controller

 *

 * @var array

 * @access public

 */

    var $uses = array('User');



    function beforeFilter() {

        parent::beforeFilter();

    }



    function admin_index() {

        $this->pageTitle = __('Users', true);



        $this->User->recursive = 0;

        $this->set('users', $this->paginate());

    }



    function admin_add() {

        if (!empty($this->data)) {

            $this->User->create();

            $this->data['User']['activation_key'] = md5(uniqid());

            if ($this->User->save($this->data)) {

                $this->Session->setFlash(__('The User has been saved', true));

                $this->redirect(array('action' => 'index'));

            } else {

                $this->Session->setFlash(__('The User could not be saved. Please, try again.', true));

                unset($this->data['User']['password']);

            }

        } else {

            $this->data['User']['role_id'] = 2; // default Role: Registered

        }

        $roles = $this->User->Role->find('list');

        $this->set(compact('roles'));

    }



    function admin_edit($id = null) {

        if (!$id && empty($this->data)) {

            $this->Session->setFlash(__('Invalid User', true));

            $this->redirect(array('action' => 'index'));

        }

        if (!empty($this->data)) {

            if ($this->User->save($this->data)) {

                $this->Session->setFlash(__('The User has been saved', true));

                $this->redirect(array('action' => 'index'));

            } else {

                $this->Session->setFlash(__('The User could not be saved. Please, try again.', true));

            }

        }

        if (empty($this->data)) {

            $this->data = $this->User->read(null, $id);

        }

        $roles = $this->User->Role->find('list');

        $this->set(compact('roles'));

    }



    function admin_reset_password($id = null) {

        if (!$id && empty($this->data)) {

            $this->Session->setFlash(__('Invalid User', true));

            $this->redirect(array('action' => 'index'));

        }

        if (!empty($this->data)) {

            if ($this->User->save($this->data)) {

                $this->Session->setFlash(__('Password has been reset.', true));

                $this->redirect(array('action' => 'index'));

            } else {

                $this->Session->setFlash(__('Password could not be reset. Please, try again.', true));

            }

        }

        if (empty($this->data)) {

            $this->data = $this->User->read(null, $id);

        }

    }



    function admin_delete($id = null) {

        if (!$id) {

            $this->Session->setFlash(__('Invalid id for User', true));

            $this->redirect(array('action' => 'index'));

        }

        if ($this->User->delete($id)) {

            $this->Session->setFlash(__('User deleted', true));

            $this->redirect(array('action' => 'index'));

        }

    }



    function admin_login() {

        $this->pageTitle = __('Admin Login', true);

        $this->layout = "admin_login";

    }



    function admin_logout() {

        $this->Session->setFlash(__('Log out successful.', true));

        $this->redirect($this->Auth->logout());

    }



    function index() {

        $this->pageTitle = __('Users', true);

    }



    function add() {

        $this->pageTitle = __('Register', true);

        if (!empty($this->data)) {

            $this->User->create();

            $this->data['User']['role_id'] = 2; // Registered

            $this->data['User']['activation_key'] = md5(uniqid());

            $this->data['User']['status'] = 0;

            if ($this->User->save($this->data)) {

                $this->data['User']['password'] = null;

                $this->Email->from = Configure::read('Site.title') . ' '

                    . '<croogo@' . preg_replace('#^www\.#', '', strtolower($_SERVER['SERVER_NAME'])).'>';

                $this->Email->to = $this->data['User']['email'];

                $this->Email->subject = __('[' . Configure::read('Site.title') . '] Please activate your account', true);

                $this->Email->template = 'register';

                $this->set('user', $this->data);

                $this->Email->send();



                $this->Session->setFlash(__('You have successfully registered an account. An email has been sent with further instructions.', true));

                $this->redirect(array('action' => 'login'));

            } else {

                $this->Session->setFlash(__('The User could not be saved. Please, try again.', true));

            }

        }

    }



    function activate($username = null, $key = null) {

        if ($username == null || $key == null) {

            $this->redirect(array('action' => 'login'));

        }



        if ($this->User->hasAny(array(

                'User.username' => $username,

                'User.activation_key' => $key,

                'User.status' => 0,

            ))) {

            $user = $this->User->findByUsername($username);

            $this->User->id = $user['User']['id'];

            $this->User->saveField('status', 1);

            $this->User->saveField('activation_key', md5(uniqid()));

            $this->Session->setFlash(__('Account activated successfully.', true));

        } else {

            $this->Session->setFlash(__('An error occurred.', true));

        }



        $this->redirect(array('action' => 'login'));

    }



    function edit() {}



    function forgot() {

        $this->pageTitle = __('Forgot Password', true);



        if (!empty($this->data) && isset($this->data['User']['username'])) {

            $user = $this->User->findByUsername($this->data['User']['username']);

            if (!isset($user['User']['id'])) {

                $this->Session->setFlash(__('Invalid username.', true));

                $this->redirect(array('action' => 'login'));

            }



            $this->User->id = $user['User']['id'];

            $activationKey = md5(uniqid());

            $this->User->saveField('activation_key', $activationKey);

            $this->set(compact('user', 'activationKey'));



            $this->Email->from = Configure::read('Site.title') . ' '

                    . '<croogo@' . preg_replace('#^www\.#', '', strtolower($_SERVER['SERVER_NAME'])).'>';

            $this->Email->to = $user['User']['email'];

            $this->Email->subject = '[' . Configure::read('Site.title') . '] ' . __('Reset Password', true);

            $this->Email->template = 'forgot_password';

            if ($this->Email->send()) {

                $this->Session->setFlash(__('An email has been sent with instructions for resetting your password.', true));

                $this->redirect(array('action' => 'login'));

            } else {

                $this->Session->setFlash(__('An error occurred. Please try again.', true));

            }

        }

    }



    function reset($username = null, $key = null) {

        $this->pageTitle = __('Reset Password', true);



        if ($username == null || $key == null) {

            $this->Session->setFlash(__('An error occurred.', true));

            $this->redirect(array('action' => 'login'));

        }



        $user = $this->User->find('first', array(

            'conditions' => array(

                'User.username' => $username,

                'User.activation_key' => $key,

            ),

        ));

        if (!isset($user['User']['id'])) {

            $this->Session->setFlash(__('An error occurred.', true));

            $this->redirect(array('action' => 'login'));

        }



        if (!empty($this->data) && isset($this->data['User']['password'])) {

            $this->User->id = $user['User']['id'];

            $user['User']['password'] = Security::hash($this->data['User']['password'], null, true);

            $user['User']['activation_key'] = md5(uniqid());

            if ($this->User->save($user['User'])) {

                $this->Session->setFlash(__('Your password has been reset successfully.', true));

                $this->redirect(array('action' => 'login'));

            } else {

                $this->Session->setFlash(__('An error occurred. Please try again.', true));

            }

        }



        $this->set(compact('user', 'username', 'key'));

    }



    function login() {

        $this->pageTitle = __('Log in', true);

    }



    function logout() {

        $this->Session->setFlash(__('Log out successful.', true));

        $this->redirect($this->Auth->logout());

    }



    function view($username) {

        $user = $this->User->findByUsername($username);

        if (!isset($user['User']['id'])) {

            $this->Session->setFlash(__('Invalid User.', true));

            $this->redirect('/');

        }



        $this->pageTitle = $user['User']['name'];

        $this->set(compact('user'));

    }

    

}

?>