lepton_tfa.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
class LEPTON_tfa
{
    public bool $key_new = false;   
    public string $pin = '-1';
    public string $pin_encode = '-1';
    public int $user_id = -99;
 
    public object|null $oTwig = null;
    public object|null $database = null;
    public object|null $mailer = null;
    public static $instance;
    
//    public static $instance;
    
    public static function getInstance()
    {
        if (null === static::$instance)
        {
            static::$instance = new static();
            static::$instance->initialize();
        }
        return static::$instance;
    }
    
    public function initialize( int $user_id = -99)
    {
        $this->database = LEPTON_database::getInstance();
        $this->oTwig = lib_twig_box::getInstance();
        $this->mailer = LEPTON_mailer::getInstance();
        
        $temp_value = $this->database->get_one("SELECT pin FROM ".TABLE_PREFIX."users WHERE user_id = ".$user_id);
        
        if($temp_value == -1)
        {
            $this->key_new = true;
        } 
        else 
        {
            $this->key_new = false;
        }
        
        $this->user_id = $user_id;
        $createPin = random_int(100000, 999999);
        $this->pin = "".$createPin."";
        $this->pin_encode = password_hash($this->pin, PASSWORD_DEFAULT);    // for use in TFA = mail only 
    }
 
    public function set_fe_pin($id = '') 
    {       
        if ( $id == 'create') 
        {                       
            if(isset($_SESSION['USER_ID']) && isset($_SESSION['LepTokens']))
            {                   
                $token = $_SESSION['LepTokens'][0];
                $redirect = $_GET['redirect']?? LEPTON_URL;
 
                $page_values = array(
                    'oTFA'          => $this,
                    'ACTION_URL'    => LEPTON_URL."/account/tfa.php",
                    'token'         => $token,
                    'redirect'      => $redirect,
                    'post_login'    => $_POST,
                    'pin'           => $this->pin,
                    'new'           => $this->key_new,
                );
                
                $this->oTwig->registerPath( LEPTON_PATH."/account/templates/" );
                echo $this->oTwig->render(
                    "tfa_form.lte",
                    $page_values
                );                  
                
            } 
        }
        
        elseif ( $id == 'save') 
        {
            if(isset($_POST['save']) && strlen($_POST['save']) == 6 )
            {       
                $this->pin_encode = password_hash($_POST['save'], PASSWORD_DEFAULT);    // for use in TFA = local
                
                // save pin
                $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin` = '".$this->pin_encode."' WHERE user_id = ".$this->user_id);
 
                // modify pin_set
                $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin_set` = 1 WHERE user_id = ".$this->user_id);
 
                header('Location: '.$_POST['redirect'].' ');
                exit();
                
            } 
        }
        else 
        {
            header('Location: '.LEPTON_URL.'/account/logout.php');
        }
    }   
 
    public function display_fe_pin( $id )   
    {
        if ( $id == 'display' || $id == 'resend')
        {
            if(TFA == "mail")
            {           
                // modify pin_set
                $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin` = '".$this->pin_encode."' WHERE user_id = ".$this->user_id);
                $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin_set` = 1 WHERE user_id = ".$this->user_id);            
                
                self::send_mail($this->user_id);            
            }       
 
            $page_values = array(
                'oTFA'          => $this,
                'ACTION_URL'    => LEPTON_URL."/account/tfa.php",
                'post_login'    => $_POST,
                'redirect'      => $_POST['redirect'] ?? LEPTON_URL,
                'TFA'           => TFA,             
                'token'         => $_SESSION['LepTokens'][0],
                'new'           => false,
            );
 
            $this->oTwig->registerPath( LEPTON_PATH."/account/templates/" );
            echo $this->oTwig->render(
                "tfa_form.lte",
                $page_values
            );      
        } 
        elseif ( $id == 'forward') 
        {
        
            if(isset($_POST['token']) && strlen($_POST['pin']) == 6 )
            {
 
                // get PIN from database
                $dbKey = $this->database->get_one("SELECT pin FROM ".TABLE_PREFIX."users WHERE user_id = ".$this->user_id);
                $postKey = $_POST['pin'];       
                $forward = strip_tags($_REQUEST['redirect'] ?? LEPTON_URL);
 
                // validate PIN
                if(password_verify ($postKey, $dbKey) === true)
                {
                    // prevent logout
                    $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin_set` = 2 WHERE user_id = ".$this->user_id);
                
                    header('Location: '.$forward);                  
                } 
                else
                {
                    header('Location: '.LEPTON_URL.'/account/logout.php');
                }               
            } 
        } 
        else 
        {
            header('Location: '.LEPTON_URL.'/account/logout.php');
        }
    }
    
    public function set_be_pin( $id ) 
    {
        if ( $id == 'create') 
        {
            $page_values = array(
                'oTFA'          => $this,
                'ACTION_URL'    => ADMIN_URL."/login/tfa.php",
                'token'         => $_SESSION['LepTokens'][0],
                'post_login'    => $_POST,
                'pin'           => $this->pin,
                'new'           => $this->key_new,
            );
 
            $this->oTwig->registerPath( THEME_PATH."theme","tfa" );
            echo $this->oTwig->render(
                "@theme/tfa_form.lte",
                $page_values
            );
        }
 
        if ( $id == 'save') 
        {           
            if(isset($_POST['save']) && strlen($_POST['save']) == 6 )
            {               
                $this->pin_encode = password_hash($_POST['save'], PASSWORD_DEFAULT);    // for use in TFA = local
            
                // save PIN
                $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin` = '".$this->pin_encode."' WHERE user_id = ".$this->user_id);
 
                // modify pin_set
                $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin_set` = 1 WHERE user_id = ".$this->user_id);
                
                header('Location: '.ADMIN_URL.'/logout/index.php');
                exit();         
            } 
            else 
            {
                header('Location: '.ADMIN_URL.'/logout/index.php');
            }
        }
    }
    
    public function display_be_pin( $id )   
    {       
        if ( $id == 'display' || $id == 'resend')
        {
            if(TFA == "mail")
            {       
                // modify pin_set
                $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin` = '".$this->pin_encode."' WHERE user_id = ".$this->user_id);
                $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin_set` = 1 WHERE user_id = ".$this->user_id);            
                
                self::send_mail($this->user_id);
            }
            
            $page_values = array(
                'oTFA'          => $this,
                'ACTION_URL'    => ADMIN_URL."/login/tfa.php",
                'token'         => $_SESSION['LepTokens'][0],
                'TFA'           => TFA,
                'new'           => false,
            );
 
            $this->oTwig->registerPath( THEME_PATH."theme","tfa" );
            echo $this->oTwig->render(
                "@theme/tfa_form.lte",
                $page_values
            );                  
        } 
 
        elseif ( $id == 'forward') 
        {           
            if(isset($_POST['token']) && strlen($_POST['pin']) == 6 )
            {                           
                // get PIN from database
                $dbKey = $this->database->get_one("SELECT pin FROM ".TABLE_PREFIX."users WHERE user_id = ".$this->user_id);
                $postKey = $_POST['pin'];
                
                // validate PIN
                if(password_verify ($postKey, $dbKey) === true)
                {
                    // modify pin_set
                    $this->database->simple_query("UPDATE ".TABLE_PREFIX."users SET `pin_set` = 2 WHERE user_id = ".$this->user_id);    
                    
                    header('Location: '.ADMIN_URL.'/start/index.php?leptoken='.$_POST['token']);                
                } 
                else
                {
                    header('Location: '.ADMIN_URL.'/logout/index.php');
                }               
            } 
        } 
        else 
        {
            header('Location: '.ADMIN_URL.'/logout/index.php');
        }       
    }
 
    
    public function send_mail( $id = -99 )
    {
        global $TEXT;
        
        $sFrom = SERVER_EMAIL;
        $sSendTo = $this->database->get_one("SELECT email FROM ".TABLE_PREFIX."users WHERE user_id = ".$this->user_id);
        $sSubject = $TEXT['TFA_SUBJECT'];
        $sMessage = "
        <br />
        ".$TEXT['TFA_NOTICE_I']."
                    <br />
        ".LEPTON_tools::display($this->pin, 'pre','ui message')."
        <br />
        ";  
 
        if (!$this->mailer->sendmail( $sFrom, $sSendTo, $sSubject, $sMessage)) 
        {       
            $message = "Failure send mail"; 
            echo(LEPTON_tools::display($message,'pre','ui red message'));   
        }
            
    }
}