Changeset 492 for trunk/app/controllers/users_controller.php

Timestamp:

05/15/08 17:05:35 (8 months ago)

Author:

aarkerio

Message:

Message interfase

Files:

• trunk/app/controllers/users_controller.php (modified) (4 diffs)

trunk/app/controllers/users_controller.php

@@ -19 +19 @@
  public function beforeFilter() 
  {
-   if ( !empty($this->data['User'] ) ): 
+   if ( isset($this->data['User']['pwd'] ) ): 
        if ( strlen($this->data['User']['pwd']) < 6):
          unset($this->data['User']['pwd']);
@@ -25 +25 @@
    endif;
 
-    $this->Auth->allow(array('blog', 'entry','portfolio', 'edit', 'about', 'register', 'directory', 'bloggers', 'insert', 'validate', 'logout'));
-  
+   $actions = array('blog','entry','portfolio','edit','about','register','avatar','directory','bloggers','insert','validate','logout');
+
+  if ( $this->Auth->user() && $this->Auth->user('group_id') == 3 ):
+      array_push($actions, 'avatar');
+  endif;
+  
+  $this->Auth->allow($actions);
+
   parent::beforeFilter();
  }
@@ -33 +39 @@
  {      
     if (isset( $this->params[Configure::read('Routing.admin')] )):
-
         if ($this->Auth->user('group_id') == 1 || $this->Auth->user('group_id') == 2 ):  // admin and teachers
-        return true;
+          return true;
     endif; 
-
     endif; 
 
@@ -429 +433 @@
    endif;
  }
-  
+ /****   AVATAR   ***/
+ public function avatar() 
+ {
+    $this->layout    = 'ajax';
+    //die( debug($this->data));
+    if (!empty($this->data['User']) && is_uploaded_file($this->data['User']['file']['tmp_name']))
+    {
+    
+    $this->Sanitize = new Sanitize;
+    
+    $this->Sanitize->clean($this->data['User']); //Hopefully this is enough
+    
+    /** SUBMITTED INFORMATION - use what you need
+    *  temporary filename (pointer): $imgfile
+    *  original filename           : $imgfile_name
+    *  size of uploaded file       : $imgfile_size
+    *  mime-type of uploaded file  : $imgfile_type
+    */
+    
+    /** uploaddir:  directory relative to where script is running */
+    $uploaddir    = "../webroot/img/avatars";
+    
+    $maxfilesize  = 2097152; /** 2MB max size */
+    
+    $imgfile_name = $this->data['User']['file']['name'];
+    
+    $imgfile_size = $this->data['User']['file']['size'];
+    
+    $imgfile      = $this->data['User']['file']['tmp_name'];
+      
+    $type         = $this->data['User']['file']['type'];
+
+    list($width, $height, $typeimg, $attr) = getimagesize($imgfile);
+    
+    /** Security: checks to see if file is an image, if not do not allow upload ==*/
+    
+    if ( $type != "image/jpeg" && $type != "image/pjpeg" && $type != "image/png" && $type != "image/gif") 
+    {   /** is this a valid file? */
+        $ErrMsg   = "<h1>ERROR</h1> the file $imgfile_name $imgfile is not valid.<br>";
+        $ErrMsg  .= "<p>Only .jpg, .gif or .png files<br><br>";
+        $ErrMsg  .= "Current type file: " . $type . "</p>\n";
+            
+        /** delete uploaded file  */
+        unlink($imgfile);
+        die($this->flash($ErrMsg, '/admin/users/edit/') );
+    }
+    
+    if ( $imgfile_size > $maxfilesize) 
+    {
+      $error  = "Error. The image is too big. Bigger than 2.0 MB  Current size: " . $imgfile_size ."\n";
+             
+      /** delete uploaded file */
+      unlink($imgfile);
+      $this->flash($error,'/users/edit/');
+      return false;
+    }
+  
+    //check size
+    if ($width > 100 || $height > 100)
+    { 
+       $error  = " The image is too large. ";
+       $error .= "Width or height is larger than 100 pixels. Current size: width ". $width ."px  height ". $height ."px\n";
+             
+       /** delete uploaded file */
+       unlink($imgfile);
+       $this->flash($error,'/users/edit/');
+       return false;
+    }
+  
+    $extension   = $this->Adds->get_extension($type);
+    
+    $Name        = $this->Auth->user('username') . "_avatar" . $extension;
+    
+    /** setup final file location and name */
+    /** change spaces to underscores in filename  */
+    $final_filename = str_replace(" ", "_", $Name);
+    //die($final_filename);
+    $newfile = $uploaddir . "/" . $final_filename;
+    
+    /** do extra security check to prevent malicious abuse */
+    if (is_uploaded_file($imgfile))
+    {
+       /** move file to proper directory ==*/
+       if (!copy($imgfile, $newfile))
+       {
+          /** if an error occurs the file could not be written, read or possibly does not exist */
+          die($this->flash('Error Uploading File.', '/users/edit/'));
+       }
+   }
+   
+  /** delete the temporary uploaded file **/
+  unset($this->data['User']['file']); // We do'nt need this anymore 
+  unlink($imgfile);
+
+ /** Database stuff  **/
+  $this->data['User']['avatar'] = $final_filename;
+   
+  if ($this->User->save($this->data['User'])):
+           $this->msgFlash('Image update', '/users/edit/');
+  else:
+           die('Error saving');   
+  endif;
+   
+ }
+}  
  /***    ===== ADMIN METHODS====   ****/
  public function admin_login()