avives
1f72193a64
Some checks are pending
Module sub-split / Sub-split (push) Waiting to run
- Base: wintercms/winter branch 1.2 (full framework) - Theme vivespos: Canvas 7 + Bootstrap 5 CDN, custom CSS - Layout: deferred GTM/GA4 tracking, JSON-LD SoftwareApplication - Partials: hero (offline-first), features, modes (offline/nube toggle), screenshots, pricing (3 planes), comparison, FAQ, CTA - Plugin VivesPOS.Site with ContactForm - Dockerfile: PHP 8.2 Apache, port 80, healthcheck - Added winter/wn-pages, blog, sitemap, seo plugins - Active theme set to vivespos
93 lines
2.4 KiB
PHP
93 lines
2.4 KiB
PHP
<?php
|
|
|
|
namespace Backend\Controllers;
|
|
|
|
use Backend\Behaviors\FormController;
|
|
use Backend\Classes\Controller;
|
|
use Backend\Facades\BackendAuth;
|
|
use Backend\Facades\BackendMenu;
|
|
use System\Classes\SettingsManager;
|
|
use Winter\Storm\Database\Builder;
|
|
|
|
/**
|
|
* My Account controller
|
|
*
|
|
* Allows any authenticated backend user to manage their own account settings.
|
|
* Isolated from the Users controller to prevent privilege escalation via
|
|
* handler dispatch on a controller with degraded permissions.
|
|
*
|
|
* @package winter\wn-backend-module
|
|
* @author Winter CMS
|
|
*/
|
|
class MyAccount extends Controller
|
|
{
|
|
/**
|
|
* @var array Extensions implemented by this controller.
|
|
*/
|
|
public $implement = [
|
|
FormController::class,
|
|
];
|
|
|
|
/**
|
|
* @var array methods that are blocked from being called as actions
|
|
*/
|
|
protected $guarded = ['create', 'update', 'preview'];
|
|
|
|
/**
|
|
* @var array Permissions required to view this page.
|
|
* Empty array — any logged-in user can access their own account.
|
|
*/
|
|
public $requiredPermissions = [];
|
|
|
|
/**
|
|
* @var string HTML body tag class
|
|
*/
|
|
public $bodyClass = 'compact-container';
|
|
|
|
public $formLayout = 'sidebar';
|
|
|
|
/**
|
|
* Constructor.
|
|
*/
|
|
public function __construct()
|
|
{
|
|
parent::__construct();
|
|
|
|
BackendMenu::setContext('Winter.System', 'system', 'users');
|
|
SettingsManager::setContext('Winter.Backend', 'myaccount');
|
|
}
|
|
|
|
public function formExtendQuery(Builder $query): void
|
|
{
|
|
$query->whereKey($this->user->getKey());
|
|
}
|
|
|
|
/**
|
|
* My Account page
|
|
*/
|
|
public function index()
|
|
{
|
|
$this->pageTitle = 'backend::lang.myaccount.menu_label';
|
|
return $this->asExtension('FormController')->update($this->user->id, 'myaccount');
|
|
}
|
|
|
|
/**
|
|
* Save handler for the My Account form
|
|
*/
|
|
public function index_onSave()
|
|
{
|
|
$result = $this->asExtension('FormController')->update_onSave($this->user->id, 'myaccount');
|
|
|
|
/*
|
|
* If the password or login name has been updated, reauthenticate the user
|
|
*/
|
|
$loginChanged = $this->user->login != post('User[login]');
|
|
$passwordChanged = strlen(post('User[password]'));
|
|
if ($loginChanged || $passwordChanged) {
|
|
BackendAuth::login($this->user->reload(), true);
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
}
|