[Summary view]

Differences Between: [Versions 39 and 310] [Versions 39 and 311] [Versions 39 and 400] [Versions 39 and 401] [Versions 39 and 402] [Versions 39 and 403]

   1  <?php
   2  // This file is part of Moodle - http://moodle.org/
   3  //
   4  // Moodle is free software: you can redistribute it and/or modify
   5  // it under the terms of the GNU General Public License as published by
   6  // the Free Software Foundation, either version 3 of the License, or
   7  // (at your option) any later version.
   8  //
   9  // Moodle is distributed in the hope that it will be useful,
  10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  // GNU General Public License for more details.
  13  //
  14  // You should have received a copy of the GNU General Public License
  15  // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16  
  17  /**
  18   * Endpoint for the verification email link.
  19   *
  20   * @package    core
  21   * @subpackage badges
  22   * @copyright  2016 Jake Dallimore <jrhdallimore@gmail.com>
  23   * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  24   */
  25  require_once(__DIR__ . '/../config.php');
  26  require_once($CFG->libdir . '/badgeslib.php');
  27  
  28  $data = optional_param('data', '', PARAM_RAW);
  29  require_login();
  30  $PAGE->set_url('/badges/backpackemailverify.php');
  31  $PAGE->set_context(context_user::instance($USER->id));
  32  $redirect = '/badges/mybackpack.php';
  33  
  34  // Confirm the secret and create the backpack connection.
  35  $storedsecret = get_user_preferences('badges_email_verify_secret');
  36  if (!is_null($storedsecret)) {
  37      if ($data === $storedsecret) {
  38          $storedemail = get_user_preferences('badges_email_verify_address');
  39          $backpackid = get_user_preferences('badges_email_verify_backpackid');
  40          $password = get_user_preferences('badges_email_verify_password');
  41  
  42          $backpack = badges_get_site_backpack($backpackid);
  43  
  44          $data = new stdClass();
  45          $data->email = $storedemail;
  46          $data->password = $password;
  47          $data->externalbackpackid = $backpackid;
  48          $bp = new \core_badges\backpack_api($backpack, $data);
  49  
  50          // Make sure we have all the required information before trying to save the connection.
  51          $backpackuid = $bp->authenticate();
  52          if (empty($backpackuid) || !empty($backpackuid->error)) {
  53              redirect(new moodle_url($redirect), get_string('backpackconnectionunexpectedresult', 'badges'),
  54                  null, \core\output\notification::NOTIFY_ERROR);
  55          }
  56  
  57          $obj = new stdClass();
  58          $obj->userid = $USER->id;
  59          $obj->email = $data->email;
  60          $obj->externalbackpackid = $backpackid;
  61          $obj->backpackuid = $backpackuid;
  62          $obj->autosync = 0;
  63          $obj->password = $password;
  64  
  65          $DB->insert_record('badge_backpack', $obj);
  66  
  67          // Remove the verification vars and redirect to the mypackpack page.
  68          unset_user_preference('badges_email_verify_secret');
  69          unset_user_preference('badges_email_verify_address');
  70          redirect(new moodle_url($redirect), get_string('backpackemailverifysuccess', 'badges'),
  71              null, \core\output\notification::NOTIFY_SUCCESS);
  72      } else {
  73          // Stored secret doesn't match the supplied secret. Take user back to the mybackpack page and present a warning message.
  74          redirect(new moodle_url($redirect), get_string('backpackemailverifytokenmismatch', 'badges'),
  75              null, \core\output\notification::NOTIFY_ERROR);
  76      }
  77  } else {
  78      // Stored secret is null. Either the email address has already been verified, or there is no record of a verification attempt
  79      // for the current user. Either way, just redirect to the mybackpack page.
  80      redirect(new moodle_url($redirect));
  81  }