434 lines
15 KiB
PHP
434 lines
15 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Helpers\Detector;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Http\Response;
|
|
use App\User;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Log;
|
|
use mysql_xdevapi\Table;
|
|
use Spatie\Permission\Models\Role;
|
|
|
|
|
|
class UserController extends Controller
|
|
{
|
|
public function __construct()
|
|
{
|
|
$this->middleware([ "auth" ])->only("logout");
|
|
$this->middleware([ "guest" ])->only("login");
|
|
|
|
$this->middleware([ "check.auth:user.list" ])->only("index");
|
|
$this->middleware([ "check.auth:user.show" ])->only("show");
|
|
$this->middleware([ "check.auth:user.create" ])->only("create");
|
|
$this->middleware([ "check.auth:user.edit" ])->only("edit", "update");
|
|
$this->middleware([ "check.auth:user.delete" ])->only("delete");
|
|
}
|
|
|
|
/**
|
|
* Display a listing of the resource.
|
|
*
|
|
* @param Request $request
|
|
* @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\View\View
|
|
*/
|
|
public function index(Request $request)
|
|
{
|
|
$users = User::query()->paginate($request->query("page", 20));
|
|
|
|
return Response::detect("users.index", [ "users" => $users ]);
|
|
}
|
|
|
|
/**
|
|
* Show the form for creating a new resource.
|
|
*
|
|
* @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\View\View
|
|
*/
|
|
public function create()
|
|
{
|
|
$roles = Role::all();
|
|
return Response::detect("users.create", ['roles' => $roles]);
|
|
|
|
}
|
|
|
|
/**
|
|
* Store a newly created resource in storage.
|
|
*
|
|
* @param \Illuminate\Http\Request $request
|
|
* @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\View\View
|
|
*/
|
|
public function store(Request $request)
|
|
{
|
|
$data = $request->validate([
|
|
"name_first" => "required|max:255",
|
|
"name_last" => "required|max:255",
|
|
"email" => "required|email|unique:users",
|
|
"password" => "required|max:60",
|
|
"phone" => "required|unique:users",
|
|
]);
|
|
|
|
$rolez = $request->input("roles", [ "User" ]);
|
|
|
|
$user = new User($data);
|
|
|
|
$user->assignRole($rolez);
|
|
$user->save();
|
|
|
|
|
|
return Response::detect("users.store");
|
|
}
|
|
|
|
/**
|
|
* Display the specified resource.
|
|
*
|
|
* @param int $id
|
|
* @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\View\View
|
|
*/
|
|
public function show($id)
|
|
{
|
|
$user = User::find($id);
|
|
|
|
return Response::detect("users.show", [
|
|
"user" => $user
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Show the form for editing the specified resource.
|
|
*
|
|
* @param int $id
|
|
* @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\View\View
|
|
*/
|
|
public function edit($id)
|
|
{
|
|
$roles = Role::all();
|
|
$user = User::find($id);
|
|
|
|
return Response::detect("users.edit", [
|
|
"user" => $user,
|
|
"roles" => $roles,
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Update the specified resource in storage.
|
|
*
|
|
* @param \Illuminate\Http\Request $request
|
|
* @param int $id
|
|
* @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\View\View
|
|
*/
|
|
public function update(Request $request, $id)
|
|
{
|
|
$data = $request->all();
|
|
|
|
// $data = $request->validate([
|
|
// "name_first" => "max:255",
|
|
// "name_last" => "max:255",
|
|
// "email" => "email|unique:users",
|
|
// "password" => "max:60",
|
|
// "phone" => "unique:users",
|
|
// ]);
|
|
|
|
// Validates if the user is updating itself or another user.
|
|
// if($id === Auth::id()) {
|
|
// $user = Auth::user();
|
|
//
|
|
// $user->update($data);
|
|
//
|
|
// $user->save();
|
|
// return Response::detect("users.edit", [
|
|
// "user" => $user
|
|
// ]);
|
|
// }
|
|
|
|
//TODO: Implement when security's ready!!!
|
|
// else if(Auth::user()->hasPermissionTo("user.edit")) {
|
|
$user = User::find($id);
|
|
|
|
if ($request->roles != null) { //You can only edit roles on the admin site, so if there is an input roles, then update user info and edit roles
|
|
/** @var User $user */
|
|
$user->update($data);
|
|
$user->roles()->detach();
|
|
$user->forgetCachedPermissions();
|
|
|
|
foreach ($request->roles as $role){
|
|
$user->assignRole($role);
|
|
}
|
|
|
|
//$user->save();
|
|
} else { // Else if you're not on the admin site (user site)
|
|
if ($request->input('password') != null) { // If you're editing the password
|
|
if ($request->input('password') != $request->input('confirmpassword')) { // If new password and new password confirm is not the same, go back with fail message.
|
|
return redirect()->route("users.accounteditpass")->with('error#notsamepass', '<p class="text-center">Der stod ikke det samme i `Nyt Password` & `Bekræft Nyt Password`!</p>');
|
|
} elseif (!Hash::check($request->input('oldpassword'), $user->password)) { // If the written current password and current password in DB is not the same, go back with fail message.
|
|
return redirect()->route("users.accounteditpass")->with('error#oldpass', '<p class="text-center">Det indtastede password i `Nuværende Password` er ikke dit nuværende password!</p>');
|
|
} else { // If new password and current password is the same AND current written and current DB password is the same. Then update and logout.
|
|
/** @var User $user */
|
|
$user->update($data);
|
|
Auth::logout();
|
|
|
|
return redirect()->route("users.login")->with('success#passwordchange', '<p class="text-center">Dit password er hermed ændret!</p>');
|
|
}
|
|
} else { // Else if you're not editing the password but anything else (Email, Phone Number). Then update user.
|
|
$user->update($data);
|
|
}
|
|
|
|
}
|
|
|
|
// }
|
|
|
|
$users = User::query()->paginate(20);
|
|
|
|
return Response::detect("users.index", [
|
|
"users" => $users
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Remove the specified resource from storage.
|
|
*
|
|
* @param int $id
|
|
* @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\View\View
|
|
*/
|
|
public function destroy($id)
|
|
{
|
|
// if($id === Auth::id()) {
|
|
// $user = Auth::user();
|
|
// $user->delete();
|
|
// }
|
|
// else if(Auth::user()->hasPermissionTo("user.delete")) {
|
|
$user = User::find($id);
|
|
|
|
$user->delete();
|
|
// }
|
|
|
|
return redirect()->route("users.index");
|
|
}
|
|
|
|
/*******************************************/
|
|
/* Authentication */
|
|
/*******************************************/
|
|
|
|
public function showLogin() {
|
|
if(Auth::user() == null)
|
|
return Response::detect("users.login");
|
|
else
|
|
return redirect()->back();
|
|
}
|
|
|
|
public function login(Request $request) {
|
|
$data = $request->only("email", "password");
|
|
|
|
if(Auth::attempt($data)) {
|
|
//TODO: Implement home?
|
|
|
|
return redirect()->route("root.index");
|
|
}
|
|
|
|
return redirect()->back(303);
|
|
}
|
|
|
|
public function logout(Request $request) {
|
|
Auth::logout();
|
|
|
|
return redirect()->route("users.login");
|
|
}
|
|
|
|
/*******************************************/
|
|
/* Forgot password */
|
|
/*******************************************/
|
|
|
|
public function showForgot(){
|
|
return Response::detect('users.forgot');
|
|
}
|
|
|
|
public function forgot(Request $request){
|
|
$user = User::query()->where('email', '=', $request->email)->first();
|
|
|
|
if($user == null){
|
|
return redirect()->back();
|
|
}
|
|
|
|
//Send email
|
|
//TODO: Implement mail.
|
|
|
|
return redirect()->route('users.login');
|
|
}
|
|
|
|
public function account()
|
|
{
|
|
return Response::detect("users.account");
|
|
}
|
|
|
|
public function accountedit()
|
|
{
|
|
return Response::detect("users.edit");
|
|
}
|
|
|
|
public function accounteditpass()
|
|
{
|
|
return Response::detect("users.editpass");
|
|
}
|
|
|
|
|
|
public function search(Request $request){
|
|
if($request->ajax()){
|
|
$output = "<tr>".
|
|
"<th>Fornavn</th>".
|
|
"<th>Efternavn</th>".
|
|
"<th>Email</th>".
|
|
"<th>Tlf nr</th>".
|
|
"<th>Rolle(r)</th>".
|
|
"<th style=\"width: 1em;\"><img class=\"w-100\" src=\"http://127.0.0.1:8000/images/icons/pencil.svg\" alt=\"Update\"></th>".
|
|
"<th style=\"width: 1em;\"><img class=\"w-100\" src=\"http://127.0.0.1:8000/images/icons/trashcan.svg\" alt=\"Delete\"></th>".
|
|
"</tr>";
|
|
|
|
|
|
//Join user and roles tables
|
|
|
|
|
|
|
|
|
|
//$users = User::query()->where('Roles', 'LIKE',$request->search.'%')->with(Spatie\Permission\Models\Role)->get();
|
|
|
|
|
|
//filter search
|
|
if($request->isCheck === "navn")
|
|
$users = User::query()->where('name_first', 'LIKE',$request->search.'%')->get();
|
|
elseif ($request->isCheck === "efternavn")
|
|
$users = User::query()->where('name_last', 'LIKE',$request->search.'%')->get();
|
|
elseif ($request->isCheck === "email")
|
|
$users = User::query()->where('email', 'LIKE',$request->search.'%')->get();
|
|
elseif ($request->isCheck === "telefon")
|
|
$users = User::query()->where('phone', 'LIKE',$request->search.'%')->get();
|
|
elseif ($request->isCheck === "telefon")
|
|
$users = User::query()->where('phone', 'LIKE',$request->search.'%')->get();
|
|
elseif ($request->isCheck) {
|
|
$roles = Role::query()->where('name', 'LIKE', $request->search . '%')->get();
|
|
$usersTEMP = User::all();
|
|
$users = [];
|
|
|
|
foreach ($usersTEMP as $user) {
|
|
foreach ($roles as $role) {
|
|
if($user->hasRole($role)) {
|
|
array_push($users, $user);
|
|
break 2;
|
|
}
|
|
}
|
|
}
|
|
|
|
if($request->search == "")
|
|
$users = User::all();
|
|
|
|
} else {
|
|
$usersTEMP = User::query()
|
|
->where('name_first', 'LIKE', $request->search . '%')
|
|
->orWhere('name_last', 'LIKE', $request->search . '%')
|
|
->orWhere('phone', 'LIKE', $request->search . '%')
|
|
->orWhere('email', 'LIKE', $request->search . '%')
|
|
->orWhere('name', 'LIKE', $request->search . '%')
|
|
->get();
|
|
$roles = Role::query()->where('name', 'LIKE', $request->search . '%')->get();
|
|
|
|
$users = [];
|
|
|
|
$allUsers = User::all();
|
|
|
|
//For hver user i systemet, check om han har en af de roller der matcher søgeordet
|
|
foreach ($allUsers as $user) {
|
|
foreach ($roles as $role) {
|
|
if($user->hasRole($role)) {
|
|
array_push($users, $user);
|
|
break 2;
|
|
}
|
|
}
|
|
}
|
|
|
|
//For hver user der har data, der matcher søgeordet, check om useren allerede er i resultatet, hvis ikke så tilføj ham
|
|
foreach ($usersTEMP as $userTEMP){
|
|
$isInUsers = false;
|
|
foreach ($users as $user) {
|
|
if($userTEMP == $user) {
|
|
$isInUsers = true;
|
|
break 2;
|
|
}
|
|
}
|
|
|
|
if($isInUsers == false)
|
|
array_push($users, $userTEMP);
|
|
}
|
|
|
|
$i = 0;
|
|
foreach ($users as $user){
|
|
$i++;
|
|
foreach ($users as $userr){
|
|
if($user->id == $userr->id) {
|
|
unset($users[$i]);
|
|
break 2;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
|
|
//Dont delete
|
|
/*elseif ($request->isCheck === "rolle")
|
|
$users = User::query()->where('rolle', 'LIKE',$request->search.'%');*/
|
|
|
|
|
|
|
|
|
|
if(count($users) !== 0){
|
|
foreach ($users as $key => $user){
|
|
|
|
$roles = null;
|
|
$rolesString = null;
|
|
|
|
foreach (User::all() as $usr) {
|
|
if($usr->id == $user->id)
|
|
$roles = $usr->roles;
|
|
}
|
|
|
|
for($i = 0; $i < count($roles); $i++) {
|
|
if(count($roles)-1 != $i) {
|
|
$rolesString .= $roles[$i]->name.",";
|
|
}else {
|
|
$rolesString = $roles[$i]->name;
|
|
}
|
|
}
|
|
|
|
$output.='<tr>'.
|
|
'<td>' . $user->name_first . '</td>'.
|
|
'<td>' . $user->name_last . '</td>'.
|
|
'<td>' . $user->email . '</td>'.
|
|
'<td>' . $user->phone .'</td>'.
|
|
'<td>' . $rolesString .'</td>'.
|
|
'<td><a href="'. route("users.edit", [ "user" => $user->id ]) . '"><img class="w-100" src="'. asset('/images/icons/pencil-dark.svg') . '" alt="Update"></a></td>'.
|
|
'<td><form method="post" action="' .route("users.destroy", [ "user" => $user->id ]). '" class="w-100 nostyle">'.
|
|
csrf_field().
|
|
method_field("delete").
|
|
|
|
'<button class="w-100 nostyle" onclick="return confirm(\'Are you sure you want to delete?\');" type="submit"><img class="w-100 cursor-pointer" src="'. asset('/images/icons/trashcan-dark.svg') . '" alt="Delete"></button>'.
|
|
'</form>'.
|
|
'</td>'.
|
|
'</tr>';
|
|
}
|
|
}else{
|
|
$output.='<tr>'.
|
|
'<td>Intet match</td>'.
|
|
'<td></td>'.
|
|
'<td></td>'.
|
|
'<td></td>'.
|
|
'<td></td>'.
|
|
'<td></td>'.
|
|
'<td></td>'.
|
|
'</tr>';
|
|
}
|
|
return Response($output);
|
|
}
|
|
}
|
|
}
|