actions/smssettings.php

   1 <?php
   2 /*
   3  * Laconica - a distributed open-source microblogging tool
   4  * Copyright (C) 2008, Controlez-Vous, Inc.
   5  *
   6  * This program is free software: you can redistribute it and/or modify
   7  * it under the terms of the GNU Affero General Public License as published by
   8  * the Free Software Foundation, either version 3 of the License, or
   9  * (at your option) any later version.
  10  *
  11  * This program is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  * GNU Affero General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Affero General Public License
  17  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 if (!defined('LACONICA')) { exit(1); }
  21
  22 require_once(INSTALLDIR.'/lib/settingsaction.php');
  23 require_once(INSTALLDIR.'/actions/emailsettings.php');
  24
  25 class SmssettingsAction extends EmailsettingsAction {
  26
  27         function get_instructions() {
  28                 return _('You can receive SMS messages through email from %%site.name%%.');
  29         }
  30
  31         function show_form($msg=NULL, $success=false) {
  32                 $user = common_current_user();
  33                 $this->form_header(_('SMS Settings'), $msg, $success);
  34                 common_element_start('form', array('method' => 'post',
  35                                                                                    'id' => 'smssettings',
  36                                                                                    'action' =>
  37                                                                                    common_local_url('smssettings')));
  38                 common_hidden('token', common_session_token());
  39                 common_element('h2', NULL, _('Address'));
  40
  41                 if ($user->sms) {
  42                         common_element_start('p');
  43                         $carrier = $user->getCarrier();
  44                         common_element('span', 'address confirmed', $user->sms . ' (' . $carrier->name . ')');
  45                         common_element('span', 'input_instructions',
  46                                        _('Current confirmed SMS-enabled phone number.'));
  47                         common_hidden('sms', $user->sms);
  48                         common_hidden('carrier', $user->carrier);
  49                         common_element_end('p');
  50                         common_submit('remove', _('Remove'));
  51                 } else {
  52                         $confirm = $this->get_confirmation();
  53                         if ($confirm) {
  54                                 $carrier = Sms_carrier::staticGet($confirm->address_extra);
  55                                 common_element_start('p');
  56                                 common_element('span', 'address unconfirmed', $confirm->address . ' (' . $carrier->name . ')');
  57                                 common_element('span', 'input_instructions',
  58                                                            _('Awaiting confirmation on this phone number.'));
  59                                 common_hidden('sms', $confirm->address);
  60                                 common_hidden('carrier', $confirm->address_extra);
  61                                 common_element_end('p');
  62                                 common_submit('cancel', _('Cancel'));
  63                                 common_input('code', _('Confirmation code'), NULL,
  64                                                          _('Enter the code you received on your phone.'));
  65                                 common_submit('confirm', _('Confirm'));
  66                         } else {
  67                                 common_input('sms', _('SMS Phone number'),
  68                                                          ($this->arg('sms')) ? $this->arg('sms') : NULL,
  69                                                          _('Phone number, no punctuation or spaces, with area code'));
  70                                 $this->carrier_select();
  71                                 common_submit('add', _('Add'));
  72                         }
  73                 }
  74
  75                 if ($user->sms) {
  76                         common_element('h2', NULL, _('Incoming email'));
  77
  78                         if ($user->incomingemail) {
  79                                 common_element_start('p');
  80                                 common_element('span', 'address', $user->incomingemail);
  81                                 common_element('span', 'input_instructions',
  82                                                            _('Send email to this address to post new notices.'));
  83                                 common_element_end('p');
  84                                 common_submit('removeincoming', _('Remove'));
  85                         }
  86
  87                         common_element_start('p');
  88                         common_element('span', 'input_instructions',
  89                                                    _('Make a new email address for posting to; cancels the old one.'));
  90                         common_element_end('p');
  91                         common_submit('newincoming', _('New'));
  92                 }
  93
  94                 common_element('h2', NULL, _('Preferences'));
  95
  96                 common_checkbox('smsnotify',
  97                                                 _('Send me notices through SMS; I understand I may incur exorbitant charges from my carrier.'),
  98                                                 $user->smsnotify);
  99
 100                 common_submit('save', _('Save'));
 101
 102                 common_element_end('form');
 103                 common_show_footer();
 104         }
 105
 106         function get_confirmation() {
 107                 $user = common_current_user();
 108                 $confirm = new Confirm_address();
 109                 $confirm->user_id = $user->id;
 110                 $confirm->address_type = 'sms';
 111                 if ($confirm->find(TRUE)) {
 112                         return $confirm;
 113                 } else {
 114                         return NULL;
 115                 }
 116         }
 117
 118         function handle_post() {
 119
 120                 # CSRF protection
 121
 122                 $token = $this->trimmed('token');
 123                 if (!$token || $token != common_session_token()) {
 124                         $this->show_form(_('There was a problem with your session token. Try again, please.'));
 125                         return;
 126                 }
 127
 128                 if ($this->arg('save')) {
 129                         $this->save_preferences();
 130                 } else if ($this->arg('add')) {
 131                         $this->add_address();
 132                 } else if ($this->arg('cancel')) {
 133                         $this->cancel_confirmation();
 134                 } else if ($this->arg('remove')) {
 135                         $this->remove_address();
 136                 } else if ($this->arg('removeincoming')) {
 137                         $this->remove_incoming();
 138                 } else if ($this->arg('newincoming')) {
 139                         $this->new_incoming();
 140                 } else if ($this->arg('confirm')) {
 141                         $this->confirm_code();
 142                 } else {
 143                         $this->show_form(_('Unexpected form submission.'));
 144                 }
 145         }
 146
 147         function save_preferences() {
 148
 149                 $smsnotify = $this->boolean('smsnotify');
 150
 151                 $user = common_current_user();
 152
 153                 assert(!is_null($user)); # should already be checked
 154
 155                 $user->query('BEGIN');
 156
 157                 $original = clone($user);
 158
 159                 $user->smsnotify = $smsnotify;
 160
 161                 $result = $user->update($original);
 162
 163                 if ($result === FALSE) {
 164                         common_log_db_error($user, 'UPDATE', __FILE__);
 165                         common_server_error(_('Couldn\'t update user.'));
 166                         return;
 167                 }
 168
 169                 $user->query('COMMIT');
 170
 171                 $this->show_form(_('Preferences saved.'), true);
 172         }
 173
 174         function add_address() {
 175
 176                 $user = common_current_user();
 177
 178                 $sms = $this->trimmed('sms');
 179                 $carrier_id = $this->trimmed('carrier');
 180
 181                 # Some validation
 182
 183                 if (!$sms) {
 184                         $this->show_form(_('No phone number.'));
 185                         return;
 186                 }
 187
 188                 if (!$carrier_id) {
 189                         $this->show_form(_('No carrier selected.'));
 190                         return;
 191                 }
 192
 193                 $sms = common_canonical_sms($sms);
 194
 195                 if ($user->sms == $sms) {
 196                     $this->show_form(_('That is already your phone number.'));
 197                     return;
 198                 } else if ($this->sms_exists($sms)) {
 199                     $this->show_form(_('That phone number already belongs to another user.'));
 200                     return;
 201                 }
 202
 203                 $confirm = new Confirm_address();
 204                 $confirm->address = $sms;
 205                 $confirm->address_extra = $carrier_id;
 206                 $confirm->address_type = 'sms';
 207                 $confirm->user_id = $user->id;
 208                 $confirm->code = common_confirmation_code(40);
 209
 210                 $result = $confirm->insert();
 211
 212                 if ($result === FALSE) {
 213                         common_log_db_error($confirm, 'INSERT', __FILE__);
 214                         common_server_error(_('Couldn\'t insert confirmation code.'));
 215                         return;
 216                 }
 217
 218                 $carrier = Sms_carrier::staticGet($carrier_id);
 219
 220                 mail_confirm_sms($confirm->code,
 221                                                  $user->nickname,
 222                                                  $carrier->toEmailAddress($sms));
 223
 224                 $msg = _('A confirmation code was sent to the phone number you added. Check your inbox (and spam box!) for the code and instructions on how to use it.');
 225
 226                 $this->show_form($msg, TRUE);
 227         }
 228
 229         function cancel_confirmation() {
 230
 231                 $sms = $this->trimmed('sms');
 232                 $carrier = $this->trimmed('carrier');
 233
 234                 $confirm = $this->get_confirmation();
 235
 236                 if (!$confirm) {
 237                         $this->show_form(_('No pending confirmation to cancel.'));
 238                         return;
 239                 }
 240                 if ($confirm->address != $sms) {
 241                         $this->show_form(_('That is the wrong confirmation number.'));
 242                         return;
 243                 }
 244
 245         $result = $confirm->delete();
 246
 247         if (!$result) {
 248                         common_log_db_error($confirm, 'DELETE', __FILE__);
 249             $this->server_error(_('Couldn\'t delete email confirmation.'));
 250             return;
 251         }
 252
 253         $this->show_form(_('Confirmation cancelled.'), TRUE);
 254         }
 255
 256         function remove_address() {
 257
 258                 $user = common_current_user();
 259                 $sms = $this->arg('sms');
 260                 $carrier = $this->arg('carrier');
 261
 262                 # Maybe an old tab open...?
 263
 264                 if ($user->sms != $sms) {
 265                     $this->show_form(_('That is not your phone number.'));
 266                     return;
 267                 }
 268
 269                 $user->query('BEGIN');
 270                 $original = clone($user);
 271                 $user->sms = NULL;
 272                 $user->carrier = NULL;
 273                 $user->smsemail = NULL;
 274                 $result = $user->updateKeys($original);
 275                 if (!$result) {
 276                         common_log_db_error($user, 'UPDATE', __FILE__);
 277                         common_server_error(_('Couldn\'t update user.'));
 278                         return;
 279                 }
 280                 $user->query('COMMIT');
 281
 282                 $this->show_form(_('The address was removed.'), TRUE);
 283         }
 284
 285         function sms_exists($sms) {
 286                 $user = common_current_user();
 287                 $other = User::staticGet('sms', $sms);
 288                 if (!$other) {
 289                         return false;
 290                 } else {
 291                         return $other->id != $user->id;
 292                 }
 293         }
 294
 295         function carrier_select() {
 296                 $carrier = new Sms_carrier();
 297                 $cnt = $carrier->find();
 298
 299                 common_element_start('p');
 300                 common_element('label', array('for' => 'carrier'));
 301                 common_element_start('select', array('name' => 'carrier',
 302                                                                                          'id' => 'carrier'));
 303                 common_element('option', array('value' => 0),
 304                                            _('Select a carrier'));
 305                 while ($carrier->fetch()) {
 306                         common_element('option', array('value' => $carrier->id),
 307                                                    $carrier->name);
 308                 }
 309                 common_element_end('select');
 310                 common_element_end('p');
 311                 common_element('span', 'input_instructions',
 312                                            sprintf(_('Mobile carrier for your phone. '.
 313                                                                  'If you know a carrier that accepts ' .
 314                                                                  'SMS over email but isn\'t listed here, ' .
 315                                                                  'send email to let us know at %s.'),
 316                                                            common_config('site', 'email')));
 317         }
 318
 319         function confirm_code() {
 320
 321                 $code = $this->trimmed('code');
 322
 323                 if (!$code) {
 324                         $this->show_form(_('No code entered'));
 325                         return;
 326                 }
 327
 328                 common_redirect(common_local_url('confirmaddress',
 329                                                                                  array('code' => $code)));
 330         }
 331 }