src/Controller/DefaultController.php line 19

Open in your IDE?
  1. <?php
  3. /**
  4.  * This file is part of the Pimcore X Installation by
  5.  * ercas GmbH & CO. KG <https://www.ercasdieagentur.de>
  6.  *
  7.  *  @license GPLv3
  8.  */
  10. namespace App\Controller;
  12. use App\mvk\Model\DataObject\AbstractUser;
  13. use Pimcore\Controller\FrontendController;
  14. use Pimcore\Model\Document;
  15. use Pimcore\Model\WebsiteSetting;
  16. use Symfony\Component\HttpFoundation\RedirectResponse;
  17. use Symfony\Component\HttpFoundation\Request;
  19. class DefaultController extends FrontendController
  20. {
  21.     public function damageAction(Request $request)
  22.     {
  24.         return $this->render('layout/damage-declaration.html.twig', []);
  25.     }
  27.     public function defaultAction(Request $request)
  28.     {
  29.         $user = $this->getUser();
  30.         $documentId=$this->document->getId();
  32.         $excludedPaths = $this->getWebSettingValueMultiple('2FA_ignoreDocument');
  34.         if ($this->checkUrlRegex($request->getPathInfo()) && $user && $user instanceof AbstractUser && !$user->getTwoFactorAuth() && !$user->getSkipTwoFactorAuth()  && $user->getActive() && $documentId!=$this->getWebSettingValue('2FA_infoPageDocument') && $documentId!=$this->getWebSettingValue('2FA_vmVerification') && $documentId!=$this->getWebSettingValue('2FA_activationDocument') && !in_array($documentId, $excludedPaths)) {
  35.             $targetDocumentId = $user->getTwoFactorRequested() ? $this->getWebSettingValue('2FA_infoPageDocument') : $this->getWebSettingValue('2FA_activationRequiredDocument');
  37.             $targetDocument = Document::getById($targetDocumentId);
  39.             return new RedirectResponse($targetDocument->getFullPath());
  41.         }
  43.         $access= $this->checkPagePermissions();
  44.         if (!$access) {
  45.             $accessDeniedDocument = $this->getAccessDeniedDocument();
  46.             $baseUrl = '';
  48.             return new RedirectResponse($baseUrl.$accessDeniedDocument->getFullPath());
  49.         }
  51.         return $this->render('html/02_body/02_main/main.html.twig', []);
  52.     }
  54.     public function angularAction(Request $request)
  55.     {
  56.         $access= $this->checkPagePermissions();
  57.         if (!$access) {
  58.             $accessDeniedDocument = $this->getAccessDeniedDocument();
  59.             $baseUrl = '';
  61.             return new RedirectResponse($baseUrl.$accessDeniedDocument->getFullPath());
  62.         }
  64.         return $this->render('html/02_body/angular.html.twig', []);
  65.     }
  67.     public function mailAction(Request $request)
  68.     {
  69.         return $this->render('mail/mail.html.twig', []);
  70.     }
  72.     public function mailActionCustom(Request $request)
  73.     {
  74.         return $this->render('mail/custom-mail.html.twig', ['params'=>null]);
  75.     }
  77.     private function checkPagePermissions()
  78.     {
  80.         $permission= $this->document->getProperty('pagePermissions');
  81.         if ($permission && !$this->editmode) {
  82.             return  $this->isGranted($permission);
  83.         }
  85.         return true;
  86.     }
  88.     private function checkUrlRegex($url)
  89.     {
  91.         $patterns = 'admin|authentication|zwei-faktor|2fa_activation|2fa_qrcode_generate|2fa_code_verify';
  93.         $regex = '/' . $patterns. '/';
  95.         if (preg_match($regex, $url)) {
  96.             return false ;
  98.         } else {
  99.             return true;
  100.         }
  101.     }
  103.     private function getWebSettingValue($name)
  104.     {
  106.         $document = \Pimcore\Model\WebsiteSetting::getByName($name, null, null);
  107.         $document = $document ? $document->getData() : null ;
  109.         return $document ? $document->getId() : null;
  111.     }
  113.     private function getWebSettingValueMultiple($name)
  114.     {
  115.         $accessibleDocuments=[];
  117.         $websiteSettingList = new WebsiteSetting\Listing();
  118.         $websiteSettingList->setCondition(sprintf('%s = ? ', 'name'), $name);
  119.         foreach ($websiteSettingList->load() as $key => $websiteSetting) {
  120.             $websiteSettingData=WebsiteSetting::getById($websiteSetting->getId());
  121.             $accessibleDocument = $websiteSettingData ? $websiteSettingData->getData() : null ;
  122.             if ($accessibleDocument && $websiteSettingData->getType()=='document' && $websiteSettingData->getData()!='') {
  123.                 array_push($accessibleDocuments, $accessibleDocument->getId());
  124.             }
  126.         }
  128.         return $accessibleDocuments;
  130.     }
  132.     private function getAccessDeniedDocument()
  133.     {
  134.         if ($this->document->hasProperty('accessDeniedPage')) {
  136.             $accessDeniedDocId=$this->document->getProperty('accessDeniedPage')->getId();
  138.         } else {
  139.             $accessDeniedDocId=1;
  140.         }
  142.         return  Document::getById($accessDeniedDocId);
  143.     }
  144. }