Version 4.3.6

2025-12-19 05:49:12 -08:00
1 parent fe1acf984a
commit 1a0c7fd3c2
@@ -0,0 +1,100 @@
+<?php
+/**
+ * @brief		Facebook Authentication
+ * @author		<a href='https://www.invisioncommunity.com'>Invision Power Services, Inc.</a>
+ * @copyright	(c) Invision Power Services, Inc.
+ * @license		https://www.invisioncommunity.com/legal/standards/
+ * @package		Invision Community
+ * @since		09 August 2018
+ */
+
+namespace IPS\core\modules\front\system;
+
+/* To prevent PHP errors (extending class does not exist) revealing path */
+if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
+{
+	header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
+	exit;
+}
+
+/**
+ * Facebook auth for ACP
+ */
+class _facebook extends \IPS\Dispatcher\Controller
+{	
+	/**
+	 * View Announcement
+	 *
+	 * @return	void
+	 */
+	protected function manage()
+	{
+		if ( ! \IPS\Member::loggedIn()->member_id )
+		{
+			\IPS\Output::i()->redirect( \IPS\Http\Url::internal( "app=core&module=system&controller=login", 'front', 'login' )->setQueryString( 'ref', base64_encode( \IPS\Http\Url::internal( 'app=core&module=system&controller=facebook' ) ) ) );
+		}
+
+		$promote = \IPS\core\Promote::getPromoter( 'Facebook' );
+		$facebook = $promote::getLoginHandler();
+		$url = \IPS\Http\Url::internal( 'app=core&module=system&controller=facebook' );
+
+		try
+		{
+			/* Get a request token */
+			if ( !isset( \IPS\Request::i()->code ) )
+			{
+				$target = \IPS\Http\Url::external('https://www.facebook.com/dialog/oauth')->setQueryString( array(
+					'client_id'		=> $facebook->settings['client_id'],
+					'response_type'	=> 'code',
+					'redirect_uri'	=> (string) \IPS\Http\Url::internal( 'oauth/callback/', 'none' ),
+					'state'			=> $facebook->id . '-' . base64_encode( $url ) . '-' . \IPS\Session::i()->csrfKey . '-x',
+					'scope'			=> 'manage_pages publish_pages publish_to_groups'
+				) );
+			
+				\IPS\Output::i()->redirect( $target );
+			}
+			
+			/* CSRF Check */
+			if ( \IPS\Request::i()->csrfKey !== \IPS\Session::i()->csrfKey )
+			{
+				throw new \IPS\Login\Exception( 'CSRF_FAIL', \IPS\Login\Exception::INTERNAL_ERROR );
+			}
+			
+			/* Did we get an error? */
+			if ( isset( \IPS\Request::i()->error ) )
+			{
+				if ( \IPS\Request::i()->error === 'access_denied' )
+				{
+					return NULL;
+				}
+				else
+				{
+					\IPS\Log::log( print_r( $_GET, TRUE ), 'oauth' );
+					throw new \IPS\Login\Exception( 'generic_error', \IPS\Login\Exception::INTERNAL_ERROR );
+				}
+			}
+		
+			/* If we have a code, swap it for an access token, otherwise, decode what we have */
+			if ( isset( \IPS\Request::i()->code ) )
+			{
+				$accessToken = $facebook->exchangeMemberToken( \IPS\Request::i()->code );
+			}
+						
+			/* Store the settings */
+			$promote->saveSettings( array(
+				'member_token' => $accessToken
+			) );
+			
+			/* Show a done page */
+			\IPS\Output::i()->title = \IPS\Member::loggedIn()->language()->addToStack('promote_facebook_sorted');
+			\IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'promote' )->promoteFacebookComplete();
+				
+		}
+		catch ( \Exception $e )
+   		{
+   			\IPS\Log::log( $e, 'facebook_promote' );
+
+   			\IPS\Output::i()->error( 'generic_error', '4C375/1', 403, $e->getMessage() );
+   		}
+	}
+}