Invision Power Services, Inc. * @copyright (c) Invision Power Services, Inc. * @license https://www.invisioncommunity.com/legal/standards/ * @package Invision Community * @since 11 Mar 2017 */ namespace IPS\core\modules\admin\members; /* To prevent PHP errors (extending class does not exist) revealing path */ if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) ) { header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' ); exit; } /** * Device Tools */ class _devices extends \IPS\Dispatcher\Controller { /** * Execute * * @return void */ public function execute() { \IPS\Dispatcher::i()->checkAcpPermission( 'membertools_ip' ); return parent::execute(); } /** * View Device Details * * @return void */ protected function device() { /* Load */ $member = \IPS\Member::load( \IPS\Request::i()->member ); try { $device = \IPS\Member\Device::loadAndAuthenticate( \IPS\Request::i()->key, $member ); } catch ( \OutOfRangeException $e ) { \IPS\Output::i()->error( 'node_error', '2C355/1', 404, '' ); } $url = \IPS\Http\Url::internal( "app=core&module=members&controller=devices&do=device&key={$device->device_key}&member={$member->member_id}" ); /* Set title and breadcrumb */ $userAgent = $device->userAgent(); \IPS\Output::i()->title = \IPS\Member::loggedIn()->language()->addToStack( 'member_names_device', FALSE, array( 'sprintf' => array( $member->name, $userAgent->platform ) ) ); \IPS\Output::i()->breadcrumb[] = array( \IPS\Http\Url::internal( "app=core&module=members&controller=members" ), 'members' ); \IPS\Output::i()->breadcrumb[] = array( \IPS\Http\Url::internal( "app=core&module=members&controller=members&do=edit&id={$member->member_id}" ), $member->name ); \IPS\Output::i()->breadcrumb[] = array( \IPS\Http\Url::internal( "app=core&module=members&controller=devices&do=member&id={$member->member_id}" ), 'members_devices' ); \IPS\Output::i()->breadcrumb[] = array( NULL, $userAgent ); /* Define table */ $activeTabContents = ''; $tabs = array( 'info' => 'device_info', 'member' => \IPS\Member::loggedIn()->language()->addToStack( 'device_ips_from_member', FALSE, array( 'sprintf' => array( $member->name ) ) ), 'others' => 'device_other_members' ); $activeTab = ( isset( \IPS\Request::i()->tab ) and array_key_exists( \IPS\Request::i()->tab, $tabs ) ) ? \IPS\Request::i()->tab : 'info'; if ( $activeTab === 'info' ) { $activeTabContents = \IPS\Theme::i()->getTemplate( 'members' )->deviceInfo( $device ); } elseif ( $activeTab === 'member' ) { $table = new \IPS\Helpers\Table\Db( 'core_members_known_ip_addresses', $url->setQueryString( 'tab', 'member' ), array( 'device_key=? AND member_id=?', $device->device_key, $member->member_id ) ); $table->langPrefix = 'device_table_'; $table->include = array( 'ip_address', 'location', 'last_seen' ); $table->sortBy = $table->sortBy ?: 'last_seen'; $table->parsers = array( 'location' => function( $val, $row ) { try { return \IPS\GeoLocation::getByIp( $row['ip_address'] ); } catch ( \BadFunctionCallException $e ) { return \IPS\Member::loggedIn()->language()->addToStack('geolocation_enable_service'); } catch ( \Exception $e ) { return \IPS\Member::loggedIn()->language()->addToStack('unknown'); } }, 'last_seen' => function( $val ) { return \IPS\DateTime::ts( $val ); } ); $table->rowButtons = function( $row ) { return array( 'view' => array( 'title' => 'view', 'icon' => 'search', 'link' => \IPS\Http\Url::internal( 'app=core&module=members&controller=ip' )->setQueryString( 'ip', $row['ip_address'] ), ), ); }; $activeTabContents = \IPS\Theme::i()->getTemplate( 'forms' )->blurb( \IPS\Member::loggedIn()->language()->addToStack( 'device_ips_from_member_info', FALSE, array( 'sprintf' => array( $member->name, \IPS\Http\Url::internal( "app=core&module=members&controller=members&do=ip&id={$member->member_id}" ) ) ) ), TRUE, TRUE ) . $table . \IPS\Theme::i()->getTemplate( 'members' )->geoipDisclaimer(); } else { $table = new \IPS\Helpers\Table\Db( 'core_members_known_devices', $url->setQueryString( 'tab', 'others' ), array( 'device_key=? AND member_id<>?', $device->device_key, $member->member_id ) ); $table->langPrefix = 'device_table_'; $table->include = array( 'member_id', 'last_seen' ); $table->sortBy = $table->sortBy ?: 'last_seen'; $table->parsers = array( 'member_id' => function( $val ) { $member = \IPS\Member::load( $val ); if ( $member->member_id ) { return \IPS\Theme::i()->getTemplate( 'global', 'core' )->userPhoto( $member, 'tiny' ) . \IPS\Theme::i()->getTemplate( 'global', 'core' )->userLink( $member, 'tiny' ); } else { return \IPS\Member::loggedIn()->language()->addToStack('deleted_member'); } }, 'last_seen' => function( $val ) { return \IPS\DateTime::ts( $val ); } ); $table->rowButtons = function( $row ) { return array( 'view' => array( 'title' => 'view', 'icon' => 'search', 'link' => \IPS\Http\Url::internal( 'app=core&module=members&controller=members&do=edit' )->setQueryString( 'id', $row['member_id'] ), ), ); }; $activeTabContents = \IPS\Theme::i()->getTemplate( 'forms' )->blurb( 'device_other_members_info', TRUE, TRUE ) . $table; } if( \IPS\Request::i()->isAjax() ) { \IPS\Output::i()->output = $activeTabContents; } else { if ( $device->login_key ) { \IPS\Output::i()->sidebar['actions']['deauthorize'] = array( 'icon' => 'times', 'title' => 'sign_out', 'link' => \IPS\Http\Url::internal( "app=core&module=members&controller=devices&do=deauthorize" )->setQueryString( array( 'device' => $device->device_key, 'member' => $member->member_id, 'r' => 'device' ) ) ); } \IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'global' )->tabs( $tabs, $activeTab, $activeTabContents, $url ); } } /** * View Devices used by a member * * @return void */ protected function member() { /* Load */ $member = \IPS\Member::load( \IPS\Request::i()->id ); if ( !$member->member_id ) { \IPS\Output::i()->error( 'node_error', '2C355/1', 404, '' ); } /* Build table */ $table = new \IPS\Helpers\Table\Db( 'core_members_known_devices', \IPS\Http\Url::internal("app=core&module=members&controller=devices&do=member&id={$member->member_id}"), array( 'member_id=?', $member->member_id ) ); $table->langPrefix = 'device_table_'; $table->include = array( 'user_agent', 'login_key', 'login_handler', 'last_seen', 'other_members' ); $table->noSort = array( 'login_key', 'other_members' ); $table->sortBy = $table->sortBy ?: 'last_seen'; $table->parsers = array( 'user_agent' => function( $val ) { return (string) \IPS\Http\UserAgent::parse( $val ); }, 'login_key' => function( $val, $row ) { return \IPS\Theme::i()->getTemplate('members')->deviceAuthorization( (bool) $val, $row['last_seen'] >= ( new \IPS\DateTime )->sub( new \DateInterval( \IPS\Member\Device::LOGIN_KEY_VALIDITY ) )->getTimestamp(), $row['anonymous'] ); }, 'login_handler' => function( $val, $row ) { return \IPS\Theme::i()->getTemplate('members')->deviceHandler( $val ); }, 'last_seen' => function( $val ) { return \IPS\DateTime::ts( $val ); }, 'other_members' => function( $val, $row ) { if ( \IPS\Db::i()->select( 'COUNT(*)', 'core_members_known_devices', array( 'device_key=? AND member_id<>?', $row['device_key'], $row['member_id'] ) )->first() ) { return \IPS\Theme::i()->getTemplate('members')->deviceDuplicate(); } return ''; }, ); $table->rowButtons = function( $row ) { $return = array( 'view' => array( 'title' => 'view', 'icon' => 'search', 'link' => \IPS\Http\Url::internal( 'app=core&module=members&controller=devices&do=device' )->setQueryString( 'key', $row['device_key'] )->setQueryString( 'member', $row['member_id'] ), ), ); if ( $row['login_key'] ) { $return['deauthorize'] = array( 'title' => 'sign_out', 'icon' => 'times', 'link' => \IPS\Http\Url::internal( 'app=core&module=members&controller=devices&do=deauthorize' )->setQueryString( array( 'device' => $row['device_key'], 'member' => $row['member_id'] ) ), ); } return $return; }; /* Output */ \IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'members' )->deviceTable( $table ); \IPS\Output::i()->title = \IPS\Member::loggedIn()->language()->addToStack( 'member_names_devices', FALSE, array( 'sprintf' => array( $member->name ) ) ); \IPS\Output::i()->breadcrumb[] = array( \IPS\Http\Url::internal( "app=core&module=members&controller=members" ), 'members' ); \IPS\Output::i()->breadcrumb[] = array( \IPS\Http\Url::internal( "app=core&module=members&controller=members&do=edit&id={$member->member_id}" ), $member->name ); \IPS\Output::i()->breadcrumb[] = array( \IPS\Http\Url::internal( "app=core&module=members&controller=devices&do=member&id={$member->member_id}" ), 'members_devices' ); } /** * De-Authorize a Device * * @return void */ protected function deauthorize() { try { $device = \IPS\Member\Device::loadAndAuthenticate( \IPS\Request::i()->device, \IPS\Member::load( \IPS\Request::i()->member ) ); $device->login_key = NULL; $device->save(); \IPS\Db::i()->delete( 'core_sessions', array( 'member_id=? AND browser=?', $device->member_id, $device->user_agent ) ); } catch ( \Exception $e ) { } if ( isset( \IPS\Request::i()->r ) and \IPS\Request::i()->r === 'device' ) { \IPS\Output::i()->redirect( \IPS\Http\Url::internal("app=core&module=members&controller=devices&do=device")->setQueryString( array( 'key' => \IPS\Request::i()->device, 'member' => \IPS\Request::i()->member ) ) ); } else { \IPS\Output::i()->redirect( \IPS\Http\Url::internal("app=core&module=members&controller=devices&do=member")->setQueryString( 'id', \IPS\Request::i()->member ) ); } } }