src/Controller/RegistrierungController.php line 627

  1. <?php
  3. namespace App\Controller;
  5. use App\AppHelper\Helper;
  6. use App\AppHelper\Settings;
  7. use App\Entity\EmailTemplates;
  8. use App\Entity\SentEmails;
  9. use App\Entity\SystemSettings;
  10. use App\Entity\User;
  11. use App\Entity\UserDetails;
  12. use App\Entity\UserRegister;
  13. use App\PhpMailer\Templates;
  14. use App\Services\SiteLogManager;
  15. use Doctrine\ORM\EntityManagerInterface;
  16. use ImagickException;
  17. use PHPMailer\PHPMailer\Exception;
  18. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  19. use Symfony\Component\Form\Extension\Core\Type\EmailType;
  20. use Symfony\Component\Form\Extension\Core\Type\PasswordType;
  21. use Symfony\Component\Form\Extension\Core\Type\RepeatedType;
  22. use Symfony\Component\Form\Extension\Core\Type\SubmitType;
  23. use Symfony\Component\Form\Extension\Core\Type\TextType;
  24. use Symfony\Component\HttpFoundation\Request;
  25. use Symfony\Component\HttpFoundation\RequestStack;
  26. use Symfony\Component\HttpFoundation\Response;
  27. use Symfony\Component\HttpKernel\KernelInterface;
  28. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  29. use Symfony\Component\Routing\Annotation\Route;
  30. use Symfony\Component\Uid\Ulid;
  31. use Symfony\Component\Uid\UuidV1;
  32. use Symfony\Component\Validator\Constraints\Email;
  33. use Symfony\Component\Validator\Constraints\Length;
  34. use Symfony\Component\Validator\Constraints\NotBlank;
  35. use Symfony\Component\Validator\Validator\ValidatorInterface;
  36. use Symfony\Contracts\Translation\TranslatorInterface;
  38. #[Route('/register', name: 'app_register')]
  39. class RegistrierungController extends AbstractController
  40. {
  41.     use Settings;
  43.     private array $site_settings;
  45.     public function __construct(
  46.         private readonly EntityManagerInterface $em,
  47.         private readonly KernelInterface        $kernel,
  48.         private RequestStack                    $requestStack,
  49.         private readonly TranslatorInterface    $translator,
  50.         private readonly SiteLogManager         $logger
  51.     )
  52.     {
  53.         $this->requestStack = $requestStack;
  54.         $this->site_settings = $this->em->getRepository(SystemSettings::class)->getSettings('site_settings')->record;
  55.     }
  57.     /**
  58.      * @throws Exception
  59.      * @throws ImagickException
  60.      */
  61.     #[Route('/registrierung', name: '_account_register')]
  62.     public function register_user(Request $request, UserPasswordHasherInterface $passEncoder, ValidatorInterface $validator): Response
  63.     {
  64.         $siteSettings = $this->em->getRepository(SystemSettings::class)->getSettings('site_settings')->record;
  65.         $emailSettings = $this->em->getRepository(SystemSettings::class)->getSettings('email_settings')->record;
  66.         $helper = Helper::instance();
  67.         if (!$siteSettings['registrierung_aktiv']) {
  68.             return $this->redirect($this->generateUrl('app_main'));
  69.         }
  71.         $regform = $this->createFormBuilder()
  72.             ->add('email', EmailType::class, [
  73.                 'constraints' => [new NotBlank(), new Email(
  74.                     [
  75.                         'message' => $this->translator->trans('profil.The email {{ value }} is not a valid email address.'),
  76.                         'mode' => 'strict',
  77.                     ]
  78.                 )],
  79.             ])
  80.             ->add('register_btn', SubmitType::class)
  81.             ->getForm();
  83.         if ($siteSettings['registrierung_option'] != 1) {
  84.             $regform->add('passwort', RepeatedType::class, [
  85.                 'type' => PasswordType::class,
  86.                 'required' => true,
  87.                 'constraints' => [new NotBlank(),
  88.                     new Length([
  89.                             'min' => 8,
  90.                             'minMessage' => $this->translator->trans('profil.The password must be at least {{ limit }} characters long'),
  91.                         ]
  92.                     )],
  93.                 'first_options' => [
  94.                     'label' => $this->translator->trans('profil.Password') . ' <sup class="small-lg">(min 8)</sup>',
  95.                     'label_html' => true,
  96.                     'row_attr' => [
  97.                         'class' => 'form-floating pe-xl-2 mb-3 col-xl-6 col-12'
  98.                     ],
  99.                     'attr' => [
  100.                         'class' => 'no-blur',
  101.                         'placeholder' => $this->translator->trans('profil.Password'),
  102.                         'min' => 8,
  103.                     ],
  104.                 ],
  105.                 'second_options' => [
  106.                     'label' => $this->translator->trans('profil.Repeat password') . ' <sup class="small-lg">(min 8)</sup>',
  107.                     'label_html' => true,
  108.                     'row_attr' => [
  109.                         'class' => 'form-floating ps-xl-2 mb-3 col-xl-6 col-12'
  110.                     ],
  111.                     'attr' => [
  112.                         'class' => 'no-blur',
  113.                         'placeholder' => $this->translator->trans('profil.Repeat password'),
  114.                     ],
  115.                 ],
  116.             ]);
  117.         }
  119.         if ($siteSettings['form_firma_option'] != 1) {
  120.             $siteSettings['form_firma_option'] == 2 ? $required = false : $required = true;
  121.             $regform->add('company', TextType::class, [
  122.                 'required' => $required
  123.             ]);
  124.         }
  125.         if ($siteSettings['form_title_option'] != 1) {
  126.             $siteSettings['form_title_option'] == 2 ? $required = false : $required = true;
  127.             $regform->add('title', TextType::class, [
  128.                 'required' => $required
  129.             ]);
  130.         }
  131.         if ($siteSettings['form_name_option'] != 1) {
  132.             $siteSettings['form_name_option'] == 2 ? $required = false : $required = true;
  133.             $regform
  134.                 ->add('first_name', TextType::class, [
  135.                     'required' => $required
  136.                 ])
  137.                 ->add('last_name', TextType::class, [
  138.                     'required' => $required
  139.                 ]);
  140.         }
  141.         if ($siteSettings['form_street_hnr_option'] != 1) {
  142.             $siteSettings['form_street_hnr_option'] == 2 ? $required = false : $required = true;
  143.             $regform
  144.                 ->add('street', TextType::class, [
  145.                     'required' => $required
  146.                 ])
  147.                 ->add('hnr', TextType::class, [
  148.                     'required' => $required
  149.                 ]);
  150.         }
  151.         if ($siteSettings['form_zip_city_option'] != 1) {
  152.             $siteSettings['form_zip_city_option'] == 2 ? $required = false : $required = true;
  153.             $regform
  154.                 ->add('zip', TextType::class, [
  155.                     'required' => $required
  156.                 ])
  157.                 ->add('country', TextType::class, [
  158.                     'required' => $required
  159.                 ]);
  160.         }
  161.         if ($siteSettings['form_telefon_option'] != 1) {
  162.             $siteSettings['form_telefon_option'] == 2 ? $required = false : $required = true;
  163.             $regform->add('phone', TextType::class, [
  164.                 'required' => $required
  165.             ]);
  166.         }
  167.         if ($siteSettings['form_mobil_option'] != 1) {
  168.             $siteSettings['form_mobil_option'] == 2 ? $required = false : $required = true;
  169.             $regform->add('mobil', TextType::class, [
  170.                 'required' => $required
  171.             ]);
  172.         }
  175.         $regform->handleRequest($request);
  176.         if ($regform->isSubmitted() && $regform->isValid()) {
  177.             $appAdmin = $this->em->getRepository(User::class)->findByRole('Admin');
  178.             if ($appAdmin) {
  179.                 $appAdmin = $appAdmin[0];
  180.             }
  182.             $daten = $regform->getData();
  183.             $checkEmail = $this->em->getRepository(User::class)->findOneBy(['email' => $daten['email']]);
  184.             if ($checkEmail) {
  185.                 $this->addFlash('reg-error', 'E-Mail-Adresse "<span class="fw-semibold">' . $daten['email'] . '</span>" schon vorhanden! ');
  186.                 return $this->render('registrierung/registrierung.html.twig', [
  187.                     'title' => $this->translator->trans('Registration'),
  188.                     'regForm' => $regform->createView(),
  189.                     'show' => true
  190.                 ]);
  191.             }
  192.             $user = new User();
  193.             $user->setRoles([$siteSettings['new_register_level']]);
  194.             $user->setEmail($daten['email']);
  195.             $user->setLocale('de_DE');
  196.             $user->setUuid(new UuidV1());
  197.             if ($siteSettings['registrierung_option'] == 1) {
  198.                 $daten['passwort'] = $helper->generate_callback_pw(16, 2, 6);
  199.             }
  201.             $user->setPassword(
  202.                 $passEncoder->hashPassword($user, $daten['passwort'])
  203.             );
  205.             if ($siteSettings['pw_leak_checker_aktiv']) {
  206.                 $user->setRawPassword($daten['passwort']);
  207.                 $errors = $validator->validate($user);
  208.                 if (count($errors) > 0) {
  209.                     foreach ($errors as $err) {
  210.                         $this->addFlash('reg-error', $err->getMessage());
  211.                     }
  213.                     return $this->render('registrierung/registrierung.html.twig', [
  214.                         'title' => $this->translator->trans('Registration'),
  215.                         'regForm' => $regform->createView(),
  216.                         'show' => true
  217.                     ]);
  218.                 }
  219.             }
  221.             $aktiv = true;
  222.             if ($siteSettings['registrierung_option'] != 4) {
  223.                 $aktiv = false;
  224.             }
  226.             $must_validated = false;
  227.             if ($siteSettings['registrierung_option'] == 3) {
  228.                 $must_validated = true;
  229.             }
  230.             $userDetails = new UserDetails();
  231.             $userDetails->setImgId(0);
  232.             $userDetails->setRegisterIp($request->getClientIp());
  234.             if ($siteSettings['form_firma_option'] != 1) {
  235.                 $userDetails->setCompany($daten['company']);
  236.             }
  237.             if ($siteSettings['form_title_option'] != 1) {
  238.                 $userDetails->setTitle($daten['title']);
  239.             }
  240.             if ($siteSettings['form_name_option'] != 1) {
  241.                 $userDetails->setFirstName($daten['first_name']);
  242.                 $userDetails->setLastName($daten['last_name']);
  243.             }
  244.             if ($siteSettings['form_street_hnr_option'] != 1) {
  245.                 $userDetails->setStreet($daten['street']);
  246.                 $userDetails->setHnr($daten['hnr']);
  247.             }
  248.             if ($siteSettings['form_zip_city_option'] != 1) {
  249.                 $userDetails->setZip($daten['zip']);
  250.                 $userDetails->setCountry($daten['country']);
  251.             }
  252.             if ($siteSettings['form_telefon_option'] != 1) {
  253.                 $userDetails->setPhone($daten['phone']);
  254.             }
  255.             if ($siteSettings['form_mobil_option'] != 1) {
  256.                 $userDetails->setMobil($daten['mobil']);
  257.             }
  258.             $userDetails->setAktiv($aktiv);
  259.             $userDetails->setChangePw(true);
  260.             $userDetails->setMustValidated($must_validated);
  262.             $user->setUserdetails($userDetails);
  263.             $this->em->persist($user);
  264.             $this->em->flush();
  266.             $clientSecret = $helper->generate_callback_pw(128, 0, 64);
  267.             $uuid = new Ulid();
  268.             $id = $uuid->toBase32();
  269.             $clientId = $helper->generate_identifier($id);
  270.             $redirectUris = ['http://localhost:8080/callback'];
  271.             $grantTypes = ['authorization_code', 'refresh_token', 'client_credentials'];
  272.             $scope = 'BASIC';
  273.             $oauth_aktiv = 1;
  274.             $conn = $this->em->getConnection();
  275.             try {
  276.                 $conn->insert('oauth2_client', [
  277.                     'identifier' => $clientId,
  278.                     'secret' => $clientSecret,
  279.                     'name' => $user->getEmail(),
  280.                     'redirect_uris' => implode(' ', $redirectUris),
  281.                     'grants' => implode(' ', $grantTypes),
  282.                     'scopes' =>$scope,
  283.                     'active' => $oauth_aktiv,
  284.                     'allow_plain_text_pkce' => 0,
  285.                 ]);
  286.             } catch (Exception $e){
  287.                 $this->em->remove($user);
  288.                 $this->em->flush();
  289.                 exit($e->getMessage());
  290.             }
  293.             if ($siteSettings['log_registrierung_aktiv']) {
  294.                 $msg = sprintf('neue Registrierung: User: %s | IP: %s', $user->getEmail(), $userDetails->getRegisterIp());
  295.                 $this->logger->log_message('registrierung', $msg);
  296.             }
  298.             $flashMessage = '';
  299.             if ($siteSettings['registrierung_option'] == 3) {
  300.                 $flashMessage = '<p>Vielen Dank für die Registrierung. Ihr Account wird nach einer Überprüfung <b>aktiviert</b>. Viel Spaß und Erfolg auf unseren Seiten.</p>';
  301.                 if ($emailSettings['smtp_aktiv'] && $siteSettings['send_notification_aktiv'] && $siteSettings['notifications_email'] && $siteSettings['template_aktivierungs_link']) {
  302.                     $newUser = $this->em->getRepository(User::class)->getUserProfil($user->getId());
  303.                     $newUser = $helper->arrayToObject($newUser);
  304.                     $newUser->signature_id = $siteSettings['signature_aktivierungs_link'];
  305.                     $newUser->template_id = $siteSettings['template_aktivierungs_link'];
  306.                     $newUser->send_to_email = $siteSettings['notifications_email'];
  307.                     $newUser->register_time = date('d.m.Y') . ' um ' . date('H:i:s') . ' Uhr';
  308.                     $newUser->clean_passwort = $daten['passwort'];
  309.                     $newUser->betreff = 'neue Anmeldung';
  310.                     $sendEmail = new Templates($this->em, $this->kernel, $this->logger);
  311.                     $sendEmail->send_email_template($newUser, $request);
  313.                     if ($emailSettings['email_save_confirmation_admin']) {
  314.                         if ($appAdmin) {
  315.                             $admin_id = $appAdmin->getId();
  316.                         } else {
  317.                             $admin_id = 1;
  318.                         }
  319.                         $emailTemplate = $this->em->getRepository(EmailTemplates::class)->find((int)$siteSettings['template_aktivierungs_link']);
  320.                         $saveContent = $sendEmail->placeholder_data(html_entity_decode($emailTemplate->getContent()), $newUser, $request);
  321.                         $saveEmail = new SentEmails();
  322.                         $saveEmail->setUserId($admin_id);
  323.                         $saveEmail->setType('system');
  324.                         $saveEmail->setSendFrom('system@app.de');
  325.                         $saveEmail->setSendTo($siteSettings['notifications_email']);
  326.                         $saveEmail->setBetreff($newUser->betreff);
  327.                         $saveEmail->setContent($helper->escape($saveContent['template']));
  328.                         $saveEmail->setIfShow(false);
  329.                         $this->em->persist($saveEmail);
  330.                         $this->em->flush();
  331.                     }
  332.                 }
  333.             }
  335.             if ($siteSettings['registrierung_option'] == 1 || $siteSettings['registrierung_option'] == 2) {
  336.                 $helper = Helper::instance();
  337.                 $sendCode = $helper->generate_callback_pw(32, 0, 16);
  338.                 $userRegister = new UserRegister();
  339.                 $userRegister->setUserId($user->getId());
  340.                 $userRegister->setRegistercode(sha1($sendCode));
  342.                 if ($emailSettings['smtp_aktiv'] && $siteSettings['notifications_email'] && $siteSettings['template_aktivierungs_link']) {
  343.                     $newUser = $this->em->getRepository(User::class)->getUserProfil($user->getId());
  344.                     $newUser = $helper->arrayToObject($newUser);
  346.                     if ($siteSettings['registrierung_option'] == 1) {
  347.                         $newUser->signature_id = $siteSettings['signature_pw_link'];
  348.                         $newUser->template_id = $siteSettings['template_pw_link'];
  349.                         $linkTime = $siteSettings['passwort_erstellen_link_time'];
  350.                         $uri = sprintf('%s/register/%s/passwort-erstellen', $helper->get_base_url($request), $sendCode);
  351.                         $newUser->register_passwort_link = $uri;
  352.                         $userRegister->setCodeTime(strtotime(sprintf("+%d hour", $linkTime)));
  353.                         $flashMessage = '<h5 class="card-title">Vielen Dank für Ihre Registrierung</h5>
  354.                                <hr>
  355.                                <p class="card-text px-5">
  356.                                 Ein Link zum Passwort erstellen wurde Ihnen per <b>E-Mail</b> gesendet.<br>
  357.                                 Sollten Sie keine E-Mail bekommen, überprüfen Sie Ihren Spam-Ordner!
  358.                                 </p>
  359.                                 <hr>
  360.                                 <div class="card-footer text-muted">
  361.                                 Der Link zum Passwort erstellen ist bis <b>' . date("d.m.Y H:i", strtotime(sprintf("+%d hour", $linkTime))) . ' Uhr</b>
  362.                                 gültig.
  363.                                 </div>';
  364.                     }
  366.                     if ($siteSettings['registrierung_option'] == 2) {
  367.                         $newUser->signature_id = $siteSettings['signature_aktivierungs_link'];
  368.                         $newUser->template_id = $siteSettings['template_aktivierungs_link'];
  369.                         $linkTime = $siteSettings['aktivierungs_link_time'];
  370.                         $uri = sprintf('%s/register/%s/activate', $helper->get_base_url($request), $sendCode);
  371.                         $newUser->aktivierungs_link = $uri;
  372.                         $userRegister->setCodeTime(strtotime(sprintf("+%d hour", $linkTime)));
  373.                         $flashMessage = '<h5 class="card-title">Vielen Dank für Ihre Registrierung</h5>
  374.                                <hr>
  375.                                <p class="card-text px-5">
  376.                                 Ein Bestätigungslink wurde Ihnen per <b>E-Mail</b> gesendet.<br>
  377.                                 Bitte <b>bestätigen</b> Sie diesen Link! Sollten Sie keine
  378.                                 E-Mail bekommen, überprüfen Sie Ihren Spam-Ordner!
  379.                                 </p>
  380.                                 <hr>
  381.                                 <div class="card-footer text-muted">
  382.                                 Der Bestätigungslink ist bis <b>' . date("d.m.Y H:i", strtotime(sprintf("+%d hour", $linkTime))) . ' Uhr</b>
  383.                                 gültig.
  384.                                 </div>';
  385.                     }
  387.                     $userRegister->setIsNew(1);
  388.                     $user->setRegister($userRegister);
  389.                     $this->em->persist($user);
  390.                     $this->em->flush();
  392.                     $newUser->send_to_email = $user->getEmail();
  393.                     $newUser->register_time = date('d.m.Y') . ' um ' . date('H:i:s') . ' Uhr';
  394.                     $newUser->clean_passwort = $daten['passwort'];
  395.                     $newUser->link_ablauf_zeit = date('d.m.Y', $userRegister->getCodeTime()) . ' um ' . date('H:i', $userRegister->getCodeTime());
  397.                     $sendEmail = new Templates($this->em, $this->kernel, $this->logger);
  398.                     $sendEmail->send_email_template($newUser, $request);
  400.                     if ($siteSettings['send_notification_aktiv']) {
  401.                         $newUser->betreff = 'neue Anmeldung';
  402.                         $newUser->send_to_email = $siteSettings['notifications_email'];
  403.                         $sendEmail = new Templates($this->em, $this->kernel, $this->logger);
  404.                         $sendEmail->send_email_template($newUser, $request);
  405.                     }
  407.                     if ($emailSettings['email_save_confirmation']) {
  408.                         if ($appAdmin) {
  409.                             $admin_id = $appAdmin->getId();
  410.                         } else {
  411.                             $admin_id = 1;
  412.                         }
  413.                         $template = $siteSettings['template_aktivierungs_link'];
  414.                         if ($siteSettings['registrierung_option'] == 1) {
  415.                             $template = $siteSettings['template_pw_link'];
  416.                         }
  417.                         $emailTemplate = $this->em->getRepository(EmailTemplates::class)->find((int)$template);
  418.                         $saveContent = $sendEmail->placeholder_data(html_entity_decode($emailTemplate->getContent()), $newUser, $request);
  419.                         $content = str_replace('[signature]', '', $helper->escape($saveContent['template']));
  420.                         $setEmail = strtolower($helper->generate_callback_pw(6, 0, 3));
  421.                         $saveEmail = new SentEmails();
  422.                         $saveEmail->setUserId($admin_id);
  423.                         $saveEmail->setType('system');
  424.                         $saveEmail->setSendFrom(sprintf('%s@app.de', $setEmail));
  425.                         $saveEmail->setSendTo($user->getEmail());
  426.                         $saveEmail->setBetreff($emailTemplate->getSubject());
  427.                         $saveEmail->setContent($content);
  428.                         $saveEmail->setIfShow(false);
  429.                         $this->em->persist($saveEmail);
  430.                         $this->em->flush();
  431.                     }
  432.                 }
  433.             }
  434.             if (!$siteSettings['registrierung_option'] == 4) {
  435.                 $flashMessage = '<p>Vielen Dank für die Registrierung. Ihr Account wurde <b>aktiviert</b>. Viel Spaß und Erfolg auf unseren Seiten.</p>';
  436.             }
  438.             $this->addFlash('reg-success', $flashMessage);
  439.             return $this->render('registrierung/registrierung.html.twig', [
  440.                 'title' => $this->translator->trans('Registration'),
  441.                 'show' => false
  442.             ]);
  443.         }
  444.         return $this->render('registrierung/registrierung.html.twig', [
  445.             'title' => $this->translator->trans('Registration'),
  446.             'regForm' => $regform->createView(),
  447.             'show' => true
  448.         ]);
  449.     }
  451.     #[Route('/{hash}/passwort-erstellen', name: '_app_email_passwort_erstellen')]
  452.     public function activate_by_passwort_erstellen(Request $request, UserPasswordHasherInterface $passEncoder, ValidatorInterface $validator): Response
  453.     {
  454.         $hash = $request->get('hash');
  455.         $sshHash = sha1($hash);
  456.         $regUser = $this->em->getRepository(UserRegister::class)->findOneBy(['registercode' => $sshHash]);
  457.         if (!$regUser) {
  458.             $errMsg = $this->translator->trans('system.The <b>link</b> is no longer valid. Contact the <b>administrator!</b>');
  459.             $this->addFlash('pw-create-error', $errMsg);
  460.             return $this->render('registrierung/formular-passwort-erstellen.html.twig', [
  461.                 'title' => $this->translator->trans('profil.Create password'),
  462.                 'name' => '',
  463.                 'show' => false
  464.             ]);
  465.         }
  467.         $regform = $this->createFormBuilder()
  468.             ->add('email', EmailType::class, [
  469.                 'constraints' => [new NotBlank(), new Email(
  470.                     [
  471.                         'message' => $this->translator->trans('profil.The email {{ value }} is not a valid email address.'),
  472.                         'mode' => 'strict',
  473.                     ]
  474.                 )],
  475.                 'attr' => array(
  476.                     'autofocus' => true
  477.                 )
  478.             ])
  479.             ->add('passwort', RepeatedType::class, [
  480.                 'type' => PasswordType::class,
  481.                 'required' => true,
  482.                 'constraints' => [new NotBlank(),
  483.                     new Length([
  484.                             'min' => 8,
  485.                             'minMessage' => $this->translator->trans('profil.The password must be at least {{ limit }} characters long'),
  486.                         ]
  487.                     )],
  488.                 'first_options' => [
  489.                     'label' => $this->translator->trans('profil.Password') . ' <sup class="small-lg">(min 8)</sup>',
  490.                     'label_html' => true,
  491.                     'row_attr' => [
  492.                         'class' => 'form-floating mb-3'
  493.                     ],
  494.                     'attr' => [
  495.                         'class' => 'no-blur',
  496.                         'placeholder' => $this->translator->trans('profil.Password'),
  497.                         'min' => 8,
  498.                     ],
  499.                 ],
  500.                 'second_options' => [
  501.                     'label' => $this->translator->trans('profil.Repeat password') . ' <sup class="small-lg">(min 8)</sup>',
  502.                     'label_html' => true,
  503.                     'row_attr' => [
  504.                         'class' => 'form-floating mb-3'
  505.                     ],
  506.                     'attr' => [
  507.                         'class' => 'no-blur',
  508.                         'placeholder' => $this->translator->trans('profil.Repeat password'),
  509.                     ],
  510.                 ],
  511.             ])
  512.             ->add('register_btn', SubmitType::class, [
  513.                 'label' => '<i class="bi bi-incognito me-2"></i>' . $this->translator->trans('profil.Create password'),
  514.                 'row_attr' => [
  515.                     'class' => 'mb-0'
  516.                 ],
  517.             ])
  518.             ->getForm();
  520.         $regform->handleRequest($request);
  521.         if ($regform->isSubmitted() && $regform->isValid()) {
  522.             $siteSettings = $this->em->getRepository(SystemSettings::class)->getSettings('site_settings')->record;
  523.             $daten = $regform->getData();
  524.             $regUser->getUser()->setPassword(
  525.                 $passEncoder->hashPassword($regUser->getUser(), $daten['passwort'])
  526.             );
  528.             if ($siteSettings['pw_leak_checker_aktiv']) {
  529.                 $regUser->getUser()->setRawPassword($daten['passwort']);
  530.                 $errors = $validator->validate($regUser->getUser());
  531.                 if (count($errors) > 0) {
  532.                     foreach ($errors as $err) {
  533.                         $this->addFlash('pw-create-error', $err->getMessage());
  534.                     }
  535.                     return $this->render('registrierung/formular-passwort-erstellen.html.twig', [
  536.                         'title' => $this->translator->trans('profil.Create password'),
  537.                         'name' => $regUser->getUser()->getUserdetails()->getFirstName() . ' ' . $regUser->getUser()->getUserdetails()->getLastName(),
  538.                         'show' => true,
  539.                         'createPwForm' => $regform->createView()
  540.                     ]);
  541.                 }
  542.             }
  544.             $regUser->getUser()->getUserdetails()->setAktiv(true);
  546.             $regUser->setRegistercode('');
  547.             $regUser->setCodeTime('');
  548.             $this->em->persist($regUser);
  549.             $this->em->flush();
  551.             $msg = $this->translator->trans('system.The password was successfully saved and the account was activated.');
  552.             $this->addFlash('pw-create-success', $msg);
  553.             if ($siteSettings['log_passwort_erstellt_aktiv']) {
  554.                 $msg = sprintf('Passwort erstellt: User: %s', $regUser->getUser()->getEmail());
  555.                 $this->logger->log_message('registrierung', $msg);
  556.             }
  557.             return $this->render('registrierung/formular-passwort-erstellen.html.twig', [
  558.                 'title' => $this->translator->trans('profil.Create password'),
  559.                 'name' => $regUser->getUser()->getUserdetails()->getFirstName() . ' ' . $regUser->getUser()->getUserdetails()->getLastName(),
  560.                 'show' => false
  561.             ]);
  562.         }
  564.         return $this->render('registrierung/formular-passwort-erstellen.html.twig', [
  565.             'title' => $this->translator->trans('profil.Create password'),
  566.             'name' => $regUser->getUser()->getUserdetails()->getFirstName() . ' ' . $regUser->getUser()->getUserdetails()->getLastName(),
  567.             'show' => true,
  568.             'createPwForm' => $regform->createView()
  569.         ]);
  570.     }
  572.     #[Route('/{hash}/activate', name: '_app_email_user_activate')]
  573.     public function activate_by_hash(Request $request): Response
  574.     {
  576.         $hash = $request->get('hash');
  577.         $sshHash = sha1($hash);
  578.         $regUser = $this->em->getRepository(UserRegister::class)->findOneBy(['registercode' => $sshHash]);
  579.         if (!$regUser) {
  580.             $errMsg = $this->translator->trans('system.The <b>unlock</b> code is <b>no longer valid</b>. Please register again.');
  581.             $this->addFlash('validate-error', $errMsg);
  582.             return $this->render('registrierung/registrierung-activate.html.twig', [
  583.                 'title' => $this->translator->trans('system.Activate account'),
  584.                 'success' => false,
  585.             ]);
  586.         }
  588.         $siteSettings = $this->em->getRepository(SystemSettings::class)->getSettings('site_settings')->record;
  589.         $linkTime = $siteSettings['aktivierungs_link_time'];
  590.         $codeTime = $regUser->getCodeTime();
  591.         $time = strtotime(sprintf("%s +%s hour", date('d-m-Y H:i:s', $codeTime), $linkTime));
  592.         if ($time < time()) {
  593.             $errMsg = $this->translator->trans('system.The <b>link</b> is no longer valid. Contact the <b>administrator!</b>');
  594.             $this->addFlash('validate-error', $errMsg);
  595.             return $this->render('registrierung/registrierung-activate.html.twig', [
  596.                 'title' => $this->translator->trans('system.Activate account'),
  597.                 'success' => false,
  598.             ]);
  599.         }
  601.         $regUser->getUser()->getRegister()->setActivatedTime(time());
  602.         $regUser->getUser()->getRegister()->setRegistercode('');
  603.         $regUser->getUser()->getRegister()->setCodeTime('');
  604.         $regUser->getUser()->getUserdetails()->setAktiv(true);
  605.         $regUser->getUser()->getRegister()->setActivatedTime(time());
  606.         $regUser->getUser()->getRegister()->setRegistercode('');
  607.         $regUser->getUser()->getRegister()->setCodeTime('');
  608.         $this->em->persist($regUser);
  609.         $this->em->flush();
  611.         if ($siteSettings['log_konto_aktiviert_aktiv']) {
  612.             $msg = sprintf('Konto aktiviert - %s - E-Mail bestätigt', $regUser->getUser()->getEmail());
  613.             $this->logger->log_message('registrierung', $msg);
  614.         }
  616.         return $this->render('registrierung/registrierung-activate.html.twig', [
  617.             'title' => $this->translator->trans('Activate'),
  618.             'success' => true,
  619.         ]);
  620.     }
  622.     /**
  623.      * @throws Exception
  624.      * @throws ImagickException
  625.      */
  626.     #[Route('/passwort-vergessen', name: '_passwort_vergessen')]
  627.     public function passwort_vergessen(Request $request): Response
  628.     {
  629.         $siteSettings = $this->em->getRepository(SystemSettings::class)->getSettings('site_settings')->record;
  630.         $emailSettings = $this->em->getRepository(SystemSettings::class)->getSettings('email_settings')->record;
  631.         $helper = Helper::instance();
  632.         if (!$siteSettings['show_pw_vergessen']) {
  633.             return $this->redirect($this->generateUrl('app_main'));
  634.         }
  636.         $regform = $this->createFormBuilder()
  637.             ->add('email', EmailType::class, [
  638.                 'constraints' => [new NotBlank(), new Email(
  639.                     [
  640.                         'message' => $this->translator->trans('profil.The email {{ value }} is not a valid email address.'),
  641.                         'mode' => 'strict',
  642.                     ]
  643.                 )],
  644.                 'attr' => array(
  645.                     'autofocus' => true
  646.                 )
  647.             ])
  648.             ->add('register_btn', SubmitType::class, [
  649.                 'label' => '<i class="bi bi-envelope-plus me-2"></i>' . $this->translator->trans('Send email')
  650.             ])
  651.             ->getForm();
  653.         $emailTemplate = $this->em->getRepository(EmailTemplates::class)->find((int)$siteSettings['template_pw_vergessen']);
  655.         if (!$emailSettings['smtp_aktiv'] || !$emailTemplate) {
  656.             $errMsg = $this->translator->trans('system.At the moment this service cannot be performed.');
  657.             $this->addFlash('pw-forgot-error', $errMsg);
  658.             return $this->render('registrierung/passwort-vergessen.html.twig', [
  659.                 'title' => $this->translator->trans('Password forgotten'),
  660.                 'show' => false,
  661.                 'pwForm' => $regform->createView(),
  662.             ]);
  663.         }
  665.         $regform->handleRequest($request);
  666.         if ($regform->isSubmitted() && $regform->isValid()) {
  668.             $appAdmin = $this->em->getRepository(User::class)->findByRole('Admin');
  669.             if ($appAdmin) {
  670.                 $appAdmin = $appAdmin[0];
  671.             }
  673.             $daten = $regform->getData();
  674.             $user = $this->em->getRepository(User::class)->findOneBy(['email' => $daten['email']]);
  675.             if (!$user) {
  676.                 $this->addFlash('pw-forgot-error', $this->translator->trans('system.The e-mail address is not known.'));
  677.                 return $this->render('registrierung/passwort-vergessen.html.twig', [
  678.                     'title' => $this->translator->trans('Password forgotten'),
  679.                     'show' => true,
  680.                     'pwForm' => $regform->createView()
  681.                 ]);
  682.             }
  684.             $linkTime = $siteSettings['email_password_forgotten_time'];
  685.             $sendCode = $helper->generate_callback_pw(32, 0, 16);
  686.             $codeTime = strtotime(sprintf("+%d hour", $linkTime));
  687.             if (!$user->getRegister()) {
  688.                 $newRegisterCode = new UserRegister();
  689.                 $newRegisterCode->setCodeTime($codeTime);
  690.                 $newRegisterCode->setPasswordcode(sha1($sendCode));
  691.                 $newRegisterCode->setUserId($user->getId());
  692.                 $newRegisterCode->setIsNew(false);
  693.                 $user->setRegister($newRegisterCode);
  694.             } else {
  695.                 $user->getRegister()->setCodeTime($codeTime);
  696.                 $user->getRegister()->setPasswordcode(sha1($sendCode));
  697.                 $user->getRegister()->setUserId($user->getId());
  698.             }
  699.             $this->em->persist($user);
  700.             $this->em->flush();
  701.             $sendUser = $this->em->getRepository(User::class)->getUserProfil($user->getId());
  702.             $sendUser = $helper->arrayToObject($sendUser);
  703.             $sendUser->signature_id = $siteSettings['signature_pw_vergessen'];
  704.             $sendUser->template_id = $siteSettings['template_pw_vergessen'];
  705.             $sendUser->send_to_email = $user->getEmail();
  706.             $sendUser->link_ablauf_zeit = date('d.m.Y', $user->getRegister()->getCodeTime()) . ' um ' . date('H:i', $user->getRegister()->getCodeTime());
  707.             $uri = sprintf('%s/register/%s/passwort-vergessen', $helper->get_base_url($request), $sendCode);
  708.             $sendUser->passwort_vergessen_link = $uri;
  709.             $sendEmail = new Templates($this->em, $this->kernel, $this->logger);
  710.             $sendEmail->send_email_template($sendUser, $request);
  712.             if ($emailSettings['email_save_confirmation']) {
  713.                 if ($appAdmin) {
  714.                     $admin_id = $appAdmin->getId();
  715.                 } else {
  716.                     $admin_id = 1;
  717.                 }
  719.                 $saveContent = $sendEmail->placeholder_data(html_entity_decode($emailTemplate->getContent()), $sendUser, $request);
  720.                 $saveContent = str_replace('[signature]', '', $helper->escape($saveContent['template']));
  721.                 $saveEmail = new SentEmails();
  722.                 $saveEmail->setUserId($admin_id);
  723.                 $saveEmail->setType('system');
  724.                 $saveEmail->setSendFrom('system@app.de');
  725.                 $saveEmail->setSendTo($user->getEmail());
  726.                 $saveEmail->setBetreff($emailTemplate->getSubject());
  727.                 $saveEmail->setContent($saveContent);
  728.                 $saveEmail->setIfShow(false);
  729.                 $this->em->persist($saveEmail);
  730.                 $this->em->flush();
  732.                 if ($siteSettings['log_konto_aktiviert_aktiv']) {
  733.                     $msg = sprintf('Passwort vergessen - %s - E-Mail gesendet', $user->getEmail());
  734.                     $this->logger->log_message('registrierung', $msg);
  735.                 }
  736.             }
  738.             $flashMessage = '<h5 class="card-title">Link zum Passwort ändern gesendet.</h5>
  739.                                <hr>
  740.                                <p class="card-text px-5">
  741.                                 Ein Link zum ändern des Passworts wurde Ihnen per <b>E-Mail</b> gesendet.
  742.                                 Sollten Sie keine E-Mail bekommen, überprüfen Sie Ihren Spam-Ordner!
  743.                                 </p>
  744.                                 <hr>
  745.                                 <div class="card-footer border rounded text-center text-muted">
  746.                                 Der Link ist bis <b>' . date("d.m.Y H:i", strtotime(sprintf("+%d hour", $linkTime))) . ' Uhr</b>
  747.                                 gültig.
  748.                                 </div>';
  749.             $this->addFlash('pw-forgot-success', $flashMessage);
  750.             return $this->render('registrierung/passwort-vergessen.html.twig', [
  751.                 'title' => $this->translator->trans('Password forgotten'),
  752.                 'pwForm' => $regform->createView(),
  753.                 'show' => false
  754.             ]);
  755.         }
  757.         return $this->render('registrierung/passwort-vergessen.html.twig', [
  758.             'title' => $this->translator->trans('Password forgotten'),
  759.             'pwForm' => $regform->createView(),
  760.             'show' => true
  761.         ]);
  762.     }
  764.     #[Route('/{hash}/passwort-vergessen', name: '_form_passwort_vergessen')]
  765.     public function form_passwort_vergessen(Request $request, UserPasswordHasherInterface $passEncoder, ValidatorInterface $validator): Response
  766.     {
  768.         $regUser = $this->em->getRepository(UserRegister::class)->findOneBy(['passwordcode' => sha1($request->get('hash'))]);
  769.         if (!$regUser) {
  770.             $errMsg = $this->translator->trans('system.The <b>link</b> is no longer valid. Contact the <b>administrator!</b>');
  771.             $this->addFlash('pw-forgot-error', $errMsg);
  772.             return $this->render('registrierung/formular-passwort-vergessen.html.twig', [
  773.                 'title' => $this->translator->trans('Password forgotten'),
  774.                 'show' => false,
  775.                 'validate' => false,
  776.                 'name' => ''
  777.             ]);
  778.         }
  780.         $siteSettings = $this->em->getRepository(SystemSettings::class)->getSettings('site_settings')->record;
  781.         $linkTime = $siteSettings['email_password_forgotten_time'];
  782.         $codeTime = $regUser->getCodeTime();
  784.         $time = strtotime(sprintf("%s +%s hour", date('d-m-Y H:i:s', $codeTime), $linkTime));
  785.         if ($time < time()) {
  786.             $errMsg = $this->translator->trans('system.The <b>link</b> is no longer valid. Contact the <b>administrator!</b>');
  787.             $this->addFlash('pw-forgot-error', $errMsg);
  789.             $regUser->setPasswordcode('');
  790.             $regUser->setCodeTime('');
  791.             $this->em->persist($regUser);
  792.             $this->em->flush();
  794.             return $this->render('registrierung/formular-passwort-vergessen.html.twig', [
  795.                 'title' => $this->translator->trans('Password forgotten'),
  796.                 'show' => false,
  797.                 'validate' => false,
  798.                 'name' => ''
  799.             ]);
  800.         }
  802.         $regform = $this->createFormBuilder()
  803.             ->add('passwort', RepeatedType::class, [
  804.                 'type' => PasswordType::class,
  805.                 'required' => true,
  806.                 'constraints' => [new NotBlank(),
  807.                     new Length([
  808.                             'min' => 8,
  809.                             'minMessage' => $this->translator->trans('profil.The password must be at least {{ limit }} characters long'),
  810.                         ]
  811.                     )],
  812.                 'first_options' => [
  813.                     'label' => $this->translator->trans('profil.Password') . ' <sup class="small-lg">(min 8)</sup>',
  814.                     'label_html' => true,
  815.                     'row_attr' => [
  816.                         'class' => 'form-floating mb-3'
  817.                     ],
  818.                     'attr' => [
  819.                         'class' => 'no-blur',
  820.                         'placeholder' => $this->translator->trans('profil.Password'),
  821.                         'min' => 8,
  822.                         'autofocus' => true
  823.                     ],
  825.                 ],
  826.                 'second_options' => [
  827.                     'label' => $this->translator->trans('profil.Repeat password') . ' <sup class="small-lg">(min 8)</sup>',
  828.                     'label_html' => true,
  829.                     'row_attr' => [
  830.                         'class' => 'form-floating mb-3'
  831.                     ],
  832.                     'attr' => [
  833.                         'class' => 'no-blur',
  834.                         'placeholder' => $this->translator->trans('profil.Repeat password'),
  835.                     ],
  836.                 ],
  837.             ])
  838.             ->add('register_btn', SubmitType::class, [
  839.                 'label' => '<i class="bi bi-incognito me-2"></i>' . $this->translator->trans('profil.Change Password')
  840.             ])
  841.             ->getForm();
  844.         $regform->handleRequest($request);
  845.         if ($regform->isSubmitted() && $regform->isValid()) {
  846.             $siteSettings = $this->em->getRepository(SystemSettings::class)->getSettings('site_settings')->record;
  847.             $daten = $regform->getData();
  848.             $regUser->getUser()->setPassword(
  849.                 $passEncoder->hashPassword($regUser->getUser(), $daten['passwort'])
  850.             );
  851.             $name = $regUser->getUser()->getUserdetails()->getFirstName() . ' ' . $regUser->getUser()->getUserdetails()->getLastName();
  852.             if ($siteSettings['pw_leak_checker_aktiv']) {
  853.                 $regUser->getUser()->setRawPassword($daten['passwort']);
  854.                 $errors = $validator->validate($regUser->getUser());
  855.                 if (count($errors) > 0) {
  856.                     foreach ($errors as $err) {
  857.                         $this->addFlash('pw-forgot-error', $err->getMessage());
  858.                     }
  859.                     return $this->render('registrierung/formular-passwort-vergessen.html.twig', [
  860.                         'title' => $this->translator->trans('Password forgotten'),
  861.                         'pwForgottenForm' => $regform->createView(),
  862.                         'show' => true,
  863.                         'validate' => false,
  864.                         'name' => $name
  865.                     ]);
  866.                 }
  867.             }
  868.             $regUser->setPasswordcode('');
  869.             $regUser->setCodeTime('');
  870.             $this->em->persist($regUser);
  871.             $this->em->flush();
  872.             if ($siteSettings['log_pw_change_aktiv']) {
  873.                 $msg = sprintf('Passwort geändert - %s ',$regUser->getUser()->getEmail());
  874.                 $this->logger->log_message('registrierung', $msg);
  875.             }
  876.             return $this->render('registrierung/formular-passwort-vergessen.html.twig', [
  877.                 'title' => $this->translator->trans('Password forgotten'),
  878.                 'show' => false,
  879.                 'validate' => true,
  880.                 'name' => $name
  881.             ]);
  882.         }
  883.         $name = $regUser->getUser()->getUserdetails()->getFirstName() . ' ' . $regUser->getUser()->getUserdetails()->getLastName();
  884.         return $this->render('registrierung/formular-passwort-vergessen.html.twig', [
  885.             'title' => $this->translator->trans('Password forgotten'),
  886.             'pwForgottenForm' => $regform->createView(),
  887.             'show' => true,
  888.             'validate' => false,
  889.             'name' => $name
  890.         ]);
  891.     }
  892. }