add event creation batch, lib changes for past changes

2018-03-17 13:38:36 +01:00
parent aadf3fd06e
commit 077d9c5a53
15 changed files with 885 additions and 114 deletions
--- a/website/agenda/planung/requestPassword.cgi
+++ b/website/agenda/planung/requestPassword.cgi
@@ -0,0 +1,165 @@
+#! /usr/bin/perl -w 
+
+use warnings "all";
+use strict;
+
+use Data::Dumper;
+
+use params;
+use config;
+use db;
+use auth;
+use password_requests;
+
+binmode STDOUT, ":utf8";
+
+my $r = shift;
+( my $cgi, my $params, my $error ) = params::get($r);
+
+my $config = config::get('../config/config.cgi');
+my $debug  = $config->{system}->{debug};
+
+$params = check_params($params);
+
+print "Content-type:text/html\n\n";
+print qq{<!DOCTYPE html>
+<html>
+<head>
+<meta charset="UTF-8">
+</head>
+<body>
+};
+
+if ( defined $params->{user}){
+    sendToken($config, $params);
+    return;
+}else{
+    my $result=checkToken($config, $params);
+    return;
+}
+
+sub sendToken{
+    my $config=shift;
+    my $params=shift;
+    my $entry = password_requests::sendToken($config, { user => $params->{user} });
+    if (defined $entry){
+        print "Please check you mails\n"
+    }else{
+        print "Sorry\n";
+    }
+}
+
+sub checkToken{
+    my $config=shift;
+    my $params=shift;
+
+    my $token = $params->{token};
+
+    my $entry = password_requests::get($config, { token => $token });
+    unless (defined $entry){
+        print "invalid token\n";
+        return undef;
+    }
+
+    print STDERR Dumper($entry);
+    my $created_at = $entry->{created_at};
+    unless (defined $created_at){
+        print "invalid token age\n";
+        return undef;
+    }
+
+    my $age = time() - time::datetime_to_time($created_at);
+    if ($age > 600) {
+        print "token is too old\n";
+        password_requests::delete($config, { token => $token });
+        return undef;
+    }
+
+    $config->{access}->{write} = 1;
+    $entry->{max_attempts}++;
+    password_requests::update($config, $entry);
+    $config->{access}->{write} = 0;
+
+    if ($entry->{max_attempts}>10){
+        print "too many failed attempts, please request a new token by mail\n";
+        password_requests::delete($config, { token => $token });
+        return undef;
+    }
+
+    unless ((defined $params->{user_password}) && (defined $params->{user_password2})){
+        printForm($token);
+        return undef;
+    }
+   
+    if ($params->{action} eq 'change'){
+        my $user  = $entry->{user};
+        my $request = {
+            config => $config,
+            params => { checked => $params }
+        };
+        my $result = password_requests::changePassword($config, $request, $user);
+
+        if (defined $result->{error}){
+            #print "sorry\n";
+            print $result->{error}."\n";
+            printForm($token);
+        }
+
+        if (defined $result->{success}){
+            #print "success\n";
+            print $result->{success}."\n";
+            password_requests::delete($config, { user => $user });
+            my $url=$config->{locations}->{editor_base_url};
+            print qq{
+                <script type="text/javascript">
+                window.location = "$url";
+                </script>
+            };
+        }
+    }
+
+}
+
+sub printForm{
+    my $token=shift;
+    print qq{
+        <form method="post">
+            <input type="hidden" name="token" value="$token">
+            <input type="password" name="user_password" placeholder="enter new password">
+            <input type="password" name="user_password2" placeholder="repeat password">
+            <input type="submit" name="action" value="change">
+        </form>
+    };
+
+}
+
+sub check_params {
+	my $params = shift;
+
+	my $checked  = {};
+
+	#my $template = '';
+	#$checked->{template} = template::check( $params->{template}, 'requestPassword' );
+
+	my $debug = $params->{debug} || '';
+	if ( $debug =~ /([a-z\_\,]+)/ ) {
+		$debug = $1;
+	}
+	$checked->{debug} = $debug;
+
+	for my $param ( 'user','token', 'user_password', 'user_password2' ) {
+		if ( ( defined $params->{$param} ) && ( $params->{$param} =~ /\S/ ) ) {
+			$checked->{$param} = $params->{$param};
+		}
+	}
+
+	$checked->{action} = '';
+	if ( defined $params->{action} ) {
+		if ( $params->{action} =~ /^(change)$/ ) {
+			$checked->{action} = $params->{action};
+		}
+	}
+
+	return $checked;
+}
+