HomeSettings.php 4.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154
  1. <?php
  2. namespace App\Http\Controllers\Settings;
  3. use App\AccountLog;
  4. use App\EmailVerification;
  5. use App\Media;
  6. use App\Profile;
  7. use App\User;
  8. use App\UserFilter;
  9. use App\Util\Lexer\PrettyNumber;
  10. use Auth;
  11. use DB;
  12. use Purify;
  13. use Illuminate\Http\Request;
  14. trait HomeSettings
  15. {
  16. public function home()
  17. {
  18. $id = Auth::user()->profile->id;
  19. $storage = [];
  20. $used = Media::whereProfileId($id)->sum('size');
  21. $storage['limit'] = config('pixelfed.max_account_size') * 1024;
  22. $storage['used'] = $used;
  23. $storage['percentUsed'] = ceil($storage['used'] / $storage['limit'] * 100);
  24. $storage['limitPretty'] = PrettyNumber::size($storage['limit']);
  25. $storage['usedPretty'] = PrettyNumber::size($storage['used']);
  26. return view('settings.home', compact('storage'));
  27. }
  28. public function homeUpdate(Request $request)
  29. {
  30. $this->validate($request, [
  31. 'name' => 'required|string|max:'.config('pixelfed.max_name_length'),
  32. 'bio' => 'nullable|string|max:'.config('pixelfed.max_bio_length'),
  33. 'website' => 'nullable|url',
  34. 'email' => 'nullable|email',
  35. ]);
  36. $changes = false;
  37. $name = strip_tags($request->input('name'));
  38. $bio = $request->filled('bio') ? Purify::clean($request->input('bio')) : null;
  39. $website = $request->input('website');
  40. $email = $request->input('email');
  41. $user = Auth::user();
  42. $profile = $user->profile;
  43. $validate = config('pixelfed.enforce_email_verification');
  44. if ($user->email != $email) {
  45. $changes = true;
  46. $user->email = $email;
  47. if ($validate) {
  48. $user->email_verified_at = null;
  49. // Prevent old verifications from working
  50. EmailVerification::whereUserId($user->id)->delete();
  51. }
  52. $log = new AccountLog();
  53. $log->user_id = $user->id;
  54. $log->item_id = $user->id;
  55. $log->item_type = 'App\User';
  56. $log->action = 'account.edit.email';
  57. $log->message = 'Email changed';
  58. $log->link = null;
  59. $log->ip_address = $request->ip();
  60. $log->user_agent = $request->userAgent();
  61. $log->save();
  62. }
  63. // Only allow email to be updated if not yet verified
  64. if (!$validate || !$changes && $user->email_verified_at) {
  65. if ($profile->name != $name) {
  66. $changes = true;
  67. $user->name = $name;
  68. $profile->name = $name;
  69. }
  70. if ($profile->website != $website) {
  71. $changes = true;
  72. $profile->website = $website;
  73. }
  74. if ($profile->bio != $bio) {
  75. $changes = true;
  76. $profile->bio = $bio;
  77. }
  78. }
  79. if ($changes === true) {
  80. $user->save();
  81. $profile->save();
  82. return redirect('/settings/home')->with('status', 'Profile successfully updated!');
  83. }
  84. return redirect('/settings/home');
  85. }
  86. public function password()
  87. {
  88. return view('settings.password');
  89. }
  90. public function passwordUpdate(Request $request)
  91. {
  92. $this->validate($request, [
  93. 'current' => 'required|string',
  94. 'password' => 'required|string',
  95. 'password_confirmation' => 'required|string',
  96. ]);
  97. $current = $request->input('current');
  98. $new = $request->input('password');
  99. $confirm = $request->input('password_confirmation');
  100. $user = Auth::user();
  101. if (password_verify($current, $user->password) && $new === $confirm) {
  102. $user->password = bcrypt($new);
  103. $user->save();
  104. $log = new AccountLog();
  105. $log->user_id = $user->id;
  106. $log->item_id = $user->id;
  107. $log->item_type = 'App\User';
  108. $log->action = 'account.edit.password';
  109. $log->message = 'Password changed';
  110. $log->link = null;
  111. $log->ip_address = $request->ip();
  112. $log->user_agent = $request->userAgent();
  113. $log->save();
  114. return redirect('/settings/home')->with('status', 'Password successfully updated!');
  115. }
  116. return redirect('/settings/home')->with('error', 'There was an error with your request!');
  117. }
  118. public function email()
  119. {
  120. return view('settings.email');
  121. }
  122. public function avatar()
  123. {
  124. return view('settings.avatar');
  125. }
  126. }