mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-05-21 03:49:21 -04:00
d388e4bb86
"display_all" is too coarse, and we should be letting event handlers make the appropriate decision on what to display and when. This duplicates some code, but it's now very clear in the event handlers what's getting shown. Throw a 404 if we try to view the user profile for a missing user. The only feature change in this should be that we now display the name, full name and website for a user to any other registered user, which makes sense since these are typically public fields. Don't show any of the edit buttons unless identity::is_writable()
70 lines
2.7 KiB
PHP
70 lines
2.7 KiB
PHP
<?php defined("SYSPATH") or die("No direct script access.");
|
|
/**
|
|
* Gallery - a web based photo album viewer and editor
|
|
* Copyright (C) 2000-2009 Bharat Mediratta
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or (at
|
|
* your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*/
|
|
class User_Profile_Controller extends Controller {
|
|
public function show($id) {
|
|
// If we get here, then we should have a user id other than guest.
|
|
$user = identity::lookup_user($id);
|
|
if (!$user) {
|
|
throw new Kohana_404_Exception();
|
|
}
|
|
|
|
$v = new Theme_View("page.html", "other", "profile");
|
|
$v->page_title = t("%name Profile", array("name" => $user->display_name()));
|
|
$v->content = new View("user_profile.html");
|
|
|
|
$v->content->user = $user;
|
|
$v->content->contactable =
|
|
!$user->guest && $user->id != identity::active_user()->id && $user->email;
|
|
$v->content->editable =
|
|
identity::is_writable() && !$user->guest && $user->id == identity::active_user()->id;
|
|
|
|
$event_data = (object)array("user" => $user, "content" => array());
|
|
module::event("show_user_profile", $event_data);
|
|
$v->content->info_parts = $event_data->content;
|
|
|
|
print $v;
|
|
}
|
|
|
|
public function contact($id) {
|
|
$user = identity::lookup_user($id);
|
|
print user_profile::get_contact_form($user);
|
|
}
|
|
|
|
public function send($id) {
|
|
access::verify_csrf();
|
|
$user = identity::lookup_user($id);
|
|
$form = user_profile::get_contact_form($user);
|
|
if ($form->validate()) {
|
|
Sendmail::factory()
|
|
->to($user->email)
|
|
->subject(html::clean($form->message->subject->value))
|
|
->header("Mime-Version", "1.0")
|
|
->header("Content-type", "text/html; charset=iso-8859-1")
|
|
->reply_to($form->message->reply_to->value)
|
|
->message(html::purify($form->message->message->value))
|
|
->send();
|
|
message::success(t("Sent message to %user_name", array("user_name" => $user->display_name())));
|
|
print json_encode(array("result" => "success"));
|
|
} else {
|
|
print json_encode(array("result" => "error", "form" => (string)$form));
|
|
}
|
|
}
|
|
}
|