user_email_verification.admin.inc in User email verification 7

Administrative functions required in a specific case.

File

user_email_verification.admin.inc

<?php

/**
 * @file
 * Administrative functions required in a specific case.
 */

/**
 * Menu callback; process one time login link and redirects to the user page on success.
 */
function user_email_verification_verify($form, &$form_state, $uid, $timestamp, $hashed_pass) {

  // Time out, in seconds, until login URL expires. Defaults to 24 hours =
  // 86400 seconds.
  $timeout = variable_get('user_email_verification_validate_interval', 86400);
  $current = REQUEST_TIME;

  // Some redundant checks for extra security ?
  $users = user_load_multiple(array(
    $uid,
  ), array(
    'status' => '1',
  ));
  if ($timestamp <= $current && ($account = reset($users))) {

    // No time out for first time login.
    if ($current - $timestamp > $timeout) {
      drupal_set_message(t('You have tried to use a one-time verify link that has expired. Please request a new one using the form below.'));
      drupal_goto('user/password');
    }
    elseif ($account->uid) {
      $verified = user_email_verification_load_verify_flag($account->uid);
      if (!$verified && $hashed_pass == user_email_verification_hmac($account->uid, $timestamp)) {
        db_update('user_email_verification')
          ->fields(array(
          'verified' => 1,
        ))
          ->condition('uid', $account->uid, '=')
          ->execute();
        if (module_exists('rules')) {

          // Invoke rules event
          rules_invoke_event('user_email_verification_verified_email', $account);
        }
        drupal_set_message(t('Thank you for verifying your e-mail address.'));
        watchdog('user', 'User "%name" verified e-mail address "%email".', array(
          '%name' => $account->name,
          '%email' => $account->mail,
        ));
        if ($account->status == 0) {
          global $language;
          if (module_exists('rules')) {

            // Invoke rules event
            rules_invoke_event('user_email_verification_verified_blocked', $account);
          }
          drupal_mail('user_email_verification', 'verify_blocked', variable_get('site_mail', ''), $language, array(
            'account' => $account,
          ));
          drupal_set_message(t('Your account has been blocked before the verification of the e-mail. ' . 'An administrator will make an audit and unblock your account if the reason for the blocking was the e-mail verification.'));
        }
        drupal_goto('user');
      }
      else {
        drupal_set_message(t('You have tried to use a one-time verify link that has either been used or is no longer valid. Please request a new one using the form below.'));
        drupal_goto('user/verify');
      }
    }
    else {
      drupal_set_message(t('You have tried to use a one-time verify link that has either been used or is no longer valid. Please request a new one using the form below.'));
      drupal_goto('user/verify');
    }
  }
  else {

    // Deny access, no more clues.
    // Everything will be in the watchdog's URL for the administrator to check.
    drupal_access_denied();
    drupal_exit();
  }
}

/**
 * Menu callback; processes extended verification links. Enables and verifies
 * accounts if user clicks the link within specified time period.
 */
function user_email_verification_verify_extended($form, &$form_state, $uid, $timestamp, $hashed_pass) {

  // Time out, in seconds, until extended verification URL expires. Defaults to
  // 7 days which is 604800 seconds.
  $extended_timeout = variable_get('user_email_verification_extended_validate_interval', 604800);
  $current = REQUEST_TIME;

  // Some redundant checks for extra security ?
  $users = user_load_multiple(array(
    $uid,
  ), array(
    'status' => '0',
  ));
  if ($timestamp <= $current && ($account = reset($users))) {
    if ($current - $timestamp < $extended_timeout) {
      $verified = user_email_verification_load_verify_flag($account->uid);
      if (!$verified && $hashed_pass == user_email_verification_hmac($account->uid, $timestamp)) {
        db_update('user_email_verification')
          ->fields(array(
          'verified' => 1,
        ))
          ->condition('uid', $account->uid, '=')
          ->execute();

        // Activate blocked account
        $account->status = 1;
        user_save($account);
        if (module_exists('rules')) {

          // Invoke rules event
          rules_invoke_event('user_email_verification_verified_extended_before', $account);
        }
        drupal_set_message(t('Thank you for verifying your e-mail address. Your account is now activated and you may login.'));
        watchdog('user', 'User "%name" verified e-mail address "%email" using extended verification url.', array(
          '%name' => $account->name,
          '%email' => $account->mail,
        ));
        drupal_goto('user');
      }
    }
    else {

      // Basically this should never happend, because accounts are deleted
      // after the extended timout is reached, but it's possible depending
      // on cron configuration
      if (module_exists('rules')) {

        // Invoke rules event
        rules_invoke_event('user_email_verification_verified_extended_after', $uid);
      }
      drupal_set_message(t('Your verify link has been exipred and account has been deleted.'));
      watchdog('user', 'User tried to verify e-mail address with an expired link for uid: %uid.', array(
        '%uid' => $uid,
      ));
    }
  }
  else {
    if (module_exists('rules')) {

      // Invoke rules event
      rules_invoke_event('user_email_verification_verified_extended_after', $uid);
    }
    drupal_set_message(t('Your account does not exist anymore. Please register a new one, or contact site administration.'));
    watchdog('user', 'User tried to verify e-mail address for uid: %uid.', array(
      '%uid' => $uid,
    ));
  }
}

/**
 * Form builder; Request a email verification.
 *
 * @ingroup forms
 * @see user_email_verification_request_validate()
 * @see user_email_verification_request_submit()
 */
function user_email_verification_request() {
  global $user;
  $form['name'] = array(
    '#type' => 'textfield',
    '#title' => t('Username or e-mail address'),
    '#size' => 60,
    '#maxlength' => max(USERNAME_MAX_LENGTH, EMAIL_MAX_LENGTH),
    '#required' => TRUE,
    '#default_value' => isset($_GET['name']) ? $_GET['name'] : '',
  );

  // Allow logged in users to request this also.
  if ($user->uid > 0) {
    $form['name']['#type'] = 'value';
    $form['name']['#value'] = $user->mail;
    $form['mail'] = array(
      '#prefix' => '<p>',
      '#markup' => t('Verify email will be send to %email.', array(
        '%email' => $user->mail,
      )),
      '#suffix' => '</p>',
    );
  }
  $form['actions'] = array(
    '#type' => 'actions',
  );
  $form['actions']['submit'] = array(
    '#type' => 'submit',
    '#value' => t('Send verify mail'),
  );
  return $form;
}

/**
 *
 * @param unknown $form
 * @param unknown $form_state
 */
function user_email_verification_request_validate($form, &$form_state) {
  $name = trim($form_state['values']['name']);

  // Try to load by email.
  $users = user_load_multiple(array(), array(
    'mail' => $name,
    'status' => '1',
  ));
  $account = reset($users);
  if (!$account) {

    // No success, try to load by name.
    $users = user_load_multiple(array(), array(
      'name' => $name,
      'status' => '1',
    ));
    $account = reset($users);
  }
  if (isset($account->uid)) {
    form_set_value(array(
      '#parents' => array(
        'account',
      ),
    ), $account, $form_state);
  }
  else {
    form_set_error('name', t('Sorry, %name is not recognized as a user name or an e-mail address.', array(
      '%name' => $name,
    )));
  }
}

/**
 *
 * @param unknown $form
 * @param unknown $form_state
 */
function user_email_verification_request_submit($form, &$form_state) {
  global $language;
  $account = $form_state['values']['account'];

  // Mail one time login URL and instructions using current language.
  $mail = user_email_verification_mail_notify('verify', $account, $language);
  if (!empty($mail)) {
    watchdog('user', 'Verification instructions mailed to %name at %email.', array(
      '%name' => $account->name,
      '%email' => $account->mail,
    ));
    drupal_set_message(t('Further instructions have been sent to your e-mail address.'));
  }
  $form_state['redirect'] = 'user';
  return;
}

Functions

Name	Description
user_email_verification_request	Form builder; Request a email verification.
user_email_verification_request_submit	_state
user_email_verification_request_validate	_state
user_email_verification_verify	Menu callback; process one time login link and redirects to the user page on success.
user_email_verification_verify_extended	Menu callback; processes extended verification links. Enables and verifies accounts if user clicks the link within specified time period.