class_AccountPasswordVerifierFilter.php

Go to the documentation of this file.

<?php
class AccountPasswordVerifierFilter extends BaseFilter implements Filterable {
        protected function __construct () {
                // Call parent constructor
                parent::__construct(__CLASS__);
        }

        public final static function createAccountPasswordVerifierFilter () {
                // Get a new instance
                $filterInstance = new AccountPasswordVerifierFilter();

                // Return the instance
                return $filterInstance;
        }

        public function execute (Requestable $requestInstance, Responseable $responseInstance) {
                // Get password
                $password = $requestInstance->getRequestElement('pass_old');

                // Is the password still not set?
                if (is_null($password)) {
                        // Get password from alternative location
                        $password = $requestInstance->getRequestElement('password');

                        // Is the password still not set?
                        if (is_null($password)) {
                                // Not found in form so stop the filtering process
                                $requestInstance->requestIsValid(false);

                                // Add a message to the response
                                $responseInstance->addFatalMessage('password_unset');

                                // Abort here
                                return false;
                        } // END - if
                } // END - if

                if (empty($password)) {
                        // Password is empty
                        $requestInstance->requestIsValid(false);

                        // Add a message to the response
                        $responseInstance->addFatalMessage('password_empty');

                        // Abort here
                        return false;
                }

                // Get a user instance
                $userInstance = Registry::getRegistry()->getInstance('user');

                // Get current hash
                $currentHash = $userInstance->getField('pass_hash');

                // Get an encryption helper and encrypt the password
                $passHash = ObjectFactory::createObjectByConfiguredName('crypto_class')->hashString($password, $currentHash);

                // Does it match?
                if ($currentHash != $passHash) {
                        // Throw an exception here to stop the proccessing
                        throw new AccountPasswordMismatchException($this, BaseUser::EXCEPTION_USER_PASS_MISMATCH);
                } // END - if
        }
}

// [EOF]
?>