src/ApplicationBundle/Listener/SessionListener.php line 974

Open in your IDE?
  1. <?php
  3. namespace ApplicationBundle\Listener;
  5. use ApplicationBundle\Interfaces\LoginInterface;
  6. use ApplicationBundle\Interfaces\SessionCheckInterface;
  7. use ApplicationBundle\Interfaces\SystemInterface;
  8. use ApplicationBundle\Modules\Authentication\Constants\UserConstants;
  9. use ApplicationBundle\Modules\System\MiscActions;
  10. use ApplicationBundle\Modules\System\System;
  11. use Symfony\Component\HttpFoundation\Cookie;
  12. use Symfony\Component\HttpFoundation\RedirectResponse;
  13. use Symfony\Component\HttpKernel\Event\FilterControllerEvent;
  14. use Symfony\Component\HttpKernel\Event\FilterResponseEvent;
  16. class SessionListener
  17. {
  18.     public $secretKey = "";
  19.     private $em;
  20.     private $em_goc;
  21.     private $dm;
  22.     private $router;
  23.     private $session;
  24.     private $resolver;
  25.     private $applicationConnector;
  26.     private $kernelRootDir;
  27.     private $container;
  28.     protected $urlEncryptor;
  30.     public function __construct($kernelRootDir, $container, $resolver, $applicationConnector, $router, $session, $db_credentials, $db_credentials_company_group, $secret, \Nzo\UrlEncryptorBundle\UrlEncryptor\UrlEncryptor $urlEncryptor)
  31.     {
  32.         $this->secretKey = $secret;
  33.         $this->em = $db_credentials;
  34.         $this->em_goc = $db_credentials_company_group;
  35. //        $this->dm=$odm_credentials;
  36.         $this->router = $router;
  37.         $this->resolver = $resolver;
  38.         $this->container = $container;
  39.         $this->applicationConnector = $applicationConnector;
  40.         $this->kernelRootDir = $kernelRootDir;
  41.         $this->session = $session;
  42.         $this->urlEncryptor = $urlEncryptor;
  43.     }
  45.     public function onKernelController(FilterControllerEvent $event)
  46.     {
  47.         $controller = $event->getController();
  49.         /*
  50.          * $controller passed can be either a class or a Closure.
  51.          * This is not usual in Symfony but it may happen.
  52.          * If it is a class, it comes in array format
  53.          */
  54.         if (!is_array($controller)) {
  55.             return;
  56.         }
  58.         $hbeeErrorCode = UserConstants::ERROR_USER_EXISTS_ALREADY;
  59.         $request = $event->getRequest();
  60.         $devAdminMode = '_UNCHANGED_';
  61.         if ($request->request->has('devAdminOn') || $request->query->has('devAdminOn')) {
  62.             $devAdminMode = $request->request->has('devAdminOn') ? $request->request->get('devAdminOn') : $request->query->get('devAdminOn');
  64.         }
  65. //        if ($request->request->has('devAdminOff')|| $request->query->has('devAdminOff')) {
  66. //            $devAdminMode=0;
  67. //
  68. //        }
  70.         $permissionOverride = 0;
  71.         if ($request->query->has('OVP'))
  72.             $permissionOverride = 1;
  75.         $authTokenInHeader = $event->getRequest()->headers->get('auth-token');
  76.         if ($authTokenInHeader) {
  77.             $request->request->set('hbeeSessionToken', $authTokenInHeader);
  79.         }
  80.         if ($request->query->has('tvp')) {
  81.             $tvp = json_decode($this->urlEncryptor->decrypt($request->query->get('tvp')), true);
  82.             $request->request->set('TVP', json_encode($tvp));
  84.             if (isset($tvp['timeout'])) {
  85.                 $currentDateTime = new \DateTime();
  86.                 $currTs = $currentDateTime->format('U');
  87.                 if ($tvp['timeout'] > $currTs || $tvp['timeout'] == 0) {
  89.                     if (isset($tvp['token']))
  90.                         $request->request->set('hbeeSessionToken', $tvp['token']);
  91.                 } else {
  92.                     $url = $this->router->generate('permission_denied_page');
  93.                     $event->setController(function () use ($url) {
  94.                         return new RedirectResponse($url);
  95.                     });
  96.                 }
  97.             }
  100.         }
  103.         //check if mobile
  104.         $session = $this->session;
  105.         if (empty($session->get('appValiditySeconds'))) {  //how many sevonds is valid
  106.             $session->set('appValiditySeconds', '_UNSET_');
  107.         }
  109.         if (empty($session->get('devAdminMode'))) {  //how many sevonds is valid
  110.             $session->set('devAdminMode', 0);
  111.         }
  112.         if ($devAdminMode != '_UNCHANGED_')
  113.             $session->set('devAdminMode', $devAdminMode);
  114.         $to_set_session_data = [];
  116.         $CurrentRoute = $event->getRequest()->attributes->get('_route');
  117.         if ($CurrentRoute == 'switch_app' || $CurrentRoute == 'app_switch_app_api') {
  119.             if ($request->query->has('hbeeSessionToken')) {
  121.                 $em_goc = $this->em_goc;
  124.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->query->get('hbeeSessionToken'))['sessionData'];
  125.                 if ($to_set_session_data != null) {
  126.                     foreach ($to_set_session_data as $k => $d) {
  128.                         //check if mobile
  129.                         $session->set($k, $d);
  130.                     }
  132.                 } else {
  133.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  134.                 }
  136.             } else {
  139.                 $url = $this->router->generate('user_login');
  140.                 if ($CurrentRoute == 'app_switch_app_api')
  141.                     $url .= ("?csToken=" . $request->query->get('csToken', '') . "&spd=" . $request->query->get('spd', '') . "&remoteVerify=1");
  142.                 else
  143.                     $url .= ("?csToken=" . $request->query->get('csToken', '') . "&spd=" . $request->query->get('spd', '') . "&remoteVerify=" . $request->query->get('remoteVerify', 0));
  146.                 $session->clear();
  147.                 $session->set('CLEARLOGIN', 1);
  149.                 $event->setController(function () use ($url) {
  150.                     return new RedirectResponse($url);
  151.                 });
  152.             }
  153.         }
  155. //        if ($CurrentRoute == 'select_second_layer_api' ) {
  156. //
  157. //            if ($request->query->has('hbeeSessionToken')) {
  158. //
  159. //                $em_goc = $this->em_goc;
  160. //
  161. //
  162. //                $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->query->get('hbeeSessionToken'))['sessionData'];
  163. //                if ($to_set_session_data != null) {
  164. //                    foreach ($to_set_session_data as $k => $d) {
  165. //
  166. //                        //check if mobile
  167. //                        $session->set($k, $d);
  168. //                    }
  169. //
  170. //                } else {
  171. //                    $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  172. //                }
  173. //
  174. //            } else {
  175. //
  176. //
  177. //            }
  178. //        }
  181.         if (!$session->has(UserConstants::USER_ID)) {
  182.             if ($request->request->has('token')) {
  184.                 $em_goc = $this->em_goc;
  187.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->request->get('token'))['sessionData'];
  188.                 if ($to_set_session_data != null) {
  189.                     foreach ($to_set_session_data as $k => $d) {
  191.                         //check if mobile
  192.                         $session->set($k, $d);
  193.                     }
  195.                 } else {
  196.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  197.                 }
  199.             } else if ($request->request->has('hbeeSessionToken')) {
  201.                 $em_goc = $this->em_goc;
  204.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->request->get('hbeeSessionToken'))['sessionData'];
  205.                 if ($to_set_session_data != null) {
  206.                     foreach ($to_set_session_data as $k => $d) {
  208.                         //check if mobile
  209.                         $session->set($k, $d);
  210.                     }
  212.                 } else {
  213.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  214.                 }
  216.             } else if ($request->query->has('hbeeSessionToken')) {
  218.                 $em_goc = $this->em_goc;
  221.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->query->get('hbeeSessionToken'))['sessionData'];
  222.                 if ($to_set_session_data != null) {
  223.                     foreach ($to_set_session_data as $k => $d) {
  225.                         //check if mobile
  226.                         $session->set($k, $d);
  227.                     }
  229.                 } else {
  230.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  231.                 }
  233.             } else if ($request->request->has('sessionData')) {
  234.                 $to_set_session_data = $request->request->get('sessionData');
  235.                 foreach ($to_set_session_data as $k => $d) {
  237.                     //check if mobile
  238.                     $session->set($k, $d);
  239.                 }
  241.             } else if ($request->request->has('sessionDataString')) {
  242.                 $to_set_session_data = json_decode($request->request->get('sessionDataString'), true);
  243.                 if ($to_set_session_data != null) {
  244.                     foreach ($to_set_session_data as $k => $d) {
  246.                         //check if mobile
  247.                         $session->set($k, $d);
  248.                     }
  250.                 }
  252.             }
  253.             if ($request->query->has('iFrameData')) {
  254.                 $session->set(UserConstants::USER_ID, $request->query->get('uId'));
  255.                 $session->set(UserConstants::USER_NAME, $request->query->get('uName'));
  256.                 $session->set(UserConstants::USER_LOGIN_ID, $request->query->get('loginId'));
  258.                 $session->set(UserConstants::APPLICATION_SECRET, $request->query->get('sKey'));
  259.                 $session->set(UserConstants::USER_GOC_ID, $request->query->get('gocId'));
  260.                 $session->set(UserConstants::USER_DB_NAME, $request->query->get('gocDb'));
  261.                 $session->set(UserConstants::USER_DB_USER, $request->query->get('gocUsr'));
  262.                 $session->set(UserConstants::USER_DB_PASS, $request->query->get('gocPass'));
  263.                 $session->set(UserConstants::USER_DB_HOST, $request->query->get('gocDh'));
  264.                 $session->set(UserConstants::USER_TYPE, $request->query->get('uType'));
  265.                 $session->set(UserConstants::USER_CURRENT_POSITION, $request->query->get('currPos'));
  266.                 $session->set(UserConstants::USER_COMPANY_ID, $request->query->get('cmpId'));
  267.                 $session->set(UserConstants::USER_APP_ID, $request->query->get('uAId'));
  268.                 $session->set(UserConstants::USER_IMAGE, "");
  269.                 $session->set('productNameDisplayType', 0);
  272.                 $cmpImg = $request->query->get('cmpIm');
  273.                 $cmpName = $request->query->get('cmpN');
  274.                 $app_cid = $request->query->get('uAId') . "_" . $request->query->get('cmpId');
  275.                 $cid = $request->query->get('cmpId');
  276.                 $session->set('userCompanyDarkVibrantList', json_encode(array(
  277.                     $cid => ""
  278.                 )));
  280.                 $cmpNameListStr = json_encode(array(
  281.                     $cid => $cmpName
  282.                 ));
  283.                 $cmpImageListStr = json_encode(array(
  284.                     $cid => $cmpImg
  285.                 ));
  288.                 $session->set(UserConstants::USER_COMPANY_NAME_LIST, $cmpNameListStr);
  289.                 $session->set(UserConstants::USER_COMPANY_IMAGE_LIST, $cmpImageListStr);
  291.                 $session->set(UserConstants::USER_PROHIBIT_LIST, "[]");
  292.                 $session->set(UserConstants::ALL_MODULE_ACCESS_FLAG, 1);
  294.             }
  295.         }
  296. //        $path=$this->kernelRootDir. '/gifnoc/invdata.json';
  297. //        file_put_contents($path, json_encode(array(
  298. //            'sessionDataString'=>$request->request->get('sessionDataString'),
  299. //            'productCode'=>$request->request->get('productCode'),
  300. //            'userId'=>$session->get(UserConstants::USER_ID),
  301. //            'sessionData'=>json_decode($request->request->get('sessionDataString'),true),
  302. //            'to_set_session_data'=>$to_set_session_data,
  303. ////            'invData'=>$data_searched,
  304. //
  305. //        )));//overwrite
  308.         if (!$session->has('isMobile')) {
  309. //        if
  311.             $useragent = $event->getRequest()->headers->get('User-Agent');
  312.             if (!$useragent) {
  313.                 return false;
  314.             }
  316.             $isMobile = (
  317.                 preg_match('/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows ce|xda|xiino/i', $useragent) ||
  318.                 preg_match('/1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i', substr($useragent, 0, 4))
  319.             );
  321.             $session->set('isMobile', $isMobile);
  322.         }
  325.         if ($controller[0] instanceof SessionCheckInterface) {
  328.             if (!empty($session->get(UserConstants::USER_ID))) {
  331.                 if ($session->get(UserConstants::APPLICATION_SECRET) == $this->secretKey) {
  333.                     //if session check variable is more than 1 hour from now, update app validity but if already disabled then check on every call
  334.                     $lastCheckDateTime = null;
  335.                     $appValid = 1;
  336.                     $currentDateTime = new \DateTime();
  338.                     $currentTime = strtotime($currentDateTime->format('Y-m-d h:i:s'));
  339.                     $appIsValidTillTime = $currentTime;
  340.                     $appIsValidTillDateTime = $currentDateTime;
  342. //                    $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  344.                     if (!empty($session->get('lastCheckAppValidityTime'))) {
  345.                         $lastCheckDateTime = strtotime($session->get('lastCheckAppValidityTime'));
  346.                     } else {
  347.                         $lastCheckDateTime = strtotime('2022-01-01 00:00:00');
  348.                     }
  349.                     if (!empty($session->get('appIsValidTillTime'))) {
  350.                         $appIsValidTillTime = strtotime($session->get('appIsValidTillTime'));
  351.                         $appIsValidTillDateTime = new \DateTime($session->get('appIsValidTillTime'));
  352.                     } else {
  353. //                        $appIsValidTillTime=$currentDateTime;
  354. //                        $session->set('appIsValidTillTime', $appIsValidTillTime->format('Y-m-d h:i:s'));
  355.                     }
  356.                     if (!empty($session->get('appValid'))) {
  357.                         $appValid = $session->get('appValid');
  358.                     }
  360.                     $secondsTillLastCheck = abs($currentTime - $lastCheckDateTime);
  361. //                    $session->set('secondsTillLastCheck',$secondsTillLastCheck);
  362. //                    $session->set('lastCheckAppValiditySecond', abs($currentTime - $lastCheckDateTime));
  363.                     if ($secondsTillLastCheck > 7200 || $appValid == 0) {
  364.                         $appValiditySeconds = $session->get('appValiditySeconds');
  366.                         $appDataJson = System::getAppDataByCurl();
  367. //                        $session->set('appDataJson',$appDataJson);
  368.                         $appData = json_decode($appDataJson, true);
  370. //                        $appIsValidTillTime=$currentDateTime;
  371.                         if ($appData == null)
  372.                             $appData = [];
  373.                         if (isset($appData[$session->get(UserConstants::USER_APP_ID)])) {
  374.                             $session->set('appDataCurl', $appData[$session->get(UserConstants::USER_APP_ID)]);
  375.                             if ($appData[$session->get(UserConstants::USER_APP_ID)]['expired'] == 1) {
  376.                                 $appValid = 0;
  377.                                 $appValiditySeconds = 0;
  378.                             } else {
  379.                                 $appIsValidTillTime = strtotime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  380.                                 $appIsValidTillDateTime = new \DateTime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  381.                                 $appValiditySeconds = $appIsValidTillTime - $currentTime;
  382.                                 if ($appValiditySeconds < 0)
  383.                                     $appValid = 0;
  384.                                 else
  385.                                     $appValid = 1;
  386.                             }
  387.                         } else {
  389.                         }
  391.                         $session->set('appValiditySeconds', $appValiditySeconds);
  392.                         $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  394.                         $session->set('lastCheckAppValidityTime', $currentDateTime->format('Y-m-d h:i:s'));
  395.                         $session->set('appValid', $appValid);
  396.                     }
  398.                     $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  399.                     if ($appValid != 1) {
  400.                         $url = $this->router->generate('user_logout');
  402.                         if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  403.                             if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  404.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  405.                             }
  406.                         } else {
  407.                             $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  408.                         }
  409. //                        if ($request->server->has("REQUEST_URI")) {
  410. //                            if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  411. ////                            return $this->redirect($request->request->get('HTTP_REFERER'));
  412. //                                $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  413. //                            }
  414. //                        }
  415. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  418.                         $event->setController(function () use ($url) {
  419.                             return new RedirectResponse($url);
  420.                         });
  422.                     }
  425.                     $gocId = $session->get(UserConstants::USER_GOC_ID);
  426.                     if ($gocId != 0 && $gocId != "") {
  428.                         $gocDbName = $session->get(UserConstants::USER_DB_NAME);
  429.                         $gocDbUser = $session->get(UserConstants::USER_DB_USER);
  430.                         $gocDbPass = $session->get(UserConstants::USER_DB_PASS);
  431.                         $gocDbHost = $session->get(UserConstants::USER_DB_HOST);
  434. //                        $connector = $this->container->get('application_connector');
  435.                         $connector = $this->applicationConnector;
  436.                         $connector->resetConnection(
  437.                             'default',
  438.                             $gocDbName,
  439.                             $gocDbUser,
  440.                             $gocDbPass,
  441.                             $gocDbHost,
  442.                             $reset = false);
  443.                     }
  445.                     // User already have logged in. lets check its type
  446.                     if (
  447.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SYSTEM ||
  448.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_GENERAL ||
  449.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SUPPLIER ||
  450.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_ENTITY_USER_GENERAL_USER ||
  451.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_ENTITY_USER_GROUP_OWNER ||
  452.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_CLIENT ||
  453.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_APPLICANT
  455.                     ) {
  456.                         if (!empty($session->get('TRIGGER_RESET_PASSWORD')) || $session->get('IS_EMAIL_VERIFIED', 0) == 0) {
  457.                             if (!empty($session->get('TRIGGER_RESET_PASSWORD'))) {
  458.                                 if ($session->get('TRIGGER_RESET_PASSWORD') == 1 && !$authTokenInHeader) {
  461.                                     $red = $this->router->generate('reset_password_new_password');
  462.                                     if (!$request->request->has('remoteVerify')) {
  463.                                         $session->set('TRIGGER_RESET_PASSWORD', 0);
  464.                                         $event->setController(function () use ($red) {
  465.                                             return new RedirectResponse($red);
  466.                                         });
  467.                                     }
  470.                                 }
  472.                             }
  474.                             if ($session->get('IS_EMAIL_VERIFIED') == 0 && !$authTokenInHeader) {
  477.                                 $red = $this->router->generate('verify_email');
  478.                                 if (!$request->request->has('remoteVerify')) {
  480.                                     $event->setController(function () use ($red) {
  481.                                         return new RedirectResponse($red);
  482.                                     });
  483.                                 }
  486.                             }
  487.                         } else if (!empty($session->get('LAST_REQUEST_URI_BEFORE_LOGIN'))) {
  488.                             if (strripos($session->get('LAST_REQUEST_URI_BEFORE_LOGIN'), 'select_data') === false) {
  489.                                 if ($session->get('LAST_REQUEST_URI_BEFORE_LOGIN') != '' && $session->get('LAST_REQUEST_URI_BEFORE_LOGIN') != null) {
  490.                                     $red = $session->get('LAST_REQUEST_URI_BEFORE_LOGIN');
  492.                                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  493.                                     if (!$request->request->has('remoteVerify')) {
  494.                                         $event->setController(function () use ($red) {
  495.                                             return new RedirectResponse($red);
  496.                                         });
  497.                                     }
  500.                                 }
  501.                             } else {
  502.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  503.                             }
  504.                         }
  507.                     } else {
  508.                         $message = "Session Not Found";
  509.                         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  511.                         } else {
  512.                             if ($request->server->has("REQUEST_URI")) {
  514.                                 if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  515.                                     if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  516.                                         $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  517.                                     }
  518.                                 } else {
  519.                                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  520.                                 }
  522.                             }
  523.                         }
  524.                         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  525.                             $session->set('jsonStrForListenerData', json_encode(array(
  526.                                 'uid' => 0,
  527.                                 'session' => [],
  528.                                 'success' => false,
  529.                                 'sessionExists' => false,
  530.                                 'hbeeErrorCode' => $hbeeErrorCode,
  531.                                 'errorStr' => $message,
  532.                                 'session_data' => [],
  533.                                 'session2' => $_SESSION,
  534.                             )));
  535.                             $url = $this->router->generate('return_json_for_listener');
  536. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  537.                             $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:PublicPages:ReturnJsonForListener');
  538.                             $event->setController($this->resolver->getController($request));
  541. //                        $event->setController(function () use ($url) {
  542. //                            return new RedirectResponse($url);
  543. //                        });
  544.                         } else {
  545.                             $url = $this->router->generate('user_logout');
  546.                             $event->setController(function () use ($url) {
  547.                                 return new RedirectResponse($url);
  548.                             });
  550.                         }
  551.                     }
  553.                 } else {
  554.                     $message = "Session Not Found";
  555.                     if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  557.                     } else {
  558.                         if ($request->server->has("REQUEST_URI")) {
  560.                             if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  561.                                 if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  562.                                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  563.                                 }
  564.                             } else {
  565.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  566.                             }
  567. //                            if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  568. ////                            return $this->redirect($request->request->get('HTTP_REFERER'));
  569. //                                $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  570. //                            }
  571.                         }
  572.                     }
  573.                     if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  574.                         $session->set('jsonStrForListenerData', json_encode(array(
  575.                             'uid' => 0,
  576.                             'session' => [],
  577.                             'success' => false,
  578.                             'sessionExists' => false,
  579.                             'hbeeErrorCode' => $hbeeErrorCode,
  580.                             'errorStr' => $message,
  581.                             'session_data' => [],
  582.                             'session2' => $_SESSION,
  583.                         )));
  584.                         $url = $this->router->generate('return_json_for_listener');
  585. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  586.                         $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:PublicPages:ReturnJsonForListener');
  587.                         $event->setController($this->resolver->getController($request));
  590. //                        $event->setController(function () use ($url) {
  591. //                            return new RedirectResponse($url);
  592. //                        });
  593.                     } else {
  594.                         $url = $this->router->generate('user_logout');
  595.                         $event->setController(function () use ($url) {
  596.                             return new RedirectResponse($url);
  597.                         });
  598.                     }
  599.                 }
  600.             } else {
  603.                 // User can't see this page until do a login. let him/her login first.
  606.                 $message = "Session Not Found";
  607.                 $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  609.                 if ($authTokenInHeader || $request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  611.                 } else {
  612.                     if ($request->server->has("REQUEST_URI")) {
  613.                         if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  614.                             if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  615.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  616.                             }
  617.                         } else {
  618.                             $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  619.                         }
  620. //                        if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  621. ////                            return $this->redirect($request->request->get('HTTP_REFERER'));
  622. //                            $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  623. //                        }
  624.                     }
  625.                 }
  626.                 $session->set('jsonStrForListenerData', json_encode([]));
  628.                 if ($authTokenInHeader || $request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  629.                     $session->set('jsonStrForListenerData', json_encode(array(
  630.                         'uid' => 0,
  631.                         'session' => [],
  632.                         'success' => false,
  633.                         'sessionExists' => false,
  634.                         'hbeeErrorCode' => $hbeeErrorCode,
  635.                         'errorStr' => $message,
  636.                         'session_data' => [],
  637.                         'session2' => $_SESSION,
  638.                     )));
  639.                     $url = $this->router->generate('return_json_for_listener');
  640. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  642.                     $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:PublicPages:ReturnJsonForListener');
  643.                     $event->setController($this->resolver->getController($request));
  646. //                    $event->setController(function () use ($url) {
  647. //                        return new RedirectResponse($url);
  648. //                    });
  649. //                    return new JsonResponse();
  650.                 } else {
  652.                     $url = $this->router->generate('user_login');
  653. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  656.                     $event->setController(function () use ($url) {
  657.                         return new RedirectResponse($url);
  658.                     });
  659.                 }
  662.             }
  664.             $em = $this->em;
  665. //            if ($CurrentRoute != "update_database_schema")
  666. //                MiscActions::decryptTrans($em, '_ALL_', 0);
  668. //            Here we got a general user who have all the right things. Let see if he/she have permission to tre current route.
  669. //            $ROUTE_LIST=json_decode($session->get(UserConstants::USER_ROUTE_LIST), true);
  670.             $PROHIBIT_LIST = json_decode($session->get(UserConstants::USER_PROHIBIT_LIST), true);
  671.             $CurrentRoute = $event->getRequest()->attributes->get('_route');
  672.             $PL_unfiltered = json_decode($session->get(UserConstants::USER_POSITION_LIST), true);
  673.             if ($PL_unfiltered == null)
  674.                 $PL_unfiltered = [];
  675.             $PL = [];
  677.             foreach ($PL_unfiltered as $PLU) {
  678.                 if ($PLU != '' && $PLU != " " && $PLU != 0 && $PLU != null)
  679.                     $PL[] = $PLU;
  680.             }
  682.             if (!empty($PL) && $session->get(UserConstants::USER_CURRENT_POSITION) == 0) {
  683.                 $url = $this->router->generate('user_login_position');
  684.                 $event->setController(function () use ($url) {
  685.                     return new RedirectResponse($url);
  686.                 });
  687.             }
  688.             if ($CurrentRoute == "user_login_position") {
  689.                 if (!empty($session->get(UserConstants::USER_ID))) {
  690.                     // This is an system user. send him to system dashboard
  691.                     if ($session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SYSTEM) {
  692.                         // This is an system user. send him to system dashboard
  693.                         $url = $this->router->generate('system_admin_dashboard');
  694.                         $event->setController(function () use ($url) {
  695.                             return new RedirectResponse($url);
  696.                         });
  697.                     } else {
  698.                         if (!empty($session->get(UserConstants::USER_CURRENT_POSITION)) && $session->get(UserConstants::USER_CURRENT_POSITION) != 0) {
  699.                             // user position got set up. send him to the normal dashboard.
  702.                             $PL = json_decode($session->get(UserConstants::USER_POSITION_LIST), true);
  703.                             if ($PL == null) $PL = [];
  705.                             if (count($PL) <= 1) {
  707.                                 $url = $this->router->generate('dashboard');
  708.                                 $event->setController(function () use ($url) {
  709.                                     return new RedirectResponse($url);
  710.                                 });
  711.                             }
  712.                         }
  713.                     }
  714.                 } else {
  716.                     // User can't see this page until do a login. let him/her login first.
  717.                     $url = $this->router->generate('user_login');
  718.                     $event->setController(function () use ($url) {
  719.                         return new RedirectResponse($url);
  720.                     });
  721.                 }
  722.             }
  724.             if ($permissionOverride == 0 && $CurrentRoute != "dashboard" && $CurrentRoute != $session->get(UserConstants::USER_DEFAULT_ROUTE)) {
  725.                 if ($PROHIBIT_LIST != null or $PROHIBIT_LIST != []) {
  726.                     if (in_array($CurrentRoute, $PROHIBIT_LIST)) {
  727.                         // User is not authorized. send him to dashboard
  728. //                    $controller->addFlash(
  729. //                        'error',
  730. //                        'Sorry Couldnot insert Data.'
  731. //                    );
  732.                         $url = $this->router->generate('permission_denied_page');
  733.                         $event->setController(function () use ($url) {
  734.                             return new RedirectResponse($url);
  735.                         });
  736.                     }
  737.                 }
  738.             }
  739.         }
  741.         if ($controller[0] instanceof LoginInterface) {
  743.             $session = $this->session;
  745.             // Three situation here
  746.             //  1. Have no session
  747.             //  2. Have session but no position
  748.             //  3. Have session and position
  750.             $route = $event->getRequest()->attributes->get('_route');
  752.             $systemType = '_ERP';//default
  754.             $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  756.             if ($route == "user_login") {
  757.                 if ($request->request->get('remoteVerify', $request->query->get('remoteVerify', 0)) == 1) {
  758.                     $session->clear();
  759.                 } else if (!empty($session->get(UserConstants::USER_ID))) {
  760.                     // User already have logged in. lets check its type
  763.                     if ($systemType == '_ERP_') {
  764.                         if ($session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SYSTEM) {
  765.                             // This is an system user. send him to system dashboard
  766.                             $url = $this->router->generate('system_admin_dashboard');
  767.                             $event->setController(function () use ($url) {
  768.                                 return new RedirectResponse($url);
  769.                             });
  770.                         } else {
  771.                             // This user is a normal user. Check if its login position got set.
  772.                             if (!empty($session->get(UserConstants::USER_CURRENT_POSITION))) {
  773.                                 // user position got set up. send him to the normal dashboard.
  774.                                 $url = $this->router->generate('dashboard');
  775.                                 if ($request->request->has('remoteVerify')) {
  776.                                     $session->set('remoteVerified', 1);
  778.                                     $url = $this->router->generate('get_session_data_for_app');
  779.                                     $event->setController(function () use ($url) {
  780.                                         return new RedirectResponse($url);
  781.                                     });
  784.                                 }
  785.                                 $event->setController(function () use ($url) {
  786.                                     return new RedirectResponse($url);
  787.                                 });
  789.                             } else {
  790.                                 // user position have not set up. send it to the position page
  791.                                 $url = $this->router->generate('user_login_position');
  792.                                 $event->setController(function () use ($url) {
  793.                                     return new RedirectResponse($url);
  794.                                 });
  796.                             }
  797.                         }
  799.                         //do nothing its default to dashboard index
  800.                     } else if ($systemType == '_BUDDYBEE_') {
  801. //                        $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:BuddybeePublic:ConsultancyHomePage');
  802. //                        $event->setController($this->resolver->getController($request));
  803.                     }
  806.                 } else {
  807.                     if ($systemType == '_ERP_') {
  810.                         //do nothing its default to dashboard index
  811.                     } else if ($systemType == '_BUDDYBEE_' && $request->isMethod('GET')) {
  812.                         if ($request->request->has('oAuthData') || $request->query->has('oAuthData') || $request->query->has('code')) {
  814.                         } else {
  815.                             $event->getRequest()->attributes->set('_controller', 'ApplicationBundle\Modules\Authentication\Controller\UserLoginController::applicantLoginAction');
  816.                             $event->setController($this->resolver->getController($request));
  817.                         }
  818.                     }
  819. //                    if ($systemType == '_BUDDYBEE_' && $request->isMethod('POST')) {
  820. //
  821. //                            $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:UserLogin:applicantLogin');
  822. //                        $event->setController($this->resolver->getController($request));
  823. //                    }
  825.                 }
  826.             }
  829.         }
  831.         // Checking if its a system url request.
  832.         if ($controller[0] instanceof SystemInterface) {
  833.             // System controller.
  834.             $session = $this->session;
  835.             if (!empty($session->get(UserConstants::USER_ID))) {
  836.                 if ($session->get(UserConstants::USER_TYPE) != UserConstants::USER_TYPE_SYSTEM) {
  837.                     // Kick the idiot out from here. If possible, keep a track
  839.                     $url = $this->router->generate('user_logout');
  840.                     $event->setController(function () use ($url) {
  841.                         return new RedirectResponse($url);
  842.                     });
  843.                 } else {
  844.                     $lastCheckDateTime = null;
  845.                     $appValid = 1;
  846.                     $currentDateTime = new \DateTime();
  848.                     $currentTime = strtotime($currentDateTime->format('Y-m-d h:i:s'));
  849.                     $appIsValidTillTime = $currentTime;
  850.                     $appIsValidTillDateTime = $currentDateTime;
  852. //                    $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  854.                     if (!empty($session->get('lastCheckAppValidityTime'))) {
  855.                         $lastCheckDateTime = strtotime($session->get('lastCheckAppValidityTime'));
  856.                     } else {
  857.                         $lastCheckDateTime = strtotime('2022-01-01 00:00:00');
  858.                     }
  859.                     if (!empty($session->get('appIsValidTillTime'))) {
  860.                         $appIsValidTillTime = strtotime($session->get('appIsValidTillTime'));
  861.                         $appIsValidTillDateTime = new \DateTime($session->get('appIsValidTillTime'));
  862.                     } else {
  863. //                        $appIsValidTillTime=$currentDateTime;
  864. //                        $session->set('appIsValidTillTime', $appIsValidTillTime->format('Y-m-d h:i:s'));
  865.                     }
  866.                     if (!empty($session->get('appValid'))) {
  867.                         $appValid = $session->get('appValid');
  868.                     }
  870.                     $secondsTillLastCheck = abs($currentTime - $lastCheckDateTime);
  871. //                    $session->set('lastCheckAppValiditySecond', abs($currentTime - $lastCheckDateTime));
  872.                     if ($secondsTillLastCheck > 7200 || $appValid == 0) {
  873.                         $appValiditySeconds = $session->get('appValiditySeconds');
  875.                         $appDataJson = System::getAppDataByCurl();
  876.                         $appData = json_decode($appDataJson, true);
  877. //                        $appIsValidTillTime=$currentDateTime;
  878.                         if ($appData == null)
  879.                             $appData = [];
  880.                         if (isset($appData[$session->get(UserConstants::USER_APP_ID)])) {
  881.                             $session->set('appDataCurl', $appData[$session->get(UserConstants::USER_APP_ID)]);
  882.                             if ($appData[$session->get(UserConstants::USER_APP_ID)]['expired'] == 1) {
  883.                                 $appValid = 0;
  884.                                 $appValiditySeconds = 0;
  885.                             } else {
  886.                                 $appIsValidTillTime = strtotime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  887.                                 $appIsValidTillDateTime = new \DateTime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  888.                                 $appValiditySeconds = $appIsValidTillTime - $currentTime;
  889.                                 if ($appValiditySeconds < 0)
  890.                                     $appValid = 0;
  891.                                 else
  892.                                     $appValid = 1;
  893.                             }
  894.                         }
  896.                         $session->set('appValiditySeconds', $appValiditySeconds);
  897.                         $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  899.                         $session->set('lastCheckAppValidityTime', $currentDateTime->format('Y-m-d h:i:s'));
  900.                         $session->set('appValid', $appValid);
  901.                     }
  903.                     $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  904.                     if ($appValid != 1) {
  905.                         $url = $this->router->generate('user_logout');
  906. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  909.                         $event->setController(function () use ($url) {
  910.                             return new RedirectResponse($url);
  911.                         });
  912.                     }
  915.                     $gocId = $session->get(UserConstants::USER_GOC_ID);
  916.                     if ($gocId != 0 && $gocId != "") {
  918.                         $gocDbName = $session->get(UserConstants::USER_DB_NAME);
  919.                         $gocDbUser = $session->get(UserConstants::USER_DB_USER);
  920.                         $gocDbPass = $session->get(UserConstants::USER_DB_PASS);
  921.                         $gocDbHost = $session->get(UserConstants::USER_DB_HOST);
  924. //                        $connector = $this->container->get('application_connector');
  925.                         $connector = $this->applicationConnector;
  926.                         $connector->resetConnection(
  927.                             'default',
  928.                             $gocDbName,
  929.                             $gocDbUser,
  930.                             $gocDbPass,
  931.                             $gocDbHost,
  932.                             $reset = true);
  933.                     }
  934.                 }
  935.             } else {
  936.                 // Seriously !! How did this person get this url. Track the pc if possible.
  938.                 $url = $this->router->generate('user_login');
  939.                 $event->setController(function () use ($url) {
  940.                     return new RedirectResponse($url);
  941.                 });
  942.             }
  943.         }
  946.         //dashboard for diff aspects
  947.         if ($event->getRequest()->attributes->get('_route') == 'dashboard') {
  949.             $systemType = '_ERP';//default
  951.             $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  953.             if ($systemType == '_ERP_') {
  955.                 //do nothing its default to dashboard index
  956.             } else if ($systemType == '_BUDDYBEE_') {
  957.                 $event->getRequest()->attributes->set('_controller', 'ApplicationBundle\Modules\Buddybee\Controller\BuddybeePublicController:ConsultancyHomePageAction');
  958.                 $event->setController($this->resolver->getController($request));
  959.             } else if ($systemType == '_CENTRAL_') {
  960.                 $event->getRequest()->attributes->set('_controller', 'ApplicationBundle\Modules\HoneybeeWeb\Controller\HoneybeeWebPublicController:CentralHomePageAction');
  961.                 $event->setController($this->resolver->getController($request));
  962.             }
  965. //            $event->setController(function() use ($url) {
  966. //                return new RedirectResponse($url);
  967. //            });
  968. //            $event->setController((\ApplicationBundle\Controller\BuddybeePublicController())->ConsultancyHomePageAction() );
  969.         }
  972.     }
  974.     public function onKernelResponse(FilterResponseEvent $event)
  975.     {
  977.         $session = $this->session;
  978.         $request = $event->getRequest();
  979.         $response = $event->getResponse();
  980.         //temp debug
  982.         $em = $this->em;
  983.         $currRoute = $request->attributes->get('_route');
  984. //        if ($currRoute != "update_database_schema")
  985. //            MiscActions::encryptTrans($em, '_ALL_', 0);
  988.         if (
  989.             ($request->request->has('returnJson') || $request->request->has('remoteVerify')) &&
  990.             $request->request->has('token') &&
  991.             !in_array($currRoute, [
  992.                 'select_data_ajax',
  993.                 'select_data_api',
  994.                 'select_data_ajax_public',
  995.             ])
  997.         ) {
  998.             $currDate = new \DateTime();
  999.             $to_write = '';
  1000.             $to_write .= "\nToken--" . $request->request->get('token', 'NONE') . '  : ' . $currDate->format('F d Y H:i:s');
  1001.             $to_write .= "\nResponse:\n
  1002.             ";
  1003.             if (is_string($response->getContent()))
  1004.                 $to_write .= $response->getContent();
  1005.             else
  1006.                 $to_write .= json_encode($response->getContent());
  1008. //            System::log_it($this->container->getParameter('kernel.root_dir'), $to_write, $currRoute, 1);
  1009.         }
  1012.         if ($session->has('remoteVerified')) {
  1013.             $lifetime = 86400; // 1 day
  1015. //            $response->headers->setCookie(Cookie::create('PHPSESSID', $event->getRequest()->cookies->get('PHPSESSID'),time()+$lifetime));
  1016.             $response->headers->set('Access-Control-Allow-Origin', $event->getRequest()->headers->get('origin'));
  1017.             $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1019. //            $response->headers->setCookie(Cookie::create('PIKAMASTER', $event->getRequest()->cookies->get('PHPSESSID'),time()+$lifetime));
  1021.         } else {
  1024.             // create a hash and set it as a response header
  1025. //        $hash = sha1($response->getContent().$token);
  1026. //            $response->headers->set('Access-Control-Allow-Origin', '*');
  1027. //            $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1028.             $response->headers->set('Access-Control-Allow-Origin', $event->getRequest()->headers->get('origin'));
  1029.             $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1030. //            $response->headers->setCookie(Cookie::create('honeybeeCAuthId', $session->get(UserConstants::USER_ID)));
  1031. //            $response->headers->setCookie(Cookie::create('honeybeeCAuthId2', $event->getRequest()->cookies->get('PHPSESSID')));
  1033.         }
  1034. //        if($session->has(UserConstants::USER_ID)) {
  1035. //            if ($session->get(UserConstants::USER_ID) == '' || $session->get(UserConstants::USER_ID) == '') {
  1036. //                $response->headers->setCookie(Cookie::create('USRCKIE', ''));
  1037. //                $response->headers->setCookie(Cookie::create('REMEMBERME', ''));
  1038. //                $response->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', ''));
  1039. //            }
  1040. //        }
  1041. //        else
  1042. //        {
  1043. //            $response->headers->setCookie(Cookie::create('USRCKIE', ''));
  1044. //            $response->headers->setCookie(Cookie::create('REMEMBERME', ''));
  1045. //            $response->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', ''));
  1046. //        }
  1048.         if ($session->has('CLEARLOGIN')) {
  1049.             if ($session->get('CLEARLOGIN') == 1) {
  1052.                 if (version_compare(PHP_VERSION, '7.0.0', '>=')) {
  1053.                     $response->headers->setCookie(Cookie::create('USRCKIE', ''));
  1054.                     $response->headers->setCookie(Cookie::create('REMEMBERME', ''));
  1055.                     $response->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', ''));
  1056.                 } else {
  1057.                     $response->headers->setCookie(new Cookie('USRCKIE', ''));
  1058.                     $response->headers->setCookie(new Cookie('REMEMBERME', ''));
  1059.                     $response->headers->setCookie(new Cookie('CLEARLOGINCOOKIE', ''));
  1061.                 }
  1062.             }
  1063.             $session->set('CLEARLOGIN', 0);
  1064.         } else {
  1066.         }
  1067.         if ($session->has('REMEMBERME')) {
  1068.             if ($session->get('REMEMBERME') == 1) {
  1070.                 $lifetime = 86400; // 1 day
  1071.                 if (version_compare(PHP_VERSION, '7.0.0', '>=')) {
  1072.                     $response->headers->setCookie(Cookie::create('USRCKIE', json_encode(array(
  1073.                             'uid' => $session->get(UserConstants::USER_ID),
  1074.                             'ut' => $session->get(UserConstants::USER_TYPE),
  1075.                             'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1076.                             'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1077.                         )
  1078.                     ), time() + $lifetime
  1079.                     )
  1080.                     );
  1083.                     $response->headers->setCookie(Cookie::create('REMEMBERMEACTIVATED', 'PIKA'));
  1084.                 } else {
  1085.                     $response->headers->setCookie(new Cookie('USRCKIE', json_encode(array(
  1086.                                 'uid' => $session->get(UserConstants::USER_ID),
  1087.                                 'ut' => $session->get(UserConstants::USER_TYPE),
  1088.                                 'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1089.                                 'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1090.                             )
  1091.                         ), time() + $lifetime
  1092.                         )
  1093.                     );
  1096.                     $response->headers->setCookie(new Cookie('REMEMBERMEACTIVATED', 'PIKA'));
  1098.                 }
  1100.             } else {
  1101.                 if (version_compare(PHP_VERSION, '7.0.0', '>=')) {
  1103.                     $response->headers->setCookie(Cookie::create('USRCKIE', json_encode(array(
  1104.                                 'uid' => $session->get(UserConstants::USER_ID),
  1105.                                 'ut' => $session->get(UserConstants::USER_TYPE),
  1106.                                 'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1107.                                 'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1108.                             )
  1109.                         )
  1110.                     )
  1111.                     );
  1112.                     $response->headers->setCookie(Cookie::create('REMEMBERMEACTIVATED', 'MASTER'));
  1113.                 } else {
  1115.                     $response->headers->setCookie(new Cookie('USRCKIE', json_encode(array(
  1116.                                     'uid' => $session->get(UserConstants::USER_ID),
  1117.                                     'ut' => $session->get(UserConstants::USER_TYPE),
  1118.                                     'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1119.                                     'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1120.                                 )
  1121.                             )
  1122.                         )
  1123.                     );
  1124.                     $response->headers->setCookie(new Cookie('REMEMBERMEACTIVATED', 'MASTER'));
  1125.                 }
  1128.             }
  1129.         } else {
  1131.             if (version_compare(PHP_VERSION, '7.0.0', '>='))
  1132.                 $response->headers->setCookie(Cookie::create('REMEMBERMEACTIVATED', 'CHU'));
  1133.             else
  1134.                 $response->headers->setCookie(new Cookie('REMEMBERMEACTIVATED', 'CHU'));
  1136.         }
  1139.     }
  1140. }