GenerateAuthCode.php

<?php
namespace Typoheads\Formhandler\Finisher;
    /*                                                                        *
     * This script is part of the TYPO3 project - inspiring people to share!  *
     *                                                                        *
     * TYPO3 is free software; you can redistribute it and/or modify it under *
     * the terms of the GNU General Public License version 2 as published by  *
     * the Free Software Foundation.                                          *
     *                                                                        *
     * This script is distributed in the hope that it will be useful, but     *
     * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHAN-    *
     * TABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General      *
     * Public License for more details.                                       *
     *                                                                        */

/**
 * This finisher generates a unique code for a database entry.
 * This can be used for FE user registration or newsletter registration.
 *
 * @author    Reinhard Führicht <rf@typoheads.at>
 */
class GenerateAuthCode extends AbstractFinisher
{

    /**
     * The main method called by the controller
     *
     * @return array The probably modified GET/POST parameters
     */
    public function process()
    {
        $firstInsertInfo = [];
        if ($this->utilityFuncs->getSingle($this->settings, 'uid')) {
            $uidField = $this->utilityFuncs->getSingle($this->settings, 'uidField');
            if (!$uidField) {
                $uidField = 'uid';
            }
            $firstInsertInfo = [
                'table' => $this->utilityFuncs->getSingle($this->settings, 'table'),
                'uidField' => $uidField,
                'uid' => $this->utilityFuncs->getSingle($this->settings, 'uid')
            ];
        } elseif (is_array($this->gp['saveDB'])) {
            if (isset($this->settings['table'])) {
                $table = $this->utilityFuncs->getSingle($this->settings, 'table');
                foreach ($this->gp['saveDB'] as $idx => $insertInfo) {
                    if ($insertInfo['table'] === $table) {
                        $firstInsertInfo = $insertInfo;
                        break;
                    }
                }
            }
            if (empty($firstInsertInfo)) {
                reset($this->gp['saveDB']);
                $firstInsertInfo = current($this->gp['saveDB']);
            }
        }
        $table = $firstInsertInfo['table'];
        $uid = $GLOBALS['TYPO3_DB']->fullQuoteStr($firstInsertInfo['uid'], $table);
        $uidField = $firstInsertInfo['uidField'];
        if (!$uidField) {
            $uidField = 'uid';
        }
        if ($table && $uid && $uidField) {
            $selectFields = '*';
            if ($this->settings['selectFields']) {
                $selectFields = $this->utilityFuncs->getSingle($this->settings, 'selectFields');
            }
            $res = $GLOBALS['TYPO3_DB']->exec_SELECTquery($selectFields, $table, $uidField . '=' . $uid);
            if ($res) {
                $row = $GLOBALS['TYPO3_DB']->sql_fetch_assoc($res);
                $authCode = $this->generateAuthCode($row);
                $this->gp['generated_authCode'] = $authCode;

                // looking for the page, which should be used for the authCode Link
                // first look for TS-setting 'authCodePage', second look for redirect_page-setting, third use actual page
                if (isset($this->settings['authCodePage'])) {
                    $authCodePage = $this->utilityFuncs->getSingle($this->settings, 'authCodePage');
                } else {
                    $authCodePage = $this->utilityFuncs->pi_getFFvalue($this->cObj->data['pi_flexform'], 'redirect_page', 'sMISC');
                }
                if (!$authCodePage) {
                    $authCodePage = $GLOBALS['TSFE']->id;
                }

                //create the parameter-array for the authCode Link
                $paramsArray = array_merge($firstInsertInfo, ['authCode' => $authCode]);

                if ($this->settings['excludeParams']) {
                    $excludeParams = \TYPO3\CMS\Core\Utility\GeneralUtility::trimExplode(',', $this->utilityFuncs->getSingle($this->settings, 'excludeParams'));
                    foreach ($excludeParams as $param) {
                        if (isset($paramsArray[$param])) {
                            unset($paramsArray[$param]);
                        }
                    }
                }

                // If we have set a formValuesPrefix, add it to the parameter-array
                if ($this->settings['customFormValuesPrefix']) {
                    $formValuesPrefix = $this->utilityFuncs->getSingle($this->settings, 'customFormValuesPrefix');
                } else {
                    $formValuesPrefix = $this->globals->getFormValuesPrefix();
                }
                if (!empty($formValuesPrefix)) {
                    $paramsArray = [$formValuesPrefix => $paramsArray];
                }
                $paramsArray['no_cache'] = 1;

                $linkConf = [
                    'parameter' => $authCodePage,
                    'additionalParams' => \TYPO3\CMS\Core\Utility\GeneralUtility::implodeArrayForUrl('', $paramsArray),
                    'returnLast' => 'url',
                    'useCacheHash' => 1,
                    'forceAbsoluteUrl' => 1
                ];

                $url = $this->cObj->typoLink_URL($linkConf);
                $this->gp['authCodeUrl'] = $url;
            }
        }
        return $this->gp;
    }

    /**
     * Return a hash value to send by email as an auth code.
     *
     * @param array The submitted form data
     * @return string The auth code
     */
    protected function generateAuthCode($row)
    {
        return \TYPO3\CMS\Core\Utility\GeneralUtility::hmac(serialize($row), 'formhandler');
    }

}