*/ class Mage_XmlConnect_CustomerController extends Mage_XmlConnect_Controller_Action { /** * Customer authentication action * * @return null */ public function loginAction() { $session = $this->_getSession(); $request = $this->getRequest(); if ($session->isLoggedIn()) { $this->_message($this->__('You are already logged in.'), self::MESSAGE_STATUS_ERROR); return; } if ($request->isPost()) { $user = $request->getParam('username'); $pass = $request->getParam('password'); try { if ($session->login($user, $pass)) { if ($session->getCustomer()->getIsJustConfirmed()) { $session->getCustomer()->sendNewAccountEmail('confirmed', '', Mage::app()->getStore()->getId()); } $this->_message($this->__('Authentication complete.'), self::MESSAGE_STATUS_SUCCESS); } else { $this->_message($this->__('Invalid login or password.'), self::MESSAGE_STATUS_ERROR); } } catch (Mage_Core_Exception $e) { switch ($e->getCode()) { case Mage_Customer_Model_Customer::EXCEPTION_EMAIL_NOT_CONFIRMED: // TODO: resend confirmation email message with action $message = $e->getMessage(); break; case Mage_Customer_Model_Customer::EXCEPTION_INVALID_EMAIL_OR_PASSWORD: $message = $e->getMessage(); break; default: $message = $e->getMessage(); } $this->_message($message, self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { $this->_message($this->__('Customer authentication problem.'), self::MESSAGE_STATUS_ERROR); } } else { $this->_message($this->__('Login and password are required.'), self::MESSAGE_STATUS_ERROR); } } /** * Customer logout * * @return null */ public function logoutAction() { try { $this->_getSession()->logout(); $this->_message($this->__('Logout complete.'), self::MESSAGE_STATUS_SUCCESS); } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { Mage::logException($e); $this->_message($this->__('Customer logout problem.'), self::MESSAGE_STATUS_ERROR); } } /** * Customer registration/edit account form * * @return null */ public function formAction() { try { $customer = null; $editFlag = (int)$this->getRequest()->getParam('edit'); if ($editFlag == 1) { if (!$this->_getSession()->isLoggedIn()) { $this->_message( $this->__('Customer not logged in.'), self::MESSAGE_STATUS_ERROR, array('logged_in' => '0') ); return; } $customer = $this->_getSession()->getCustomer(); } $this->loadLayout(false)->getLayout()->getBlock('xmlconnect.customer.form')->setCustomer($customer); $this->renderLayout(); } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { Mage::logException($e); $this->_message($this->__('Can\'t load customer form.'), self::MESSAGE_STATUS_ERROR); } } /** * Change customer data action * * @return null */ public function editAction() { if (!$this->_getSession()->isLoggedIn()) { $this->_message( $this->__('Customer not logged in.'), self::MESSAGE_STATUS_ERROR, array('logged_in' => '0') ); return; } if ($this->getRequest()->isPost()) { $customer = $this->_getSession()->getCustomer(); /* @var $customerForm Mage_Customer_Model_Form */ $customerForm = Mage::getModel('customer/form'); $customerForm->setFormCode('customer_account_edit')->setEntity($customer); $customerData = $customerForm->extractData($this->getRequest()); $errors = array(); $customerErrors = $customerForm->validateData($customerData); if ($customerErrors !== true) { $errors = array_merge($customerErrors, $errors); } else { $customerForm->compactData($customerData); $customerErrors = $customer->validate(); if (is_array($customerErrors)) { $errors = array_merge($customerErrors, $errors); } } if ($this->getRequest()->getParam('change_password')) { $currPass = $this->getRequest()->getPost('current_password'); $newPass = $this->getRequest()->getPost('password'); $confPass = $this->getRequest()->getPost('confirmation'); if (empty($currPass) || empty($newPass) || empty($confPass)) { $errors[] = $this->__('Password fields cannot be empty.'); } if ($newPass != $confPass) { $errors[] = $this->__('Please make sure your passwords match.'); } $oldPass = $this->_getSession()->getCustomer()->getPasswordHash(); if (strpos($oldPass, ':')) { list(, $salt) = explode(':', $oldPass); } else { $salt = false; } if ($customer->hashPassword($currPass, $salt) == $oldPass) { $customer->setPassword($newPass); } else { $errors[] = $this->__('Invalid current password.'); } } if (!empty($errors)) { /** @var $message Mage_XmlConnect_Model_Simplexml_Element */ $message = Mage::getModel('xmlconnect/simplexml_element', ''); $message->addChild('status', self::MESSAGE_STATUS_ERROR); $message->addChild('text', implode(' ', $errors)); $this->getResponse()->setBody($message->asNiceXml()); return; } try { $customer->save(); $this->_getSession()->setCustomer($customer); $this->_message($this->__('Account information has been saved.'), self::MESSAGE_STATUS_SUCCESS); return; } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { if ($e instanceof Mage_Eav_Model_Entity_Attribute_Exception) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } else { $this->_message($this->__('Can\'t save the customer.'), self::MESSAGE_STATUS_ERROR); } } } else { $this->_message($this->__('POST data is not valid.'), self::MESSAGE_STATUS_ERROR); } } /** * Save customer account * * @return null */ public function saveAction() { $session = $this->_getSession(); $request = $this->getRequest(); if ($session->isLoggedIn()) { $this->_message($this->__('You are already logged in.'), self::MESSAGE_STATUS_ERROR); return; } $session->setEscapeMessages(true); // prevent XSS injection in user input if ($request->isPost()) { $errors = array(); /* @var $customer Mage_Customer_Model_Customer */ $customer = Mage::registry('current_customer'); if (is_null($customer)) { $customer = Mage::getModel('customer/customer'); } /* @var $customerForm Mage_Customer_Model_Form */ $customerForm = Mage::getModel('customer/form'); $customerForm->setFormCode('customer_account_create')->setEntity($customer); $customerData = $customerForm->extractData($this->getRequest()); if ($this->getRequest()->getParam('is_subscribed', false)) { $customer->setIsSubscribed(1); } /** * Initialize customer group id */ $customer->getGroupId(); try { $customerErrors = $customerForm->validateData($customerData); if ($customerErrors !== true) { $errors = array_merge($customerErrors, $errors); } else { $customerForm->compactData($customerData); $customer->setPassword($this->getRequest()->getPost('password')); $customer->setConfirmation($this->getRequest()->getPost('confirmation')); $customerErrors = $customer->validate(); if (is_array($customerErrors)) { $errors = array_merge($customerErrors, $errors); } } $validationResult = count($errors) == 0; if (true === $validationResult) { $customer->save(); if ($customer->isConfirmationRequired()) { $customer->sendNewAccountEmail( 'confirmation', $session->getBeforeAuthUrl(), Mage::app()->getStore()->getId() ); $message = $this->__('Account confirmation is required. Please check your email for the confirmation link.'); /** @var $messageXmlObj Mage_XmlConnect_Model_Simplexml_Element */ $messageXmlObj = Mage::getModel('xmlconnect/simplexml_element', ''); $messageXmlObj->addChild('status', self::MESSAGE_STATUS_SUCCESS); $messageXmlObj->addChild('text', $message); $messageXmlObj->addChild('confirmation', 1); $this->getResponse()->setBody($messageXmlObj->asNiceXml()); return; } else { $session->setCustomerAsLoggedIn($customer); $customer->sendNewAccountEmail('registered', '', Mage::app()->getStore()->getId()); $this->_message($this->__('Thank you for registering!'), self::MESSAGE_STATUS_SUCCESS); return; } } else { if (is_array($errors)) { $message = implode("\n", $errors); } else { $message = $this->__('Invalid customer data.'); } $this->_message($message, self::MESSAGE_STATUS_ERROR); return; } } catch (Mage_Core_Exception $e) { if ($e->getCode() === Mage_Customer_Model_Customer::EXCEPTION_EMAIL_EXISTS) { $message = $this->__('An account with this email address already exists.'); $session->setEscapeMessages(false); } else { $message = $e->getMessage(); } $this->_message($message, self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { $this->_message($this->__('Can\'t save the customer.'), self::MESSAGE_STATUS_ERROR); } } } /** * Send new password to customer by specified email * * @return null */ public function forgotPasswordAction() { $email = $this->getRequest()->getPost('email'); if ($email) { if (!Zend_Validate::is($email, 'EmailAddress')) { $this->_message($this->__('Invalid email address.'), self::MESSAGE_STATUS_ERROR); return; } $customer = Mage::getModel('customer/customer')->setWebsiteId(Mage::app()->getStore()->getWebsiteId()) ->loadByEmail($email); if ($customer->getId()) { try { $newPassword = $customer->generatePassword(); $customer->changePassword($newPassword, false); $customer->sendPasswordReminderEmail(); $this->_message( $this->__('A new password has been sent.'), self::MESSAGE_STATUS_SUCCESS ); return; } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { $this->_message( $this->__('Problem changing or sending password.'), self::MESSAGE_STATUS_ERROR ); } } else { $this->_message( $this->__('This email address was not found in our records.'), self::MESSAGE_STATUS_ERROR ); } } else { $this->_message($this->__('Customer email not specified.'), self::MESSAGE_STATUS_ERROR); } } /** * Customer addresses list * * @return null */ public function addressAction() { if (!$this->_getSession()->isLoggedIn()) { $this->_message( $this->__('Customer not logged in.'), self::MESSAGE_STATUS_ERROR, array('logged_in' => '0') ); return; } if (count($this->_getSession()->getCustomer()->getAddresses())) { try { $this->loadLayout(false); $this->renderLayout(); } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { $this->_message($this->__('Unable to load addresses.'), self::MESSAGE_STATUS_ERROR); Mage::logException($e); } } else { /** @var $message Mage_XmlConnect_Model_Simplexml_Element */ $message = Mage::getModel('xmlconnect/simplexml_element', ''); $message->addChild('status', self::MESSAGE_STATUS_ERROR); $message->addChild('is_empty_address_book', 1); $this->getResponse()->setBody($message->asNiceXml()); } } /** * Customer add/edit address form * * @return null */ public function addressFormAction() { try { if (!$this->_getSession()->isLoggedIn()) { $this->_message( $this->__('Customer not logged in.'), self::MESSAGE_STATUS_ERROR, array('logged_in' => '0') ); return; } $address = Mage::getModel('customer/address'); /** * Init address object */ $addressId = (int)$this->getRequest()->getParam('id'); if ($addressId) { $address->load($addressId); if ($address->getCustomerId() != $this->_getSession()->getCustomerId()) { $this->_message($this->__('Specified address does not exist.'), self::MESSAGE_STATUS_ERROR); return; } } $this->loadLayout(false)->getLayout()->getBlock('xmlconnect.customer.address.form')->setAddress($address); $this->renderLayout(); } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); Mage::logException($e); } catch (Exception $e) { Mage::logException($e); $this->_message($this->__('Can\'t load customer form.'), self::MESSAGE_STATUS_ERROR); } } /** * Remove customer address * * @return null */ public function deleteAddressAction() { if (!$this->_getSession()->isLoggedIn()) { $this->_message( $this->__('Customer not logged in.'), self::MESSAGE_STATUS_ERROR, array('logged_in' => '0') ); return; } $addressId = $this->getRequest()->getParam('id', false); if ($addressId) { $address = Mage::getModel('customer/address')->load($addressId); // Validate address_id <=> customer_id if ($address->getCustomerId() != $this->_getSession()->getCustomerId()) { $this->_message($this->__('Address does not belong to this customer.'), self::MESSAGE_STATUS_ERROR); return; } try { $address->delete(); $this->_message($this->__('Address has been deleted.'), self::MESSAGE_STATUS_SUCCESS); } catch (Exception $e) { Mage::logException($e); $this->_message($this->__('An error occurred while deleting the address.'), self::MESSAGE_STATUS_ERROR); } } } /** * Add/Save customer address * * @return null */ public function saveAddressAction() { if (!$this->_getSession()->isLoggedIn()) { $this->_message( $this->__('Customer not logged in.'), self::MESSAGE_STATUS_ERROR, array('logged_in' => '0') ); return; } // Save data if ($this->getRequest()->isPost()) { $customer = $this->_getSession()->getCustomer(); /* @var $address Mage_Customer_Model_Address */ $address = Mage::getModel('customer/address'); $addressId = $this->getRequest()->getParam('id'); if ($addressId) { $existsAddress = $customer->getAddressById($addressId); if ($existsAddress->getId() && $existsAddress->getCustomerId() == $customer->getId()) { $address->setId($existsAddress->getId()); } } $errors = array(); /* @var $addressForm Mage_Customer_Model_Form */ $addressForm = Mage::getModel('customer/form'); $addressForm->setFormCode('customer_address_edit') ->setEntity($address); $addressData = $addressForm->extractData($this->getRequest()); $addressErrors = $addressForm->validateData($addressData); if ($addressErrors !== true) { $errors = $addressErrors; } try { $addressForm->compactData($addressData); $address->setCustomerId($customer->getId()) ->setIsDefaultBilling($this->getRequest()->getParam('default_billing', false)) ->setIsDefaultShipping($this->getRequest()->getParam('default_shipping', false)); $addressErrors = $address->validate(); if ($addressErrors !== true) { $errors = array_merge($errors, $addressErrors); } $addressValidation = count($errors) == 0; if (true === $addressValidation) { $address->save(); /** @var $message Mage_XmlConnect_Model_Simplexml_Element */ $message = Mage::getModel('xmlconnect/simplexml_element', ''); $message->addChild('status', self::MESSAGE_STATUS_SUCCESS); $message->addChild('text', $this->__('Address has been saved.')); $message->addChild('address_id', $address->getId()); $this->getResponse()->setBody($message->asNiceXml()); return; } else { if (is_array($errors)) { $this->_message(implode('. ', $errors), self::MESSAGE_STATUS_ERROR); } else { $this->_message($this->__('Can\'t save address.'), self::MESSAGE_STATUS_ERROR); } } } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { Mage::logException($e); $this->_message($this->__('Can\'t save address.'), self::MESSAGE_STATUS_ERROR); } } else { $this->_message($this->__('Address data not specified.'), self::MESSAGE_STATUS_ERROR); } } /** * Customer orders list * * @return null */ public function orderListAction() { if (!$this->_getSession()->isLoggedIn()) { $this->_message( $this->__('Customer not logged in.'), self::MESSAGE_STATUS_ERROR, array('logged_in' => '0') ); return; } try { $this->loadLayout(false); $this->renderLayout(); } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { $this->_message($this->__('Unable to load order list.'), self::MESSAGE_STATUS_ERROR); Mage::logException($e); } } /** * Customer order details * * @return null */ public function orderDetailsAction() { try { if (!$this->_getSession()->isLoggedIn()) { $this->_message( $this->__('Customer not logged in.'), self::MESSAGE_STATUS_ERROR, array('logged_in' => '0') ); return; } $orderId = (int) $this->getRequest()->getParam('order_id'); if (!$orderId) { $this->_message($this->__('Order id is not specified.'), self::MESSAGE_STATUS_ERROR); return; } $order = Mage::getModel('sales/order')->load($orderId); if ($this->_canViewOrder($order)) { Mage::register('current_order', $order); } else { $this->_message($this->__('Order is not available.'), self::MESSAGE_STATUS_ERROR); return; } $this->loadLayout(false); $this->renderLayout(); return; } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { $this->_message($this->__('Unable to render an order.'), self::MESSAGE_STATUS_ERROR); Mage::logException($e); } } /** * Check order view availability * * @param Mage_Sales_Model_Order $order * @return bool */ protected function _canViewOrder($order) { $customerId = Mage::getSingleton('customer/session')->getCustomerId(); $availableStates = Mage::getSingleton('sales/order_config')->getVisibleOnFrontStates(); if ($order->getId() && $order->getCustomerId() && ($order->getCustomerId() == $customerId) && in_array($order->getState(), $availableStates, true) ) { return true; } return false; } /** * Check if customer is loggined * * @return null */ public function isLogginedAction() { /** @var $message Mage_XmlConnect_Model_Simplexml_Element */ $message = Mage::getModel('xmlconnect/simplexml_element', ''); $message->addChild('is_loggined', (int)$this->_getSession()->isLoggedIn()); $this->getResponse()->setBody($message->asNiceXml()); } /** * Filtering posted data. Converting localized data if needed * * @param array $data * @return array */ protected function _filterPostData($data) { $data = $this->_filterDates($data, array('dob')); return $data; } /** * Get customer session model * * @return Mage_Customer_Model_Session */ protected function _getSession() { return Mage::getSingleton('customer/session'); } /** * Store Credit info * * @return null */ public function storeCreditAction() { try { /** * Check is available Customer Balance */ if (!is_object(Mage::getConfig()->getNode('modules/Enterprise_CustomerBalance'))) { $this->_message( $this->__('Customer balance available in enterprise version of Magento only.'), self::MESSAGE_STATUS_ERROR ); return; } $this->loadLayout(false); $this->renderLayout(); return; } catch (Mage_Core_Exception $e) { $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { $this->_message($this->__('Unable to render the store credits.'), self::MESSAGE_STATUS_ERROR); Mage::logException($e); } } /** * Check Gift card action * * @return null */ public function giftcardCheckAction() { try { /** * Check is available Customer Balance */ if (!is_object(Mage::getConfig()->getNode('modules/Enterprise_GiftCardAccount'))) { $this->_message( $this->__('Gift card account available in enterprise version of Magento only.'), self::MESSAGE_STATUS_ERROR ); return; } /* @var $card Enterprise_GiftCardAccount_Model_Giftcardaccount */ $card = Mage::getModel('enterprise_giftcardaccount/giftcardaccount') ->loadByCode($this->getRequest()->getParam('giftcard_code', '')); Mage::register('current_giftcardaccount', $card); $card->isValid(true, true, true, false); $this->loadLayout(false); $this->renderLayout(); return; } catch (Mage_Core_Exception $e) { $card->unsetData(); $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { $this->_message($this->__('Unable to render a gift card account.'), self::MESSAGE_STATUS_ERROR); Mage::logException($e); } } /** * Redeem Gift card action * * @return null */ public function giftcardRedeemAction() { try { /** * Check is available Customer Balance */ if (!is_object(Mage::getConfig()->getNode('modules/Enterprise_GiftCardAccount'))) { $this->_message( $this->__('Gift card account available in enterprise version of Magento only.'), self::MESSAGE_STATUS_ERROR ); return; } $code = $this->getRequest()->getParam('giftcard_code', ''); if ($code) { if (!Mage::helper('enterprise_customerbalance')->isEnabled()) { Mage::throwException($this->__('Redemption functionality is disabled.')); } Mage::getModel('enterprise_giftcardaccount/giftcardaccount')->loadByCode($code) ->setIsRedeemed(true)->redeem(); $this->_message( $this->__('Gift Card "%s" was redeemed.', Mage::helper('core')->escapeHtml($code)), self::MESSAGE_STATUS_SUCCESS ); } return; } catch (Mage_Core_Exception $e) { if (isset($card) && is_object($card)) { $card->unsetData(); } $this->_message($e->getMessage(), self::MESSAGE_STATUS_ERROR); } catch (Exception $e) { $this->_message($this->__('Cannot redeem Gift Card.'), self::MESSAGE_STATUS_ERROR); Mage::logException($e); } } }