source: extensions/oAuth/include/test/examples/signin_signup/application/controllers/users.php @ 20293

<?php
class users extends controller { 
        function index()
        {
                if( isset( $_SESSION["user"] ) ){
                        $this->redirect( "users/profile" );
                }
                else{
                        $this->redirect( "users/login" );
                }
        }

        function login()
        {
                $data = array();

                // login form submitted?
                if( count( $_POST ) ){
                        // load user and authentication models
                        $user = $this->loadModel( "user" );

                        // get the user data from database 
                        $user_data = $user->find_by_email_and_password( $_POST["email"], $_POST["password"] );

                        // user found?
                        if( $user_data ){
                                $_SESSION["user"] = $user_data["id"]; 

                                $this->redirect( "users/profile" );
                        }

                        $data["error_message"] = '<b style="color:red">Bad Email or password! Try again.</b>';
                }

                // load login view
                $this->loadView( "users/login", $data );
        }

        function logout()
        {
                // every thing is within php sessions, just destory it
                $_SESSION = array(); 
                session_destroy();

                // go back home 
                $this->redirect( "users/login" );
        }

        function register()
        {
                $data = array();

                // load user model 
                $user = $this->loadModel( "user" ); 

                // registration form submitted?
                if( count( $_POST ) ){
                        $email      = $_POST["email"];
                        $password   = $_POST["password"];
                        $first_name = $_POST["first_name"];
                        $last_name  = $_POST["last_name"];

                        if( ! $email || ! $password ){
                                $data["error_message"] = '<br /><b style="color:red">Your email and a password are required!</b>';
                        }
                        else{
                                // check if email is in use?
                                $user_info = $user->find_by_email( $email );

                                // if email used on users table, we display an error
                                if( $user_info ){
                                        $data["error_message"] = '<br /><b style="color:red">Email alredy in use with another account!</b>';
                                }
                                else{
                                        // create new user
                                        $new_user_id = $user->create( $email, $password, $first_name, $last_name );

                                        // set user connected
                                        $_SESSION["user"] = $new_user_id; 
 
                                        $this->redirect( "users/profile" );
                                }
                        }
                }

                $this->loadView( "users/register", $data );
        }

        function complete_registration()
        {
                $data = array();

                // load user model 
                $user = $this->loadModel( "user" ); 

                // complete registration form submitted?
                if( count( $_POST ) ){
                        $email      = $_POST["email"];
                        $password   = $_POST["password"];
                        $first_name = $_POST["first_name"];
                        $last_name  = $_POST["last_name"];

                        if( ! $email || ! $password ){
                                $data["error_message"] = '<br /><b style="color:red">Your email and a password are really important for us!</b>';
                        }
                        else{
                                // check if email is in use?
                                $user_info = $user->find_by_email( $email ); 

                                // if email used on users table, we display an error
                                if( $user_info && $user_info["id"] != $_SESSION["user"] ){
                                        $data["error_message"] = '<br /><b style="color:red">Email already in use with another account!</b>';
                                }
                                else{
                                        // update user profile
                                        $user->update( $_SESSION["user"], $email, $password, $first_name, $last_name );

                                        // here we go
                                        $this->redirect( "users/profile" );
                                }
                        }
                }

                // get the user data from database 
                $user_data = $user->find_by_id( $_SESSION["user"] );

                // load complete registration form view 
                $data["user_data"] = $user_data;
                $this->loadView( "users/complete_registration", $data ); 
        }

        function profile()
        {
                // user connected?
                if( ! isset( $_SESSION["user"] ) ){
                        $this->redirect( "users/login" );
                }

                // load user and authentication models
                $user = $this->loadModel( "user" );
                $authentication = $this->loadModel( "authentication" );

                // get the user data from database 
                $user_data = $user->find_by_id( $_SESSION["user"] );

                // provider like twitter, linkedin, do not provide the user email
                // in this case, we should ask them to complete their profile before continuing
                if( ! $user_data["email"] ){
                        $this->redirect( "users/complete_registration" );
                }

                // get the user authentication info from db, if any
                $user_authentication = $authentication->find_by_user_id( $_SESSION["user"] );

                // load profile view
                $data = array( "user_data" => $user_data, "user_authentication" => $user_authentication );
                $this->loadView( "users/profile", $data );
        }
}