You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

AdminController.php 4.8KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165
  1. <?php
  2. namespace App\Http\Controllers\Auth;
  3. use Illuminate\Http\Request;
  4. use App\Http\Controllers\Controller;
  5. use Illuminate\Support\Facades\Auth;
  6. use Illuminate\Support\Facades\Log;
  7. use App\Staff;
  8. use App\Model\StaffDetail;
  9. Use Hash;
  10. use Carbon\Carbon;
  11. use Gate;
  12. class AdminController extends Controller
  13. {
  14. //
  15. public function get_guard(){
  16. if(Auth::guard('contractor')->check())
  17. {return "contractor";}
  18. elseif(Auth::guard('cs')->check()){
  19. {return "cs";}
  20. }
  21. elseif(Auth::guard('ms')->check())
  22. {return "ms";}
  23. }
  24. public function showFormAdmin(){
  25. return view('login_cs_co');
  26. }
  27. public function encryptPassword($action, $string) {
  28. $output = false;
  29. $encrypt_method = "AES-256-CBC";
  30. $secret_key = '28472B4B6250655368566D5970337336';
  31. $secret_iv = md5(md5($string)); //'This is my secret iv';
  32. // hash
  33. $key = hash('sha256', $secret_key);
  34. $iv = substr(hash('sha256', $secret_iv), 0, 16);
  35. if ( $action == 'encrypt' ) {
  36. $output = openssl_encrypt($string, $encrypt_method, $key, 0, $iv);
  37. $output = base64_encode($output);
  38. } else if( $action == 'decrypt' ) {
  39. $output = openssl_decrypt(base64_decode($string), $encrypt_method, $key, 0, $iv);
  40. }
  41. return $output;
  42. }
  43. public function requestLoginAdmin(Request $request) {
  44. $this->validate($request, [
  45. 'email' => 'required|email'
  46. // 'password' => 'required|min:6'
  47. ]);
  48. $user = '';
  49. $roles_access = '';
  50. if($request->roles == 'contractor'){
  51. $roles_access = 'Contractor';
  52. }else if($request->roles == 'customer-service'){
  53. $roles_access = 'Customer Service';
  54. }else if($request->roles == 'marketing'){
  55. $roles_access = 'Marketing';
  56. }
  57. try {
  58. $message = trans('messages.invalid_login_credentials');
  59. $rememberMe = false;
  60. $user = Staff::where('email', $request->email)->where('roles_access',$roles_access)->first();
  61. if (!empty($user)) {
  62. if($this->encryptPassword('encrypt', $request->password) == $user->password){
  63. // Update last_login & last ip
  64. $user->last_login_at = Carbon::now(new \DateTimeZone('Asia/Kuala_Lumpur'))->toDateTimeString();
  65. $user->last_login_ip = $request->getClientIp();
  66. $user->save();
  67. if($user->roles_access == "Contractor"){
  68. Auth::guard('contractor')->loginUsingId($user->_id, $rememberMe);
  69. if (Carbon::now()->diffInDays($user->created_at) >= 90) {
  70. return $this->expired($user->_id);
  71. }
  72. else{
  73. return redirect('/contractor');
  74. }
  75. }
  76. else if($user->roles_access == "Customer Service"){
  77. Auth::guard('cs')->loginUsingId($user->_id, $rememberMe);
  78. if (Carbon::now()->diffInDays($user->created_at) >= 90) {
  79. return $this->expired($user->_id);
  80. }else{
  81. return redirect('/customer-service');
  82. }
  83. }else if($user->roles_access == "Developer"){
  84. Auth::guard('cs')->loginUsingId($user->_id, $rememberMe);
  85. if (Carbon::now()->diffInDays($user->created_at) >= 90) {
  86. return $this->expired($user->_id);
  87. }else{
  88. return redirect('/customer-service');
  89. }
  90. }else if($user->roles_access == "Marketing"){
  91. Auth::guard('ms')->loginUsingId($user->_id, $rememberMe);
  92. if (Carbon::now()->diffInDays($user->created_at) >= 90) {
  93. return $this->expired($user->_id);
  94. }else{
  95. return redirect('/marketing');
  96. }
  97. }
  98. }
  99. }
  100. } catch (\Exception $e) {
  101. Log::error(__CLASS__ . "::" . __METHOD__ . " " . $e->getMessage() . "on line" . $e->getLine());
  102. }
  103. return redirect('/login/dashboard/admin')->with('error_msg', $message);
  104. }
  105. public function requestlogout(){
  106. // Get Current member id
  107. $id = Auth::guard($this->get_guard())->id();
  108. if (Auth::guard($this->get_guard())->check()) {
  109. $user = Staff::find($id);
  110. // Update last_login & last ip
  111. $user->last_login_at = Carbon::now(new \DateTimeZone('Asia/Kuala_Lumpur'))->toDateTimeString();
  112. $user->last_login_ip = \Request::getClientIp();
  113. $user->save();
  114. // Proceed to Log Out
  115. Auth::guard($this->get_guard())->logout();
  116. return redirect('/');
  117. }
  118. }
  119. public function expired($_id)
  120. {
  121. $user = Staff::where('_id',$_id)->first();
  122. return view('expiredPassword', compact ('user'));
  123. }
  124. public function postExpired(Request $request)
  125. {
  126. $user = Staff::where('_id',$request->_id)->first();
  127. $user->password = $this->encryptPassword('encrypt', $request->password);
  128. $user->created_at = Carbon::now()->toDateTimeString();
  129. $user->save();
  130. if($user->roles_access == "Contractor"){
  131. return redirect('/contractor');
  132. }
  133. else if($user->roles_access == "Customer Service"){
  134. return redirect('/customer-service');
  135. }else if($user->roles_access == "Developer"){
  136. return redirect('/customer-service');
  137. }else if($user->roles_access == "Marketing"){
  138. return redirect('/marketing');
  139. }
  140. }
  141. }