src/ApplicationBundle/Listener/SessionListener.php line 45

Open in your IDE?
  1. <?php
  3. namespace ApplicationBundle\Listener;
  5. use ApplicationBundle\Interfaces\LoginInterface;
  6. use ApplicationBundle\Interfaces\SessionCheckInterface;
  7. use ApplicationBundle\Interfaces\SystemInterface;
  8. use ApplicationBundle\Modules\Authentication\Constants\UserConstants;
  9. use ApplicationBundle\Modules\System\MiscActions;
  10. use ApplicationBundle\Modules\System\System;
  11. use Symfony\Component\HttpFoundation\Cookie;
  12. use Symfony\Component\HttpFoundation\RedirectResponse;
  13. use Symfony\Component\HttpKernel\Event\FilterControllerEvent;
  14. use Symfony\Component\HttpKernel\Event\FilterResponseEvent;
  16. class SessionListener
  17. {
  18.     public $secretKey = "";
  19.     private $em;
  20.     private $em_goc;
  21.     private $dm;
  22.     private $router;
  23.     private $session;
  24.     private $resolver;
  25.     private $applicationConnector;
  26.     private $kernelRootDir;
  27.     private $container;
  28.     protected $urlEncryptor;
  30.     public function __construct($kernelRootDir, $container, $resolver, $applicationConnector, $router, $session, $db_credentials, $db_credentials_company_group, $secret,\Nzo\UrlEncryptorBundle\UrlEncryptor\UrlEncryptor $urlEncryptor)
  31.     {
  32.         $this->secretKey = $secret;
  33.         $this->em = $db_credentials;
  34.         $this->em_goc = $db_credentials_company_group;
  35. //        $this->dm=$odm_credentials;
  36.         $this->router = $router;
  37.         $this->resolver = $resolver;
  38.         $this->container = $container;
  39.         $this->applicationConnector = $applicationConnector;
  40.         $this->kernelRootDir = $kernelRootDir;
  41.         $this->session = $session;
  42.         $this->urlEncryptor = $urlEncryptor;
  43.     }
  45.     public function onKernelController(FilterControllerEvent $event)
  46.     {
  47.         $controller = $event->getController();
  49.         /*
  50.          * $controller passed can be either a class or a Closure.
  51.          * This is not usual in Symfony but it may happen.
  52.          * If it is a class, it comes in array format
  53.          */
  54.         if (!is_array($controller)) {
  55.             return;
  56.         }
  58.         $hbeeErrorCode = UserConstants::ERROR_USER_EXISTS_ALREADY;
  59.         $request = $event->getRequest();
  60.         $devAdminMode = '_UNCHANGED_';
  61.         if ($request->request->has('devAdminOn') || $request->query->has('devAdminOn')) {
  62.             $devAdminMode = $request->request->has('devAdminOn') ? $request->request->get('devAdminOn') : $request->query->get('devAdminOn');
  64.         }
  65. //        if ($request->request->has('devAdminOff')|| $request->query->has('devAdminOff')) {
  66. //            $devAdminMode=0;
  67. //
  68. //        }
  70.         $permissionOverride = 0;
  71.         if ($request->query->has('OVP'))
  72.             $permissionOverride = 1;
  75.         $authTokenInHeader = $event->getRequest()->headers->get('auth-token');
  76.         if ($authTokenInHeader) {
  77.             $request->request->set('hbeeSessionToken', $authTokenInHeader);
  79.         }
  80.         if ($request->query->has('tvp')) {
  81.             $tvp = json_decode($this->urlEncryptor->decrypt($request->query->get('tvp')),true);
  82.             $request->request->set('TVP', json_encode($tvp));
  84.             if(isset($tvp['timeout']))
  85.             {
  86.                 $currentDateTime = new \DateTime();
  87.                 $currTs=$currentDateTime->format('U');
  88.                 if($tvp['timeout']>$currTs || $tvp['timeout']==0) {
  90.                     if (isset($tvp['token']))
  91.                         $request->request->set('hbeeSessionToken', $tvp['token']);
  92.                 }
  93.                 else
  94.                 {
  95.                     $url = $this->router->generate('permission_denied_page');
  96.                     $event->setController(function () use ($url) {
  97.                         return new RedirectResponse($url);
  98.                     });
  99.                 }
  100.             }
  104.         }
  107.         //check if mobile
  108.         $session = $this->session;
  109.         if (empty($session->get('appValiditySeconds'))) {  //how many sevonds is valid
  110.             $session->set('appValiditySeconds', '_UNSET_');
  111.         }
  113.         if (empty($session->get('devAdminMode'))) {  //how many sevonds is valid
  114.             $session->set('devAdminMode', 0);
  115.         }
  116.         if ($devAdminMode != '_UNCHANGED_')
  117.             $session->set('devAdminMode', $devAdminMode);
  118.         $to_set_session_data = [];
  120.         $CurrentRoute = $event->getRequest()->attributes->get('_route');
  121.         if ($CurrentRoute == 'switch_app' || $CurrentRoute == 'app_switch_app_api') {
  123.             if ($request->query->has('hbeeSessionToken')) {
  125.                 $em_goc = $this->em_goc;
  128.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->query->get('hbeeSessionToken'))['sessionData'];
  129.                 if ($to_set_session_data != null) {
  130.                     foreach ($to_set_session_data as $k => $d) {
  132.                         //check if mobile
  133.                         $session->set($k, $d);
  134.                     }
  136.                 } else {
  137.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  138.                 }
  140.             } else {
  143.                 $url = $this->router->generate('user_login');
  144.                 if ($CurrentRoute == 'app_switch_app_api')
  145.                     $url .= ("?csToken=" . $request->query->get('csToken', '') . "&spd=" . $request->query->get('spd', '') . "&remoteVerify=1");
  146.                 else
  147.                     $url .= ("?csToken=" . $request->query->get('csToken', '') . "&spd=" . $request->query->get('spd', '') . "&remoteVerify=" . $request->query->get('remoteVerify', 0));
  150.                 $session->clear();
  151.                 $session->set('CLEARLOGIN', 1);
  153.                 $event->setController(function () use ($url) {
  154.                     return new RedirectResponse($url);
  155.                 });
  156.             }
  157.         }
  159. //        if ($CurrentRoute == 'select_second_layer_api' ) {
  160. //
  161. //            if ($request->query->has('hbeeSessionToken')) {
  162. //
  163. //                $em_goc = $this->em_goc;
  164. //
  165. //
  166. //                $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->query->get('hbeeSessionToken'))['sessionData'];
  167. //                if ($to_set_session_data != null) {
  168. //                    foreach ($to_set_session_data as $k => $d) {
  169. //
  170. //                        //check if mobile
  171. //                        $session->set($k, $d);
  172. //                    }
  173. //
  174. //                } else {
  175. //                    $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  176. //                }
  177. //
  178. //            } else {
  179. //
  180. //
  181. //            }
  182. //        }
  185.         if (!$session->has(UserConstants::USER_ID)) {
  186.             if ($request->request->has('token')) {
  188.                 $em_goc = $this->em_goc;
  191.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->request->get('token'))['sessionData'];
  192.                 if ($to_set_session_data != null) {
  193.                     foreach ($to_set_session_data as $k => $d) {
  195.                         //check if mobile
  196.                         $session->set($k, $d);
  197.                     }
  199.                 } else {
  200.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  201.                 }
  203.             } else if ($request->request->has('hbeeSessionToken')) {
  205.                 $em_goc = $this->em_goc;
  208.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->request->get('hbeeSessionToken'))['sessionData'];
  209.                 if ($to_set_session_data != null) {
  210.                     foreach ($to_set_session_data as $k => $d) {
  212.                         //check if mobile
  213.                         $session->set($k, $d);
  214.                     }
  216.                 } else {
  217.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  218.                 }
  220.             } else if ($request->query->has('hbeeSessionToken')) {
  222.                 $em_goc = $this->em_goc;
  225.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->query->get('hbeeSessionToken'))['sessionData'];
  226.                 if ($to_set_session_data != null) {
  227.                     foreach ($to_set_session_data as $k => $d) {
  229.                         //check if mobile
  230.                         $session->set($k, $d);
  231.                     }
  233.                 } else {
  234.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  235.                 }
  237.             } else if ($request->request->has('sessionData')) {
  238.                 $to_set_session_data = $request->request->get('sessionData');
  239.                 foreach ($to_set_session_data as $k => $d) {
  241.                     //check if mobile
  242.                     $session->set($k, $d);
  243.                 }
  245.             } else if ($request->request->has('sessionDataString')) {
  246.                 $to_set_session_data = json_decode($request->request->get('sessionDataString'), true);
  247.                 if ($to_set_session_data != null) {
  248.                     foreach ($to_set_session_data as $k => $d) {
  250.                         //check if mobile
  251.                         $session->set($k, $d);
  252.                     }
  254.                 }
  256.             }
  257.             if ($request->query->has('iFrameData')) {
  258.                 $session->set(UserConstants::USER_ID, $request->query->get('uId'));
  259.                 $session->set(UserConstants::USER_NAME, $request->query->get('uName'));
  260.                 $session->set(UserConstants::USER_LOGIN_ID, $request->query->get('loginId'));
  262.                 $session->set(UserConstants::APPLICATION_SECRET, $request->query->get('sKey'));
  263.                 $session->set(UserConstants::USER_GOC_ID, $request->query->get('gocId'));
  264.                 $session->set(UserConstants::USER_DB_NAME, $request->query->get('gocDb'));
  265.                 $session->set(UserConstants::USER_DB_USER, $request->query->get('gocUsr'));
  266.                 $session->set(UserConstants::USER_DB_PASS, $request->query->get('gocPass'));
  267.                 $session->set(UserConstants::USER_DB_HOST, $request->query->get('gocDh'));
  268.                 $session->set(UserConstants::USER_TYPE, $request->query->get('uType'));
  269.                 $session->set(UserConstants::USER_CURRENT_POSITION, $request->query->get('currPos'));
  270.                 $session->set(UserConstants::USER_COMPANY_ID, $request->query->get('cmpId'));
  271.                 $session->set(UserConstants::USER_APP_ID, $request->query->get('uAId'));
  272.                 $session->set(UserConstants::USER_IMAGE, "");
  273.                 $session->set('productNameDisplayType', 0);
  276.                 $cmpImg = $request->query->get('cmpIm');
  277.                 $cmpName = $request->query->get('cmpN');
  278.                 $app_cid = $request->query->get('uAId') . "_" . $request->query->get('cmpId');
  279.                 $cid = $request->query->get('cmpId');
  280.                 $session->set('userCompanyDarkVibrantList', json_encode(array(
  281.                     $cid => ""
  282.                 )));
  284.                 $cmpNameListStr = json_encode(array(
  285.                     $cid => $cmpName
  286.                 ));
  287.                 $cmpImageListStr = json_encode(array(
  288.                     $cid => $cmpImg
  289.                 ));
  292.                 $session->set(UserConstants::USER_COMPANY_NAME_LIST, $cmpNameListStr);
  293.                 $session->set(UserConstants::USER_COMPANY_IMAGE_LIST, $cmpImageListStr);
  295.                 $session->set(UserConstants::USER_PROHIBIT_LIST, "[]");
  296.                 $session->set(UserConstants::ALL_MODULE_ACCESS_FLAG, 1);
  298.             }
  299.         }
  300. //        $path=$this->kernelRootDir. '/gifnoc/invdata.json';
  301. //        file_put_contents($path, json_encode(array(
  302. //            'sessionDataString'=>$request->request->get('sessionDataString'),
  303. //            'productCode'=>$request->request->get('productCode'),
  304. //            'userId'=>$session->get(UserConstants::USER_ID),
  305. //            'sessionData'=>json_decode($request->request->get('sessionDataString'),true),
  306. //            'to_set_session_data'=>$to_set_session_data,
  307. ////            'invData'=>$data_searched,
  308. //
  309. //        )));//overwrite
  312.         if (!$session->has('isMobile')) {
  313. //        if
  315.             $useragent = $event->getRequest()->headers->get('User-Agent');
  316.             if (!$useragent) {
  317.                 return false;
  318.             }
  320.             $isMobile = (
  321.                 preg_match('/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows ce|xda|xiino/i', $useragent) ||
  322.                 preg_match('/1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i', substr($useragent, 0, 4))
  323.             );
  325.             $session->set('isMobile', $isMobile);
  326.         }
  329.         if ($controller[0] instanceof SessionCheckInterface) {
  332.             if (!empty($session->get(UserConstants::USER_ID))) {
  335.                 if ($session->get(UserConstants::APPLICATION_SECRET) == $this->secretKey) {
  337.                     //if session check variable is more than 1 hour from now, update app validity but if already disabled then check on every call
  338.                     $lastCheckDateTime = null;
  339.                     $appValid = 1;
  340.                     $currentDateTime = new \DateTime();
  342.                     $currentTime = strtotime($currentDateTime->format('Y-m-d h:i:s'));
  343.                     $appIsValidTillTime = $currentTime;
  344.                     $appIsValidTillDateTime = $currentDateTime;
  346. //                    $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  348.                     if (!empty($session->get('lastCheckAppValidityTime'))) {
  349.                         $lastCheckDateTime = strtotime($session->get('lastCheckAppValidityTime'));
  350.                     } else {
  351.                         $lastCheckDateTime = strtotime('2022-01-01 00:00:00');
  352.                     }
  353.                     if (!empty($session->get('appIsValidTillTime'))) {
  354.                         $appIsValidTillTime = strtotime($session->get('appIsValidTillTime'));
  355.                         $appIsValidTillDateTime = new \DateTime($session->get('appIsValidTillTime'));
  356.                     } else {
  357. //                        $appIsValidTillTime=$currentDateTime;
  358. //                        $session->set('appIsValidTillTime', $appIsValidTillTime->format('Y-m-d h:i:s'));
  359.                     }
  360.                     if (!empty($session->get('appValid'))) {
  361.                         $appValid = $session->get('appValid');
  362.                     }
  364.                     $secondsTillLastCheck = abs($currentTime - $lastCheckDateTime);
  365. //                    $session->set('secondsTillLastCheck',$secondsTillLastCheck);
  366. //                    $session->set('lastCheckAppValiditySecond', abs($currentTime - $lastCheckDateTime));
  367.                     if ($secondsTillLastCheck > 7200 || $appValid == 0) {
  368.                         $appValiditySeconds = $session->get('appValiditySeconds');
  370.                         $appDataJson = System::getAppDataByCurl();
  371. //                        $session->set('appDataJson',$appDataJson);
  372.                         $appData = json_decode($appDataJson, true);
  374. //                        $appIsValidTillTime=$currentDateTime;
  375.                         if ($appData == null)
  376.                             $appData = [];
  377.                         if (isset($appData[$session->get(UserConstants::USER_APP_ID)])) {
  378.                             $session->set('appDataCurl', $appData[$session->get(UserConstants::USER_APP_ID)]);
  379.                             if ($appData[$session->get(UserConstants::USER_APP_ID)]['expired'] == 1) {
  380.                                 $appValid = 0;
  381.                                 $appValiditySeconds = 0;
  382.                             } else {
  383.                                 $appIsValidTillTime = strtotime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  384.                                 $appIsValidTillDateTime = new \DateTime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  385.                                 $appValiditySeconds = $appIsValidTillTime - $currentTime;
  386.                                 if ($appValiditySeconds < 0)
  387.                                     $appValid = 0;
  388.                                 else
  389.                                     $appValid = 1;
  390.                             }
  391.                         } else {
  393.                         }
  395.                         $session->set('appValiditySeconds', $appValiditySeconds);
  396.                         $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  398.                         $session->set('lastCheckAppValidityTime', $currentDateTime->format('Y-m-d h:i:s'));
  399.                         $session->set('appValid', $appValid);
  400.                     }
  402.                     $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  403.                     if ($appValid != 1) {
  404.                         $url = $this->router->generate('user_logout');
  406.                         if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  407.                             if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  408.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  409.                             }
  410.                         } else {
  411.                             $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  412.                         }
  413. //                        if ($request->server->has("REQUEST_URI")) {
  414. //                            if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  415. ////                            return $this->redirect($request->request->get('HTTP_REFERER'));
  416. //                                $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  417. //                            }
  418. //                        }
  419. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  422.                         $event->setController(function () use ($url) {
  423.                             return new RedirectResponse($url);
  424.                         });
  426.                     }
  429.                     $gocId = $session->get(UserConstants::USER_GOC_ID);
  430.                     if ($gocId != 0 && $gocId != "") {
  432.                         $gocDbName = $session->get(UserConstants::USER_DB_NAME);
  433.                         $gocDbUser = $session->get(UserConstants::USER_DB_USER);
  434.                         $gocDbPass = $session->get(UserConstants::USER_DB_PASS);
  435.                         $gocDbHost = $session->get(UserConstants::USER_DB_HOST);
  438. //                        $connector = $this->container->get('application_connector');
  439.                         $connector = $this->applicationConnector;
  440.                         $connector->resetConnection(
  441.                             'default',
  442.                             $gocDbName,
  443.                             $gocDbUser,
  444.                             $gocDbPass,
  445.                             $gocDbHost,
  446.                             $reset = false);
  447.                     }
  449.                     // User already have logged in. lets check its type
  450.                     if (
  451.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SYSTEM ||
  452.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_GENERAL ||
  453.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SUPPLIER ||
  454.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_ENTITY_USER_GENERAL_USER ||
  455.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_ENTITY_USER_GROUP_OWNER ||
  456.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_CLIENT ||
  457.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_APPLICANT
  459.                     ) {
  460.                         if (!empty($session->get('TRIGGER_RESET_PASSWORD'))) {
  461.                             if ($session->get('TRIGGER_RESET_PASSWORD') == 1) {
  464.                                 $red = $this->router->generate('reset_password_new_password');
  465.                                 if (!$request->request->has('remoteVerify')) {
  466.                                     $session->set('TRIGGER_RESET_PASSWORD', 0);
  467.                                     $event->setController(function () use ($red) {
  468.                                         return new RedirectResponse($red);
  469.                                     });
  470.                                 }
  473.                             }
  474.                         } else if (!empty($session->get('LAST_REQUEST_URI_BEFORE_LOGIN'))) {
  475.                             if (strripos($session->get('LAST_REQUEST_URI_BEFORE_LOGIN'), 'select_data') === false) {
  476.                                 if ($session->get('LAST_REQUEST_URI_BEFORE_LOGIN') != '' && $session->get('LAST_REQUEST_URI_BEFORE_LOGIN') != null) {
  477.                                     $red = $session->get('LAST_REQUEST_URI_BEFORE_LOGIN');
  479.                                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  480.                                     if (!$request->request->has('remoteVerify')) {
  481.                                         $event->setController(function () use ($red) {
  482.                                             return new RedirectResponse($red);
  483.                                         });
  484.                                     }
  487.                                 }
  488.                             } else {
  489.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  490.                             }
  491.                         }
  494.                     } else {
  495.                         $message = "Session Not Found";
  496.                         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  498.                         } else {
  499.                             if ($request->server->has("REQUEST_URI")) {
  501.                                 if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  502.                                     if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  503.                                         $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  504.                                     }
  505.                                 } else {
  506.                                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  507.                                 }
  509.                             }
  510.                         }
  511.                         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  512.                             $session->set('jsonStrForListenerData', json_encode(array(
  513.                                 'uid' => 0,
  514.                                 'session' => [],
  515.                                 'success' => false,
  516.                                 'sessionExists' => false,
  517.                                 'hbeeErrorCode' => $hbeeErrorCode,
  518.                                 'errorStr' => $message,
  519.                                 'session_data' => [],
  520.                                 'session2' => $_SESSION,
  521.                             )));
  522.                             $url = $this->router->generate('return_json_for_listener');
  523. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  524.         $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:PublicPages:ReturnJsonForListener');
  525.                             $event->setController($this->resolver->getController($request));
  528. //                        $event->setController(function () use ($url) {
  529. //                            return new RedirectResponse($url);
  530. //                        });
  531.                         } else {
  532.                             $url = $this->router->generate('user_logout');
  533.                             $event->setController(function () use ($url) {
  534.                                 return new RedirectResponse($url);
  535.                             });
  537.                         }
  538.                     }
  540.                 } else {
  541.                     $message = "Session Not Found";
  542.                     if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  544.                     } else {
  545.                         if ($request->server->has("REQUEST_URI")) {
  547.                             if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  548.                                 if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  549.                                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  550.                                 }
  551.                             } else {
  552.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  553.                             }
  554. //                            if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  555. ////                            return $this->redirect($request->request->get('HTTP_REFERER'));
  556. //                                $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  557. //                            }
  558.                         }
  559.                     }
  560.                     if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  561.                         $session->set('jsonStrForListenerData', json_encode(array(
  562.                             'uid' => 0,
  563.                             'session' => [],
  564.                             'success' => false,
  565.                             'sessionExists' => false,
  566.                             'hbeeErrorCode' => $hbeeErrorCode,
  567.                             'errorStr' => $message,
  568.                             'session_data' => [],
  569.                             'session2' => $_SESSION,
  570.                         )));
  571.                         $url = $this->router->generate('return_json_for_listener');
  572. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  573.     $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:PublicPages:ReturnJsonForListener');
  574.                         $event->setController($this->resolver->getController($request));
  577. //                        $event->setController(function () use ($url) {
  578. //                            return new RedirectResponse($url);
  579. //                        });
  580.                     } else {
  581.                         $url = $this->router->generate('user_logout');
  582.                         $event->setController(function () use ($url) {
  583.                             return new RedirectResponse($url);
  584.                         });
  585.                     }
  586.                 }
  587.             } else {
  590.                 // User can't see this page until do a login. let him/her login first.
  593.                 $message = "Session Not Found";
  594.                 $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  596.                 if ( $authTokenInHeader || $request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  598.                 } else {
  599.                     if ($request->server->has("REQUEST_URI")) {
  600.                         if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  601.                             if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  602.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  603.                             }
  604.                         } else {
  605.                             $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  606.                         }
  607. //                        if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  608. ////                            return $this->redirect($request->request->get('HTTP_REFERER'));
  609. //                            $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  610. //                        }
  611.                     }
  612.                 }
  613.                 $session->set('jsonStrForListenerData', json_encode([]));
  615.                 if ($authTokenInHeader ||$request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  616.                     $session->set('jsonStrForListenerData', json_encode(array(
  617.                         'uid' => 0,
  618.                         'session' => [],
  619.                         'success' => false,
  620.                         'sessionExists' => false,
  621.                         'hbeeErrorCode' => $hbeeErrorCode,
  622.                         'errorStr' => $message,
  623.                         'session_data' => [],
  624.                         'session2' => $_SESSION,
  625.                     )));
  626.                     $url = $this->router->generate('return_json_for_listener');
  627. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  629. $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:PublicPages:ReturnJsonForListener');
  630.                     $event->setController($this->resolver->getController($request));
  633. //                    $event->setController(function () use ($url) {
  634. //                        return new RedirectResponse($url);
  635. //                    });
  636. //                    return new JsonResponse();
  637.                 } else {
  639.                     $url = $this->router->generate('user_login');
  640. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  643.                     $event->setController(function () use ($url) {
  644.                         return new RedirectResponse($url);
  645.                     });
  646.                 }
  649.             }
  651.             $em = $this->em;
  652. //            if ($CurrentRoute != "update_database_schema")
  653. //                MiscActions::decryptTrans($em, '_ALL_', 0);
  655. //            Here we got a general user who have all the right things. Let see if he/she have permission to tre current route.
  656. //            $ROUTE_LIST=json_decode($session->get(UserConstants::USER_ROUTE_LIST), true);
  657.             $PROHIBIT_LIST = json_decode($session->get(UserConstants::USER_PROHIBIT_LIST), true);
  658.             $CurrentRoute = $event->getRequest()->attributes->get('_route');
  659.             $PL = json_decode($session->get(UserConstants::USER_POSITION_LIST), true);
  660.             if ($PL == null)
  661.                 $PL = [];
  663.             if (!empty($PL) && $session->get(UserConstants::USER_CURRENT_POSITION) == 0) {
  664.                 $url = $this->router->generate('user_login_position');
  665.                 $event->setController(function () use ($url) {
  666.                     return new RedirectResponse($url);
  667.                 });
  668.             }
  669.             if ($CurrentRoute == "user_login_position") {
  670.                 if (!empty($session->get(UserConstants::USER_ID))) {
  671.                     // This is an system user. send him to system dashboard
  672.                     if ($session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SYSTEM) {
  673.                         // This is an system user. send him to system dashboard
  674.                         $url = $this->router->generate('system_admin_dashboard');
  675.                         $event->setController(function () use ($url) {
  676.                             return new RedirectResponse($url);
  677.                         });
  678.                     } else {
  679.                         if (!empty($session->get(UserConstants::USER_CURRENT_POSITION)) && $session->get(UserConstants::USER_CURRENT_POSITION) != 0) {
  680.                             // user position got set up. send him to the normal dashboard.
  683.                             $PL = json_decode($session->get(UserConstants::USER_POSITION_LIST), true);
  684.                             if ($PL == null) $PL = [];
  686.                             if (count($PL) <= 1) {
  688.                                 $url = $this->router->generate('dashboard');
  689.                                 $event->setController(function () use ($url) {
  690.                                     return new RedirectResponse($url);
  691.                                 });
  692.                             }
  693.                         }
  694.                     }
  695.                 } else {
  697.                     // User can't see this page until do a login. let him/her login first.
  698.                     $url = $this->router->generate('user_login');
  699.                     $event->setController(function () use ($url) {
  700.                         return new RedirectResponse($url);
  701.                     });
  702.                 }
  703.             }
  705.             if ($permissionOverride == 0 && $CurrentRoute != "dashboard" && $CurrentRoute != $session->get(UserConstants::USER_DEFAULT_ROUTE)) {
  706.                 if ($PROHIBIT_LIST != null or $PROHIBIT_LIST != []) {
  707.                     if (in_array($CurrentRoute, $PROHIBIT_LIST)) {
  708.                         // User is not authorized. send him to dashboard
  709. //                    $controller->addFlash(
  710. //                        'error',
  711. //                        'Sorry Couldnot insert Data.'
  712. //                    );
  713.                         $url = $this->router->generate('permission_denied_page');
  714.                         $event->setController(function () use ($url) {
  715.                             return new RedirectResponse($url);
  716.                         });
  717.                     }
  718.                 }
  719.             }
  720.         }
  722.         if ($controller[0] instanceof LoginInterface) {
  724.             $session = $this->session;
  726.             // Three situation here
  727.             //  1. Have no session
  728.             //  2. Have session but no position
  729.             //  3. Have session and position
  731.             $route = $event->getRequest()->attributes->get('_route');
  733.             $systemType = '_ERP';//default
  735.             $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  737.             if ($route == "user_login") {
  738.                 if ($request->request->get('remoteVerify', $request->query->get('remoteVerify', 0)) == 1) {
  739.                     $session->clear();
  740.                 } else if (!empty($session->get(UserConstants::USER_ID))) {
  741.                     // User already have logged in. lets check its type
  744.                     if ($systemType == '_ERP_') {
  745.                         if ($session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SYSTEM) {
  746.                             // This is an system user. send him to system dashboard
  747.                             $url = $this->router->generate('system_admin_dashboard');
  748.                             $event->setController(function () use ($url) {
  749.                                 return new RedirectResponse($url);
  750.                             });
  751.                         } else {
  752.                             // This user is a normal user. Check if its login position got set.
  753.                             if (!empty($session->get(UserConstants::USER_CURRENT_POSITION))) {
  754.                                 // user position got set up. send him to the normal dashboard.
  755.                                 $url = $this->router->generate('dashboard');
  756.                                 if ($request->request->has('remoteVerify')) {
  757.                                     $session->set('remoteVerified', 1);
  759.                                     $url = $this->router->generate('get_session_data_for_app');
  760.                                     $event->setController(function () use ($url) {
  761.                                         return new RedirectResponse($url);
  762.                                     });
  765.                                 }
  766.                                 $event->setController(function () use ($url) {
  767.                                     return new RedirectResponse($url);
  768.                                 });
  770.                             } else {
  771.                                 // user position have not set up. send it to the position page
  772.                                 $url = $this->router->generate('user_login_position');
  773.                                 $event->setController(function () use ($url) {
  774.                                     return new RedirectResponse($url);
  775.                                 });
  777.                             }
  778.                         }
  780.                         //do nothing its default to dashboard index
  781.                     } else if ($systemType == '_BUDDYBEE_') {
  782. //                        $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:BuddybeePublic:ConsultancyHomePage');
  783. //                        $event->setController($this->resolver->getController($request));
  784.                     }
  787.                 } else {
  788.                     if ($systemType == '_ERP_') {
  791.                         //do nothing its default to dashboard index
  792.                     } else if ($systemType == '_BUDDYBEE_' && $request->isMethod('GET')) {
  793.                         if ($request->request->has('oAuthData') || $request->query->has('oAuthData') || $request->query->has('code')) {
  795.                         } else {
  796.                             $event->getRequest()->attributes->set('_controller', 'ApplicationBundle\Modules\Authentication\Controller\UserLoginController::applicantLoginAction');
  797.                             $event->setController($this->resolver->getController($request));
  798.                         }
  799.                     }
  800. //                    if ($systemType == '_BUDDYBEE_' && $request->isMethod('POST')) {
  801. //
  802. //                            $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:UserLogin:applicantLogin');
  803. //                        $event->setController($this->resolver->getController($request));
  804. //                    }
  806.                 }
  807.             }
  810.         }
  812.         // Checking if its a system url request.
  813.         if ($controller[0] instanceof SystemInterface) {
  814.             // System controller.
  815.             $session = $this->session;
  816.             if (!empty($session->get(UserConstants::USER_ID))) {
  817.                 if ($session->get(UserConstants::USER_TYPE) != UserConstants::USER_TYPE_SYSTEM) {
  818.                     // Kick the idiot out from here. If possible, keep a track
  820.                     $url = $this->router->generate('user_logout');
  821.                     $event->setController(function () use ($url) {
  822.                         return new RedirectResponse($url);
  823.                     });
  824.                 } else {
  825.                     $lastCheckDateTime = null;
  826.                     $appValid = 1;
  827.                     $currentDateTime = new \DateTime();
  829.                     $currentTime = strtotime($currentDateTime->format('Y-m-d h:i:s'));
  830.                     $appIsValidTillTime = $currentTime;
  831.                     $appIsValidTillDateTime = $currentDateTime;
  833. //                    $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  835.                     if (!empty($session->get('lastCheckAppValidityTime'))) {
  836.                         $lastCheckDateTime = strtotime($session->get('lastCheckAppValidityTime'));
  837.                     } else {
  838.                         $lastCheckDateTime = strtotime('2022-01-01 00:00:00');
  839.                     }
  840.                     if (!empty($session->get('appIsValidTillTime'))) {
  841.                         $appIsValidTillTime = strtotime($session->get('appIsValidTillTime'));
  842.                         $appIsValidTillDateTime = new \DateTime($session->get('appIsValidTillTime'));
  843.                     } else {
  844. //                        $appIsValidTillTime=$currentDateTime;
  845. //                        $session->set('appIsValidTillTime', $appIsValidTillTime->format('Y-m-d h:i:s'));
  846.                     }
  847.                     if (!empty($session->get('appValid'))) {
  848.                         $appValid = $session->get('appValid');
  849.                     }
  851.                     $secondsTillLastCheck = abs($currentTime - $lastCheckDateTime);
  852. //                    $session->set('lastCheckAppValiditySecond', abs($currentTime - $lastCheckDateTime));
  853.                     if ($secondsTillLastCheck > 7200 || $appValid == 0) {
  854.                         $appValiditySeconds = $session->get('appValiditySeconds');
  856.                         $appDataJson = System::getAppDataByCurl();
  857.                         $appData = json_decode($appDataJson, true);
  858. //                        $appIsValidTillTime=$currentDateTime;
  859.                         if ($appData == null)
  860.                             $appData = [];
  861.                         if (isset($appData[$session->get(UserConstants::USER_APP_ID)])) {
  862.                             $session->set('appDataCurl', $appData[$session->get(UserConstants::USER_APP_ID)]);
  863.                             if ($appData[$session->get(UserConstants::USER_APP_ID)]['expired'] == 1) {
  864.                                 $appValid = 0;
  865.                                 $appValiditySeconds = 0;
  866.                             } else {
  867.                                 $appIsValidTillTime = strtotime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  868.                                 $appIsValidTillDateTime = new \DateTime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  869.                                 $appValiditySeconds = $appIsValidTillTime - $currentTime;
  870.                                 if ($appValiditySeconds < 0)
  871.                                     $appValid = 0;
  872.                                 else
  873.                                     $appValid = 1;
  874.                             }
  875.                         }
  877.                         $session->set('appValiditySeconds', $appValiditySeconds);
  878.                         $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  880.                         $session->set('lastCheckAppValidityTime', $currentDateTime->format('Y-m-d h:i:s'));
  881.                         $session->set('appValid', $appValid);
  882.                     }
  884.                     $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  885.                     if ($appValid != 1) {
  886.                         $url = $this->router->generate('user_logout');
  887. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  890.                         $event->setController(function () use ($url) {
  891.                             return new RedirectResponse($url);
  892.                         });
  893.                     }
  896.                     $gocId = $session->get(UserConstants::USER_GOC_ID);
  897.                     if ($gocId != 0 && $gocId != "") {
  899.                         $gocDbName = $session->get(UserConstants::USER_DB_NAME);
  900.                         $gocDbUser = $session->get(UserConstants::USER_DB_USER);
  901.                         $gocDbPass = $session->get(UserConstants::USER_DB_PASS);
  902.                         $gocDbHost = $session->get(UserConstants::USER_DB_HOST);
  905. //                        $connector = $this->container->get('application_connector');
  906.                         $connector = $this->applicationConnector;
  907.                         $connector->resetConnection(
  908.                             'default',
  909.                             $gocDbName,
  910.                             $gocDbUser,
  911.                             $gocDbPass,
  912.                             $gocDbHost,
  913.                             $reset = true);
  914.                     }
  915.                 }
  916.             } else {
  917.                 // Seriously !! How did this person get this url. Track the pc if possible.
  919.                 $url = $this->router->generate('user_login');
  920.                 $event->setController(function () use ($url) {
  921.                     return new RedirectResponse($url);
  922.                 });
  923.             }
  924.         }
  927.         //dashboard for diff aspects
  928.         if ($event->getRequest()->attributes->get('_route') == 'dashboard') {
  930.             $systemType = '_ERP';//default
  932.             $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  934.             if ($systemType == '_ERP_') {
  936.                 //do nothing its default to dashboard index
  937.             } else if ($systemType == '_BUDDYBEE_') {
  938.                 $event->getRequest()->attributes->set('_controller', 'ApplicationBundle\Modules\Buddybee\Controller\BuddybeePublicController:ConsultancyHomePageAction');
  939.                 $event->setController($this->resolver->getController($request));
  940.             } else if ($systemType == '_CENTRAL_') {
  941.                 $event->getRequest()->attributes->set('_controller', 'ApplicationBundle\Modules\HoneybeeWeb\Controller\HoneybeeWebPublicController:CentralHomePageAction');
  942.                 $event->setController($this->resolver->getController($request));
  943.             }
  946. //            $event->setController(function() use ($url) {
  947. //                return new RedirectResponse($url);
  948. //            });
  949. //            $event->setController((\ApplicationBundle\Controller\BuddybeePublicController())->ConsultancyHomePageAction() );
  950.         }
  953.     }
  955.     public function onKernelResponse(FilterResponseEvent $event)
  956.     {
  958.         $session = $this->session;
  959.         $request = $event->getRequest();
  960.         $response = $event->getResponse();
  961.         //temp debug
  963.         $em = $this->em;
  964.         $currRoute = $request->attributes->get('_route');
  965. //        if ($currRoute != "update_database_schema")
  966. //            MiscActions::encryptTrans($em, '_ALL_', 0);
  969.         if (
  970.             ($request->request->has('returnJson') || $request->request->has('remoteVerify')) &&
  971.             $request->request->has('token') &&
  972.             !in_array($currRoute, [
  973.                 'select_data_ajax',
  974.                 'select_data_api',
  975.                 'select_data_ajax_public',
  976.             ])
  978.         ) {
  979.             $currDate = new \DateTime();
  980.             $to_write = '';
  981.             $to_write .= "\nToken--" . $request->request->get('token', 'NONE') . '  : ' . $currDate->format('F d Y H:i:s');
  982.             $to_write .= "\nResponse:\n
  983.             ";
  984.             if (is_string($response->getContent()))
  985.                 $to_write .= $response->getContent();
  986.             else
  987.                 $to_write .= json_encode($response->getContent());
  989. //            System::log_it($this->container->getParameter('kernel.root_dir'), $to_write, $currRoute, 1);
  990.         }
  993.         if ($session->has('remoteVerified')) {
  994.             $lifetime = 86400; // 1 day
  996. //            $response->headers->setCookie(Cookie::create('PHPSESSID', $event->getRequest()->cookies->get('PHPSESSID'),time()+$lifetime));
  997.             $response->headers->set('Access-Control-Allow-Origin', $event->getRequest()->headers->get('origin'));
  998.             $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1000. //            $response->headers->setCookie(Cookie::create('PIKAMASTER', $event->getRequest()->cookies->get('PHPSESSID'),time()+$lifetime));
  1002.         } else {
  1005.             // create a hash and set it as a response header
  1006. //        $hash = sha1($response->getContent().$token);
  1007. //            $response->headers->set('Access-Control-Allow-Origin', '*');
  1008. //            $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1009.             $response->headers->set('Access-Control-Allow-Origin', $event->getRequest()->headers->get('origin'));
  1010.             $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1011. //            $response->headers->setCookie(Cookie::create('honeybeeCAuthId', $session->get(UserConstants::USER_ID)));
  1012. //            $response->headers->setCookie(Cookie::create('honeybeeCAuthId2', $event->getRequest()->cookies->get('PHPSESSID')));
  1014.         }
  1015. //        if($session->has(UserConstants::USER_ID)) {
  1016. //            if ($session->get(UserConstants::USER_ID) == '' || $session->get(UserConstants::USER_ID) == '') {
  1017. //                $response->headers->setCookie(Cookie::create('USRCKIE', ''));
  1018. //                $response->headers->setCookie(Cookie::create('REMEMBERME', ''));
  1019. //                $response->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', ''));
  1020. //            }
  1021. //        }
  1022. //        else
  1023. //        {
  1024. //            $response->headers->setCookie(Cookie::create('USRCKIE', ''));
  1025. //            $response->headers->setCookie(Cookie::create('REMEMBERME', ''));
  1026. //            $response->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', ''));
  1027. //        }
  1029.         if ($session->has('CLEARLOGIN')) {
  1030.             if ($session->get('CLEARLOGIN') == 1) {
  1033.                 if (version_compare(PHP_VERSION, '7.0.0', '>=')) {
  1034.                     $response->headers->setCookie(Cookie::create('USRCKIE', ''));
  1035.                     $response->headers->setCookie(Cookie::create('REMEMBERME', ''));
  1036.                     $response->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', ''));
  1037.                 } else {
  1038.                     $response->headers->setCookie(new Cookie('USRCKIE', ''));
  1039.                     $response->headers->setCookie(new Cookie('REMEMBERME', ''));
  1040.                     $response->headers->setCookie(new Cookie('CLEARLOGINCOOKIE', ''));
  1042.                 }
  1043.             }
  1044.             $session->set('CLEARLOGIN', 0);
  1045.         } else {
  1047.         }
  1048.         if ($session->has('REMEMBERME')) {
  1049.             if ($session->get('REMEMBERME') == 1) {
  1051.                 $lifetime = 86400; // 1 day
  1052.                 if (version_compare(PHP_VERSION, '7.0.0', '>=')) {
  1053.                     $response->headers->setCookie(Cookie::create('USRCKIE', json_encode(array(
  1054.                             'uid' => $session->get(UserConstants::USER_ID),
  1055.                             'ut' => $session->get(UserConstants::USER_TYPE),
  1056.                             'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1057.                             'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1058.                         )
  1059.                     ), time() + $lifetime
  1060.                     )
  1061.                     );
  1064.                     $response->headers->setCookie(Cookie::create('REMEMBERMEACTIVATED', 'PIKA'));
  1065.                 } else {
  1066.                     $response->headers->setCookie(new Cookie('USRCKIE', json_encode(array(
  1067.                                 'uid' => $session->get(UserConstants::USER_ID),
  1068.                                 'ut' => $session->get(UserConstants::USER_TYPE),
  1069.                                 'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1070.                                 'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1071.                             )
  1072.                         ), time() + $lifetime
  1073.                         )
  1074.                     );
  1077.                     $response->headers->setCookie(new Cookie('REMEMBERMEACTIVATED', 'PIKA'));
  1079.                 }
  1081.             } else {
  1082.                 if (version_compare(PHP_VERSION, '7.0.0', '>=')) {
  1084.                     $response->headers->setCookie(Cookie::create('USRCKIE', json_encode(array(
  1085.                                 'uid' => $session->get(UserConstants::USER_ID),
  1086.                                 'ut' => $session->get(UserConstants::USER_TYPE),
  1087.                                 'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1088.                                 'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1089.                             )
  1090.                         )
  1091.                     )
  1092.                     );
  1093.                     $response->headers->setCookie(Cookie::create('REMEMBERMEACTIVATED', 'MASTER'));
  1094.                 } else {
  1096.                     $response->headers->setCookie(new Cookie('USRCKIE', json_encode(array(
  1097.                                     'uid' => $session->get(UserConstants::USER_ID),
  1098.                                     'ut' => $session->get(UserConstants::USER_TYPE),
  1099.                                     'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1100.                                     'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1101.                                 )
  1102.                             )
  1103.                         )
  1104.                     );
  1105.                     $response->headers->setCookie(new Cookie('REMEMBERMEACTIVATED', 'MASTER'));
  1106.                 }
  1109.             }
  1110.         } else {
  1112.             if (version_compare(PHP_VERSION, '7.0.0', '>='))
  1113.                 $response->headers->setCookie(Cookie::create('REMEMBERMEACTIVATED', 'CHU'));
  1114.             else
  1115.                 $response->headers->setCookie(new Cookie('REMEMBERMEACTIVATED', 'CHU'));
  1117.         }
  1120.     }
  1121. }