Upgraded to 1.1.0
1.1.0 (2025-10-09) - **User Notifications System** - In-app notification center with 7 notification types, filtering, pagination - **Advanced Session Management** - Database-backed sessions with geolocation (country, city, ISP) - **Remote Session Control** - Terminate any device instantly with immediate logout validation - **Enhanced Profile Page** - Sidebar navigation with 4 tabs, hash-based routing (#profile, #security, #sessions) - **MVC Architecture Refactoring** - 3 new Helpers (Layout, Domain, Session), ~265 lines cleaned from views - **Geolocation Tracking** - IP-based location detection using ip-api.com, country flags with flag-icons - **Device Detection** - Browser & device type parsing (Chrome/Firefox/Safari, Desktop/Mobile/Tablet) - **Auto-Detected Cron Paths** - Settings show actual installation paths (thanks @jadeops) - **Welcome Notifications** - Sent to new users on registration or fresh install - **Upgrade Notifications** - Admins notified on system updates with version & migration count - **Web-Based Installer** - Replaces CLI, auto-generates encryption key, one-time password display - **Web-Based Updater** - `/install/update` for running new migrations with smart detection - **User Registration** - Full signup flow with email verification, password reset, resend verification - **User Management** - CRUD for users with filtering, sorting, pagination (admin-only) - **Remember Me** - 30-day secure tokens linked to sessions, cascade deletion on logout - **Session Validator** - Middleware validates sessions on every request for instant remote logout - **Consistent UI/UX** - Unified filtering, sorting, pagination across Domains, Users, Notifications, TLD Registry - **Smart Migrations** - Consolidated schema for fresh installs, incremental for upgrades - **XSS Protection** - htmlspecialchars() applied across all user-facing data (thanks @jadeops)
This commit is contained in:
@@ -61,5 +61,88 @@ class User extends Model
|
||||
$stmt = $this->db->prepare("UPDATE users SET password = ? WHERE id = ?");
|
||||
return $stmt->execute([$hashedPassword, $userId]);
|
||||
}
|
||||
|
||||
/**
|
||||
* Get users with filters, sorting, and pagination
|
||||
*/
|
||||
public function getFiltered(array $filters = [], string $sort = 'username', string $order = 'ASC', int $limit = 25, int $offset = 0): array
|
||||
{
|
||||
$query = "SELECT * FROM users WHERE 1=1";
|
||||
$params = [];
|
||||
|
||||
// Apply search filter
|
||||
if (!empty($filters['search'])) {
|
||||
$query .= " AND (username LIKE ? OR email LIKE ? OR full_name LIKE ?)";
|
||||
$searchTerm = "%{$filters['search']}%";
|
||||
$params[] = $searchTerm;
|
||||
$params[] = $searchTerm;
|
||||
$params[] = $searchTerm;
|
||||
}
|
||||
|
||||
// Apply role filter
|
||||
if (!empty($filters['role'])) {
|
||||
$query .= " AND role = ?";
|
||||
$params[] = $filters['role'];
|
||||
}
|
||||
|
||||
// Apply status filter
|
||||
if (isset($filters['status']) && $filters['status'] !== '') {
|
||||
$isActive = ($filters['status'] === 'active') ? 1 : 0;
|
||||
$query .= " AND is_active = ?";
|
||||
$params[] = $isActive;
|
||||
}
|
||||
|
||||
// Apply sorting
|
||||
$allowedSortColumns = ['username', 'email', 'full_name', 'role', 'is_active', 'email_verified', 'last_login', 'created_at'];
|
||||
if (!in_array($sort, $allowedSortColumns)) {
|
||||
$sort = 'username';
|
||||
}
|
||||
$order = strtoupper($order) === 'DESC' ? 'DESC' : 'ASC';
|
||||
$query .= " ORDER BY {$sort} {$order}";
|
||||
|
||||
// Apply pagination
|
||||
$query .= " LIMIT ? OFFSET ?";
|
||||
$params[] = $limit;
|
||||
$params[] = $offset;
|
||||
|
||||
$stmt = $this->db->prepare($query);
|
||||
$stmt->execute($params);
|
||||
return $stmt->fetchAll(\PDO::FETCH_ASSOC);
|
||||
}
|
||||
|
||||
/**
|
||||
* Count users with filters
|
||||
*/
|
||||
public function countFiltered(array $filters = []): int
|
||||
{
|
||||
$query = "SELECT COUNT(*) as total FROM users WHERE 1=1";
|
||||
$params = [];
|
||||
|
||||
// Apply search filter
|
||||
if (!empty($filters['search'])) {
|
||||
$query .= " AND (username LIKE ? OR email LIKE ? OR full_name LIKE ?)";
|
||||
$searchTerm = "%{$filters['search']}%";
|
||||
$params[] = $searchTerm;
|
||||
$params[] = $searchTerm;
|
||||
$params[] = $searchTerm;
|
||||
}
|
||||
|
||||
// Apply role filter
|
||||
if (!empty($filters['role'])) {
|
||||
$query .= " AND role = ?";
|
||||
$params[] = $filters['role'];
|
||||
}
|
||||
|
||||
// Apply status filter
|
||||
if (isset($filters['status']) && $filters['status'] !== '') {
|
||||
$isActive = ($filters['status'] === 'active') ? 1 : 0;
|
||||
$query .= " AND is_active = ?";
|
||||
$params[] = $isActive;
|
||||
}
|
||||
|
||||
$stmt = $this->db->prepare($query);
|
||||
$stmt->execute($params);
|
||||
return (int)$stmt->fetch(\PDO::FETCH_ASSOC)['total'];
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user