eagle.ead.lmsestudio.com.br

UnknownSec Bypass 403

: /mnt/lmsestudio-instance-vol002/lms_b1c1233b2741/app/Http/Middleware/ [ drwxr-xr-x ]
name : AuthenticateStudent.php
 <?php

namespace EstudioLMS\Http\Middleware;

use Closure;
use EstudioLMS\Repositories\Config\ConfigRepository;
use Illuminate\Contracts\Auth\Guard;
use Request;
use Symfony\Component\HttpFoundation\Session\SessionInterface;

/**
 * Class Authenticate
 * @package EstudioLMS\Http\Middleware
 */
class AuthenticateStudent
{

    /**
     * The Guard implementation.
     *
     * @var Guard
     */
    protected $auth;
    /**
     * @var ConfigRepository
     */
    private $configRepository;
    /**
     * @var SessionInterface
     */
    private $session;

    /**
     * Create a new filter instance.
     *
     * @param Guard $auth
     * @param ConfigRepository $configRepository
     * @param SessionInterface $session
     */
    public function __construct(
        Guard $auth,
        ConfigRepository $configRepository,
        SessionInterface $session
    )
    {
        $this->auth = $auth;
        $this->configRepository = $configRepository;
        $this->session = $session;
    }

    /**
     * Handle an incoming request.
     *
     * @param \Illuminate\Http\Request $request
     * @param \Closure $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        $config = $this->configRepository->firstRecord();
        if ($this->auth->guest()) {
            if ($request->ajax()) {
                return \Response::view('errors.401');
            } else {
                if (!Request::wantsJson()) {
                    //dd(app('router')->getRoutes()->match(app('request')->create(\URL::previous()))->getName());
                    if (app('router')->getRoutes()->match(app('request')->create(\URL::previous()))->getName() == 'course.show') {
                        return redirect()->guest('checkout/');
                    } else if (app('router')->getRoutes()->match(app('request')->create(\URL::previous()))->getName() == 'index') {
                        return redirect()->guest('checkout/');
                    } else if (app('router')->getRoutes()->match(app('request')->create(\URL::previous()))->getName() == 'cart.sell.course') {
                        return redirect()->guest('checkout/');
                    } else if (app('router')->getRoutes()->match(app('request')->create(\URL::previous()))->getName() == 'cart.sell.course.free') {
                        return redirect()->guest('checkout/');
                    } else if (app('router')->getRoutes()->match(app('request')->create(\URL::previous()))->getName() == 'subscriptions.show') {
                        return redirect()->guest(route('checkout.lmsestudio.login'));
                    } else if (app('router')->getRoutes()->match(app('request')->create(\URL::previous()))->getName() == 'checkout.lmsestudio.sell.subscription') {
                        //dd(app('router')->getRoutes()->match(app('request')->create(\URL::previous()))->getName());
                        return redirect()->guest('cart/lmsestudio/login');
                    } else {
                        return redirect()->guest('auth/');
                    }
                }
            }
        }
        if ($this->auth->user()['roles'][0]['name'] === 'student' ||
            $this->auth->user()['roles'][0]['name'] === 'teacher'
        ) {
            if ($config['simultaneous_access'] && !$this->session->has('admin-mail')) {
                if ($this->session->has('login_token') &&
                    $this->session->get('login_token') == $this->auth->user()['login_token']
                ) {
                    return $next($request);
                } else {
                    return redirect(url('auth/logout'));
                }
            } else {
                return $next($request);
            }
        }
        return \Response::view('errors.401');
    }
}