rbrecruiter/app/Http/Controllers/OptionsController.php

<?php

/*
 * Copyright © 2020 Miguel Nogueira
 *
 *   This file is part of Raspberry Staff Manager.
 *
 *     Raspberry Staff Manager is free software: you can redistribute it and/or modify
 *     it under the terms of the GNU General Public License as published by
 *     the Free Software Foundation, either version 3 of the License, or
 *     (at your option) any later version.
 *
 *     Raspberry Staff Manager is distributed in the hope that it will be useful,
 *     but WITHOUT ANY WARRANTY; without even the implied warranty of
 *     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *     GNU General Public License for more details.
 *
 *     You should have received a copy of the GNU General Public License
 *     along with Raspberry Staff Manager.  If not, see <https://www.gnu.org/licenses/>.
 */

namespace App\Http\Controllers;

use App\Facades\Options;
use App\Options as Option;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Log;

class OptionsController extends Controller
{
    /**
     * Display a listing of the resource.
     *
     * @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\Http\Response|\Illuminate\View\View
     */
    public function index()
    {

        return view('dashboard.administration.settings')
            ->with([
                'options' => Options::getCategory('notifications'),
                'security' => [ // We could use the method above, but we need to set these names here for greater control in the template. This would nto be feasible for many options, we'd need to use a loop and the category method.
                    'secPolicy' => Options::getOption('pw_security_policy'),
                    'graceperiod' => Options::getOption('graceperiod'),
                    'pwExpiry' => Options::getOption('password_expiry'),
                    'requiresPMC' => Options::getOption('requireGameLicense'),
                    'enforce2fa' => Options::getOption('force2fa')
                ]
            ]);
    }

    public function saveSettings(Request $request)
    {
        if (Auth::user()->can('admin.settings.edit')) {
            Log::debug('Updating application options', [
                'ip' => $request->ip(),
                'ua' => $request->userAgent(),
                'username' => Auth::user()->username,
            ]);
            foreach ($request->all() as $optionName => $option) {
                try {
                    Log::debug('Going through option '.$optionName);
                    if (Options::optionExists($optionName)) {
                        Log::debug('Option exists, updating to new values', [
                            'opt' => $optionName,
                            'new_value' => $option,
                        ]);
                        Options::changeOption($optionName, $option);
                    }
                } catch (\Exception $ex) {
                    Log::error('Unable to update options!', [
                        'msg' => $ex->getMessage(),
                        'trace' => $ex->getTraceAsString(),
                    ]);
                    report($ex);

                    $errorCond = true;
                    $request->session()->flash('error', 'An error occurred while trying to save settings: '.$ex->getMessage());
                }
            }

            if (! isset($errorCond)) {
                $request->session()->flash('success', 'Settings saved successfully!');
            }
        } else {
            $request->session()->flash('error', 'You do not have permission to update this resource.');
        }

        return redirect()->back();
    }
}