Magic Link Hook for FormIt

MagicLinkEmailLogin.chunk.tpl

<p>
    Please use the following link to log in to your account: <a href="[[+url]]?l=[[+token]]">[[+url]]?l=[[+token]]</a>
</p>

MagicLinkHook.snippet.php

<?php

// MagicLinkHook for FormIt //

if (isset($_SESSION['modx.user.failedLoginCount']) && $_SESSION['modx.user.failedLoginCount'] >= 5) {
    if (!isset($_SESSION['modx.user.failedLoginOn'])) {
        $_SESSION['modx.user.failedLoginOn'] = time();
    }
    if (time() - $_SESSION['modx.user.failedLoginOn'] > 900) {
        unset($_SESSION['modx.user.failedLoginCount'], $_SESSION['modx.user.failedLoginOn']);
    } else {
        return true;
    }
}
$hook = $sp['hook'];
$resource = $modx->resource;
$email = $hook->getValue('email');
$user = $modx->getObject(modUser::class, ['username' => $email]);
if ($user) {
    $context = $modx->context->key;
    $_SESSION["modx.{$context}.user.token"] = $user->generateToken($context);
    $cacheManager = $modx->getCacheManager();
    $cacheManager->set($_SESSION["modx.{$context}.user.token"], $user->id, 900);
    $options = [
        'token' => substr($_SESSION["modx.{$context}.user.token"], strlen($modx->site_id.'_')),
        'url' => $modx->makeUrl($resource->id, $context, '', 'full'),
    ];
    $message = $modx->getChunk('MagicLinkEmailLogin', $options);
    $user->sendEmail($message, [
        'subject' => 'Login to your account'
    ]);
}
if (isset($_SESSION['modx.user.failedLoginCount'])) {
    $_SESSION['modx.user.failedLoginCount']++;
} else {
    $_SESSION['modx.user.failedLoginCount'] = 1;
}
return true;

MagicLinkPrehook.snippet.php

<?php

// MagicLinkPrehook for FormIt //

if (isset($_GET['l'])) {
    if (isset($_SESSION['modx.user.failedLoginCount']) && $_SESSION['modx.user.failedLoginCount'] >= 5) {
        if (!isset($_SESSION['modx.user.failedLoginOn'])) {
            $_SESSION['modx.user.failedLoginOn'] = time();
        }
        if (time() - $_SESSION['modx.user.failedLoginOn'] > 900) {
            unset($_SESSION['modx.user.failedLoginCount'], $_SESSION['modx.user.failedLoginOn']);
        } else {
            $modx->sendUnauthorizedPage();
        }
    }
    $token = $_GET['l'];
    $cacheManager = $modx->getCacheManager();
    $userId = $cacheManager->get($modx->site_id.'_'.$token);
    if (!empty($userId)) {
        $modx->user = $modx->getObjectGraph(
            modUser::class,
            '{"Profile":{},"UserSettings":{}}',
            ['modUser.id' => $userId]
        );
        $modx->user->addSessionContext('web');
        $modx->user->loadAttributes(array(), 'web', false);
        $modx->user->set('lastlogin', date('Y-m-d H:i:s'));
        $modx->user->save();
        if (isset($_SESSION['modx.user.failedLoginCount'])) {
            unset($_SESSION['modx.user.failedLoginCount']);
        }
        $redirect = $modx->getOption('loginResourceId', $scriptProperties, $modx->getOption('site_start'));
        $modx->sendRedirect($modx->makeUrl($redirect));
    } else {
        if (isset($_SESSION['modx.user.failedLoginCount'])) {
            $_SESSION['modx.user.failedLoginCount']++;
        } else {
            $_SESSION['modx.user.failedLoginCount'] = 1;
        }
        $modx->sendUnauthorizedPage();
    }
}
if (isset($_GET['logout'])) {
    $modx->user->removeSessionContext($modx->context->key);
    $modx->user = null;
    $modx->sendRedirect($modx->makeUrl($modx->resource->id));
}
if ($modx->user->isAuthenticated('web')) {
    $redirect = $modx->getOption('loginResourceId', $scriptProperties, $modx->getOption('site_start'));
    $modx->sendRedirect($modx->makeUrl($redirect));
}
return true;