actions/register.php

   1 <?php
   2 /**
   3  * StatusNet, the distributed open-source microblogging tool
   4  *
   5  * Register a new user account
   6  *
   7  * PHP version 5
   8  *
   9  * LICENCE: This program is free software: you can redistribute it and/or modify
  10  * it under the terms of the GNU Affero General Public License as published by
  11  * the Free Software Foundation, either version 3 of the License, or
  12  * (at your option) any later version.
  13  *
  14  * This program is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17  * GNU Affero General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU Affero General Public License
  20  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21  *
  22  * @category  Login
  23  * @package   StatusNet
  24  * @author    Evan Prodromou <evan@status.net>
  25  * @copyright 2008-2009 StatusNet, Inc.
  26  * @license   http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
  27  * @link      http://status.net/
  28  */
  29
  30 if (!defined('STATUSNET') && !defined('LACONICA')) {
  31     exit(1);
  32 }
  33
  34 /**
  35  * An action for registering a new user account
  36  *
  37  * @category Login
  38  * @package  StatusNet
  39  * @author   Evan Prodromou <evan@status.net>
  40  * @license  http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
  41  * @link     http://status.net/
  42  */
  43
  44 class RegisterAction extends Action
  45 {
  46     /**
  47      * Has there been an error?
  48      */
  49
  50     var $error = null;
  51
  52     /**
  53      * Have we registered?
  54      */
  55
  56     var $registered = false;
  57
  58     /**
  59      * Are we processing an invite?
  60      */
  61
  62     var $invite = null;
  63
  64     /**
  65      * Prepare page to run
  66      *
  67      *
  68      * @param $args
  69      * @return string title
  70      */
  71
  72     function prepare($args)
  73     {
  74         parent::prepare($args);
  75         $this->code = $this->trimmed('code');
  76
  77         if (empty($this->code)) {
  78             common_ensure_session();
  79             if (array_key_exists('invitecode', $_SESSION)) {
  80                 $this->code = $_SESSION['invitecode'];
  81             }
  82         }
  83
  84         if (common_config('site', 'inviteonly') && empty($this->code)) {
  85             $this->clientError(_('Sorry, only invited people can register.'));
  86             return false;
  87         }
  88
  89         if (!empty($this->code)) {
  90             $this->invite = Invitation::staticGet('code', $this->code);
  91             if (empty($this->invite)) {
  92                 $this->clientError(_('Sorry, invalid invitation code.'));
  93                 return false;
  94             }
  95             // Store this in case we need it
  96             common_ensure_session();
  97             $_SESSION['invitecode'] = $this->code;
  98         }
  99
 100         return true;
 101     }
 102
 103     /**
 104      * Title of the page
 105      *
 106      * @return string title
 107      */
 108
 109     function title()
 110     {
 111         if ($this->registered) {
 112             return _('Registration successful');
 113         } else {
 114             return _('Register');
 115         }
 116     }
 117
 118     /**
 119      * Handle input, produce output
 120      *
 121      * Switches on request method; either shows the form or handles its input.
 122      *
 123      * Checks if registration is closed and shows an error if so.
 124      *
 125      * @param array $args $_REQUEST data
 126      *
 127      * @return void
 128      */
 129
 130     function handle($args)
 131     {
 132         parent::handle($args);
 133
 134         if (common_config('site', 'closed')) {
 135             $this->clientError(_('Registration not allowed.'));
 136         } else if (common_logged_in()) {
 137             $this->clientError(_('Already logged in.'));
 138         } else if ($_SERVER['REQUEST_METHOD'] == 'POST') {
 139             $this->tryRegister();
 140         } else {
 141             $this->showForm();
 142         }
 143     }
 144
 145     function showScripts()
 146     {
 147         parent::showScripts();
 148         $this->autofocus('nickname');
 149     }
 150
 151     /**
 152      * Try to register a user
 153      *
 154      * Validates the input and tries to save a new user and profile
 155      * record. On success, shows an instructions page.
 156      *
 157      * @return void
 158      */
 159
 160     function tryRegister()
 161     {
 162         if (Event::handle('StartRegistrationTry', array($this))) {
 163             $token = $this->trimmed('token');
 164             if (!$token || $token != common_session_token()) {
 165                 $this->showForm(_('There was a problem with your session token. '.
 166                                   'Try again, please.'));
 167                 return;
 168             }
 169
 170             $nickname = $this->trimmed('nickname');
 171             $email    = $this->trimmed('email');
 172             $fullname = $this->trimmed('fullname');
 173             $homepage = $this->trimmed('homepage');
 174             $bio      = $this->trimmed('bio');
 175             $location = $this->trimmed('location');
 176
 177             // We don't trim these... whitespace is OK in a password!
 178             $password = $this->arg('password');
 179             $confirm  = $this->arg('confirm');
 180
 181             // invitation code, if any
 182             $code = $this->trimmed('code');
 183
 184             if ($code) {
 185                 $invite = Invitation::staticGet($code);
 186             }
 187
 188             if (common_config('site', 'inviteonly') && !($code && $invite)) {
 189                 $this->clientError(_('Sorry, only invited people can register.'));
 190                 return;
 191             }
 192
 193             // Input scrubbing
 194             $nickname = common_canonical_nickname($nickname);
 195             $email    = common_canonical_email($email);
 196
 197             if (!$this->boolean('license')) {
 198                 $this->showForm(_('You can\'t register if you don\'t '.
 199                                   'agree to the license.'));
 200             } else if ($email && !Validate::email($email, common_config('email', 'check_domain'))) {
 201                 $this->showForm(_('Not a valid email address.'));
 202             } else if (!Validate::string($nickname, array('min_length' => 1,
 203                                                           'max_length' => 64,
 204                                                           'format' => NICKNAME_FMT))) {
 205                 $this->showForm(_('Nickname must have only lowercase letters '.
 206                                   'and numbers and no spaces.'));
 207             } else if ($this->nicknameExists($nickname)) {
 208                 $this->showForm(_('Nickname already in use. Try another one.'));
 209             } else if (!User::allowed_nickname($nickname)) {
 210                 $this->showForm(_('Not a valid nickname.'));
 211             } else if ($this->emailExists($email)) {
 212                 $this->showForm(_('Email address already exists.'));
 213             } else if (!is_null($homepage) && (strlen($homepage) > 0) &&
 214                        !Validate::uri($homepage,
 215                                       array('allowed_schemes' =>
 216                                             array('http', 'https')))) {
 217                 $this->showForm(_('Homepage is not a valid URL.'));
 218                 return;
 219             } else if (!is_null($fullname) && mb_strlen($fullname) > 255) {
 220                 $this->showForm(_('Full name is too long (max 255 chars).'));
 221                 return;
 222             } else if (Profile::bioTooLong($bio)) {
 223                 $this->showForm(sprintf(_('Bio is too long (max %d chars).'),
 224                                         Profile::maxBio()));
 225                 return;
 226             } else if (!is_null($location) && mb_strlen($location) > 255) {
 227                 $this->showForm(_('Location is too long (max 255 chars).'));
 228                 return;
 229             } else if (strlen($password) < 6) {
 230                 $this->showForm(_('Password must be 6 or more characters.'));
 231                 return;
 232             } else if ($password != $confirm) {
 233                 $this->showForm(_('Passwords don\'t match.'));
 234             } else if ($user = User::register(array('nickname' => $nickname,
 235                                                     'password' => $password,
 236                                                     'email' => $email,
 237                                                     'fullname' => $fullname,
 238                                                     'homepage' => $homepage,
 239                                                     'bio' => $bio,
 240                                                     'location' => $location,
 241                                                     'code' => $code))) {
 242                 if (!$user) {
 243                     $this->showForm(_('Invalid username or password.'));
 244                     return;
 245                 }
 246                 // success!
 247                 if (!common_set_user($user)) {
 248                     $this->serverError(_('Error setting user.'));
 249                     return;
 250                 }
 251                 // this is a real login
 252                 common_real_login(true);
 253                 if ($this->boolean('rememberme')) {
 254                     common_debug('Adding rememberme cookie for ' . $nickname);
 255                     common_rememberme($user);
 256                 }
 257
 258                 Event::handle('EndRegistrationTry', array($this));
 259
 260                 // Re-init language env in case it changed (not yet, but soon)
 261                 common_init_language();
 262
 263                 $this->showSuccess();
 264             } else {
 265                 $this->showForm(_('Invalid username or password.'));
 266             }
 267         }
 268     }
 269
 270     /**
 271      * Does the given nickname already exist?
 272      *
 273      * Checks a canonical nickname against the database.
 274      *
 275      * @param string $nickname nickname to check
 276      *
 277      * @return boolean true if the nickname already exists
 278      */
 279
 280     function nicknameExists($nickname)
 281     {
 282         $user = User::staticGet('nickname', $nickname);
 283         return is_object($user);
 284     }
 285
 286     /**
 287      * Does the given email address already exist?
 288      *
 289      * Checks a canonical email address against the database.
 290      *
 291      * @param string $email email address to check
 292      *
 293      * @return boolean true if the address already exists
 294      */
 295
 296     function emailExists($email)
 297     {
 298         $email = common_canonical_email($email);
 299         if (!$email || strlen($email) == 0) {
 300             return false;
 301         }
 302         $user = User::staticGet('email', $email);
 303         return is_object($user);
 304     }
 305
 306     // overrrided to add entry-title class
 307     function showPageTitle() {
 308         if (Event::handle('StartShowPageTitle', array($this))) {
 309             $this->element('h1', array('class' => 'entry-title'), $this->title());
 310         }
 311     }
 312
 313     // overrided to add hentry, and content-inner class
 314     function showContentBlock()
 315     {
 316         $this->elementStart('div', array('id' => 'content', 'class' => 'hentry'));
 317         $this->showPageTitle();
 318         $this->showPageNoticeBlock();
 319         $this->elementStart('div', array('id' => 'content_inner',
 320                                          'class' => 'entry-content'));
 321         // show the actual content (forms, lists, whatever)
 322         $this->showContent();
 323         $this->elementEnd('div');
 324         $this->elementEnd('div');
 325     }
 326
 327     /**
 328      * Instructions or a notice for the page
 329      *
 330      * Shows the error, if any, or instructions for registration.
 331      *
 332      * @return void
 333      */
 334
 335     function showPageNotice()
 336     {
 337         if ($this->registered) {
 338             return;
 339         } else if ($this->error) {
 340             $this->element('p', 'error', $this->error);
 341         } else {
 342             $instr =
 343               common_markup_to_html(_('With this form you can create '.
 344                                       ' a new account. ' .
 345                                       'You can then post notices and '.
 346                                       'link up to friends and colleagues. '));
 347
 348             $this->elementStart('div', 'instructions');
 349             $this->raw($instr);
 350             $this->elementEnd('div');
 351         }
 352     }
 353
 354     /**
 355      * Wrapper for showing a page
 356      *
 357      * Stores an error and shows the page
 358      *
 359      * @param string $error Error, if any
 360      *
 361      * @return void
 362      */
 363
 364     function showForm($error=null)
 365     {
 366         $this->error = $error;
 367         $this->showPage();
 368     }
 369
 370     /**
 371      * Show the page content
 372      *
 373      * Either shows the registration form or, if registration was successful,
 374      * instructions for using the site.
 375      *
 376      * @return void
 377      */
 378
 379     function showContent()
 380     {
 381         if ($this->registered) {
 382             $this->showSuccessContent();
 383         } else {
 384             $this->showFormContent();
 385         }
 386     }
 387
 388     /**
 389      * Show the registration form
 390      *
 391      * @return void
 392      */
 393
 394     function showFormContent()
 395     {
 396         $code = $this->trimmed('code');
 397
 398         $invite = null;
 399
 400         if ($code) {
 401             $invite = Invitation::staticGet($code);
 402         }
 403
 404         if (common_config('site', 'inviteonly') && !($code && $invite)) {
 405             $this->clientError(_('Sorry, only invited people can register.'));
 406             return;
 407         }
 408
 409         $this->elementStart('form', array('method' => 'post',
 410                                           'id' => 'form_register',
 411                                           'class' => 'form_settings',
 412                                           'action' => common_local_url('register')));
 413         $this->elementStart('fieldset');
 414         $this->element('legend', null, 'Account settings');
 415         $this->hidden('token', common_session_token());
 416
 417         if ($this->code) {
 418             $this->hidden('code', $this->code);
 419         }
 420
 421         $this->elementStart('ul', 'form_data');
 422         if (Event::handle('StartRegistrationFormData', array($this))) {
 423             $this->elementStart('li');
 424             $this->input('nickname', _('Nickname'), $this->trimmed('nickname'),
 425                          _('1-64 lowercase letters or numbers, '.
 426                            'no punctuation or spaces. Required.'));
 427             $this->elementEnd('li');
 428             $this->elementStart('li');
 429             $this->password('password', _('Password'),
 430                             _('6 or more characters. Required.'));
 431             $this->elementEnd('li');
 432             $this->elementStart('li');
 433             $this->password('confirm', _('Confirm'),
 434                             _('Same as password above. Required.'));
 435             $this->elementEnd('li');
 436             $this->elementStart('li');
 437             if ($this->invite && $this->invite->address_type == 'email') {
 438                 $this->input('email', _('Email'), $this->invite->address,
 439                              _('Used only for updates, announcements, '.
 440                                'and password recovery'));
 441             } else {
 442                 $this->input('email', _('Email'), $this->trimmed('email'),
 443                              _('Used only for updates, announcements, '.
 444                                'and password recovery'));
 445             }
 446             $this->elementEnd('li');
 447             $this->elementStart('li');
 448             $this->input('fullname', _('Full name'),
 449                          $this->trimmed('fullname'),
 450                          _('Longer name, preferably your "real" name'));
 451             $this->elementEnd('li');
 452             $this->elementStart('li');
 453             $this->input('homepage', _('Homepage'),
 454                          $this->trimmed('homepage'),
 455                          _('URL of your homepage, blog, '.
 456                            'or profile on another site'));
 457             $this->elementEnd('li');
 458             $this->elementStart('li');
 459             $maxBio = Profile::maxBio();
 460             if ($maxBio > 0) {
 461                 $bioInstr = sprintf(_('Describe yourself and your interests in %d chars'),
 462                                     $maxBio);
 463             } else {
 464                 $bioInstr = _('Describe yourself and your interests');
 465             }
 466             $this->textarea('bio', _('Bio'),
 467                             $this->trimmed('bio'),
 468                             $bioInstr);
 469             $this->elementEnd('li');
 470             $this->elementStart('li');
 471             $this->input('location', _('Location'),
 472                          $this->trimmed('location'),
 473                          _('Where you are, like "City, '.
 474                            'State (or Region), Country"'));
 475             $this->elementEnd('li');
 476             Event::handle('EndRegistrationFormData', array($this));
 477             $this->elementStart('li', array('id' => 'settings_rememberme'));
 478             $this->checkbox('rememberme', _('Remember me'),
 479                             $this->boolean('rememberme'),
 480                             _('Automatically login in the future; '.
 481                               'not for shared computers!'));
 482             $this->elementEnd('li');
 483             $attrs = array('type' => 'checkbox',
 484                            'id' => 'license',
 485                            'class' => 'checkbox',
 486                            'name' => 'license',
 487                            'value' => 'true');
 488             if ($this->boolean('license')) {
 489                 $attrs['checked'] = 'checked';
 490             }
 491             $this->elementStart('li');
 492             $this->element('input', $attrs);
 493             $this->elementStart('label', array('class' => 'checkbox', 'for' => 'license'));
 494             $this->text(_('My text and files are available under '));
 495             $this->element('a', array('href' => common_config('license', 'url')),
 496                            common_config('license', 'title'), _("Creative Commons Attribution 3.0"));
 497             $this->text(_(' except this private data: password, '.
 498                           'email address, IM address, and phone number.'));
 499             $this->elementEnd('label');
 500             $this->elementEnd('li');
 501         }
 502         $this->elementEnd('ul');
 503         $this->submit('submit', _('Register'));
 504         $this->elementEnd('fieldset');
 505         $this->elementEnd('form');
 506     }
 507
 508     /**
 509      * Show some information about registering for the site
 510      *
 511      * Save the registration flag, run showPage
 512      *
 513      * @return void
 514      */
 515
 516     function showSuccess()
 517     {
 518         $this->registered = true;
 519         $this->showPage();
 520     }
 521
 522     /**
 523      * Show some information about registering for the site
 524      *
 525      * Gives some information and options for new registrees.
 526      *
 527      * @return void
 528      */
 529
 530     function showSuccessContent()
 531     {
 532         $nickname = $this->arg('nickname');
 533
 534         $profileurl = common_local_url('showstream',
 535                                        array('nickname' => $nickname));
 536
 537         $this->elementStart('div', 'success');
 538         $instr = sprintf(_('Congratulations, %1$s! And welcome to %%%%site.name%%%%. '.
 539                            'From here, you may want to...'. "\n\n" .
 540                            '* Go to [your profile](%2$s) '.
 541                            'and post your first message.' .  "\n" .
 542                            '* Add a [Jabber/GTalk address]'.
 543                            '(%%%%action.imsettings%%%%) '.
 544                            'so you can send notices '.
 545                            'through instant messages.' . "\n" .
 546                            '* [Search for people](%%%%action.peoplesearch%%%%) '.
 547                            'that you may know or '.
 548                            'that share your interests. ' . "\n" .
 549                            '* Update your [profile settings]'.
 550                            '(%%%%action.profilesettings%%%%)'.
 551                            ' to tell others more about you. ' . "\n" .
 552                            '* Read over the [online docs](%%%%doc.help%%%%)'.
 553                            ' for features you may have missed. ' . "\n\n" .
 554                            'Thanks for signing up and we hope '.
 555                            'you enjoy using this service.'),
 556                          $nickname, $profileurl);
 557
 558         $this->raw(common_markup_to_html($instr));
 559
 560         $have_email = $this->trimmed('email');
 561         if ($have_email) {
 562             $emailinstr = _('(You should receive a message by email '.
 563                             'momentarily, with ' .
 564                             'instructions on how to confirm '.
 565                             'your email address.)');
 566             $this->raw(common_markup_to_html($emailinstr));
 567         }
 568         $this->elementEnd('div');
 569     }
 570
 571     /**
 572      * Show the login group nav menu
 573      *
 574      * @return void
 575      */
 576
 577     function showLocalNav()
 578     {
 579         $nav = new LoginGroupNav($this);
 580         $nav->show();
 581     }
 582 }
 583