3 require_once('include/config.php');
4 require_once('include/network.php');
5 require_once('include/plugin.php');
6 require_once('include/text.php');
7 require_once('include/pgettext.php');
8 require_once('include/datetime.php');
9 require_once('include/enotify.php');
12 function create_user($arr) {
14 // Required: { username, nickname, email } or { openid_url }
17 $result = array('success' => false, 'user' => null, 'password' => '', 'message' => '');
19 $using_invites = get_config('system','invitation_only');
20 $num_invites = get_config('system','number_invites');
23 $invite_id = ((x($arr,'invite_id')) ? notags(trim($arr['invite_id'])) : '');
24 $username = ((x($arr,'username')) ? notags(trim($arr['username'])) : '');
25 $nickname = ((x($arr,'nickname')) ? notags(trim($arr['nickname'])) : '');
26 $email = ((x($arr,'email')) ? notags(trim($arr['email'])) : '');
27 $openid_url = ((x($arr,'openid_url')) ? notags(trim($arr['openid_url'])) : '');
28 $photo = ((x($arr,'photo')) ? notags(trim($arr['photo'])) : '');
29 $password = ((x($arr,'password')) ? trim($arr['password']) : '');
30 $password1 = ((x($arr,'password1')) ? trim($arr['password1']) : '');
31 $confirm = ((x($arr,'confirm')) ? trim($arr['confirm']) : '');
32 $blocked = ((x($arr,'blocked')) ? intval($arr['blocked']) : 0);
33 $verified = ((x($arr,'verified')) ? intval($arr['verified']) : 0);
35 $publish = ((x($arr,'profile_publish_reg') && intval($arr['profile_publish_reg'])) ? 1 : 0);
36 $netpublish = ((strlen(get_config('system','directory'))) ? $publish : 0);
38 if ($password1 != $confirm) {
39 $result['message'] .= t('Passwords do not match. Password unchanged.') . EOL;
41 } elseif ($password1 != "")
42 $password = $password1;
44 $tmp_str = $openid_url;
48 $result['message'] .= t('An invitation is required.') . EOL;
51 $r = q("SELECT * FROM `register` WHERE `hash` = '%s' LIMIT 1", dbesc($invite_id));
53 $result['message'] .= t('Invitation could not be verified.') . EOL;
58 if((! x($username)) || (! x($email)) || (! x($nickname))) {
60 if(! validate_url($tmp_str)) {
61 $result['message'] .= t('Invalid OpenID url') . EOL;
64 $_SESSION['register'] = 1;
65 $_SESSION['openid'] = $openid_url;
66 require_once('library/openid.php');
67 $openid = new LightOpenID;
68 $openid->identity = $openid_url;
69 $openid->returnUrl = z_root() . '/openid';
70 $openid->required = array('namePerson/friendly', 'contact/email', 'namePerson');
71 $openid->optional = array('namePerson/first','media/image/aspect11','media/image/default');
73 $authurl = $openid->authUrl();
74 } catch (Exception $e){
75 $result['message'] .= t("We encountered a problem while logging in with the OpenID you provided. Please check the correct spelling of the ID."). EOL . EOL . t("The error message was:") . $e->getMessage() . EOL;
82 notice( t('Please enter the required information.') . EOL );
86 if(! validate_url($tmp_str))
92 // collapse multiple spaces in name
93 $username = preg_replace('/ +/',' ',$username);
95 if(mb_strlen($username) > 48)
96 $result['message'] .= t('Please use a shorter name.') . EOL;
97 if(mb_strlen($username) < 3)
98 $result['message'] .= t('Name too short.') . EOL;
100 // So now we are just looking for a space in the full name.
102 $loose_reg = get_config('system','no_regfullname');
104 $username = mb_convert_case($username,MB_CASE_TITLE,'UTF-8');
105 if(! strpos($username,' '))
106 $result['message'] .= t("That doesn't appear to be your full \x28First Last\x29 name.") . EOL;
110 if(! allowed_email($email))
111 $result['message'] .= t('Your email domain is not among those allowed on this site.') . EOL;
113 if((! valid_email($email)) || (! validate_email($email)))
114 $result['message'] .= t('Not a valid email address.') . EOL;
116 // Disallow somebody creating an account using openid that uses the admin email address,
117 // since openid bypasses email verification. We'll allow it if there is not yet an admin account.
119 $adminlist = explode(",", str_replace(" ", "", strtolower($a->config['admin_email'])));
121 //if((x($a->config,'admin_email')) && (strcasecmp($email,$a->config['admin_email']) == 0) && strlen($openid_url)) {
122 if((x($a->config,'admin_email')) && in_array(strtolower($email), $adminlist) && strlen($openid_url)) {
123 $r = q("SELECT * FROM `user` WHERE `email` = '%s' LIMIT 1",
126 if (dbm::is_result($r))
127 $result['message'] .= t('Cannot use that email.') . EOL;
130 $nickname = $arr['nickname'] = strtolower($nickname);
132 if(! preg_match("/^[a-z0-9][a-z0-9\_]*$/",$nickname))
133 $result['message'] .= t('Your "nickname" can only contain "a-z", "0-9" and "_".') . EOL;
135 $r = q("SELECT `uid` FROM `user`
136 WHERE `nickname` = '%s' LIMIT 1",
139 if (dbm::is_result($r))
140 $result['message'] .= t('Nickname is already registered. Please choose another.') . EOL;
142 // Check deleted accounts that had this nickname. Doesn't matter to us,
143 // but could be a security issue for federated platforms.
145 $r = q("SELECT * FROM `userd`
146 WHERE `username` = '%s' LIMIT 1",
149 if (dbm::is_result($r))
150 $result['message'] .= t('Nickname was once registered here and may not be re-used. Please choose another.') . EOL;
152 if(strlen($result['message'])) {
156 $new_password = ((strlen($password)) ? $password : autoname(6) . mt_rand(100,9999));
157 $new_password_encoded = hash('whirlpool',$new_password);
159 $result['password'] = $new_password;
161 require_once('include/crypto.php');
163 $keys = new_keypair(4096);
165 if($keys === false) {
166 $result['message'] .= t('SERIOUS ERROR: Generation of security keys failed.') . EOL;
170 $default_service_class = get_config('system','default_service_class');
171 if(! $default_service_class)
172 $default_service_class = '';
175 $prvkey = $keys['prvkey'];
176 $pubkey = $keys['pubkey'];
178 // Create another keypair for signing/verifying salmon protocol messages.
179 $sres = new_keypair(512);
180 $sprvkey = $sres['prvkey'];
181 $spubkey = $sres['pubkey'];
183 $r = q("INSERT INTO `user` ( `guid`, `username`, `password`, `email`, `openid`, `nickname`,
184 `pubkey`, `prvkey`, `spubkey`, `sprvkey`, `register_date`, `verified`, `blocked`, `timezone`, `service_class`, `default-location` )
185 VALUES ( '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', %d, %d, 'UTC', '%s', '' )",
186 dbesc(generate_user_guid()),
188 dbesc($new_password_encoded),
196 dbesc(datetime_convert()),
199 dbesc($default_service_class)
203 $r = q("SELECT * FROM `user`
204 WHERE `username` = '%s' AND `password` = '%s' LIMIT 1",
206 dbesc($new_password_encoded)
208 if (dbm::is_result($r)) {
210 $newuid = intval($r[0]['uid']);
214 $result['message'] .= t('An error occurred during registration. Please try again.') . EOL ;
219 * if somebody clicked submit twice very quickly, they could end up with two accounts
220 * due to race condition. Remove this one.
223 $r = q("SELECT `uid` FROM `user`
224 WHERE `nickname` = '%s' ",
227 if ((dbm::is_result($r)) && (count($r) > 1) && $newuid) {
228 $result['message'] .= t('Nickname is already registered. Please choose another.') . EOL;
229 dba::delete('user', array('uid' => $newuid));
233 if(x($newuid) !== false) {
234 $r = q("INSERT INTO `profile` ( `uid`, `profile-name`, `is-default`, `name`, `photo`, `thumb`, `publish`, `net-publish` )
235 VALUES ( %d, '%s', %d, '%s', '%s', '%s', %d, %d ) ",
240 dbesc(z_root() . "/photo/profile/{$newuid}.jpg"),
241 dbesc(z_root() . "/photo/avatar/{$newuid}.jpg"),
247 $result['message'] .= t('An error occurred creating your default profile. Please try again.') . EOL;
248 // Start fresh next time.
249 dba::delete('user', array('uid' => $newuid));
253 // Create the self contact
254 user_create_self_contact($newuid);
256 // Create a group with no members. This allows somebody to use it
257 // right away as a default group for new contacts.
259 require_once('include/group.php');
260 group_add($newuid, t('Friends'));
262 $r = q("SELECT `id` FROM `group` WHERE `uid` = %d AND `name` = '%s'",
266 if (dbm::is_result($r)) {
267 $def_gid = $r[0]['id'];
269 q("UPDATE `user` SET `def_gid` = %d WHERE `uid` = %d",
275 if(get_config('system', 'newuser_private') && $def_gid) {
276 q("UPDATE `user` SET `allow_gid` = '%s' WHERE `uid` = %d",
277 dbesc("<" . $def_gid . ">"),
284 // if we have no OpenID photo try to look up an avatar
286 $photo = avatar_img($email);
288 // unless there is no avatar-plugin loaded
290 require_once('include/Photo.php');
291 $photo_failure = false;
293 $filename = basename($photo);
294 $img_str = fetch_url($photo,true);
295 // guess mimetype from headers or filename
296 $type = guess_image_type($photo,true);
299 $img = new Photo($img_str, $type);
300 if($img->is_valid()) {
302 $img->scaleImageSquare(175);
304 $hash = photo_new_resource();
306 $r = $img->store($newuid, 0, $hash, $filename, t('Profile Photos'), 4 );
309 $photo_failure = true;
312 $img->scaleImage(80);
314 $r = $img->store($newuid, 0, $hash, $filename, t('Profile Photos'), 5 );
317 $photo_failure = true;
320 $img->scaleImage(48);
322 $r = $img->store($newuid, 0, $hash, $filename, t('Profile Photos'), 6 );
325 $photo_failure = true;
328 if (! $photo_failure) {
329 q("UPDATE `photo` SET `profile` = 1 WHERE `resource-id` = '%s' ",
336 call_hooks('register_account', $newuid);
338 $result['success'] = true;
339 $result['user'] = $u;
345 * @brief create the "self" contact from data from the user table
347 * @param integer $uid
349 function user_create_self_contact($uid) {
351 // Only create the entry if it doesn't exist yet
352 $r = q("SELECT `id` FROM `contact` WHERE `uid` = %d AND `self`", intval($uid));
353 if (dbm::is_result($r)) {
357 $r = q("SELECT `uid`, `username`, `nickname` FROM `user` WHERE `uid` = %d", intval($uid));
358 if (!dbm::is_result($r)) {
364 q("INSERT INTO `contact` (`uid`, `created`, `self`, `name`, `nick`, `photo`, `thumb`, `micro`, `blocked`, `pending`, `url`, `nurl`,
365 `addr`, `request`, `notify`, `poll`, `confirm`, `poco`, `name-date`, `uri-date`, `avatar-date`, `closeness`)
366 VALUES (%d, '%s', 1, '%s', '%s', '%s', '%s', '%s', 0, 0, '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', 0)",
367 intval($user['uid']),
369 dbesc($user['username']),
370 dbesc($user['nickname']),
371 dbesc(z_root()."/photo/profile/".$user['uid'].".jpg"),
372 dbesc(z_root()."/photo/avatar/".$user['uid'].".jpg"),
373 dbesc(z_root()."/photo/micro/".$user['uid'].".jpg"),
374 dbesc(z_root()."/profile/".$user['nickname']),
375 dbesc(normalise_link(z_root()."/profile/".$user['nickname'])),
376 dbesc($user['nickname'].'@'.substr(z_root(), strpos(z_root(),'://') + 3)),
377 dbesc(z_root()."/dfrn_request/".$user['nickname']),
378 dbesc(z_root()."/dfrn_notify/".$user['nickname']),
379 dbesc(z_root()."/dfrn_poll/".$user['nickname']),
380 dbesc(z_root()."/dfrn_confirm/".$user['nickname']),
381 dbesc(z_root()."/poco/".$user['nickname']),
382 dbesc(datetime_convert()),
383 dbesc(datetime_convert()),
384 dbesc(datetime_convert())
389 * @brief send registration confiĆmation with the intormation that reg is pending
391 * @param string $email
392 * @param string $sitename
393 * @param string $username
394 * @return NULL|boolean from notification() and email() inherited
396 function send_register_pending_eml($email, $sitename, $username) {
399 Thank you for registering at %2$s. Your account is pending for approval by the administrator.
402 $body = sprintf($body, $username, $sitename);
404 return notification(array(
405 'type' => "SYSTEM_EMAIL",
406 'to_email' => $email,
407 'subject'=> sprintf( t('Registration at %s'), $sitename),
412 * send registration confirmation.
413 * It's here as a function because the mail is sent
414 * from different parts
416 function send_register_open_eml($email, $sitename, $siteurl, $username, $password){
417 $preamble = deindent(t('
419 Thank you for registering at %2$s. Your account has been created.
422 The login details are as follows:
427 You may change your password from your account "Settings" page after logging
430 Please take a few moments to review the other account settings on that page.
432 You may also wish to add some basic information to your default profile
433 (on the "Profiles" page) so that other people can easily find you.
435 We recommend setting your full name, adding a profile photo,
436 adding some profile "keywords" (very useful in making new friends) - and
437 perhaps what country you live in; if you do not wish to be more specific
440 We fully respect your right to privacy, and none of these items are necessary.
441 If you are new and do not know anybody here, they may help
442 you to make some new and interesting friends.
445 Thank you and welcome to %2$s.'));
447 $preamble = sprintf($preamble, $username, $sitename);
448 $body = sprintf($body, $email, $sitename, $siteurl, $username, $password);
450 return notification(array(
451 'type' => "SYSTEM_EMAIL",
452 'to_email' => $email,
453 'subject'=> sprintf( t('Registration details for %s'), $sitename),
454 'preamble'=> $preamble,