X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Flibs%2Fregister_functions.php;h=817cc3f3dd3b639af46cd7f81f027e55b5c55bab;hb=9dea40187dc40c8e2b642dccae039c681cbc43f9;hp=cc4ecaeb8c36f1cc19b63b16f75ea6fb4d98dd9b;hpb=8268379f7f0f38f5cd605714ecd5cbfacff0e282;p=mailer.git diff --git a/inc/libs/register_functions.php b/inc/libs/register_functions.php index cc4ecaeb8c..817cc3f3dd 100644 --- a/inc/libs/register_functions.php +++ b/inc/libs/register_functions.php @@ -1,7 +1,7 @@ 0) { // List alle visible modules (or all to the admin) $SW = 2; - $OUT .= "\n"; + $OUT .= '
'; while ($content = SQL_FETCHARRAY($result)) { - // Is the array element not set? - if (!isPostRequestElementSet('cat', $content['id'])) { - // Then set it - setRequestPostElement('cat', array($content['id'] => '')); - } // END - if - // Prepare array for the template $content = array( 'sw' => $SW, @@ -104,7 +98,8 @@ function registerGenerateCategoryTable ($mode, $return=false) { 'id' => $content['id'], ); - if ((postRequestElement('cat', $content['id']) == 'Y') || ((getConfig('register_default') == 'Y') && (!isPostRequestElementSet('cat', $content['id'])))) { + // Mark categories + if ((postRequestParameter('cat', $content['id']) == 'Y') || ((getConfig('register_default') == 'Y') && (!isPostRequestParameterSet('cat', $content['id'])))) { $content['def_y'] = ' checked="checked"'; } else { $content['def_n'] = ' checked="checked"'; @@ -114,7 +109,7 @@ function registerGenerateCategoryTable ($mode, $return=false) { $OUT .= loadTemplate('guest_cat_row', true, $content); $SW = 3 - $SW; } - $OUT .= "
\n"; + $OUT .= ''; // Free memory SQL_FREERESULT($result); @@ -151,7 +146,7 @@ function FILTER_REGISTER_MUST_FILLOUT ($content) { while ($row = SQL_FETCHARRAY($result)) { // Must the user fill out this element? $value = ''; - if ($row['field_required'] == 'Y') $value = " (*)"; + if ($row['field_required'] == 'Y') $value = '(*)'; // Add it $content['must_fillout_'.strtolower($row['field_name']).''] = $value; @@ -164,5 +159,306 @@ function FILTER_REGISTER_MUST_FILLOUT ($content) { return $content; } -// +// Checks wether the registration data is complete +function isRegistrationDataComplete () { + // Init elements + $GLOBALS['registration_ip_timeout'] = false; + $GLOBALS['registration_short_password'] = false; + $GLOBALS['register_selected_cats'] = '0'; + + // Default is okay + $isOkay = true; + + // First we only check the submitted data then we continue... :) + // + // Did he agree to our Terms Of Usage? + if (postRequestParameter('agree') != 'Y') { + setPostRequestParameter('agree', '!'); + $isOkay = false; + } // END - if + + // Did he enter a valid email address? (we really don't care about + // that, he has to click on a confirmation link :P ) + if ((!isPostRequestParameterSet('email')) || (!isEmailValid(postRequestParameter('email')))) { + setPostRequestParameter('email', '!'); + $isOkay = false; + } // END - if + + // And what about surname and family's name? + if (!isPostRequestParameterSet('surname')) { + setPostRequestParameter('surname', '!'); + $isOkay = false; + } // END - if + if (!isPostRequestParameterSet('family')) { + setPostRequestParameter('family', '!'); + $isOkay = false; + } // END - if + + // Get temporary array for modification + $postArray = postRequestArray(); + + // Check for required fields + $isOkay = ($isOkay && ifRequiredRegisterFieldsAreSet($postArray)); + + // Set it back in request + setPostRequestArray($postArray); + + // Did he enter his password twice? + if (((!isPostRequestParameterSet('pass1')) || (!isPostRequestParameterSet('pass2'))) || ((postRequestParameter('pass1') != postRequestParameter('pass2')) && (isPostRequestParameterSet('pass1')) && (isPostRequestParameterSet('pass2')))) { + if ((postRequestParameter('pass1') != postRequestParameter('pass2')) && (isPostRequestParameterSet('pass1')) && (isPostRequestParameterSet('pass2'))) { + setPostRequestParameter('pass1', '!'); + setPostRequestParameter('pass2', '!'); + } else { + if (!isPostRequestParameterSet('pass1')) { setPostRequestParameter('pass1', '!'); } else { setPostRequestParameter('pass1', ''); } + if (!isPostRequestParameterSet('pass2')) { setPostRequestParameter('pass2', '!'); } else { setPostRequestParameter('pass2', ''); } + } + $isOkay = false; + } // END - if + + // Is the password long enouth? + if ((strlen(postRequestParameter('pass1')) < getConfig('pass_len')) && ($isOkay === true)) { + $GLOBALS['registration_short_password'] = true; + $isOkay = false; + } // END - if + + // Do this check only when no admin is logged in + foreach (postRequestParameter('cat') as $id => $answer) { + if ($answer == 'Y') $GLOBALS['register_selected_cats']++; + } // END - foreach + + // Enougth categories selected? + $isOkay = (($isOkay) && ($GLOBALS['register_selected_cats'] >= getConfig('least_cats'))); + + if ((postRequestParameter('email') != '!') && (getConfig('check_double_email') == 'Y')) { + // Does the email address already exists in our database? + if ((!isAdmin()) && (isEmailTaken(postRequestParameter('email')))) { + setPostRequestParameter('email', '?'); + $isOkay = false; + } // END - if + } // END - if + + // Check for IP timeout? + if ((!isAdmin()) && (getConfig('ip_timeout') > 0)) { + // Check his IP number + $GLOBALS['registration_ip_timeout'] = (countSumTotalData(detectRemoteAddr() , 'user_data', 'userid', 'REMOTE_ADDR', true, " AND (`joined` > (UNIX_TIMESTAMP() - {?ip_timeout?}) OR `last_update` > (UNIX_TIMESTAMP() - {?ip_timeout?}))") == 1); + $isOkay = false; + } // END - if + + // Return result + return $isOkay; +} + +// Do the registration +function doRegistration () { + // Prepapre month and day of birth + if (strlen(postRequestParameter('day')) == 1) setPostRequestParameter('day' , '0' . postRequestParameter('day')); + if (strlen(postRequestParameter('month')) == 1) setPostRequestParameter('month', '0' . postRequestParameter('month')); + + // Get total ... + // ... confirmed, ... + $confirmedUsers = countSumTotalData('CONFIRMED' , 'user_data', 'userid', 'status', true); + // ... unconfirmed ... + $unconfirmedUsers = countSumTotalData('UNCONFIRMED', 'user_data', 'userid', 'status', true); + // ... and locked users! + $lockedUsers = countSumTotalData('LOCKED' , 'user_data', 'userid', 'status', true); + + // Generate hash which will be inserted into confirmation mail + $hash = generateHash(sha1( + $confirmedUsers . getConfig('ENCRYPT_SEPERATOR') . + $unconfirmedUsers . getConfig('ENCRYPT_SEPERATOR') . + $lockedUsers . getConfig('ENCRYPT_SEPERATOR') . + postRequestParameter('month') . '-' . + postRequestParameter('day') . '-' . + postRequestParameter('year') . getConfig('ENCRYPT_SEPERATOR') . + detectServerName() . getConfig('ENCRYPT_SEPERATOR') . + detectRemoteAddr() . getConfig('ENCRYPT_SEPERATOR') . + detectUserAgent() . '/' . + getConfig('SITE_KEY') . '/' . + getConfig('DATE_KEY') . '/' . + getConfig('CACHE_BUSTER') + )); + + // Old way with enterable two-char-code + $countryRow = '`country`'; + $countryData = substr(postRequestParameter('cntry'), 0, 2); + + // Add design when extension sql_patches is v0.2.7 or greater + // @TODO Rewrite these all to a single filter + $GLOBALS['register_sql_columns'] = ''; + $GLOBALS['register_sql_data'] = ''; + if (isExtensionInstalledAndNewer('theme', '0.0.8')) { + // Okay, add design here + $GLOBALS['register_sql_columns'] = ', `curr_theme`'; + $GLOBALS['register_sql_data'] = ", '" . getCurrentTheme() . "'"; + } // END - if + + // Check if I shall disable sending mail to newly registered members out about active/begging rallye + // + // First comes first: begging rallye + if (isExtensionInstalledAndNewer('beg', '0.1.7')) { + // Okay, shall I disable now? + if (getConfig('beg_new_mem_notify') != 'Y') { + $GLOBALS['register_sql_columns'] .= ', `beg_ral_notify`, `beg_ral_en_notify`'; + $GLOBALS['register_sql_data'] .= ', UNIX_TIMESTAMP(), UNIX_TIMESTAMP()'; + } // END - if + } // END - if + + // Second: active rallye + if (isExtensionInstalledAndNewer('bonus', '0.7.7')) { + // Okay, shall I disable now? + if (getConfig('bonus_new_mem_notify') != 'Y') { + $GLOBALS['register_sql_columns'] .= ', `bonus_ral_notify`, `bonus_ral_en_notify`'; + $GLOBALS['register_sql_data'] .= ', UNIX_TIMESTAMP(), UNIX_TIMESTAMP()'; + } // END - if + } // END - if + + // Write user data to table + if (isExtensionActive('country')) { + // Save with new selectable country code + $countryRow = '`country_code`'; + $countryData = bigintval(postRequestParameter('country_code')); + } // END - if + + ////////////////////////////// + // Create user's account... // + ////////////////////////////// + // + SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_data` (gender, surname, family, street_nr,%s, zip, city, email, birth_day, birth_month, birth_year, password, max_mails, receive_mails, refid, status, user_hash, REMOTE_ADDR, joined, last_update".$GLOBALS['register_sql_columns'].") +VALUES ('%s','%s','%s','%s','%s',%s,'%s','%s',%s, %s,%s,'%s',%s, %s,'%s','UNCONFIRMED','%s','%s', UNIX_TIMESTAMP(), UNIX_TIMESTAMP()".$GLOBALS['register_sql_data'].")", + array( + $countryRow, + substr(postRequestParameter('gender'), 0, 1), + postRequestParameter('surname'), + postRequestParameter('family'), + postRequestParameter('street_nr'), + $countryData, + bigintval(postRequestParameter('zip')), + postRequestParameter('city'), + postRequestParameter('email'), + bigintval(postRequestParameter('day')), + bigintval(postRequestParameter('month')), + bigintval(postRequestParameter('year')), + generateHash(postRequestParameter('pass1')), + bigintval(postRequestParameter('max_mails')), + bigintval(postRequestParameter('max_mails')), + bigintval(postRequestParameter('refid')), + $hash, + detectRemoteAddr(), + ), __FILE__, __LINE__); + + // Get his userid + $userid = bigintval(SQL_INSERTID()); + + // Did this work? + if ($userid == '0') { + // Something bad happened! + loadTemplate('admin_settings_saved', false, getMessage('USER_NOT_REGISTERED')); + + // Stop here + return; + } // END - if + + // Is the refback extension there? + // @TODO Rewrite this to a filter + if (isExtensionActive('refback')) { + // Update refback table + updateRefbackTable($userid); + } // END - if + + // Write his welcome-points + // @TODO Rewrite this whole if() block to addPointsThroughReferalSystem(). This will also make following if() block obsolete + // @TODO Wether the registration bonus should only be added to user directly or through referal system should be configurable + $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_user_points` WHERE `userid`=%s AND `ref_depth`=0 LIMIT 1", + array($userid), __FILE__, __LINE__); + if (SQL_NUMROWS($result) == '0') { + // Add only when the line was not found (maybe some more secure?) + $locked = 'points'; + + // Pay him later. First he has to confirm some mails! + if (getConfig('ref_payout') > 0) $locked = 'locked_points'; + + SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_points` (`userid`, `ref_depth`, `%s`) VALUES (%s,0,'{?points_register?}')", + array($locked, $userid), __FILE__, __LINE__); + + // Update mediadata as well + if ((isExtensionInstalledAndNewer('mediadata', '0.0.4')) && ($locked == 'points')) { + // Update database + updateMediadataEntry(array('total_points'), 'add', getConfig('points_register')); + } // END - if + } // END - if + + // Write catgories + if ((is_array(postRequestParameter('cat'))) && (count(postRequestParameter('cat')))) { + foreach (postRequestParameter('cat') as $cat => $joined) { + if ($joined == 'Y') { + // Insert category entry + SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_cats` (`userid`, `cat_id`) VALUES (%s, %s)", + array($userid, bigintval($cat)), __FILE__, __LINE__); + } // END - if + } // END - foreach + } // END - if + + // ... rewrite a zero referal id to the main title + if (postRequestParameter('refid') == '0') setPostRequestParameter('refid', getConfig('MAIN_TITLE')); + + // Is ZIP code set? + if (isPostRequestParameterSet('zip')) { + // Prepare data array for the email template + // Start with the gender... + $content = array( + 'hash' => $hash, + 'userid' => $userid, + 'gender' => translateGender(postRequestParameter('gender')), + 'surname' => SQL_ESCAPE(postRequestParameter('surname')), + 'family' => SQL_ESCAPE(postRequestParameter('family')), + 'email' => SQL_ESCAPE(postRequestParameter('email')), + 'street' => SQL_ESCAPE(postRequestParameter('street_nr')), + 'city' => SQL_ESCAPE(postRequestParameter('city')), + 'zip' => bigintval(postRequestParameter('zip')), + 'country' => $countryData, + 'refid' => SQL_ESCAPE(postRequestParameter('refid')), + 'pass' => SQL_ESCAPE(postRequestParameter('pass1')), + ); + } else { + // No ZIP code entered + $content = array( + 'hash' => $hash, + 'userid' => $userid, + 'gender' => translateGender(postRequestParameter('gender')), + 'surname' => SQL_ESCAPE(postRequestParameter('surname')), + 'family' => SQL_ESCAPE(postRequestParameter('family')), + 'email' => SQL_ESCAPE(postRequestParameter('email')), + 'street' => SQL_ESCAPE(postRequestParameter('street_nr')), + 'city' => SQL_ESCAPE(postRequestParameter('city')), + 'zip' => '', + 'country' => $countryData, + 'refid' => SQL_ESCAPE(postRequestParameter('refid')), + 'pass' => SQL_ESCAPE(postRequestParameter('pass1')), + ); + } + + // Continue with birthday... + switch (getLanguage()) { + case 'de': + $content['birthday'] = bigintval(postRequestParameter('day')) . '.' . bigintval(postRequestParameter('month')) . '.' . bigintval(postRequestParameter('year')); + break; + + default: + $content['birthday'] = bigintval(postRequestParameter('month')) . '/' . bigintval(postRequestParameter('day')) . '/' . bigintval(postRequestParameter('year')); + break; + } // END - switch + + // Display information to the user that he got mail and send it away + $messageGuest = loadEmailTemplate('register-member', $content, $userid); + + // Send mail to user (confirmation link!) + $email = $content['email']; + sendEmail($content['email'], getMessage('GUEST_SUBJECT_CONFIRM_LINK'), $messageGuest); + $content['email'] = $email; + + // Send mail to admin + sendAdminNotification(getMessage('ADMIN_SUBJECT_NEW_ACCOUNT'), 'register-admin', $content, $userid); +} + +// [EOF] ?>