Huge patchset (I don't recall all details):
[mailer.git] / inc / libs / register_functions.php
index e1e4ab8ae071ca5eec7958b8765a32eb07a913e8..7cf34d913ea4497fa3562807eca489b23ace236a 100644 (file)
@@ -159,5 +159,306 @@ function FILTER_REGISTER_MUST_FILLOUT ($content) {
        return $content;
 }
 
-//
+// Checks wether the registration data is complete
+function isRegistrationDataComplete () {
+       // Init elements
+       $GLOBALS['registration_ip_timeout']     = false;
+       $GLOBALS['registration_short_password'] = false;
+       $GLOBALS['register_selected_cats']      = '0';
+
+       // Default is okay
+       $isOkay = true;
+
+       // First we only check the submitted data then we continue... :)
+       //
+       // Did he agree to our Terms Of Usage?
+       if (postRequestParameter('agree') != 'Y') {
+               setPostRequestParameter('agree', '!');
+               $isOkay = false;
+       } // END - if
+
+       // Did he enter a valid email address? (we really don't care about
+       // that, he has to click on a confirmation link :P )
+       if ((!isPostRequestParameterSet('email')) || (!isEmailValid(postRequestParameter('email')))) {
+               setPostRequestParameter('email', '!');
+               $isOkay = false;
+       } // END - if
+
+       // And what about surname and family's name?
+       if (!isPostRequestParameterSet('surname')) {
+               setPostRequestParameter('surname', '!');
+               $isOkay = false;
+       } // END - if
+       if (!isPostRequestParameterSet('family')) {
+               setPostRequestParameter('family', '!');
+               $isOkay = false;
+       } // END - if
+
+       // Get temporary array for modification
+       $postArray = postRequestArray();
+
+       // Check for required fields
+       $isOkay = ($isOkay && ifRequiredRegisterFieldsAreSet($postArray));
+
+       // Set it back in request
+       setPostRequestArray($postArray);
+
+       // Did he enter his password twice?
+       if (((!isPostRequestParameterSet('pass1')) || (!isPostRequestParameterSet('pass2'))) || ((postRequestParameter('pass1') != postRequestParameter('pass2')) && (isPostRequestParameterSet('pass1')) && (isPostRequestParameterSet('pass2')))) {
+               if ((postRequestParameter('pass1') != postRequestParameter('pass2')) && (isPostRequestParameterSet('pass1')) && (isPostRequestParameterSet('pass2'))) {
+                       setPostRequestParameter('pass1', '!');
+                       setPostRequestParameter('pass2', '!');
+               } else {
+                       if (!isPostRequestParameterSet('pass1')) { setPostRequestParameter('pass1', '!'); } else { setPostRequestParameter('pass1', ''); }
+                       if (!isPostRequestParameterSet('pass2')) { setPostRequestParameter('pass2', '!'); } else { setPostRequestParameter('pass2', ''); }
+               }
+               $isOkay = false;
+       } // END - if
+
+       // Is the password long enouth?
+       if ((strlen(postRequestParameter('pass1')) < getConfig('pass_len')) && ($isOkay === true)) {
+               $GLOBALS['registration_short_password'] = true;
+               $isOkay = false;
+       } // END - if
+
+       // Do this check only when no admin is logged in
+       foreach (postRequestParameter('cat') as $id => $answer) {
+               if ($answer == 'Y') $GLOBALS['register_selected_cats']++;
+       } // END - foreach
+
+       // Enougth categories selected?
+       $isOkay = (($isOkay) && ($GLOBALS['register_selected_cats'] < getConfig('least_cats')));
+
+       if ((postRequestParameter('email') != '!') && (getConfig('check_double_email') == 'Y')) {
+               // Does the email address already exists in our database?
+               if ((!isAdmin()) && (isEmailTaken(postRequestParameter('email')))) {
+                       setPostRequestParameter('email', '?');
+                       $isOkay = false;
+               } // END - if
+       } // END - if
+
+       // Check for IP timeout?
+       if ((!isAdmin()) && (getConfig('ip_timeout') > 0)) {
+               // Check his IP number
+               $GLOBALS['registration_ip_timeout'] = (countSumTotalData(detectRemoteAddr()  , 'user_data', 'userid', 'REMOTE_ADDR', true, " AND (`joined` > (UNIX_TIMESTAMP() - {?ip_timeout?}) OR `last_update` > (UNIX_TIMESTAMP() - {?ip_timeout?}))") == 1);
+               $isOkay = false;
+       } // END - if
+
+       // Return result
+       return $isOkay;
+}
+
+// Do the registration
+function doRegistration () {
+       // Prepapre month and day of birth
+       if (strlen(postRequestParameter('day'))   == 1) setPostRequestParameter('day'  , '0' . postRequestParameter('day'));
+       if (strlen(postRequestParameter('month')) == 1) setPostRequestParameter('month', '0' . postRequestParameter('month'));
+
+       // Get total ...
+       // ... confirmed, ...
+       $confirmedUsers   = countSumTotalData('CONFIRMED'  , 'user_data', 'userid', 'status', true);
+       // ... unconfirmed ...
+       $unconfirmedUsers = countSumTotalData('UNCONFIRMED', 'user_data', 'userid', 'status', true);
+       // ... and locked users!
+       $lockedUsers      = countSumTotalData('LOCKED'     , 'user_data', 'userid', 'status', true);
+
+       // Generate hash which will be inserted into confirmation mail
+       $hash = generateHash(sha1(
+               $confirmedUsers . getConfig('ENCRYPT_SEPERATOR') .
+               $unconfirmedUsers . getConfig('ENCRYPT_SEPERATOR') .
+               $lockedUsers . getConfig('ENCRYPT_SEPERATOR') .
+               postRequestParameter('month') . '-' .
+               postRequestParameter('day') . '-' .
+               postRequestParameter('year') . getConfig('ENCRYPT_SEPERATOR') .
+               detectServerName() . getConfig('ENCRYPT_SEPERATOR') .
+               detectRemoteAddr() . getConfig('ENCRYPT_SEPERATOR') .
+               detectUserAgent() . '/' .
+               getConfig('SITE_KEY') . '/' .
+               getConfig('DATE_KEY') . '/' .
+               getConfig('CACHE_BUSTER')
+       ));
+
+       // Old way with enterable two-char-code
+       $countryRow = '`country`';
+       $countryData = substr(postRequestParameter('cntry'), 0, 2);
+
+       // Add design when extension sql_patches is v0.2.7 or greater
+       // @TODO Rewrite these all to a single filter
+       $GLOBALS['register_sql_columns'] = '';
+       $GLOBALS['register_sql_data'] = '';
+       if (isExtensionInstalledAndNewer('theme', '0.0.8')) {
+               // Okay, add design here
+               $GLOBALS['register_sql_columns'] = ', `curr_theme`';
+               $GLOBALS['register_sql_data'] = ", '" . getCurrentTheme() . "'";
+       } // END - if
+
+       // Check if I shall disable sending mail to newly registered members out about active/begging rallye
+       //
+       // First comes first: begging rallye
+       if (isExtensionInstalledAndNewer('beg', '0.1.7')) {
+               // Okay, shall I disable now?
+               if (getConfig('beg_new_mem_notify') != 'Y') {
+                       $GLOBALS['register_sql_columns'] .= ', `beg_ral_notify`, `beg_ral_en_notify`';
+                       $GLOBALS['register_sql_data']    .= ', UNIX_TIMESTAMP(), UNIX_TIMESTAMP()';
+               } // END - if
+       } // END - if
+
+       // Second: active rallye
+       if (isExtensionInstalledAndNewer('bonus', '0.7.7')) {
+               // Okay, shall I disable now?
+               if (getConfig('bonus_new_mem_notify') != 'Y') {
+                       $GLOBALS['register_sql_columns'] .= ', `bonus_ral_notify`, `bonus_ral_en_notify`';
+                       $GLOBALS['register_sql_data']    .= ', UNIX_TIMESTAMP(), UNIX_TIMESTAMP()';
+               } // END - if
+       } // END - if
+
+       // Write user data to table
+       if (isExtensionActive('country')) {
+               // Save with new selectable country code
+               $countryRow = '`country_code`';
+               $countryData = bigintval(postRequestParameter('country_code'));
+       } // END - if
+
+       //////////////////////////////
+       // Create user's account... //
+       //////////////////////////////
+       //
+       SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_data` (gender, surname, family, street_nr,%s, zip, city, email, birth_day, birth_month, birth_year, password, max_mails, receive_mails, refid, status, user_hash, REMOTE_ADDR, joined, last_update".$GLOBALS['register_sql_columns'].")
+VALUES ('%s','%s','%s','%s','%s',%s,'%s','%s',%s, %s,%s,'%s',%s, %s,'%s','UNCONFIRMED','%s','%s', UNIX_TIMESTAMP(), UNIX_TIMESTAMP()".$GLOBALS['register_sql_data'].")",
+       array(
+               $countryRow,
+               substr(postRequestParameter('gender'), 0, 1),
+               postRequestParameter('surname'),
+               postRequestParameter('family'),
+               postRequestParameter('street_nr'),
+               $countryData,
+               bigintval(postRequestParameter('zip')),
+               postRequestParameter('city'),
+               postRequestParameter('email'),
+               bigintval(postRequestParameter('day')),
+               bigintval(postRequestParameter('month')),
+               bigintval(postRequestParameter('year')),
+               generateHash(postRequestParameter('pass1')),
+               bigintval(postRequestParameter('max_mails')),
+               bigintval(postRequestParameter('max_mails')),
+               bigintval(postRequestParameter('refid')),
+               $hash,
+               detectRemoteAddr(),
+       ), __FILE__, __LINE__);
+
+       // Get his userid
+       $userid = bigintval(SQL_INSERTID());
+
+       // Did this work?
+       if ($userid == '0') {
+               // Something bad happened!
+               loadTemplate('admin_settings_saved', false, getMessage('USER_NOT_REGISTERED'));
+
+               // Stop here
+               return;
+       } // END - if
+
+       // Is the refback extension there?
+       // @TODO Rewrite this to a filter
+       if (isExtensionActive('refback')) {
+               // Update refback table
+               updateRefbackTable($userid);
+       } // END - if
+
+       // Write his welcome-points
+       // @TODO Rewrite this whole if() block to addPointsThroughReferalSystem(). This will also make following if() block obsolete
+       // @TODO Wether the registration bonus should only be added to user directly or through referal system should be configurable
+       $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_user_points` WHERE `userid`=%s AND `ref_depth`=0 LIMIT 1",
+               array($userid), __FILE__, __LINE__);
+       if (SQL_NUMROWS($result) == '0') {
+               // Add only when the line was not found (maybe some more secure?)
+               $locked = 'points';
+
+               // Pay him later. First he has to confirm some mails!
+               if (getConfig('ref_payout') > 0) $locked = 'locked_points';
+
+               SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_points` (`userid`, `ref_depth`, `%s`) VALUES (%s,0,'{?points_register?}')",
+                       array($locked, $userid), __FILE__, __LINE__);
+
+               // Update mediadata as well
+               if ((isExtensionInstalledAndNewer('mediadata', '0.0.4')) && ($locked == 'points')) {
+                       // Update database
+                       updateMediadataEntry(array('total_points'), 'add', getConfig('points_register'));
+               } // END - if
+       } // END - if
+
+       // Write catgories
+       if ((is_array(postRequestParameter('cat'))) && (count(postRequestParameter('cat')))) {
+               foreach (postRequestParameter('cat') as $cat => $joined) {
+                       if ($joined == 'Y') {
+                               // Insert category entry
+                               SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_cats` (`userid`, `cat_id`) VALUES (%s, %s)",
+                                       array($userid, bigintval($cat)), __FILE__, __LINE__);
+                       } // END - if
+               } // END - foreach
+       } // END - if
+
+       // ... rewrite a zero referal id to the main title
+       if (postRequestParameter('refid') == '0') setPostRequestParameter('refid', getConfig('MAIN_TITLE'));
+
+       // Is ZIP code set?
+       if (isPostRequestParameterSet('zip')) {
+               // Prepare data array for the email template
+               // Start with the gender...
+               $content = array(
+                       'hash'    => $hash,
+                       'userid'  => $userid,
+                       'gender'  => translateGender(postRequestParameter('gender')),
+                       'surname' => SQL_ESCAPE(postRequestParameter('surname')),
+                       'family'  => SQL_ESCAPE(postRequestParameter('family')),
+                       'email'   => SQL_ESCAPE(postRequestParameter('email')),
+                       'street'  => SQL_ESCAPE(postRequestParameter('street_nr')),
+                       'city'    => SQL_ESCAPE(postRequestParameter('city')),
+                       'zip'     => bigintval(postRequestParameter('zip')),
+                       'country' => $countryData,
+                       'refid'   => SQL_ESCAPE(postRequestParameter('refid')),
+                       'pass'    => SQL_ESCAPE(postRequestParameter('pass1')),
+               );
+       } else {
+               // No ZIP code entered
+               $content = array(
+                       'hash'    => $hash,
+                       'userid'  => $userid,
+                       'gender'  => translateGender(postRequestParameter('gender')),
+                       'surname' => SQL_ESCAPE(postRequestParameter('surname')),
+                       'family'  => SQL_ESCAPE(postRequestParameter('family')),
+                       'email'   => SQL_ESCAPE(postRequestParameter('email')),
+                       'street'  => SQL_ESCAPE(postRequestParameter('street_nr')),
+                       'city'    => SQL_ESCAPE(postRequestParameter('city')),
+                       'zip'     => '',
+                       'country' => $countryData,
+                       'refid'   => SQL_ESCAPE(postRequestParameter('refid')),
+                       'pass'    => SQL_ESCAPE(postRequestParameter('pass1')),
+               );
+       }
+
+       // Continue with birthday...
+       switch (getLanguage()) {
+               case 'de':
+                       $content['birthday'] = bigintval(postRequestParameter('day')) . '.' . bigintval(postRequestParameter('month')) . '.' . bigintval(postRequestParameter('year'));
+                       break;
+
+               default:
+                       $content['birthday'] = bigintval(postRequestParameter('month')) . '/' . bigintval(postRequestParameter('day')) . '/' . bigintval(postRequestParameter('year'));
+                       break;
+       } // END - switch
+
+       // Display information to the user that he got mail and send it away
+       $messageGuest = loadEmailTemplate('register-member', $content, $userid);
+
+       // Send mail to user (confirmation link!)
+       $email = $content['email'];
+       sendEmail($content['email'], getMessage('GUEST_SUBJECT_CONFIRM_LINK'), $messageGuest);
+       $content['email'] = $email;
+
+       // Send mail to admin
+       sendAdminNotification(getMessage('ADMIN_SUBJECT_NEW_ACCOUNT'), 'register-admin', $content, $userid);
+}
+
+// [EOF]
 ?>