X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Flibs%2Fuser_functions.php;h=06d621c0a877b29488a5ceaab649235c502666d0;hp=cfb52655e3b86af0cf88deed1d4f0d97c194aa3d;hb=e937b6540b932d537f72e827de76dd5be4aefe48;hpb=fe1e1d3b8291b1ca991e3d2e639cb28097c53d74 diff --git a/inc/libs/user_functions.php b/inc/libs/user_functions.php index cfb52655e3..06d621c0a8 100644 --- a/inc/libs/user_functions.php +++ b/inc/libs/user_functions.php @@ -1,7 +1,7 @@ ".$ltr.""; + $OUT .= '' . $ltr . ''; } else { // Output link to letter - $OUT .= "".$ltr.""; + $OUT .= '' . $ltr . ''; } - if ((($counter / getConfig('user_alpha')) == round($counter / getConfig('user_alpha'))) && ($counter > 0)) { - $OUT .= " ]
[ "; - } elseif ( $counter != $num ) { - $OUT .= " | "; + if ((($counter / getUserAlpha()) == round($counter / getUserAlpha())) && ($counter > 0)) { + $OUT .= ']
['; + } elseif ($counter != $num) { + $OUT .= '|'; } } // END - while - define('__ALPHA_LIST', $OUT); + // Prepare content + $content = array ( + 'alpha_selection' => $OUT, + ); // Load template - $OUT = LOAD_TEMPLATE("admin_list_user_alpha", true); - if ($return === true) { - // Return generated code - return $OUT; - } else { - // Output generated code - OUTPUT_HTML($OUT); - } + $OUT = loadTemplate('admin_list_user_alpha', true, $content); + + // Return generated code + return $OUT; } // Add links for sorting -function SortLinks ($letter, $sortby, $colspan, $return=false) { +function addSortLinks ($letter, $sortby) { $OUT = ''; - if (!REQUEST_ISSET_GET('offset')) REQUEST_SET_GET('offset', 0); - if (!REQUEST_ISSET_GET('page')) REQUEST_SET_GET('page' , 0); + if (!isGetRequestElementSet('offset')) setGetRequestElement('offset', 0); + if (!isGetRequestElementSet('page')) setGetRequestElement('page' , 0); // Add page and offset - $add = "&page=".REQUEST_GET('page')."&offset=".REQUEST_GET('offset'); + $add = '&page=' . getRequestElement('page') . '&offset=' . getRequestElement('offset'); - // Add status or mode - if (REQUEST_ISSET_GET('status')) $add .= '&mode=' . REQUEST_GET('status'); - elseif (REQUEST_ISSET_GET('mode')) $add .= '&mode=' . REQUEST_GET('mode'); + // Add status/ mode + foreach (array('do','status') as $param) { + if (isGetRequestElementSet($param)) { + $add .= '&' . $param . '=' . getRequestElement($param); + } // END - if + } // END - foreach // Makes order by links.. - if ($letter == "front") $letter = getMessage('_ALL2'); + if ($letter == 'front') { + $letter = ''; + } // END - if // Prepare array with all possible sorters $list = array( - 'userid' => getMessage('_UID'), - 'family' => getMessage('FAMILY_NAME'), - 'email' => getMessage('ADDY'), - 'REMOTE_ADDR' => getMessage('REMOTE_IP') + 'userid' => '{--_USERID--}', + 'family' => '{--FAMILY--}', + 'email' => '{--EMAIL--}', + 'REMOTE_ADDR' => '{--REMOTE_IP--}' ); // Add nickname if extension is installed - if (EXT_IS_ACTIVE('nickname')) { - $list['nickname'] = getMessage('NICKNAME'); + if (isExtensionActive('nickname')) { + $list['nickname'] = '{--NICKNAME--}'; } // END - if foreach ($list as $sort => $title) { if ($sortby == $sort) { - $OUT .= "" . $title . " | "; + $OUT .= '' . $title . '|'; } else { - $OUT .= "" . $title . " | "; + $OUT .= '' . $title . '|'; } } // END - foreach - define('__SORT_LIST', substr($OUT, 0, -13)); + // Add output + $content['list'] = substr($OUT, 0, -1); // Load template - $OUT = LOAD_TEMPLATE('admin_list_user_sort', true); - if ($return === true) { - // Return code - return $OUT; - } else { - // Output code - OUTPUT_HTML($OUT); - } + $OUT = loadTemplate('admin_list_user_sort', true, $content); + + // Return code + return $OUT; } // Add page navigation -function ADD_PAGENAV ($PAGES, $offset, $show_form, $colspan,$return=false) { - if ($show_form) { - // Load form for changing number of lines - define('__FORM_HEADER', LOAD_TEMPLATE('admin_list_user_sort_form', true)); - define('__FORM_FOOTER', ' '); - } else { - // Empty row - define('__FORM_HEADER', ' '); - define('__FORM_FOOTER', ' '); - } - +function addPageNavigation ($numPages) { + // Start with empty content $OUT = ''; - for ($page = 1; $page <= $PAGES; $page++) { - if (($page == REQUEST_GET('page')) || ((!REQUEST_ISSET_GET('page')) && ($page == '1'))) { - $OUT .= '-'; - } else { - if (!REQUEST_ISSET_GET('letter')) REQUEST_SET_GET('letter', getMessage('_ALL2')); - if (!REQUEST_ISSET_GET('sortby')) REQUEST_SET_GET('sortby', 'userid'); - // Base link - $OUT .= ''; - } + // Add status/mode + foreach (array('do','status') as $param) { + if (isGetRequestElementSet($param)) { + $OUT .= '&' . $param . '=' . getRequestElement($param); + } // END - if + } // END - foreach - $OUT .= $page; + // Letter and so on + $OUT .= '&letter=' . getRequestElement('letter') . '&sortby=' . getRequestElement('sortby') . '&page=' . $page . '&offset=' . getUserLimit() . '%}">'; + } - if (($page == REQUEST_GET('page')) || ((!REQUEST_ISSET_GET('page')) && ($page == '1'))) { - $OUT .= '-'; - } else { - $OUT .= ''; - } + $OUT .= $page; - if ($page < $PAGES) $OUT .= ' | '; - } // END - for + if (($page == getRequestElement('page')) || ((!isGetRequestElementSet('page')) && ($page == 1))) { + $OUT .= '-'; + } else { + $OUT .= ''; + } - define('__PAGENAV_LIST', $OUT); + if ($page < $numPages) { + $OUT .= '|'; + } // END - if + } // END - for - // Load template - $OUT = LOAD_TEMPLATE('admin_list_user_pagenav', true); - if ($return === true) { - // Return code - return $OUT; - } else { - // Output code - OUTPUT_HTML($OUT); - } + // Add list output + $content['list'] = $OUT; + + // Load template + $OUT = loadTemplate('admin_list_user_pagenav', true, $content); + } // END - if + + // Return code + return $OUT; } // Create email link to user's account -function generateUserEmailLink($email, $mod = 'admin') { +function generateUserEmailLink ($email, $mod = 'admin') { // Show contact link only if user is confirmed by default $locked = " AND `status`='CONFIRMED'"; // But admins shall always see it - if (IS_ADMIN()) $locked = ''; + if (isAdmin()) { + $locked = ''; + } // END - if + // Search for the email address $result = SQL_QUERY_ESC("SELECT `userid` FROM - `{!_MYSQL_PREFIX!}_user_data` + `{?_MYSQL_PREFIX?}_user_data` WHERE - `email`='%s'" . $locked." + '%s' REGEXP `email` + " . $locked . " LIMIT 1", array($email), __FUNCTION__, __LINE__); + + // Is there an entry? if (SQL_NUMROWS($result) == 1) { // Load userid - list($uid) = SQL_FETCHROW($result); + list($userid) = SQL_FETCHROW($result); // Rewrite email address to contact link - $email = '{!URL!}/modules.php?module=' . $mod . '&what=user_contct&uid=' . bigintval($uid); + $email = '{%url=modules.php?module=' . $mod . '&what=user_contct&userid=' . bigintval($userid) . '%}'; } // END - if // Free memory @@ -219,33 +225,32 @@ LIMIT 1", return $email; } -// Selects a random user id as the new referal id if they have at least X confirmed mails in this run -function determineRandomReferalId () { +// Selects a random user id as the new referral id if they have at least X confirmed mails in this run +function determineRandomReferralId () { // Default is zero refid - $refid = 0; + $refid = NULL; // Is the extension version fine? - if (GET_EXT_VERSION('user') >= '0.3.4') { + if ((isRandomReferralIdEnabled()) && (isExtensionInstalledAndNewer('user', '0.3.4'))) { // Get all user ids - $totalUsers = GET_TOTAL_DATA('CONFIRMED', 'user_data', 'userid', 'status', true, " AND `rand_confirmed` >= ".getConfig('user_min_confirmed').""); + $totalUsers = countSumTotalData('CONFIRMED', 'user_data', 'userid', 'status', true, runFilterChain('user_exclusion_sql', ' AND `rand_confirmed` >= {?user_min_confirmed?}')); - // Do we have at least one? + // Is there at least one? if ($totalUsers > 0) { - // Then choose random number - $randNum = mt_rand(0, ($totalUsers - 1)); + // Then choose random userid + $randUserid = mt_rand(0, ($totalUsers - 1)); // Look for random user - $result = SQL_QUERY_ESC("SELECT `userid` FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `status`='CONFIRMED' AND `rand_confirmed` >= %s ORDER BY `rand_confirmed` DESC LIMIT %s, 1", - array(getConfig('user_min_confirmed'), $randNum), __FUNCTION__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `userid` FROM `{?_MYSQL_PREFIX?}_user_data` " . runFilterChain('user_exclusion_sql', "WHERE `status`='CONFIRMED'") . ' AND `rand_confirmed` >= {?user_min_confirmed?} ORDER BY `rand_confirmed` DESC LIMIT %s, 1', + array($randUserid), __FUNCTION__, __LINE__); - // Do we have one entry there? + // Is there one entry there? if (SQL_NUMROWS($result) == 1) { - // Use that userid as new referal id + // Use that userid as new referral id list($refid) = SQL_FETCHROW($result); - // Reset this user's counter - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `rand_confirmed`=0 WHERE `userid`=%s LIMIT 1", - array($refid), __FUNCTION__, __LINE__); + // Debug message + /* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'refid=' . $refid . ' - choosen!'); } // END - if // Free result @@ -258,15 +263,13 @@ function determineRandomReferalId () { } // Do the user login -function USER_DO_LOGIN ($uid, $passwd, $successUrl = '') { +function doUserLogin ($userid, $passwd, $successUrl = '', $errorUrl = 'modules.php?module=index&what=login&login=') { // Init variables - $dmy = ''; $add = ''; - - // Add last_login if available - $lastOnline = ''; - if (GET_EXT_VERSION('sql_patches') >= '0.2.8') { - $lastOnline = ', `last_login`'; - } // END - if + $dmy = ''; + $add = ''; + $errorCode = '0'; + $ext = ''; + $isFound = false; // Init array $content = array( @@ -275,198 +278,796 @@ function USER_DO_LOGIN ($uid, $passwd, $successUrl = '') { 'last_online' => 0, 'last_login' => 0, 'hash' => '' - ); + ); - // Check login data - if ((EXT_IS_ACTIVE('nickname')) && (NICKNAME_IS_ACTIVE($uid))) { - // Nickname entered - $result = SQL_QUERY_ESC("SELECT `userid`, `password`, `last_online`" . $lastOnline . " FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `nickname`='%s' AND `status`='CONFIRMED' LIMIT 1", - array($uid), __FUNCTION__, __LINE__); - } else { - // Direct userid entered - $result = SQL_QUERY_ESC("SELECT `userid`, `password`, `last_online`" . $lastOnline . " FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `userid`=%s AND `status`='CONFIRMED' LIMIT 1", - array($uid, $content['hash']), __FUNCTION__, __LINE__); - } + // Check login data + if ((isExtensionActive('nickname')) && (isNicknameUsed($userid))) { + // Nickname entered + $isFound = fetchUserData($userid, 'nickname'); + } elseif (isNicknameUsed($userid)) { + // No nickname installed + $errorCode = getCode('EXTENSION_PROBLEM'); + $ext = 'nickname'; + } else { + // Direct userid entered + $isFound = fetchUserData($userid); + } - // Load entry - $content = SQL_FETCHARRAY($result); - if (!empty($content['userid'])) $uid = bigintval($content['userid']); + // No error found? + if (($errorCode == '0') && ($isFound === true)) { + // Get user data array and set userid (e.g. important if we login with nickname) + $content = getUserDataArray(); + if (!empty($content['userid'])) { + $userid = bigintval($content['userid']); + } // END - if + } // END - if - // Is there an entry? - if ((SQL_NUMROWS($result) == 1) && ((isNicknameUsed($content['userid'] === true) && (!empty($content['userid']))) || ($content['userid'] == $uid))) { - // Free result - SQL_FREERESULT($result); + // Debug message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'userid=' . $userid . ',isUserDataValid()=' . intval(isUserDataValid()) . ',userStatus=' . getUserData('status') . ',errorCode=' . $errorCode . ',ext=' . $ext . ',isFound=' . intval($isFound)); - // Check for old MD5 passwords - if ((strlen($content['password']) == 32) && (md5($passwd) == $content['password'])) { - // Just set the hash to the password from DB... :) - $content['hash'] = $content['password']; - } else { - // Hash password with improved way for comparsion - $content['hash'] = generateHash($passwd, substr($content['password'], 0, -40)); - } + // Is there an entry? + if (($errorCode == '0') && (isUserDataValid()) && (getUserData('status') == 'CONFIRMED') && (!empty($content['userid']))) { + // Check for old MD5 passwords + if ((strlen(getUserData('password')) == 32) && (md5($passwd) == getUserData('password'))) { + // Just set the hash to the password from DB... :) + $content['hash'] = getUserData('password'); + } else { + // Hash password with improved way for comparsion + $content['hash'] = generateHash($passwd, substr(getUserData('password'), 0, -40)); + } - // Does the password match the hash? - if ($content['hash'] == $content['password']) { - // New hashed password found so let's generate a new one - $content['hash'] = generateHash($passwd); + // Does the password match the hash? + if ($content['hash'] == getUserData('password')) { + // New hashed password found so let's generate a new one + $content['hash'] = generateHash($passwd); - // ... and update database - // @TODO Make this filter working: $ADDON = runFilterChain('post_login_update', $content); - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `password`='%s' WHERE `userid`=%s AND `status`='CONFIRMED' LIMIT 1", - array($content['hash'], $uid), __FUNCTION__, __LINE__); + // ... and update database + // @TODO Make this filter working: $ADDON = runFilterChain('post_login_update', $content); + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `password`='%s' WHERE `userid`=%s AND `status`='CONFIRMED' LIMIT 1", + array($content['hash'], $userid), __FUNCTION__, __LINE__); - // No login bonus by default - $GLOBALS['bonus_payed'] = false; + // No login bonus by default + $GLOBALS['bonus_payed'] = false; + // Is bonus up-to-date? + if (isExtensionInstalledAndNewer('bonus', '0.2.2')) { // Probe for last online timemark - $probe = time() - $content['last_online']; - if (!empty($content['last_login'])) $probe = time() - $content['last_login']; - if ((GET_EXT_VERSION('bonus') >= '0.2.2') && ($probe >= getConfig('login_timeout'))) { + $probe = time() - getUserData('last_online'); + if (getUserData('last_login') > 0) { + // Use timestamp from last login + $probe = time() - getUserData('last_login'); + } // END - if + + // Is the timeout reached? + if ($probe >= getConfig('login_timeout')) { // Add login bonus to user's account - $add = sprintf(", `login_bonus`=`login_bonus`+%s", - (float)getConfig('login_bonus') - ); + $add = ',`login_bonus`=`login_bonus`+{?login_bonus?}'; $GLOBALS['bonus_payed'] = true; // Subtract login bonus from userid's account or jackpot - if ((GET_EXT_VERSION('bonus') >= '0.3.5') && (getConfig('bonus_mode') != 'ADD')) BONUS_POINTS_HANDLER('login_bonus'); + if ((isExtensionInstalledAndNewer('bonus', '0.3.5')) && (getBonusMode() != 'ADD')) { + handleBonusPoints('login_bonus', $userid); + } // END - if } // END - if + } // END - if - // Calculate new hash with the secret key and master salt together - $content['hash'] = generatePassString($content['hash']); - - // Update global array - // @TODO Make this filter working: $URL = runFilterChain('do_login', array('content' => $content, 'addon' => $ADDON)); - setUserId($uid); - - // Try to set session data (which shall normally always work!) - if ((setSession('userid', $uid )) && (setSession('u_hash', $content['hash']))) { - // Update database records - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `total_logins`=`total_logins`+1" . $add . " WHERE `userid`=%s LIMIT 1", - array($uid), __FUNCTION__, __LINE__); - if (SQL_AFFECTEDROWS() == 1) { - // Is a success URL set? - if (empty($successUrl)) { - // Procedure to checking for login data - if (($GLOBALS['bonus_payed']) && (EXT_IS_ACTIVE('bonus'))) { - // Bonus added (just displaying!) - $URL = 'modules.php?module=chk_login&mode=bonus'; - } else { - // Bonus not added - $URL = 'modules.php?module=chk_login&mode=login'; - } + // @TODO Make this filter working: $url = runFilterChain('do_login', array('content' => $content, 'addon' => $ADDON)); + + // Set member id + setMemberId($userid); + + // Try to set session data (which shall normally always work!) + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'userid=' . $userid . ',hash=' . $content['hash'] . '(' . strlen($content['hash']) . ')'); + if ((setSession('userid', $userid )) && (setSession('u_hash', encodeHashForCookie($content['hash'])))) { + // Update database records + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `total_logins`=`total_logins`+1" . $add . " WHERE `userid`=%s LIMIT 1", + array($userid), __FUNCTION__, __LINE__); + if (!SQL_HASZEROAFFECTED()) { + // Is a success URL set? + if (empty($successUrl)) { + // Procedure to checking for login data + if (($GLOBALS['bonus_payed'] === true) && (isExtensionActive('bonus'))) { + // Bonus added (just displaying!) + $url = 'modules.php?module=chk_login&do=bonus'; } else { - // Use this URL - $URL = $successUrl; + // Bonus not added + $url = 'modules.php?module=chk_login&do=login'; } } else { - // Cannot update counter! - $URL = 'modules.php?module=index&what=login&login='.getCode('CNTR_FAILED'); + // Use this URL + $url = $successUrl; } } else { - // Cookies not setable! - $URL = 'modules.php?module=index&what=login&login='.getCode('NO_COOKIES'); + // Cannot update counter! + $errorCode = getCode('CNTR_FAILED'); } - } elseif (GET_EXT_VERSION('sql_patches') >= '0.6.1') { - // Update failture counter - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `login_failures`=`login_failures`+1,`last_failure`=NOW() WHERE `userid`=%s LIMIT 1", - array($uid), __FUNCTION__, __LINE__); - - // Wrong password! - $URL = 'modules.php?module=index&what=login&login='.getCode('WRONG_PASS'); - } - } elseif (((isNicknameUsed($content['userid'])) && (!empty($content['userid']))) || ($content['userid'] == $uid)) { - // Other account status? - // @TODO Can this query be merged with above query? - $result = SQL_QUERY_ESC("SELECT status FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `userid`=%s LIMIT 1", - array($uid), __FUNCTION__, __LINE__); - - // Entry found? - if (SQL_NUMROWS($result) == 1) { - // Load status - list($status) = SQL_FETCHROW($result); - - // Create an error code from given status - $errorCode = generateErrorCodeFromUserStatus($status); } else { - // ID not found! - $errorCode = getCode('WRONG_ID'); + // Cookies not setable! + $errorCode = getCode('COOKIES_DISABLED'); } + } elseif (isExtensionInstalledAndNewer('sql_patches', '0.6.1')) { + // Update failure counter + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `login_failures`=`login_failures`+1,`last_failure`=NOW() WHERE `userid`=%s LIMIT 1", + array($userid), __FUNCTION__, __LINE__); - // Construct URL - $URL = 'modules.php?module=index&what=login&login='.$errorCode; - } else { - // ID not found! - $URL = 'modules.php?module=index&what=login&login='.getCode('WRONG_ID'); + // Wrong password! + $errorCode = getCode('WRONG_PASS'); } + } elseif ((isUserDataValid()) && (getUserData('status') != 'CONFIRMED')) { + // Create an error code from given status + $errorCode = generateErrorCodeFromUserStatus(getUserData('status')); + + // Set userid in session + setSession('userid', getUserData('userid')); + } elseif (!isUserDataValid()) { + // User id not found + $errorCode = getCode('WRONG_ID'); + } else { + // Unknown error + $errorCode = getCode('UNKNOWN_ERROR'); + } - // Return URL - return $URL; + // Error code provided? + if ($errorCode > 0) { + // Then reconstruct the URL + $url = $errorUrl . $errorCode; + + // Extension set? Then add it as well. + if (!empty($ext)) { + $url .= '&ext=' . $ext; + } // END - if + } // END - if + + // Return URL + return $url; } // Try to send a new password for the given user account -function USER_DO_NEW_PASSWORD ($email, $uid) { - // Compile email when found in address (only secure chars!) - if (!empty($email)) $email = str_replace('{DOT}', '.', $email); - - // Init result and error +function doNewUserPassword ($email, $userid) { + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'email=' . $email . ',userid=' . $userid . ' - ENTERED!'); + // Init found-status and error $errorCode = ''; - $result = false; + $accountFound = false; // Probe userid/nickname - if ((EXT_IS_ACTIVE('nickname')) && (NICKNAME_IS_ACTIVE($uid))) { + if (!empty($email)) { + // Email entered + $accountFound = fetchUserData($email, 'email'); + } elseif ((isExtensionActive('nickname')) && (isNicknameOrUserid($userid))) { // Nickname entered - $result = SQL_QUERY_ESC("SELECT `userid`, `status` FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `nickname`='%s' OR `email`='%s' LIMIT 1", - array($uid, $email), __FUNCTION__, __LINE__); - } elseif (($uid > 0) && (empty($email))) { + $accountFound = fetchUserData($userid, 'nickname'); + } elseif ((isValidUserId($userid)) && (empty($email))) { // Direct userid entered - $result = SQL_QUERY_ESC("SELECT `userid`, `status` FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `userid`=%s LIMIT 1", - array(bigintval($uid)), __FUNCTION__, __LINE__); - } elseif (!empty($email)) { - // Email entered - $result = SQL_QUERY_ESC("SELECT `userid`, `status` FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `email`='%s' LIMIT 1", - array($email), __FUNCTION__, __LINE__); + $accountFound = fetchUserData($userid); } else { // Userid not set! - DEBUG_LOG(__FUNCTION__, __LINE__, 'Userid is not set! BUG!'); - $errorCode = getCode('WRONG_ID'); + logDebugMessage(__FUNCTION__, __LINE__, 'userid=' . $userid . ',email=' . $email . ': Important variables are empty.'); } // Any entry found? - if (SQL_NUMROWS($result) == 1) { - // This data is valid, so we create a new pass... :-) - list($uid, $status) = SQL_FETCHROW($result); - - if ($status == 'CONFIRMED') { - // Ooppps, this was missing! ;-) We should update the database... + if ($accountFound === true) { + // Is the account confirmed + if (getUserData('status') == 'CONFIRMED') { + // Generate new password $NEW_PASS = generatePassword(); - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `password`='%s' WHERE `userid`=%s LIMIT 1", - array(generateHash($NEW_PASS), $uid), __FUNCTION__, __LINE__); + + // Update database + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `password`='%s' WHERE `userid`=%s LIMIT 1", + array(generateHash($NEW_PASS), getUserData('userid')), __FUNCTION__, __LINE__); // Prepare data and message for email - $message = LOAD_EMAIL_TEMPLATE('new-pass', array('new_pass' => $NEW_PASS), $uid); + $message = loadEmailTemplate('guest_new_password', + array( + 'new_pass' => $NEW_PASS, + 'nickname' => $userid + ), bigintval(getUserData('userid'))); // ... and send it away - sendEmail($uid, getMessage('GUEST_NEW_PASSWORD'), $message); + sendEmail(bigintval(getUserData('userid')), '{--GUEST_NEW_PASSWORD--}', $message); // Output note to user - LOAD_TEMPLATE('admin_settings_saved', false, getMessage('GUEST_NEW_PASSWORD_SEND')); + displayMessage('{--GUEST_NEW_PASSWORD_SEND--}'); } else { // Account is locked or unconfirmed - $errorCode = generateErrorCodeFromUserStatus($status); + $errorCode = generateErrorCodeFromUserStatus(getUserData('status')); // Load URL - redirectToUrl('modules.php?module=index&what=login&login='.$errorCode); + redirectToUrl('modules.php?module=index&what=login&login=' . $errorCode); } } else { - // ID or email is wrong - LOAD_TEMPLATE('admin_settings_saved', false, '{--GUEST_WRONG_ID_EMAIL--}'); + // Id or email is wrong + displayMessage('{--GUEST_WRONG_ID_EMAIL--}'); } // Return the error code + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'email=' . $email . ',userid=' . $userid . ',errorCode=' . $errorCode . ' - EXIT!'); return $errorCode; } +// Get timestamp for given stats type and data +function getEpocheTimeFromUserStats ($statsType, $statsData, $userid = NULL) { + // Default timestamp is zero + $data['inserted'] = '0'; + + // User id set? + if ((isMemberIdSet()) && (is_null($userid))) { + $userid = getMemberId(); + } // END - if + + // Is the extension installed and updated? + if ((!isExtensionActive('sql_patches')) || (isExtensionInstalledAndOlder('sql_patches', '0.5.6'))) { + // Return zero here + return $data['inserted']; + } // END - if + + // Try to find the entry + $result = SQL_QUERY_ESC("SELECT + UNIX_TIMESTAMP(`inserted`) AS inserted +FROM + `{?_MYSQL_PREFIX?}_user_stats_data` +WHERE + `userid`=%s AND + `stats_type`='%s' AND + `stats_data`='%s' +LIMIT 1", + array( + bigintval($userid), + $statsType, + $statsData + ), __FUNCTION__, __LINE__); + + // Is the entry there? + if (SQL_NUMROWS($result) == 1) { + // Get this stamp + $data = SQL_FETCHARRAY($result); + } // END - if + + // Free result + SQL_FREERESULT($result); + + // Return stamp + return $data['inserted']; +} + +// Inserts user stats +function insertUserStatsRecord ($userid, $statsType, $statsData) { + // Is the extension installed and updated? + if ((!isExtensionActive('sql_patches')) || (isExtensionInstalledAndOlder('sql_patches', '0.5.6'))) { + // Return zero here + return false; + } // END - if + + // Default is not working + $return = false; + + // Does it exist? + if ((!getEpocheTimeFromUserStats($statsType, $statsData, $userid)) && (!is_array($statsData))) { + // Then insert it! + SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_stats_data` (`userid`,`stats_type`,`stats_data`) VALUES (%s,'%s','%s')", + array( + bigintval($userid), + $statsType, + $statsData + ), __FUNCTION__, __LINE__); + + // Does it have worked? + $return = (!SQL_HASZEROAFFECTED()); + } elseif (is_array($statsData)) { + // Invalid data! + logDebugMessage(__FUNCTION__, __LINE__, 'userid=' . $userid . ',type=' . $statsType . ',data=' . gettype($statsData) . ': Invalid statistics data type!'); + } + + // Return status + return $return; +} + +// Confirms a user account +function doConfirmUserAccount ($hash) { + // Init content + $content = array( + 'message' => '{--GUEST_CONFIRMED_FAILED--}', + 'userid' => 0, + ); + + // Initialize the user id + $userid = NULL; + + // Search for an unconfirmed or confirmed account + $result = SQL_QUERY_ESC("SELECT `userid`,`refid` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `user_hash`='%s' AND (`status`='UNCONFIRMED' OR `status`='CONFIRMED') LIMIT 1", + array($hash), __FILE__, __LINE__); + if (SQL_NUMROWS($result) == 1) { + // Ok, he want's to confirm now so we load some data + list($userid, $refid) = SQL_FETCHROW($result); + + // Fetch user data + if (!fetchUserData($userid)) { + // Not found, should not happen + reportBug(__FILE__, __LINE__, 'User account ' . $userid . ' not found.'); + } // END - if + + // Load all data and add points + $content = getUserDataArray(); + + // Unlock his account (but only when it is on UNCONFIRMED!) + SQL_QUERY_ESC("UPDATE + `{?_MYSQL_PREFIX?}_user_data` +SET + `status`='CONFIRMED', + `user_hash`=NULL +WHERE + `user_hash`='%s' AND + `status`='UNCONFIRMED' +LIMIT 1", + array($hash), __FILE__, __LINE__); + + // Was it updated? + if (!SQL_HASZEROAFFECTED()) { + // Send email if updated + $message = loadEmailTemplate('guest_user_confirmed', $content, bigintval($userid)); + + // And send him right away the confirmation mail + sendEmail($userid, '{--GUEST_THANX_CONFIRM--}', $message); + + // Maybe he got "referraled"? + if ((isValidUserId($refid)) && ($refid != $userid)) { + // Select the referral userid + if (fetchUserData($refid)) { + // Update ref counter... + updateReferralCounter($refid); + + // If version matches add ref bonus to refid's account + if ((isExtensionInstalledAndNewer('bonus', '0.4.4')) && (isBonusRallyeActive())) { + // Add points (directly only!) + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `bonus_ref`=`bonus_ref`+{?bonus_ref?} WHERE `userid`=%s LIMIT 1", + array(bigintval($refid)), __FILE__, __LINE__); + + // Subtract points from system + handleBonusPoints(getConfig('bonus_ref'), $refid); + } // END - if + + // Add one-time referral bonus over referral system or directly + initReferralSystem(); + addPointsThroughReferralSystem('referral_bonus', $refid, getPointsRef(), bigintval($userid)); + } // END - if + } // END - if + + if (isExtensionActive('rallye')) { + // Add user to rallye (or not?) + addUserToReferralRallye(bigintval($userid)); + } // END - if + + // Account confirmed! + if (isExtensionActive('lead')) { + // Set special lead cookie + setSession('lead_userid', bigintval($userid)); + + // Lead-Code mode enabled + redirectToUrl('lead-confirm.php'); + } else { + $content['message'] = '{--GUEST_CONFIRMED_DONE--}'; + $content['userid'] = bigintval($userid); + } + } elseif (isExtensionActive('lead')) { + // Set special lead cookie + setSession('lead_userid', bigintval($userid)); + + // Lead-Code mode enabled + redirectToUrl('lead-confirm.php'); + } else { + // Nobody was found unter this hash key... or our new member want's to confirm twice? + $content['message'] = '{--GUEST_CONFIRMED_TWICE--}'; + } + } else { + // Nobody was found unter this hash key... or our new member want's to confirm twice? + $content['message'] = '{--GUEST_CONFIRMED_TWICE--}'; + } + + // Load template + displayMessage($content['message']); +} + +// Does resend the user's confirmation link for given email address +function doResendUserConfirmationLink ($email) { + // Email address not registered is default message + $message = '{--EMAIL_404--}'; + + // Confirmation link requested + if (fetchUserData($email, 'email')) { + // Email address found + $content = getUserDataArray(); + + // Is the account unconfirmed? + if ($content['status'] == 'UNCONFIRMED') { + // Load email template + $message = loadEmailTemplate('guest_request_confirm', array(), $content['userid']); + + // Send email + sendEmail($content['userid'], '{--GUEST_REQUEST_CONFIRM_LINK_SUBJECT--}', $message); + } // END - if + + // Create message based on the status + $message = getConfirmationMessageFromUserStatus($content['status']); + } // END - if + + // Output message + displayMessage($message); +} + +// Get a message (somewhat translation) from user status for confirmation link. +// This is different to translateUserStatus() in text messages. +function getConfirmationMessageFromUserStatus ($status) { + // Default is 'UNKNOWN' + $message = '{%message,GUEST_LOGIN_ID_UNKNOWN_STATUS=' . $status . '%}'; + + // Which status is it? + switch ($status) { + case 'UNCONFIRMED': // Account is unconfirmed + // And set message + $message = '{--GUEST_CONFIRM_LINK_SENT--}'; + break; + + case 'CONFIRMED': // Account already confirmed + $message = '{--GUEST_LOGIN_ID_CONFIRMED--}'; + break; + + case 'LOCKED': // Account is locked + $message = '{--GUEST_LOGIN_ID_LOCKED--}'; + break; + + default: // This should not happen + reportBug(__FUNCTION__, __LINE__, 'Unknown user status ' . $status . ' detected.'); + break; + } // END - switch + + // Return message + return $message; +} + +// "Getter" for total tester accounts +function getTotalTesterUsers () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = countSumTotalData('', 'user_data', 'userid', '', true, runFilterChain('user_inclusion_sql')); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Checks whether the admin is allowed to create more tester accounts +function isNewUserTesterAllowed () { + // By default only admins are allowed + if (!isAdmin()) { + // This should not happen and must be fixed + reportBug(__FUNCTION__, __LINE__, 'isAdmin()=false - Not allowed.'); + } // END - if + + // Are more tester accounts allowed? + $isAllowed = (getTotalTesterUsers() < bigintval(getTesterUserMaximum() + 1)); + + // Return result + return $isAllowed; +} + +// "Getter" for next free tester account number +function getNextFreeTesterUserNumber () { + // Get current total amount because we start with zero + $nextTester = getTotalTesterUsers(); + + // Prepend zeros + $nextTester = prependZeros($nextTester, 6); + + // Return it + return $nextTester; +} + +// Wrapper function to return a selection box for tester user default referral id +function addTesterUserDefaultRefidSelectionBox ($fieldName = 'tester_user_default_refid') { + // Return it + return addMemberSelectionBox(getConfig('tester_user_default_refid'), false, true, true, $fieldName, " WHERE `surname` LIKE '{?tester_user_surname_prefix?}%'"); +} + +// Checks whether given surname is a test user name +function isTesterUserName ($surname) { + // Determine it + return (substr($surname, 0, strlen(getTesterUserSurnamePrefix())) == getTesterUserSurnamePrefix()); +} + +// Creates a tester account from given POST data +function createTesterUserAccount () { + // Add generated surname + setPostRequestElement('surname', (getTesterUserSurnamePrefix() . getNextFreeTesterUserNumber())); + + // Is the registration data complete? + if (!isRegistrationDataComplete()) { + // Then abort here + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'isRegistrationDataComplete()=false, please check if you e.g. have selected the required minimum of categories.'); + return false; + } // END - if + + // Do registration + $isCreated = doUserRegistration(); + + // Remove cache to force recalculation of total tester accounts + unset($GLOBALS['getTotalTesterUsers']); + + // Return status + return $isCreated; +} + +// Checks whether the given sub id is fused by current member +function isMemberSubIdFree ($subId) { + // Check it + $isFree = (countSumTotalData(getMemberId(), 'user_subids', 'id', 'userid', true, sprintf(" AND `subid`='%s'", $subId)) == 0); + + // Return result + return $isFree; +} + +// Prepares given sub id for storage in database +function prepareSubId ($subId) { + // First convert any spaces/dashes to underscores + $subId = str_replace(' ', '_', str_replace('-', '_', $subId)); + + // Then filter out any unwanted characters + $subId = preg_replace('/([^a-zA-Z0-9_])/', '', $subId); + + // Then Check if it is available + if (!isMemberSubIdFree($subId)) { + // Is not free + $subId = false; + } // END - if + + // Return prepared sub id + return $subId; +} + +//----------------------------------------------------------------------------- +// EL code functions +//----------------------------------------------------------------------------- + +// Expression call-back function for fetching user data +function doExpressionUser ($data) { + // Use current userid by default + $functionName = 'getMemberId()'; + + // User-related data, so is there a userid? + if (!empty($data['matches'][4][$data['key']])) { + // Is there a userid or $userid? + if (substr($data['matches'][4][$data['key']], 0, 1) == '$') { + // Use dynamic call + $functionName = "getFetchedUserData('userid', " . $data['matches'][4][$data['key']] . ", '" . $data['callback'] . "')"; + } elseif (!empty($data['matches'][4][$data['key']])) { + // Is there a number or a dollar sign in front of it? + if (preg_replace('/[^0123456789]/', '', $data['matches'][4][$data['key']]) != $data['matches'][4][$data['key']]) { + // Possible database column, so get it again + $data['matches'][4][$data['key']] = "getFetchedUserData('userid', getMemberId(), '" . $data['matches'][4][$data['key']] . "')"; + } // END - if + + // Fix all together + $functionName = "getFetchedUserData('userid', " . $data['matches'][4][$data['key']] . ", '" . $data['callback'] . "')"; + } + } elseif ((!empty($data['callback'])) && (isUserDataValid())) { + // "Call-back" alias column for current logged in user's data + $functionName = "getUserData('" . $data['callback'] . "')"; + } + + // Is there another function to run (e.g. translations) + if (!empty($data['extra_func'])) { + // Surround the original function call with it + $functionName = $data['extra_func'] . '(' . $functionName . ')'; + } // END - if + //* NOISY-DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'functionName=' . $functionName); + + // Generate replacer + $replacer = '{DQUOTE} . ' . $functionName . ' . {DQUOTE}'; + + // Now replace the code + $code = replaceExpressionCode($data, $replacer); + + // Return replaced code + return $code; +} + +//----------------------------------------------------------------------------- +// Template helper functions +//----------------------------------------------------------------------------- + +// Template call-back function for list_user admin function +function doTemplateAdminListUserTitle ($template, $clear = false) { + // Init title with "all accounts" + $code = '{--ADMIN_LIST_ALL_ACCOUNTS--}'; + + // Is there a 'status' or 'do' set? + if (isGetRequestElementSet('status')) { + // Set title according to the 'status' + $code = sprintf("{--ADMIN_LIST_STATUS_%s_ACCOUNTS--}", strtoupper(getRequestElement('status'))); + } elseif (isGetRequestElementSet('do')) { + // Set title according to 'do' + $code = sprintf("{--ADMIN_LIST_DO_%s_ACCOUNTS--}", strtoupper(getRequestElement('do'))); + } + + // Return the code + return $code; +} + +// Template call-back function for displaying "username" +function doTemplateDisplayUsername ($template, $clear = false, $userid = NULL) { + // Is a userid set? + if (!isValidUserId($userid)) { + // Please don't call this without a valid userid + reportBug(__FUNCTION__, __LINE__, 'template=' . $template . ',clear=' . intval($clear) . ',userid[' . gettype($userid) . ']=' . intval($userid) . ' - Invalid userid provided.'); + } // END - if + + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__][$userid])) { + // Generate code + $GLOBALS[__FUNCTION__][$userid] = $userid . ' ({%user,nickname,fixEmptyContentToDashes=' . $userid . '%})'; + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__][$userid]; +} + +// ---------------------------------------------------------------------------- +// XML call-back functions +// ---------------------------------------------------------------------------- + +// For 'doing' add subid, the column-index is required +function addXmlSpecialMemberAddDoUserSubid () { + // So set it all here + $GLOBALS['__COLUMN_INDEX']['doXmlCallbackFunction'] = 'column'; + $GLOBALS['__XML_ARGUMENTS']['doXmlCallbackFunction']['column_index'] = 'column'; +} + +// ---------------------------------------------------------------------------- +// Wrapper functions for configuration entries +// ---------------------------------------------------------------------------- + +// Getter for user_alpha +function getUserAlpha () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('user_alpha'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for user_limit +function getUserLimit () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('user_limit'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_surname_prefix +function getTesterUserSurnamePrefix () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_surname_prefix'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_maximum +function getTesterUserMaximum () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_maximum'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_check_cat +function getTesterUserCheckCat () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_check_cat'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_gender +function getTesterUserGender () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_gender'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_family +function getTesterUserFamily () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_family'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_password +function getTesterUserPassword () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_password'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_street_nr +function getTesterUserStreetNr () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_street_nr'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_zip +function getTesterUserZip () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_zip'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_city +function getTesterUserCity () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_city'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + +// Getter for tester_user_email +function getTesterUserEmail () { + // Is there cache? + if (!isset($GLOBALS[__FUNCTION__])) { + // Determine it + $GLOBALS[__FUNCTION__] = getConfig('tester_user_email'); + } // END - if + + // Return cache + return $GLOBALS[__FUNCTION__]; +} + // [EOF] ?>