821 lines
28 KiB
PHP
821 lines
28 KiB
PHP
<?php
|
|
/**
|
|
* @brief Register
|
|
* @author <a href='http://www.invisionpower.com'>Invision Power Services, Inc.</a>
|
|
* @copyright (c) 2001 - 2016 Invision Power Services, Inc.
|
|
* @license http://www.invisionpower.com/legal/standards/
|
|
* @package IPS Community Suite
|
|
* @since 3 July 2013
|
|
* @version SVN_VERSION_NUMBER
|
|
*/
|
|
|
|
namespace IPS\core\modules\front\system;
|
|
|
|
/* To prevent PHP errors (extending class does not exist) revealing path */
|
|
if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
|
|
{
|
|
header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* Register
|
|
*/
|
|
class _register extends \IPS\Dispatcher\Controller
|
|
{
|
|
/**
|
|
* Constructor
|
|
*
|
|
* @return void
|
|
*/
|
|
public function __construct()
|
|
{
|
|
if ( \IPS\Member::loggedIn()->member_id and isset( \IPS\Request::i()->_fromLogin ) )
|
|
{
|
|
\IPS\Output::i()->redirect( \IPS\Settings::i()->base_url );
|
|
}
|
|
|
|
if( !\IPS\Settings::i()->allow_reg and \IPS\Request::i()->do !== 'complete'
|
|
and \IPS\Request::i()->do !== 'changeEmail' and \IPS\Request::i()->do !== 'validate'
|
|
and \IPS\Request::i()->do !== 'validating' and \IPS\Request::i()->do !== 'reconfirm' )
|
|
{
|
|
\IPS\Output::i()->error( 'reg_disabled', '2S129/5', 403, '' );
|
|
}
|
|
|
|
\IPS\Output::i()->bodyClasses[] = 'ipsLayout_minimal';
|
|
\IPS\Output::i()->sidebar['enabled'] = FALSE;
|
|
}
|
|
|
|
/**
|
|
* Register
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function manage()
|
|
{
|
|
if( !\IPS\Settings::i()->site_online )
|
|
{
|
|
\IPS\Output::i()->showOffline();
|
|
}
|
|
|
|
if( isset( $_SESSION['coppa_user'] ) )
|
|
{
|
|
if ( \IPS\Settings::i()->minimum_age > 0 )
|
|
{
|
|
$message = \IPS\Member::loggedIn()->language()->addToStack( 'register_denied_age', FALSE, array( 'sprintf' => array( \IPS\Settings::i()->minimum_age ) ) );
|
|
\IPS\Output::i()->error( $message, '2C223/7', 403, '' );
|
|
}
|
|
else
|
|
{
|
|
\IPS\Output::i()->title = \IPS\Member::loggedIn()->language()->addToStack('reg_awaiting_validation');
|
|
return \IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'system' )->notCoppaValidated();
|
|
}
|
|
}
|
|
|
|
/* Set up the step array */
|
|
$steps = array();
|
|
|
|
/* If coppa is enabled we need to add a birthday verification */
|
|
if ( \IPS\Settings::i()->use_coppa OR \IPS\Settings::i()->minimum_age > 0 )
|
|
{
|
|
$steps['coppa'] = function( $data )
|
|
{
|
|
/* Build the form */
|
|
$form = new \IPS\Helpers\Form( 'coppa', 'register_button' );
|
|
$form->add( new \IPS\Helpers\Form\Date( 'bday', NULL, TRUE, array( 'max' => \IPS\DateTime::create() ) ) );
|
|
|
|
if( $values = $form->values() )
|
|
{
|
|
/* Did we pass the minimum age requirement? */
|
|
if ( \IPS\Settings::i()->minimum_age > 0 AND $values['bday']->diff( \IPS\DateTime::create() )->y < \IPS\Settings::i()->minimum_age )
|
|
{
|
|
$_SESSION['coppa_user'] = TRUE;
|
|
|
|
$message = \IPS\Member::loggedIn()->language()->addToStack( 'register_denied_age', FALSE, array( 'sprintf' => array( \IPS\Settings::i()->minimum_age ) ) );
|
|
\IPS\Output::i()->error( $message, '2C223/8', 403, '' );
|
|
}
|
|
/* We did, but we should check normal COPPA too */
|
|
else if( ( $values['bday']->diff( \IPS\DateTime::create() )->y < 13 ) )
|
|
{
|
|
$_SESSION['coppa_user'] = TRUE;
|
|
return \IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'system' )->notCoppaValidated();
|
|
}
|
|
|
|
return $values;
|
|
}
|
|
|
|
return \IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'system' )->coppa( $form );
|
|
};
|
|
}
|
|
|
|
$self = $this;
|
|
|
|
$steps['basic_info'] = function ( $data ) use ( $self )
|
|
{
|
|
$form = \IPS\core\modules\front\system\register::buildRegistrationForm();
|
|
|
|
/* Handle submissions */
|
|
if ( $values = $form->values() )
|
|
{
|
|
/* Custom Fields */
|
|
$profileFields = array();
|
|
|
|
foreach ( \IPS\core\ProfileFields\Field::fields( array(), \IPS\core\ProfileFields\Field::REG ) as $group => $fields )
|
|
{
|
|
foreach ( $fields as $id => $field )
|
|
{
|
|
if( $field->required and ( $values[ $field->name ] === NULL or !isset( $values[ $field->name ] ) ) )
|
|
{
|
|
\IPS\Output::i()->error( 'reg_required_fields', '1C223/5', 403, '' );
|
|
}
|
|
|
|
$profileFields[ "field_{$id}" ] = $field::stringValue( $values[ $field->name ] );
|
|
|
|
if ( $fields instanceof \IPS\Helpers\Form\Editor )
|
|
{
|
|
$field->claimAttachments( $self->id );
|
|
}
|
|
}
|
|
}
|
|
|
|
if ( \IPS\Settings::i()->security_questions_enabled and ( \IPS\Settings::i()->security_questions_prompt === 'register' or ( \IPS\Settings::i()->security_questions_prompt === 'optional' and !$values['security_questions_optout_title'] ) ) )
|
|
{
|
|
$answers = array();
|
|
foreach ( $values as $k => $v )
|
|
{
|
|
if ( preg_match( '/^security_question_q_(\d+)$/', $k, $matches ) )
|
|
{
|
|
if ( isset( $answers[ $v ] ) )
|
|
{
|
|
$form->error = \IPS\Member::loggedIn()->language()->addToStack( 'security_questions_unique', FALSE, array( 'pluralize' => array( \IPS\Settings::i()->security_questions_number ?: 3 ) ) );
|
|
break;
|
|
}
|
|
else
|
|
{
|
|
$answers[ $v ] = $v;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if ( !$form->error )
|
|
{
|
|
/* Create Member */
|
|
$member = \IPS\core\modules\front\system\register::_createMember( $values, $profileFields );
|
|
|
|
/* Log them in */
|
|
\IPS\Session::i()->setMember( $member );
|
|
|
|
$redirectUrl = \IPS\Login::getRegistrationDestination( $member );
|
|
|
|
/* Redirect */
|
|
if ( \IPS\Request::i()->isAjax() )
|
|
{
|
|
\IPS\Output::i()->json( array( 'redirect' => (string) $redirectUrl ) );
|
|
}
|
|
else
|
|
{
|
|
\IPS\Output::i()->redirect( $redirectUrl );
|
|
}
|
|
}
|
|
}
|
|
|
|
return \IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'system' )->register( $form, new \IPS\Login( \IPS\Http\Url::internal( 'app=core&module=system&controller=login', 'front', 'login', NULL, \IPS\Settings::i()->logins_over_https ) ) );
|
|
};
|
|
|
|
/* Set Session Location */
|
|
\IPS\Session::i()->setLocation( \IPS\Http\Url::internal( 'app=core&module=system&controller=register', NULL, 'register' ), array(), 'loc_registering' );
|
|
\IPS\Output::i()->allowDefaultWidgets = FALSE;
|
|
\IPS\Output::i()->title = \IPS\Member::loggedIn()->language()->addToStack('registration');
|
|
\IPS\Output::i()->output = (string) new \IPS\Helpers\Wizard( $steps, \IPS\Http\Url::internal( 'app=core&module=system&controller=register' ), FALSE );
|
|
}
|
|
|
|
/**
|
|
* Build Registration Form
|
|
*
|
|
* @return \IPS\Helpers\Form
|
|
*/
|
|
public static function buildRegistrationForm()
|
|
{
|
|
/* Build the form */
|
|
$form = new \IPS\Helpers\Form( 'form', 'register_button', NULL, array( 'data-controller' => 'core.front.system.register') );
|
|
$form->add( new \IPS\Helpers\Form\Text( 'username', NULL, TRUE, array( 'accountUsername' => TRUE ) ) );
|
|
$form->add( new \IPS\Helpers\Form\Email( 'email_address', NULL, TRUE, array( 'accountEmail' => TRUE, 'maxLength' => 150, 'bypassProfanity' => TRUE ) ) );
|
|
$form->add( new \IPS\Helpers\Form\Password( 'password', NULL, TRUE, array( 'showMeter' => \IPS\Settings::i()->password_strength_meter, 'checkStrength' => TRUE ) ) );
|
|
$form->add( new \IPS\Helpers\Form\Password( 'password_confirm', NULL, TRUE, array( 'confirm' => 'password' ) ) );
|
|
|
|
/* Profile fields */
|
|
foreach ( \IPS\core\ProfileFields\Field::fields( array(), \IPS\core\ProfileFields\Field::REG ) as $group => $fields )
|
|
{
|
|
foreach ( $fields as $field )
|
|
{
|
|
$form->add( $field );
|
|
}
|
|
}
|
|
$form->addSeparator();
|
|
|
|
$question = FALSE;
|
|
try
|
|
{
|
|
$question = \IPS\Db::i()->select( '*', 'core_question_and_answer', NULL, "RAND()" )->first();
|
|
}
|
|
catch ( \UnderflowException $e ) {}
|
|
|
|
/* Security Questions */
|
|
if ( \IPS\Settings::i()->security_questions_enabled and in_array( \IPS\Settings::i()->security_questions_prompt, array( 'register', 'optional' ) ) )
|
|
{
|
|
$numberOfQuestions = \IPS\Settings::i()->security_questions_number ?: 3;
|
|
$securityQuestions = array();
|
|
foreach ( \IPS\MFA\SecurityQuestions\Question::roots() as $securityQuestion )
|
|
{
|
|
$securityQuestions[ $securityQuestion->id ] = $securityQuestion->_title;
|
|
}
|
|
|
|
$form->addMessage( \IPS\Member::loggedIn()->language()->addToStack('security_questions_setup_blurb', FALSE, array( 'pluralize' => array( $numberOfQuestions ) ) ) );
|
|
if ( \IPS\Settings::i()->security_questions_prompt === 'optional' )
|
|
{
|
|
$securityOptoutToggles = array();
|
|
foreach ( range( 1, min( $numberOfQuestions, count( $securityQuestions ) ) ) as $i )
|
|
{
|
|
$securityOptoutToggles[] = 'security_question_q_' . $i;
|
|
$securityOptoutToggles[] = 'security_question_a_' . $i;
|
|
}
|
|
|
|
$optOutCheckbox = new \IPS\Helpers\Form\Checkbox( 'security_questions_optout_title', FALSE, FALSE, array( 'togglesOff' => $securityOptoutToggles ) );
|
|
if ( \IPS\Member::loggedIn()->language()->checkKeyExists('security_questions_opt_out_warning_value') )
|
|
{
|
|
$optOutCheckbox->description = \IPS\Member::loggedIn()->language()->addToStack('security_questions_opt_out_warning_value');
|
|
}
|
|
$form->add( $optOutCheckbox );
|
|
}
|
|
foreach ( range( 1, min( $numberOfQuestions, count( $securityQuestions ) ) ) as $i )
|
|
{
|
|
$securityValidation = function( $val ) {
|
|
if ( !$val and ( \IPS\Settings::i()->security_questions_prompt === 'register' or !isset( \IPS\Request::i()->security_questions_optout_title_checkbox ) ) )
|
|
{
|
|
throw new \DomainException('form_required');
|
|
}
|
|
};
|
|
|
|
$questionField = new \IPS\Helpers\Form\Select( 'security_question_q_' . $i, NULL, FALSE, array( 'options' => $securityQuestions ), $securityValidation, NULL, NULL, 'security_question_q_' . $i );
|
|
$questionField->label = \IPS\Member::loggedIn()->language()->addToStack('security_question_q');
|
|
|
|
$answerField = new \IPS\Helpers\Form\Text( 'security_question_a_' . $i, NULL, NULL, array(), $securityValidation, NULL, NULL, 'security_question_a_' . $i );
|
|
$answerField->label = \IPS\Member::loggedIn()->language()->addToStack('security_question_a');
|
|
|
|
$form->add( $questionField );
|
|
$form->add( $answerField );
|
|
}
|
|
$form->addSeparator();
|
|
}
|
|
|
|
/* Random Q&A */
|
|
if( $question )
|
|
{
|
|
$form->hiddenValues['q_and_a_id'] = $question['qa_id'];
|
|
|
|
$form->add( new \IPS\Helpers\Form\Text( 'q_and_a', NULL, TRUE, array(), function( $val )
|
|
{
|
|
$qanda = intval( \IPS\Request::i()->q_and_a_id );
|
|
$pass = true;
|
|
|
|
if( $qanda )
|
|
{
|
|
$question = \IPS\Db::i()->select( '*', 'core_question_and_answer', array( 'qa_id=?', $qanda ) )->first();
|
|
$answers = json_decode( $question['qa_answers'] );
|
|
|
|
if( $answers )
|
|
{
|
|
$answers = is_array( $answers ) ? $answers : array( $answers );
|
|
$pass = FALSE;
|
|
|
|
foreach( $answers as $answer )
|
|
{
|
|
$answer = trim( $answer );
|
|
|
|
if( mb_strlen( $answer ) AND mb_strtolower( $answer ) == mb_strtolower( $val ) )
|
|
{
|
|
$pass = TRUE;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$questions = \IPS\Db::i()->select( 'count(*)', 'core_question_and_answer', 'qa_id > 0' )->first();
|
|
if( $questions )
|
|
{
|
|
$pass = FALSE;
|
|
}
|
|
}
|
|
|
|
if( !$pass )
|
|
{
|
|
throw new \DomainException( 'q_and_a_incorrect' );
|
|
}
|
|
} ) );
|
|
|
|
/* Set the form label */
|
|
\IPS\Member::loggedIn()->language()->words['q_and_a'] = \IPS\Member::loggedIn()->language()->addToStack( 'core_question_and_answer_' . $question['qa_id'], FALSE );
|
|
}
|
|
|
|
$captcha = new \IPS\Helpers\Form\Captcha;
|
|
|
|
if ( (string) $captcha !== '' )
|
|
{
|
|
$form->add( $captcha );
|
|
}
|
|
|
|
if ( $question OR (string) $captcha !== '' )
|
|
{
|
|
$form->addSeparator();
|
|
}
|
|
|
|
$form->add( new \IPS\Helpers\Form\Checkbox( 'reg_admin_mails', TRUE, FALSE ) );
|
|
|
|
\IPS\Member::loggedIn()->language()->words[ "reg_agreed_terms" ] = sprintf( \IPS\Member::loggedIn()->language()->get("reg_agreed_terms"), \IPS\Http\Url::internal( 'app=core&module=system&controller=terms', 'front', 'terms' ) );
|
|
|
|
/* Build the appropriate links for registration terms & privacy policy */
|
|
if ( \IPS\Settings::i()->privacy_type == "internal" )
|
|
{
|
|
\IPS\Member::loggedIn()->language()->words[ "reg_agreed_terms" ] .= sprintf( \IPS\Member::loggedIn()->language()->get("reg_privacy_link"), \IPS\Http\Url::internal( 'app=core&module=system&controller=privacy', 'front', 'privacy' ), 'data-ipsDialog data-ipsDialog-size="wide" data-ipsDialog-title="' . \IPS\Member::loggedIn()->language()->get("privacy") . '"' );
|
|
}
|
|
else if ( \IPS\Settings::i()->privacy_type == "external" )
|
|
{
|
|
\IPS\Member::loggedIn()->language()->words[ "reg_agreed_terms" ] .= sprintf( \IPS\Member::loggedIn()->language()->get("reg_privacy_link"), \IPS\Http\Url::external( \IPS\Settings::i()->privacy_link ), 'target="_blank"' );
|
|
}
|
|
|
|
$form->add( new \IPS\Helpers\Form\Checkbox( 'reg_agreed_terms', NULL, TRUE, array(), function( $val )
|
|
{
|
|
if ( !$val )
|
|
{
|
|
throw new \InvalidArgumentException('reg_not_agreed_terms');
|
|
}
|
|
} ) );
|
|
|
|
\IPS\Output::i()->jsFiles = array_merge( \IPS\Output::i()->jsFiles, \IPS\Output::i()->js( 'front_system.js', 'core', 'front' ), \IPS\Output::i()->js( 'front_templates.js', 'core', 'front' ) );
|
|
return $form;
|
|
}
|
|
|
|
/**
|
|
* Create Member
|
|
*
|
|
* @param array $values Values from form
|
|
* @param array $profileFields Profile field values from registration
|
|
* @return \IPS\Member
|
|
*/
|
|
public static function _createMember( $values, $profileFields )
|
|
{
|
|
/* Create */
|
|
$member = new \IPS\Member;
|
|
$member->name = $values['username'];
|
|
$member->email = $values['email_address'];
|
|
$member->members_pass_salt = $member->generateSalt();
|
|
$member->members_pass_hash = $member->encryptedPassword( $values['password'] );
|
|
$member->allow_admin_mails = $values['reg_admin_mails'];
|
|
$member->member_group_id = \IPS\Settings::i()->member_group;
|
|
$member->members_bitoptions['view_sigs'] = TRUE;
|
|
|
|
/* Query spam service */
|
|
if( \IPS\Settings::i()->spam_service_enabled )
|
|
{
|
|
if( $member->spamService() == 4 )
|
|
{
|
|
\IPS\Output::i()->error( 'spam_denied_account', '2S129/1', 403, '' );
|
|
}
|
|
}
|
|
|
|
/* Save */
|
|
$member->save();
|
|
|
|
/* Security Questions */
|
|
if ( \IPS\Settings::i()->security_questions_enabled and in_array( \IPS\Settings::i()->security_questions_prompt, array( 'register', 'optional' ) ) )
|
|
{
|
|
if ( $values['security_questions_optout_title'] )
|
|
{
|
|
$member->members_bitoptions['security_questions_opt_out'] = TRUE;
|
|
}
|
|
else
|
|
{
|
|
$answers = array();
|
|
|
|
foreach ( $values as $k => $v )
|
|
{
|
|
if ( preg_match( '/^security_question_q_(\d+)$/', $k, $matches ) )
|
|
{
|
|
$answers[ $v ] = array(
|
|
'answer_question_id' => $v,
|
|
'answer_member_id' => $member->member_id,
|
|
'answer_answer' => \IPS\Text\Encrypt::fromPlaintext( $values[ 'security_question_a_' . $matches[1] ] )->tag()
|
|
);
|
|
}
|
|
}
|
|
|
|
if ( count( $answers ) )
|
|
{
|
|
\IPS\Db::i()->insert( 'core_security_answers', $answers );
|
|
}
|
|
|
|
$member->members_bitoptions['has_security_answers'] = TRUE;
|
|
}
|
|
$member->save();
|
|
}
|
|
|
|
/* Save custom field values */
|
|
\IPS\Db::i()->replace( 'core_pfields_content', array_merge( array( 'member_id' => $member->member_id ), $profileFields ) );
|
|
|
|
/* Handle validation */
|
|
$member->postRegistration();
|
|
|
|
/* Save and return */
|
|
return $member;
|
|
}
|
|
|
|
/**
|
|
* A printable coppa form
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function coppaForm()
|
|
{
|
|
$output = \IPS\Theme::i()->getTemplate( 'system' )->coppaConsent();
|
|
\IPS\Member::loggedIn()->language()->parseOutputForDisplay( $output );
|
|
\IPS\Output::i()->sendOutput( \IPS\Theme::i()->getTemplate( 'global', 'core' )->blankTemplate( $output ) );
|
|
}
|
|
|
|
/**
|
|
* Awaiting Validation
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function validating()
|
|
{
|
|
if( !\IPS\Member::loggedIn()->member_id )
|
|
{
|
|
\IPS\Output::i()->redirect( \IPS\Http\Url::internal( '' ) );
|
|
}
|
|
|
|
/* Fetch the validating record to see what we're dealing with */
|
|
try
|
|
{
|
|
$validating = \IPS\Db::i()->select( '*', 'core_validating', array( 'member_id=? AND ( new_reg=? OR email_chg=? )', \IPS\Member::loggedIn()->member_id, 1, 1 ) )->first();
|
|
}
|
|
catch ( \UnderflowException $e )
|
|
{
|
|
\IPS\Output::i()->error( 'validate_no_record', '2S129/4', 404, '' );
|
|
}
|
|
|
|
/* They're not validated but in what way? */
|
|
if( $validating['user_verified'] )
|
|
{
|
|
\IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'system' )->notAdminValidated();
|
|
}
|
|
else
|
|
{
|
|
\IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'system' )->notValidated( $validating );
|
|
}
|
|
|
|
/* Display */
|
|
\IPS\Output::i()->title = \IPS\Member::loggedIn()->language()->addToStack('reg_awaiting_validation');
|
|
}
|
|
|
|
/**
|
|
* Resend validation email
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function resend()
|
|
{
|
|
\IPS\Session::i()->csrfCheck();
|
|
|
|
$validating = \IPS\Db::i()->select( '*', 'core_validating', array( 'member_id=?', \IPS\Member::loggedIn()->member_id ) );
|
|
|
|
if ( !count( $validating ) )
|
|
{
|
|
\IPS\Output::i()->error( 'validate_no_record', '2S129/3', 404, '' );
|
|
}
|
|
|
|
foreach( $validating as $reg )
|
|
{
|
|
if ( $reg['email_sent'] and $reg['email_sent'] > ( time() - 900 ) )
|
|
{
|
|
\IPS\Output::i()->error( \IPS\Member::loggedIn()->language()->addToStack('validation_email_rate_limit', FALSE, array( 'sprintf' => array( \IPS\DateTime::ts( $reg['email_sent'] )->relative( \IPS\DateTime::RELATIVE_FORMAT_LOWER ) ) ) ), '1C223/4', 429, '', array( 'Retry-After' => \IPS\DateTime::ts( $reg['email_sent'] )->add( new \DateInterval( 'PT15M' ) )->format('r') ) );
|
|
}
|
|
|
|
\IPS\Email::buildFromTemplate( 'core', $reg['email_chg'] ? 'email_change' : 'registration_validate', array( \IPS\Member::loggedIn(), $reg['vid'] ), \IPS\Email::TYPE_TRANSACTIONAL )->send( \IPS\Member::loggedIn() );
|
|
|
|
\IPS\Db::i()->update( 'core_validating', array( 'email_sent' => time() ), array( 'vid=?', $reg['vid'] ) );
|
|
}
|
|
|
|
\IPS\Output::i()->redirect( \IPS\Http\Url::internal( 'app=core&module=system&controller=register&do=validating', 'front', 'register' ), 'reg_email_resent' );
|
|
}
|
|
|
|
/**
|
|
* Validate
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function validate()
|
|
{
|
|
if( \IPS\Request::i()->vid AND \IPS\Request::i()->mid )
|
|
{
|
|
/* Load record */
|
|
try
|
|
{
|
|
$record = \IPS\Db::i()->select( '*', 'core_validating', array( 'vid=? AND member_id=? AND ( new_reg=? or email_chg=? )', \IPS\Request::i()->vid, \IPS\Request::i()->mid, 1, 1 ) )->first();
|
|
}
|
|
catch ( \UnderflowException $e )
|
|
{
|
|
\IPS\Output::i()->error( 'validate_no_record', '2S129/2', 404, '' );
|
|
}
|
|
|
|
/* Validate */
|
|
$member = \IPS\Member::load( \IPS\Request::i()->mid );
|
|
if ( $record['new_reg'] )
|
|
{
|
|
$member->emailValidationConfirmed( $record );
|
|
}
|
|
else
|
|
{
|
|
$member->members_bitoptions['validating'] = FALSE;
|
|
$member->save();
|
|
|
|
\IPS\Db::i()->delete( 'core_validating', array( 'member_id=?', $member->member_id ) );
|
|
|
|
/* Send a confirmation email */
|
|
\IPS\Email::buildFromTemplate( 'core', 'email_address_changed', array( $member, $record['prev_email'] ), \IPS\Email::TYPE_TRANSACTIONAL )->send( $record['prev_email'], array(), array(), NULL, NULL, array( 'Reply-To' => \IPS\Settings::i()->email_in ) );
|
|
}
|
|
|
|
/* Log in and Redirect */
|
|
\IPS\Session::i()->setMember( $member );
|
|
\IPS\Output::i()->redirect( \IPS\Http\Url::internal( '' ), 'validate_email_confirmation' );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Complete Profile
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function complete()
|
|
{
|
|
/* Check we are an incomplete member */
|
|
if ( !\IPS\Member::loggedIn()->member_id )
|
|
{
|
|
\IPS\Output::i()->redirect( \IPS\Http\Url::internal( 'app=core&module=system&controller=login', 'front', 'login', NULL, \IPS\Settings::i()->logins_over_https ) );
|
|
}
|
|
elseif ( \IPS\Member::loggedIn()->real_name and \IPS\Member::loggedIn()->email )
|
|
{
|
|
\IPS\Output::i()->redirect( \IPS\Http\Url::internal( '' ) );
|
|
}
|
|
|
|
/* Build the form */
|
|
$form = new \IPS\Helpers\Form( 'form', 'register_button' );
|
|
if ( isset( \IPS\Request::i()->ref ) )
|
|
{
|
|
$form->hiddenValues['ref'] = \IPS\Request::i()->ref;
|
|
}
|
|
if( !\IPS\Member::loggedIn()->real_name OR \IPS\Member::loggedIn()->name === \IPS\Member::loggedIn()->language()->get('guest') )
|
|
{
|
|
$form->add( new \IPS\Helpers\Form\Text( 'username', NULL, TRUE, array( 'accountUsername' => \IPS\Member::loggedIn() ) ) );
|
|
}
|
|
if( !\IPS\Member::loggedIn()->email )
|
|
{
|
|
$form->add( new \IPS\Helpers\Form\Email( 'email_address', NULL, TRUE, array( 'accountEmail' => TRUE ) ) );
|
|
}
|
|
$form->addButton( 'cancel', 'link', \IPS\Http\Url::internal( 'app=core&module=system&controller=register&do=cancel', 'front', 'register' )->csrf() );
|
|
|
|
/* Handle the submission */
|
|
if ( $values = $form->values() )
|
|
{
|
|
if( isset( $values['username'] ) )
|
|
{
|
|
\IPS\Member::loggedIn()->name = $values['username'];
|
|
}
|
|
if( isset( $values['email_address'] ) )
|
|
{
|
|
\IPS\Member::loggedIn()->email = $values['email_address'];
|
|
|
|
if( \IPS\Settings::i()->spam_service_enabled )
|
|
{
|
|
if( \IPS\Member::loggedIn()->spamService() == 4 )
|
|
{
|
|
$action = \IPS\Settings::i()->spam_service_action_4;
|
|
|
|
/* Any other action will automatically be handled by the call to spamService() */
|
|
if( $action == 4 )
|
|
{
|
|
\IPS\Member::loggedIn()->delete();
|
|
}
|
|
|
|
\IPS\Output::i()->error( 'spam_denied_account', '2S272/1', 403, '' );
|
|
}
|
|
}
|
|
}
|
|
|
|
/* Save */
|
|
\IPS\Member::loggedIn()->save();
|
|
|
|
/* Handle validation */
|
|
\IPS\Member::loggedIn()->postRegistration( ( isset( $values['email_address'] ) ) ? FALSE : TRUE );
|
|
|
|
/* Set member as a full member in the session table */
|
|
\IPS\Session::i()->setType( \IPS\Session\Front::LOGIN_TYPE_MEMBER );
|
|
|
|
/* Redirect */
|
|
\IPS\Output::i()->redirect( \IPS\Login::getRegistrationDestination( \IPS\Member::loggedIn() ) );
|
|
}
|
|
|
|
\IPS\Output::i()->title = \IPS\Member::loggedIn()->language()->addToStack('reg_complete_details');
|
|
\IPS\Output::i()->output = \IPS\Theme::i()->getTemplate( 'system' )->completeProfile( $form );
|
|
}
|
|
|
|
/**
|
|
* Change Email
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function changeEmail()
|
|
{
|
|
/* Are we logged in and pending validation? */
|
|
if( !\IPS\Member::loggedIn()->member_id OR !\IPS\Member::loggedIn()->members_bitoptions['validating'] )
|
|
{
|
|
\IPS\Output::i()->error( 'no_module_permission', '2C223/2', 403, '' );
|
|
}
|
|
|
|
/* Do we have any pending validation emails? */
|
|
try
|
|
{
|
|
$pending = \IPS\Db::i()->select( '*', 'core_validating', array( 'member_id=? AND ( new_reg=1 or email_chg=1 )', \IPS\Member::loggedIn()->member_id ), 'entry_date DESC' )->first();
|
|
}
|
|
catch( \UnderflowException $e )
|
|
{
|
|
$pending = null;
|
|
}
|
|
|
|
/* Build the form */
|
|
$form = new \IPS\Helpers\Form;
|
|
$form->class = 'ipsForm_vertical';
|
|
$form->add( new \IPS\Helpers\Form\Email( 'new_email', '', TRUE, array( 'accountEmail' => TRUE ) ) );
|
|
$captcha = new \IPS\Helpers\Form\Captcha;
|
|
if ( (string) $captcha !== '' )
|
|
{
|
|
$form->add( $captcha );
|
|
}
|
|
|
|
/* Handle submissions */
|
|
if ( $values = $form->values() )
|
|
{
|
|
/* Change the email */
|
|
$oldEmail = \IPS\Member::loggedIn()->email;
|
|
foreach ( \IPS\Login::handlers( TRUE ) as $handler )
|
|
{
|
|
try
|
|
{
|
|
$handler->changeEmail( \IPS\Member::loggedIn(), $oldEmail, $values['new_email'] );
|
|
}
|
|
catch( \BadMethodCallException $e ) {}
|
|
}
|
|
\IPS\Member::loggedIn()->save();
|
|
|
|
/* If email validation is required, do that... */
|
|
if ( in_array( \IPS\Settings::i()->reg_auth_type, array( 'user', 'admin_user' ) ) )
|
|
{
|
|
/* Delete any pending validation emails */
|
|
if ( $pending['vid'] )
|
|
{
|
|
\IPS\Db::i()->delete( 'core_validating', array( 'member_id=? AND ( new_reg=1 or email_chg=1 )', \IPS\Member::loggedIn()->member_id ) );
|
|
}
|
|
|
|
$vid = \IPS\Login::generateRandomString();
|
|
|
|
\IPS\Db::i()->insert( 'core_validating', array(
|
|
'vid' => $vid,
|
|
'member_id' => \IPS\Member::loggedIn()->member_id,
|
|
'entry_date' => time(),
|
|
'new_reg' => !$pending or $pending['new_reg'],
|
|
'email_chg' => $pending and $pending['email_chg'],
|
|
'user_verified' => ( \IPS\Settings::i()->reg_auth_type == 'admin' ) ?: FALSE,
|
|
'ip_address' => \IPS\Request::i()->ipAddress(),
|
|
'email_sent' => time(),
|
|
) );
|
|
|
|
\IPS\Email::buildFromTemplate( 'core', $pending['email_chg'] ? 'email_change' : 'registration_validate', array( \IPS\Member::loggedIn(), $vid ), \IPS\Email::TYPE_TRANSACTIONAL )->send( \IPS\Member::loggedIn() );
|
|
}
|
|
|
|
/* Redirect */
|
|
\IPS\Output::i()->redirect( \IPS\Http\Url::internal( '' ) );
|
|
}
|
|
|
|
\IPS\Output::i()->output = $form->customTemplate( array( call_user_func_array( array( \IPS\Theme::i(), 'getTemplate' ), array( 'forms', 'core' ) ), 'popupTemplate' ) );
|
|
}
|
|
|
|
/**
|
|
* Cancel Registration
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function cancel()
|
|
{
|
|
/* This bit is kind of important */
|
|
\IPS\Session::i()->csrfCheck();
|
|
if ( \IPS\Member::loggedIn()->name and \IPS\Member::loggedIn()->email and !\IPS\Db::i()->select( 'COUNT(*)', 'core_validating', array( 'member_id=? AND new_reg=1', \IPS\Member::loggedIn()->member_id ) )->first() )
|
|
{
|
|
\IPS\Output::i()->error( 'no_module_permission', '2C223/1', 403, '' );
|
|
}
|
|
|
|
/* Make sure the user confirmed the deletion */
|
|
\IPS\Request::i()->confirmedDelete( 'reg_cancel', 'reg_cancel_confirm', 'reg_cancel' );
|
|
|
|
/* Log the user out. Previously, we immediately deleted the account however this has been changed to let the cleanup task handle this instead. */
|
|
\IPS\Request::i()->setCookie( 'member_id', NULL );
|
|
\IPS\Request::i()->setCookie( 'pass_hash', NULL );
|
|
\IPS\Request::i()->setCookie( 'anon_login', NULL );
|
|
|
|
foreach( \IPS\Request::i()->cookie as $name => $value )
|
|
{
|
|
if( mb_strpos( $name, "ipbforumpass_" ) !== FALSE )
|
|
{
|
|
\IPS\Request::i()->setCookie( $name, NULL );
|
|
}
|
|
}
|
|
|
|
/* Reset session global parameters */
|
|
$_SESSION = array();
|
|
|
|
/* We have to explicitly reset the session cookie
|
|
@link http://php.net/manual/en/function.session-destroy.php */
|
|
$params = session_get_cookie_params();
|
|
|
|
setcookie( session_name(), '', time() - 42000, $params["path"], $params["domain"], $params["secure"], $params["httponly"] );
|
|
|
|
/* Then destroy the session itself */
|
|
session_destroy();
|
|
|
|
/* Member sync callback */
|
|
\IPS\Member::loggedIn()->memberSync( 'onLogout', array( \IPS\Http\Url::internal( '' ) ) );
|
|
|
|
/* Login handler callback */
|
|
foreach ( \IPS\Login::handlers( TRUE ) as $k => $handler )
|
|
{
|
|
try
|
|
{
|
|
$handler->logoutAccount( \IPS\Member::loggedIn(), \IPS\Http\Url::internal( '' ) );
|
|
}
|
|
catch( \BadMethodCallException $e ) {}
|
|
}
|
|
|
|
/* Redirect */
|
|
\IPS\Output::i()->redirect( \IPS\Http\Url::internal( '' ), 'reg_canceled' );
|
|
}
|
|
|
|
/**
|
|
* Reconfirm terms or privacy policy
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function reconfirm()
|
|
{
|
|
/* Generate form */
|
|
$form = new \IPS\Helpers\Form;
|
|
if ( isset( \IPS\Request::i()->ref ) )
|
|
{
|
|
$form->hiddenValues['ref'] = \IPS\Request::i()->ref;
|
|
}
|
|
$form->class = 'ipsForm_vertical';
|
|
$form->add( new \IPS\Helpers\Form\Checkbox( 'reconfirm_checkbox', NULL, FALSE, array(), function( $val )
|
|
{
|
|
if ( !$val )
|
|
{
|
|
throw new \InvalidArgumentException('reg_not_agreed_terms');
|
|
}
|
|
} ) );
|
|
|
|
/* Handle submissions */
|
|
if ( $values = $form->values() )
|
|
{
|
|
\IPS\Member::loggedIn()->members_bitoptions['must_reaccept_privacy'] = FALSE;
|
|
\IPS\Member::loggedIn()->members_bitoptions['must_reaccept_terms'] = FALSE;
|
|
\IPS\Member::loggedIn()->save();
|
|
|
|
if ( isset( \IPS\Request::i()->ref ) )
|
|
{
|
|
try
|
|
{
|
|
$ref = \IPS\Http\Url\Friendly::createFromString( base64_decode( \IPS\Request::i()->ref ) );
|
|
if ( $ref instanceof \IPS\Http\Url\Internal )
|
|
{
|
|
\IPS\Output::i()->redirect( $ref );
|
|
}
|
|
}
|
|
catch ( \Exception $e ) { }
|
|
}
|
|
|
|
\IPS\Output::i()->redirect( \IPS\Http\Url::internal('') );
|
|
}
|
|
|
|
/* Display */
|
|
\IPS\Output::i()->title = \IPS\Member::loggedIn()->language()->addToStack('terms_of_use');
|
|
\IPS\Output::i()->output = \IPS\Theme::i()->getTemplate('system')->reconfirmTerms( \IPS\Member::loggedIn()->members_bitoptions['must_reaccept_terms'], \IPS\Member::loggedIn()->members_bitoptions['must_reaccept_privacy'], $form );
|
|
}
|
|
} |