forked from PHPFusionMods/PHP-Fusion
-
Notifications
You must be signed in to change notification settings - Fork 0
/
register.php
92 lines (85 loc) · 3.68 KB
/
register.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
<?php
/*-------------------------------------------------------+
| PHP-Fusion Content Management System
| Copyright (C) 2002 - 2013 Nick Jones
| http://www.php-fusion.co.uk/
+--------------------------------------------------------+
| Filename: register.php
| Author: Hans Kristian Flaatten {Starefossen}
+--------------------------------------------------------+
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at www.gnu.org/licenses/agpl.html. Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
require_once "maincore.php";
require_once THEMES."templates/header.php";
require_once CLASSES."UserFields.class.php";
require_once CLASSES."UserFieldsInput.class.php";
include LOCALE.LOCALESET."user_fields.php";
if (iMEMBER || !$settings['enable_registration']) { redirect("index.php"); }
$errors = array();
if (isset($_GET['email']) && isset($_GET['code'])) {
if (!preg_check("/^[-0-9A-Z_\.]{1,50}@([-0-9A-Z_\.]+\.){1,50}([0-9A-Z]){2,4}$/i", $_GET['email'])) {
redirect("register.php?error=activate");
}
if (!preg_check("/^[0-9a-z]{40}$/", $_GET['code'])) { redirect("register.php?error=activate"); }
$result = dbquery(
"SELECT user_info FROM ".DB_NEW_USERS."
WHERE user_code='".$_GET['code']."' AND user_email='".$_GET['email']."'
LIMIT 1"
);
if (dbrows($result)) {
add_to_title($locale['global_200'].$locale['u155']);
// getmequick at gmail dot com
// http://www.php.net/manual/en/function.unserialize.php#71270
function unserializeFix($var) {
$var = preg_replace('!s:(\d+):"(.*?)";!e', "'s:'.strlen('$2').':\"$2\";'", $var);
return unserialize($var);
}
$data = dbarray($result);
$user_info = unserializeFix(stripslashes($data['user_info']));
$result = dbquery("INSERT INTO ".DB_USERS." (".$user_info['user_field_fields'].") VALUES (".$user_info['user_field_inputs'].")");
$result = dbquery("DELETE FROM ".DB_NEW_USERS." WHERE user_code='".$_GET['code']."' LIMIT 1");
opentable($locale['u155']);
if ($settings['admin_activation'] == "1") {
echo "<div style='text-align:center'><br />\n".$locale['u171']."<br /><br />\n".$locale['u162']."<br /><br />\n</div>\n";
} else {
echo "<div style='text-align:center'><br />\n".$locale['u171']."<br /><br />\n".$locale['u161']."<br /><br />\n</div>\n";
}
closetable();
} else {
redirect("index.php");
}
} elseif (isset($_POST['register'])) {
$userInput = new UserFieldsInput();
$userInput->validation = $settings['display_validation'];
$userInput->emailVerification = $settings['email_verification'];
$userInput->adminActivation = $settings['admin_activation'];
$userInput->skipCurrentPass = true;
$userInput->registration = true;
$userInput->saveInsert();
$userInput->displayMessages();
$errors = $userInput->getErrorsArray();
unset($userInput);
}
if ((!isset($_POST['register']) && !isset($_GET['code'])) || (isset($_POST['register']) && count($errors) > 0)) {
opentable($locale['u101']);
$userFields = new UserFields();
$userFields->postName = "register";
$userFields->postValue = $locale['u101'];
$userFields->displayValidation = $settings['display_validation'];
$userFields->displayTerms = $settings['enable_terms'];
$userFields->showAdminPass = false;
$userFields->showAvatarInput = false;
$userFields->skipCurrentPass = true;
$userFields->registration = true;
$userFields->errorsArray = $errors;
$userFields->displayInput();
closetable();
}
require_once THEMES."templates/footer.php";
?>