projects / platal.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Integrates Google Apps account updates in plat/al' account updates.
[platal.git] / modules / register.php
CommitLineData
f59bc2fb 1<?php
2/***************************************************************************
179afa7f 3 * Copyright (C) 2003-2008 Polytechnique.org *
f59bc2fb 4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22class RegisterModule extends PLModule
23{
24 function handlers()
25 {
26 return array(
20d90835 27 'register' => $this->make_hook('register', AUTH_PUBLIC),
28 'register/end' => $this->make_hook('end', AUTH_PUBLIC),
2b6d403c 29 'register/end.php' => $this->make_hook('end_old', AUTH_PUBLIC),
f59bc2fb 30 'register/success' => $this->make_hook('success', AUTH_MDP),
97a0a459 31 'register/save' => $this->make_hook('save', AUTH_MDP),
f59bc2fb 32 );
33 }
34
20d90835 35 function handler_register(&$page, $hash = null)
f59bc2fb 36 {
5480a216 37 $alert = null;
cab08090 38 $sub_state = S::v('sub_state', Array());
f59bc2fb 39 if (!isset($sub_state['step'])) {
40 $sub_state['step'] = 0;
41 }
2efe5355 42 if (!isset($sub_state['backs'])) {
43 $sub_state['backs'] = array();
44 }
5e2307dc 45 if (Get::has('back') && Get::i('back') < $sub_state['step']) {
46 $sub_state['step'] = max(0,Get::i('back'));
2efe5355 47 $state = $sub_state;
48 unset($state['backs']);
49 $sub_state['backs'][] = $state;
50 if (count($sub_state['backs']) == 3) {
51 $alert .= "Tentative d'inscription tres hesitante - ";
eaf30d86 52 }
f59bc2fb 53 }
54
2b6d403c 55 // Compatibility with old sources, keep it atm
56 if (!$hash && Env::has('hash')) {
5e2307dc 57 $hash = Env::v('hash');
2b6d403c 58 }
59
20d90835 60 if ($hash) {
08cce2ff 61 $res = XDB::query(
ecc734a5 62 "SELECT m.uid, u.promo, u.nom, u.prenom, u.matricule, u.naissance_ini, FIND_IN_SET('watch', u.flags)
f59bc2fb 63 FROM register_marketing AS m
64 INNER JOIN auth_user_md5 AS u ON u.user_id = m.uid
20d90835 65 WHERE m.hash={?}", $hash);
ecc734a5 66 if (list($uid, $promo, $nom, $prenom, $ourmat, $naiss, $watch) = $res->fetchOneRow()) {
f59bc2fb 67 $sub_state['uid'] = $uid;
20d90835 68 $sub_state['hash'] = $hash;
f59bc2fb 69 $sub_state['promo'] = $promo;
70 $sub_state['nom'] = $nom;
71 $sub_state['prenom'] = $prenom;
72 $sub_state['ourmat'] = $ourmat;
eaf30d86 73 $sub_state['watch'] = $watch;
ecc734a5 74 $sub_state['naissance_ini'] = $naiss;
f59bc2fb 75
08cce2ff 76 XDB::execute(
f59bc2fb 77 "REPLACE INTO register_mstats (uid,sender,success)
78 SELECT m.uid, m.sender, 0
79 FROM register_marketing AS m
80 WHERE m.hash", $sub_state['hash']);
81 }
82 }
83
84 switch ($sub_state['step']) {
85 case 0:
ab694f12 86 require_once('wiki.inc.php');
af3f07c5 87 wiki_require_page('Reference.Charte');
f59bc2fb 88 if (Post::has('step1')) {
89 $sub_state['step'] = 1;
90 if (isset($sub_state['hash'])) {
91 $sub_state['step'] = 3;
433336f3 92 require_once(dirname(__FILE__) . '/register/register.inc.php');
f59bc2fb 93 create_aliases($sub_state);
94 }
95 }
96 break;
97
98 case 1:
99 if (Post::has('promo')) {
5e2307dc 100 $promo = Post::i('promo');
a41bf2f8 101 $res = XDB::query("SELECT COUNT(*)
102 FROM auth_user_md5
103 WHERE perms='pending' AND deces = '0000-00-00'
104 AND promo = {?}",
105 $promo);
106 if (!$res->fetchOneCell()) {
107 $err = "La promotion saisie est incorrecte ou tous les camardes de cette promo sont inscrits !";
f59bc2fb 108 } else {
109 $sub_state['step'] = 2;
110 $sub_state['promo'] = $promo;
111 if ($promo >= 1996 && $promo<2000) {
112 $sub_state['mat'] = ($promo % 100)*10 . '???';
113 } elseif($promo >= 2000) {
114 $sub_state['mat'] = 100 + ($promo % 100) . '???';
115 }
116 }
117 }
118 break;
119
120 case 2:
121 if (count($_POST)) {
433336f3 122 require_once(dirname(__FILE__) . '/register/register.inc.php');
5e2307dc 123 $sub_state['prenom'] = Post::v('prenom');
124 $sub_state['nom'] = Post::v('nom');
125 $sub_state['mat'] = Post::v('mat');
f59bc2fb 126 $err = check_new_user($sub_state);
127
128 if ($err !== true) { break; }
129 $err = create_aliases($sub_state);
130 if ($err === true) {
131 unset($err);
132 $sub_state['step'] = 3;
133 }
134 }
135 break;
136
137 case 3:
138 if (count($_POST)) {
433336f3 139 require_once(dirname(__FILE__) . '/register/register.inc.php');
5e2307dc 140 if (!isvalid_email(Post::v('email'))) {
f59bc2fb 141 $err[] = "Le champ 'E-mail' n'est pas valide.";
5e2307dc 142 } elseif (!isvalid_email_redirection(Post::v('email'))) {
f59bc2fb 143 $err[] = $sub_state['forlife']." doit renvoyer vers un email existant ".
a7de4ef7 144 "valide, en particulier, il ne peut pas être renvoyé vers lui-même.";
f59bc2fb 145 }
1970c12b 146 $birth = trim(Env::v('naissance'));
12e5d7a6 147 if (!preg_match('@^[0-3]?\d/[01]?\d/(19|20)?\d{2}$@', $birth)) {
f59bc2fb 148 $err[] = "La 'Date de naissance' n'est pas correcte.";
35cd1be1 149 } else {
12e5d7a6 150 $birth = explode('/', $birth, 3);
7caaaf6d
AA		 151 for ($i = 0; $i < 3; $i++)
152 $birth[$i] = intval($birth[$i]);
153 if ($birth[2] < 100) $birth[2] += 1900;
154 $year = $birth[2];
35cd1be1 155 $promo = (int)$sub_state['promo'];
156 if ($year > $promo - 15 || $year < $promo - 30) {
157 $err[] = "La 'Date de naissance' n'est pas correcte.";
5480a216 158 $alert = "Date de naissance incorrecte a l'inscription - ";
fb5d164e 159 $sub_state['wrong_naissance'] = $birth;
35cd1be1 160 }
f59bc2fb 161 }
162
bf273d6a 163 // Check if the given email is known as dangerous
164 $res = Xdb::iterRow("SELECT w.state, w.description, a.alias
165 FROM emails AS e
166 INNER JOIN emails_watch AS w ON (e.email = w.email AND w.state != 'safe')
167 INNER JOIN aliases AS a ON (e.uid = a.id AND a.type = 'a_vie')
168 WHERE e.email = {?}
169 ORDER BY a.alias", Post::v('email'));
170 $aliases = array();
171 while(list($gstate, $gdescription, $alias) = $res->next()) {
172 $state = $gstate;
173 $description = $gdescription;
174 $aliases[] = $alias;
175 }
176 if (count($aliases) != 0) {
5480a216 177 $alert .= "Email surveille propose a l'inscription - ";
178 }
0be07aa6 179 if ($sub_state['watch']) {
180 $alter .= "Inscription d'un utilisateur surveillé - ";
181 }
5480a216 182
183 if (check_ip('unsafe')) {
184 unset($err);
bf273d6a 185 }
186
f59bc2fb 187 if (isset($err)) {
188 $err = join('<br />', $err);
189 } else {
12e5d7a6
FB		 190 $sub_state['naissance'] = sprintf("%04d-%02d-%02d",
191 intval($birth[2]), intval($birth[1]), intval($birth[0]));
ecc734a5 192 if ($sub_state['naissance_ini'] != '0000-00-00' && $sub_state['naissance'] != $sub_state['naissance_ini']) {
193 $alert .= "Date de naissance incorrecte à l'inscription - ";
194 }
5e2307dc 195 $sub_state['email'] = Post::v('email');
5480a216 196 if (check_ip('unsafe')) {
197 $err = "Une erreur s'est produite lors de l'inscription."
1d55fe45 198 . " Merci de contacter <a href='mailto:register@{$globals->mail->domain}>"
199 . " register@{$globals->mail->domain}</a>"
5480a216 200 . " pour nous faire part de cette erreur";
201 $alert .= "Tentative d'inscription depuis une IP surveillee";
202 } else {
203 $sub_state['step'] = 4;
9fc2d0d2 204 if (count($sub_state['backs']) >= 3) {
a7de4ef7 205 $alert .= "Fin d'une inscription hésitante";
2efe5355 206 }
5480a216 207 finish_ins($sub_state);
208 }
bf273d6a 209 }
f59bc2fb 210 }
211 break;
212 }
213
214 $_SESSION['sub_state'] = $sub_state;
5480a216 215 if ($alert) {
216 send_warning_mail($alert);
217 }
a41bf2f8 218 $page->changeTpl('register/step'.intval($sub_state['step']).'.tpl');
f59bc2fb 219 if (isset($err)) {
220 $page->trig($err);
221 }
f59bc2fb 222 }
223
2b6d403c 224 function handler_end_old(&$page)
225 {
5e2307dc 226 return $this->handler_end($page, Env::v('hash'));
2b6d403c 227 }
228
f59bc2fb 229 function handler_end(&$page, $hash = null)
230 {
231 global $globals;
232
ecc734a5 233
f59bc2fb 234 $page->changeTpl('register/end.tpl');
a41bf2f8 235 $_SESSION['sub_state'] = array('step' => 5);
ecc734a5 236
237 if (check_ip('unsafe')) {
238 send_warning_mail('Une IP surveillée a tenté de finaliser son inscription');
239 XDB::execute('DELETE FROM register_pending
240 WHERE hash = {?} AND hash != \'INSCRIT\'', $hash);
241 return PL_FORBIDDEN;
242 }
243
f59bc2fb 244 require_once('user.func.inc.php');
245
246 if ($hash) {
08cce2ff 247 $res = XDB::query(
f59bc2fb 248 "SELECT r.uid, r.forlife, r.bestalias, r.mailorg2,
249 r.password, r.email, r.naissance, u.nom, u.prenom,
ecc734a5 250 u.promo, FIND_IN_SET('femme', u.flags), u.naissance_ini
f59bc2fb 251 FROM register_pending AS r
252 INNER JOIN auth_user_md5 AS u ON r.uid = u.user_id
20d90835 253 WHERE hash={?} AND hash!='INSCRIT'", $hash);
f59bc2fb 254 }
255
256 if (!$hash || !list($uid, $forlife, $bestalias, $mailorg2, $password, $email,
ecc734a5 257 $naissance, $nom, $prenom, $promo, $femme, $naiss_ini) = $res->fetchOneRow())
f59bc2fb 258 {
259 $page->kill("<p>Cette adresse n'existe pas, ou plus, sur le serveur.</p>
260 <p>Causes probables :</p>
261 <ol>
a7de4ef7 262 <li>Vérifie que tu visites l'adresse du dernier
263 e-mail reçu s'il y en a eu plusieurs.</li>
264 <li>Tu as peut-être mal copié l'adresse reçue par
265 mail, vérifie-la à la main.</li>
266 <li>Tu as peut-être attendu trop longtemps pour
267 confirmer. Les pré-inscriptions sont annulées
f59bc2fb 268 tous les 30 jours.</li>
a7de4ef7 269 <li>Tu es en fait déjà inscrit.</li>
f59bc2fb 270 </ol>");
271 }
272
273
274
275 /***********************************************************/
276 /****************** REALLY CREATE ACCOUNT ******************/
277 /***********************************************************/
278
08cce2ff 279 XDB::execute('UPDATE auth_user_md5
f59bc2fb 280 SET password={?}, perms="user",
281 date=NOW(), naissance={?}, date_ins = NOW()
282 WHERE user_id={?}', $password, $naissance, $uid);
08cce2ff 283 XDB::execute('REPLACE INTO auth_user_quick (user_id) VALUES ({?})', $uid);
284 XDB::execute('INSERT INTO aliases (id,alias,type)
f59bc2fb 285 VALUES ({?}, {?}, "a_vie")', $uid,
286 $forlife);
08cce2ff 287 XDB::execute('INSERT INTO aliases (id,alias,type,flags)
f59bc2fb 288 VALUES ({?}, {?}, "alias", "bestalias")',
289 $uid, $bestalias);
290 if ($mailorg2) {
08cce2ff 291 XDB::execute('INSERT INTO aliases (id,alias,type)
f59bc2fb 292 VALUES ({?}, {?}, "alias")', $uid,
293 $mailorg2);
294 }
295
296 require_once('emails.inc.php');
297 $redirect = new Redirect($uid);
298 $redirect->add_email($email);
299
300 // on cree un objet logger et on log l'inscription
c4271d38 301 $logger = new CoreLogger($uid);
f59bc2fb 302 $logger->log('inscription', $email);
303
08cce2ff 304 XDB::execute('UPDATE register_pending SET hash="INSCRIT" WHERE uid={?}', $uid);
f59bc2fb 305
8d8f7607 306 global $platal;
307 $platal->on_subscribe($forlife, $uid, $promo, $password);
f59bc2fb 308
1e33266a 309 $mymail = new PlMailer('register/inscription.reussie.tpl');
f59bc2fb 310 $mymail->assign('forlife', $forlife);
311 $mymail->assign('prenom', $prenom);
312 $mymail->send();
313
2a54eb4d 314 require_once('user.func.inc.php');
315 user_reindex($uid);
316
b5dd6f2f
PC		 317 // update number of subscribers (perms has changed)
318 update_NbIns();
319
ecc734a5 320 if (!start_connexion($uid, false)) {
5480a216 321 return PL_FORBIDDEN;
322 }
f59bc2fb 323 $_SESSION['auth'] = AUTH_MDP;
324
325 /***********************************************************/
a7de4ef7 326 /************* envoi d'un mail au démarcheur ***************/
f59bc2fb 327 /***********************************************************/
08cce2ff 328 $res = XDB::iterRow(
ebb129a4
FB		 329 "SELECT sa.alias, IF(s.nom_usage,s.nom_usage,s.nom) AS nom,
330 s.prenom, FIND_IN_SET('femme', s.flags) AS femme,
331 GROUP_CONCAT(m.email) AS mails
f59bc2fb 332 FROM register_marketing AS m
333 INNER JOIN auth_user_md5 AS s ON ( m.sender = s.user_id )
334 INNER JOIN aliases AS sa ON ( sa.id = m.sender
335 AND FIND_IN_SET('bestalias', sa.flags) )
ebb129a4
FB		 336 WHERE m.uid = {?}
337 GROUP BY m.sender", $uid);
08cce2ff 338 XDB::execute("UPDATE register_mstats SET success=NOW() WHERE uid={?}", $uid);
f59bc2fb 339
ebb129a4
FB		 340 $market = array();
341 while (list($salias, $snom, $sprenom, $sfemme, $mails) = $res->next()) {
342 $market[] = " - par $snom $sprenom sur $mails";
1e33266a 343 $mymail = new PlMailer();
a7de4ef7 344 $mymail->setSubject("$prenom $nom s'est inscrit à Polytechnique.org !");
1d55fe45 345 $mymail->setFrom('"Marketing Polytechnique.org" <register@' . $globals->mail->domain . '>');
f59bc2fb 346 $mymail->addTo("\"$sprenom $snom\" <$salias@{$globals->mail->domain}>");
a7de4ef7 347 $msg = ($sfemme?'Chère':'Cher')." $sprenom,\n\n"
ecc734a5 348 . "Nous t'écrivons pour t'informer que $prenom $nom (X$promo), "
a7de4ef7 349 . "que tu avais incité".($femme?'e':'')." à s'inscrire à Polytechnique.org, "
350 . "vient à l'instant de terminer son inscription.\n\n"
351 . "Merci de ta participation active à la reconnaissance de ce site !!!\n\n"
f59bc2fb 352 . "Bien cordialement,\n"
a7de4ef7 353 . "L'équipe Polytechnique.org";
f59bc2fb 354 $mymail->setTxtBody(wordwrap($msg, 72));
355 $mymail->send();
356 }
5f5f0eb5 357
358 /**** send a mail to X.org administrators ****/
9812efa0 359 if ($globals->register->notif) {
360 $mymail = new PlMailer();
361 $mymail->setSubject("Inscription de $prenom $nom (X$promo)");
1d55fe45 362 $mymail->setFrom('"Webmaster Polytechnique.org" <web@' . $globals->mail->domain . '>');
9812efa0 363 $mymail->addTo($globals->register->notif);
a7de4ef7 364 $msg = "$prenom $nom (X$promo) a terminé son inscription avec les données suivantes :\n"
9812efa0 365 . " - nom : $nom\n"
366 . " - prenom : $prenom\n"
367 . " - promo : $promo\n"
ecc734a5 368 . " - naissance : $naissance (date connue : $naiss_ini)\n"
9812efa0 369 . " - forlife : $forlife\n"
370 . " - email : $email\n"
5f5f0eb5 371 . " - sexe : $femme\n"
20b71450 372 . " - ip : {$logger->ip} ({$logger->host})\n"
ebb129a4
FB		 373 . ($logger->proxy_ip ? " - proxy : {$logger->proxy_ip} ({$logger->proxy_host})\n" : "")
374 . "\n\n"
375 . "Les marketings suivants avaient été effectués :\n"
376 . implode("\n", $market);
9812efa0 377 $mymail->setTxtBody($msg);
eaf30d86 378 $mymail->send();
9812efa0 379 }
f59bc2fb 380
e654517d 381 Marketing::clear($uid);
f59bc2fb 382
8b00e0e0 383 pl_redirect('register/success');
f59bc2fb 384 $page->assign('uid', $uid);
f59bc2fb 385 }
386
387 function handler_success(&$page)
388 {
84270653 389 global $globals;
f59bc2fb 390 $page->changeTpl('register/success.tpl');
391
a41bf2f8 392 $_SESSION['sub_state'] = array('step' => 5);
f59bc2fb 393 if (Env::has('response2')) {
5e2307dc 394 $_SESSION['password'] = $password = Post::v('response2');
f59bc2fb 395
08cce2ff 396 XDB::execute('UPDATE auth_user_md5 SET password={?}
f59bc2fb 397 WHERE user_id={?}', $password,
cab08090 398 S::v('uid'));
f59bc2fb 399
84270653
VZ		 400 // If GoogleApps is enabled, and the user did choose to use synchronized passwords,
401 // and if the (stupid) user has decided to user /register/success another time,
402 // updates the Google Apps password as well.
403 if ($globals->mailstorage->googleapps_domain) {
404 require_once 'googleapps.inc.php';
405 $account = new GoogleAppsAccount(S::v('uid'), S::v('forlife'));
406 if ($account->g_status == 'active' && $account->sync_password) {
407 $account->set_password($password);
408 }
409 }
410
714bc242 411 $log = S::v('log');
f59bc2fb 412 $log->log('passwd', '');
413
5e2307dc 414 if (Cookie::v('ORGaccess')) {
f59bc2fb 415 require_once('secure_hash.inc.php');
416 setcookie('ORGaccess', hash_encrypt($password), (time()+25920000), '/', '' ,0);
417 }
418
419 $page->assign('mdpok', true);
420 }
421
0baf0741 422 $res = XDB::iterRow("SELECT sub, domain
423 FROM register_subs
424 WHERE uid = {?} AND type = 'list'
425 ORDER BY domain",
426 S::i('uid'));
427 $current_domain = null;
428 $lists = array();
429 while (list($sub, $domain) = $res->next()) {
430 if ($current_domain != $domain) {
431 $current_domain = $domain;
432 $client = new MMList(S::v('uid'), S::v('password'), $domain);
433 }
434 list($details, ) = $client->get_members($sub);
435 $lists["$sub@$domain"] = $details;
436 }
437 $page->assign_by_ref('lists', $lists);
438
c99ef281 439 $page->addJsLink('motdepasse.js');
f59bc2fb 440 }
97a0a459
FB		 441
442 function handler_save(&$page)
443 {
444 global $globals;
445
446 // Finish registration procedure
447 if (Post::v('register_from_ax_question')) {
448 XDB::execute('UPDATE auth_user_quick
449 SET profile_from_ax = 1
450 WHERE user_id = {?}',
451 S::v('uid'));
452 }
453 if (Post::v('add_to_nl')) {
454 require_once 'newsletter.inc.php';
455 NewsLetter::subscribe();
456 }
457 if (Post::v('add_to_ax')) {
458 require_once dirname(__FILE__) . '/axletter/axletter.inc.php';
459 AXLetter::subscribe();
460 }
461 if (Post::v('add_to_promo')) {
462 $r = XDB::query('SELECT id FROM groupex.asso WHERE diminutif = {?}',
463 S::v('promo'));
464 $asso_id = $r->fetchOneCell();
465 XDB::execute('REPLACE INTO groupex.membres (uid,asso_id)
466 VALUES ({?}, {?})',
467 S::v('uid'), $asso_id);
468 $mmlist = new MMList(S::v('uid'), S::v('password'));
469 $mmlist->subscribe("promo".S::v('promo'));
470 }
471 if (Post::v('sub_ml')) {
472 $subs = array_keys(Post::v('sub_ml'));
473 $current_domain = null;
474 foreach ($subs as $list) {
475 list($sub, $domain) = explode('@', $list);
476 if ($domain != $current_domain) {
477 $current_domain = $domain;
478 $client = new MMList(S::v('uid'), S::v('password'), $domain);
479 }
480 $client->subscribe($sub);
481 }
482 }
b9fe731c
VZ		 483 if (Post::v('imap')) {
484 require_once 'emails.inc.php';
485 $storage = new MailStorageIMAP(S::v('uid'));
486 $storage->enable();
487 }
97a0a459
FB		 488
489 pl_redirect('profile/edit');
490 }
f59bc2fb 491}
492
a7de4ef7 493// vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
f59bc2fb 494?>
plat/al