modules/register.php

   1 <?php
   2 /***************************************************************************
   3  *  Copyright (C) 2003-2009 Polytechnique.org                              *
   4  *  http://opensource.polytechnique.org/                                   *
   5  *                                                                         *
   6  *  This program is free software; you can redistribute it and/or modify   *
   7  *  it under the terms of the GNU General Public License as published by   *
   8  *  the Free Software Foundation; either version 2 of the License, or      *
   9  *  (at your option) any later version.                                    *
  10  *                                                                         *
  11  *  This program is distributed in the hope that it will be useful,        *
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
  14  *  GNU General Public License for more details.                           *
  15  *                                                                         *
  16  *  You should have received a copy of the GNU General Public License      *
  17  *  along with this program; if not, write to the Free Software            *
  18  *  Foundation, Inc.,                                                      *
  19  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
  20  ***************************************************************************/
  21
  22 class RegisterModule extends PLModule
  23 {
  24     function handlers()
  25     {
  26         return array(
  27             'register'         => $this->make_hook('register', AUTH_PUBLIC),
  28             'register/end'     => $this->make_hook('end',      AUTH_PUBLIC),
  29             'register/end.php' => $this->make_hook('end_old',  AUTH_PUBLIC),
  30             'register/success' => $this->make_hook('success',  AUTH_MDP),
  31             'register/save'    => $this->make_hook('save',     AUTH_MDP),
  32         );
  33     }
  34
  35     function handler_register(&$page, $hash = null)
  36     {
  37         $alert     = null;
  38         $sub_state = S::v('sub_state', Array());
  39         if (!isset($sub_state['step'])) {
  40             $sub_state['step'] = 0;
  41         }
  42         if (!isset($sub_state['backs'])) {
  43             $sub_state['backs'] = array();
  44         }
  45         if (Get::has('back') && Get::i('back') < $sub_state['step']) {
  46             $sub_state['step'] = max(0,Get::i('back'));
  47             $state = $sub_state;
  48             unset($state['backs']);
  49             $sub_state['backs'][] = $state;
  50             if (count($sub_state['backs']) == 3) {
  51                 $alert .= "Tentative d'inscription tres hesitante - ";
  52             }
  53         }
  54
  55         // Compatibility with old sources, keep it atm
  56         if (!$hash && Env::has('hash')) {
  57             $hash = Env::v('hash');
  58         }
  59
  60         if ($hash) {
  61             $res = XDB::query(
  62                     "SELECT  m.uid, u.promo, u.nom, u.prenom, u.matricule, u.naissance_ini, FIND_IN_SET('watch', u.flags)
  63                        FROM  register_marketing AS m
  64                  INNER JOIN  auth_user_md5      AS u ON u.user_id = m.uid
  65                       WHERE  m.hash={?}", $hash);
  66             if (list($uid, $promo, $nom, $prenom, $ourmat, $naiss, $watch) = $res->fetchOneRow()) {
  67                 $sub_state['uid']    = $uid;
  68                 $sub_state['hash']   = $hash;
  69                 $sub_state['promo']  = $promo;
  70                 $sub_state['nom']    = $nom;
  71                 $sub_state['prenom'] = $prenom;
  72                 $sub_state['ourmat'] = $ourmat;
  73                 $sub_state['watch']  = $watch;
  74                 $sub_state['naissance_ini'] = $naiss;
  75
  76                 XDB::execute(
  77                         "REPLACE INTO  register_mstats (uid,sender,success)
  78                                SELECT  m.uid, m.sender, 0
  79                                  FROM  register_marketing AS m
  80                                 WHERE  m.hash", $sub_state['hash']);
  81             }
  82         }
  83
  84         switch ($sub_state['step']) {
  85             case 0:
  86                 $wp = new PlWikiPage('Reference.Charte');
  87                 $wp->buildCache();
  88                 if (Post::has('step1')) {
  89                     $sub_state['step'] = 1;
  90                     if (isset($sub_state['hash'])) {
  91                         $sub_state['step'] = 3;
  92                         $this->load('register.inc.php');
  93                         create_aliases($sub_state);
  94                     }
  95                 }
  96                 break;
  97
  98             case 1:
  99                 if (Post::has('promo')) {
 100                     $promo = Post::i('promo');
 101                     $res = XDB::query("SELECT COUNT(*)
 102                                          FROM auth_user_md5
 103                                         WHERE  perms='pending' AND deces = '0000-00-00'
 104                                                AND promo = {?}",
 105                                       $promo);
 106                     if (!$res->fetchOneCell()) {
 107                         $err = "La promotion saisie est incorrecte ou tous les camardes de cette promo sont inscrits !";
 108                     } else {
 109                         $sub_state['step']  = 2;
 110                         $sub_state['promo'] = $promo;
 111                         if ($promo >= 1996 && $promo<2000) {
 112                             $sub_state['mat'] = ($promo % 100)*10 . '???';
 113                         } elseif($promo >= 2000) {
 114                             $sub_state['mat'] = 100 + ($promo % 100) . '???';
 115                         }
 116                     }
 117                 }
 118                 break;
 119
 120             case 2:
 121                 if (count($_POST)) {
 122                     $this->load('register.inc.php');
 123                     $sub_state['prenom'] = Post::v('prenom');
 124                     $sub_state['nom']    = Post::v('nom');
 125                     $sub_state['mat']    = Post::v('mat');
 126                     $err = check_new_user($sub_state);
 127
 128                     if ($err !== true) { break; }
 129                     $err = create_aliases($sub_state);
 130                     if ($err === true) {
 131                         unset($err);
 132                         $sub_state['step'] = 3;
 133                     }
 134                 }
 135                 break;
 136
 137             case 3:
 138                 if (count($_POST)) {
 139                     $this->load('register.inc.php');
 140                     require_once 'emails.inc.php';
 141                     if (!isvalid_email(Post::v('email'))) {
 142                         $err[] = "Le champ 'E-mail' n'est pas valide.";
 143                     } elseif (!isvalid_email_redirection(Post::v('email'))) {
 144                         $err[] = $sub_state['forlife']." doit renvoyer vers un email existant ".
 145                             "valide, en particulier, il ne peut pas être renvoyé vers lui-même.";
 146                     }
 147                     $birth = trim(Env::v('naissance'));
 148                     if (!preg_match('@^[0-3]?\d/[01]?\d/(19|20)?\d{2}$@', $birth)) {
 149                         $err[] = "La 'Date de naissance' n'est pas correcte.";
 150                     } else {
 151                         $birth = explode('/', $birth, 3);
 152                         for ($i = 0; $i < 3; $i++)
 153                             $birth[$i] = intval($birth[$i]);
 154                         if ($birth[2] < 100) $birth[2] += 1900;
 155                         $year  = $birth[2];
 156                         $promo = (int)$sub_state['promo'];
 157                         if ($year > $promo - 15 || $year < $promo - 30) {
 158                             $err[] = "La 'Date de naissance' n'est pas correcte.";
 159                             $alert = "Date de naissance incorrecte a l'inscription - ";
 160                             $sub_state['wrong_naissance'] = $birth;
 161                         }
 162                     }
 163
 164                     // Check if the given email is known as dangerous
 165                     $res = XDB::query("SELECT  w.state, w.description
 166                                          FROM  emails_watch AS w
 167                                         WHERE  w.email = {?} AND w.state != 'safe'",
 168                                         Post::v('email'));
 169                     $email_banned = false;
 170                     if ($res->numRows()) {
 171                         list($state, $description) = $res->fetchOneRow();
 172                         $alert .= "Email surveille propose a l'inscription - ";
 173                         $sub_state['email_desc'] = $description;
 174                         if ($state == 'dangerous') {
 175                             $email_banned = true;
 176                         }
 177                     }
 178                     if ($sub_state['watch']) {
 179                         $alert .= "Inscription d'un utilisateur surveillé - ";
 180                     }
 181
 182                     if (check_ip('unsafe')) {
 183                         unset($err);
 184                     }
 185
 186                     if (isset($err)) {
 187                         $err = join('<br />', $err);
 188                     } else {
 189                         $sub_state['naissance'] = sprintf("%04d-%02d-%02d",
 190                                                           intval($birth[2]), intval($birth[1]), intval($birth[0]));
 191                         if ($sub_state['naissance_ini'] != '0000-00-00' && $sub_state['naissance'] != $sub_state['naissance_ini']) {
 192                             $alert .= "Date de naissance incorrecte à l'inscription - ";
 193                         }
 194                         $sub_state['email']     = Post::v('email');
 195                         $ip_banned = check_ip('unsafe');
 196                         if ($ip_banned) {
 197                             $alert .= "Tentative d'inscription depuis une IP surveillee";
 198                         }
 199                         if ($email_banned || $ip_banned) {
 200                             global $globals;
 201                             $err = "Une erreur s'est produite lors de l'inscription."
 202                                  . " Merci de contacter <a href='mailto:register@{$globals->mail->domain}>"
 203                                  . " register@{$globals->mail->domain}</a>"
 204                                  . " pour nous faire part de cette erreur";
 205                         } else {
 206                             $sub_state['step'] = 4;
 207                             if (count($sub_state['backs']) >= 3) {
 208                                 $alert .= "Fin d'une inscription hésitante";
 209                             }
 210                             finish_ins($sub_state);
 211                         }
 212                     }
 213                 }
 214                 break;
 215         }
 216
 217         $_SESSION['sub_state'] = $sub_state;
 218         if (!empty($alert)) {
 219             send_warning_mail($alert);
 220         }
 221         $page->changeTpl('register/step'.intval($sub_state['step']).'.tpl');
 222         if (isset($err)) {
 223             $page->trigError($err);
 224         }
 225     }
 226
 227     function handler_end_old(&$page)
 228     {
 229         return $this->handler_end($page, Env::v('hash'));
 230     }
 231
 232     function handler_end(&$page, $hash = null)
 233     {
 234         global $globals;
 235
 236
 237         $page->changeTpl('register/end.tpl');
 238         $_SESSION['sub_state'] = array('step' => 5);
 239
 240         if (check_ip('unsafe')) {
 241             send_warning_mail('Une IP surveillée a tenté de finaliser son inscription');
 242             XDB::execute('DELETE FROM  register_pending
 243                                 WHERE  hash = {?} AND hash != \'INSCRIT\'', $hash);
 244             return PL_FORBIDDEN;
 245         }
 246
 247         require_once('user.func.inc.php');
 248
 249         if ($hash) {
 250             $res = XDB::query(
 251                     "SELECT  r.uid, r.forlife, r.bestalias, r.mailorg2,
 252                              r.password, r.email, r.naissance, u.nom, u.prenom,
 253                              u.promo, FIND_IN_SET('femme', u.flags), u.naissance_ini
 254                        FROM  register_pending AS r
 255                  INNER JOIN  auth_user_md5    AS u ON r.uid = u.user_id
 256                       WHERE  hash={?} AND hash!='INSCRIT'", $hash);
 257         }
 258
 259         if (!$hash || !list($uid, $forlife, $bestalias, $mailorg2, $password, $email,
 260                             $naissance, $nom, $prenom, $promo, $femme, $naiss_ini) = $res->fetchOneRow())
 261         {
 262             $page->kill("<p>Cette adresse n'existe pas, ou plus, sur le serveur.</p>
 263                          <p>Causes probables :</p>
 264                          <ol>
 265                            <li>Vérifie que tu visites l'adresse du dernier
 266                                e-mail reçu s'il y en a eu plusieurs.</li>
 267                            <li>Tu as peut-être mal copié l'adresse reçue par
 268                                mail, vérifie-la à la main.</li>
 269                            <li>Tu as peut-être attendu trop longtemps pour
 270                                confirmer.  Les pré-inscriptions sont annulées
 271                                tous les 30 jours.</li>
 272                            <li>Tu es en fait déjà inscrit.</li>
 273                         </ol>");
 274         }
 275
 276
 277
 278         /***********************************************************/
 279         /****************** REALLY CREATE ACCOUNT ******************/
 280         /***********************************************************/
 281
 282         XDB::execute('UPDATE  auth_user_md5
 283                                    SET  password={?}, perms="user",
 284                                         date=NOW(), naissance={?}, date_ins = NOW()
 285                                  WHERE  user_id={?}', $password, $naissance, $uid);
 286         XDB::execute('REPLACE INTO auth_user_quick (user_id) VALUES ({?})', $uid);
 287         XDB::execute('INSERT INTO aliases (id,alias,type)
 288                                      VALUES ({?}, {?}, "a_vie")', $uid,
 289                                      $forlife);
 290         XDB::execute('INSERT INTO aliases (id,alias,type,flags)
 291                                      VALUES ({?}, {?}, "alias", "bestalias")',
 292                                      $uid, $bestalias);
 293         if ($mailorg2) {
 294             XDB::execute('INSERT INTO aliases (id,alias,type)
 295                                          VALUES ({?}, {?}, "alias")', $uid,
 296                                          $mailorg2);
 297         }
 298
 299         require_once('emails.inc.php');
 300         $user = User::getSilent($uid);
 301         $redirect = new Redirect($user);
 302         $redirect->add_email($email);
 303
 304         // on cree un objet logger et on log l'inscription
 305         S::logger($uid)->log('inscription', $email);
 306         XDB::execute('UPDATE register_pending SET hash="INSCRIT" WHERE uid={?}', $uid);
 307
 308
 309         $mymail = new PlMailer('register/inscription.reussie.tpl');
 310         $mymail->assign('forlife', $forlife);
 311         $mymail->assign('prenom', $prenom);
 312         $mymail->send();
 313
 314         // Enable search on the user
 315         require_once('user.func.inc.php');
 316         user_reindex($uid);
 317
 318         // Add notification for people looking for this registration
 319         require_once 'notifs.inc.php';
 320         register_watch_op($uid, WATCH_INSCR);
 321         inscription_notifs_base($uid);
 322
 323         // Default registration on forums
 324         $p_for = 'xorg.promo.x' . $promo;
 325         $cible = array('xorg.general', 'xorg.pa.divers', 'xorg.pa.logements', $p_for);
 326         foreach ($cible as $val) {
 327             XDB::execute('INSERT INTO  forum_subs (fid,uid)
 328                                SELECT  fid, {?}
 329                                  FROM  forum
 330                                 WHERE  name = {?}', $uid, $val);
 331             if (XDB::affectedRows() == 0 && $val == $p_for) {
 332                 $res = XDB::query("SELECT  SUM(perms IN ('admin','user') AND deces = 0), COUNT(*)
 333                                      FROM  auth_user_md5
 334                                     WHERE  promo = {?}", $promo);
 335                 list($effau, $effid) = $res->fetchOneRow();
 336                 if (5 * $effau > $effid) { // +
 337                     $mymail = new PlMailer('admin/forums-promo.mail.tpl');
 338                     $mymail->assign('promo', $promo);
 339                     $mymail->send();
 340                 }
 341             }
 342         }
 343
 344         // update number of subscribers (perms has changed)
 345         $globals->updateNbIns();
 346
 347         if (!Platal::session()->startWeakSession($uid)) {
 348             return PL_FORBIDDEN;
 349         }
 350
 351         /***********************************************************/
 352         /************* envoi d'un mail au démarcheur ***************/
 353         /***********************************************************/
 354         $res = XDB::iterRow(
 355                 "SELECT  sa.alias, IF(s.nom_usage,s.nom_usage,s.nom) AS nom,
 356                          s.prenom, FIND_IN_SET('femme', s.flags) AS femme,
 357                          GROUP_CONCAT(m.email SEPARATOR ', ') AS mails, MAX(m.last) AS dateDernier
 358                    FROM  register_marketing AS m
 359              INNER JOIN  auth_user_md5      AS s  ON ( m.sender = s.user_id )
 360              INNER JOIN  aliases            AS sa ON ( sa.id = m.sender
 361                                                        AND FIND_IN_SET('bestalias', sa.flags) )
 362                   WHERE  m.uid = {?}
 363                GROUP BY  m.sender
 364                ORDER BY  dateDernier DESC", $uid);
 365         XDB::execute("UPDATE register_mstats SET success=NOW() WHERE uid={?}", $uid);
 366
 367         $market = array();
 368         while (list($salias, $snom, $sprenom, $sfemme, $mails, $dateDernier) = $res->next()) {
 369             $market[] = " - par $snom $sprenom sur $mails (le plus récemment le $dateDernier)";
 370             $mymail = new PlMailer();
 371             $mymail->setSubject("$prenom $nom s'est inscrit à Polytechnique.org !");
 372             $mymail->setFrom('"Marketing Polytechnique.org" <register@' . $globals->mail->domain . '>');
 373             $mymail->addTo("\"$sprenom $snom\" <$salias@{$globals->mail->domain}>");
 374             $msg = ($sfemme?'Chère':'Cher')." $sprenom,\n\n"
 375                  . "Nous t'écrivons pour t'informer que $prenom $nom (X$promo), "
 376                  . "que tu avais incité".($femme?'e':'')." à s'inscrire à Polytechnique.org, "
 377                  . "vient à l'instant de terminer son inscription.\n\n"
 378                  . "Merci de ta participation active à la reconnaissance de ce site !!!\n\n"
 379                  . "Bien cordialement,\n"
 380                  . "L'équipe Polytechnique.org";
 381             $mymail->setTxtBody(wordwrap($msg, 72));
 382             $mymail->send();
 383         }
 384
 385         /**** send a mail to X.org administrators ****/
 386         if ($globals->register->notif) {
 387             $mymail = new PlMailer();
 388             $mymail->setSubject("Inscription de $prenom $nom (X$promo)");
 389             $mymail->setFrom('"Webmaster Polytechnique.org" <web@' . $globals->mail->domain . '>');
 390             $mymail->addTo($globals->register->notif);
 391             $mymail->addHeader('Reply-To', $globals->register->notif);
 392             $msg = "$prenom $nom (X$promo) a terminé son inscription avec les données suivantes :\n"
 393                  . " - nom       : $nom\n"
 394                  . " - prenom    : $prenom\n"
 395                  . " - promo     : $promo\n"
 396                  . " - naissance : $naissance (date connue : $naiss_ini)\n"
 397                  . " - forlife   : $forlife\n"
 398                  . " - email     : $email\n"
 399                  . " - sexe      : $femme\n"
 400                  . " - ip        : " . S::logger()->ip . " (" . S::logger()->host . ")\n"
 401                  . (S::logger()->proxy_ip ? " - proxy     : " . S::logger()->proxy_ip . " (" . S::logger()->proxy_host . ")\n" : "")
 402                  . "\n\n";
 403             if (count($market) > 0) {
 404                 $msg .= "Les marketings suivants avaient été effectués :\n"
 405                      . implode("\n", $market);
 406             } else {
 407                 $msg .= "$prenom $nom n'a jamais reçu d'email de marketing.";
 408             }
 409             $mymail->setTxtBody($msg);
 410             $mymail->send();
 411         }
 412
 413         Marketing::clear($uid);
 414
 415         pl_redirect('register/success');
 416         $page->assign('uid', $uid);
 417     }
 418
 419     function handler_success(&$page)
 420     {
 421         global $globals;
 422         $page->changeTpl('register/success.tpl');
 423         $page->assign('user', S::user());
 424
 425         $_SESSION['sub_state'] = array('step' => 5);
 426         if (Env::has('response2'))  {
 427             $_SESSION['password'] = $password = Post::v('response2');
 428
 429             XDB::execute('UPDATE auth_user_md5 SET password={?}
 430                                      WHERE user_id={?}', $password,
 431                                    S::v('uid'));
 432
 433             // If GoogleApps is enabled, and the user did choose to use synchronized passwords,
 434             // and if the (stupid) user has decided to use /register/success another time,
 435             // updates the Google Apps password as well.
 436             if ($globals->mailstorage->googleapps_domain) {
 437                 require_once 'googleapps.inc.php';
 438                 $account = new GoogleAppsAccount(S::user());
 439                 if ($account->active() && $account->sync_password) {
 440                     $account->set_password($password);
 441                 }
 442             }
 443
 444             S::logger()->log('passwd');
 445             Platal::session()->setAccessCookie(true);
 446
 447             $page->assign('mdpok', true);
 448         }
 449
 450         $res = XDB::iterRow("SELECT  sub, domain
 451                                FROM  register_subs
 452                               WHERE  uid = {?} AND type = 'list'
 453                            ORDER BY  domain",
 454                             S::i('uid'));
 455         $current_domain = null;
 456         $lists = array();
 457         while (list($sub, $domain) = $res->next()) {
 458             if ($current_domain != $domain) {
 459                 $current_domain = $domain;
 460                 $client = new MMList(S::v('uid'), S::v('password'), $domain);
 461             }
 462             list($details, ) = $client->get_members($sub);
 463             $lists["$sub@$domain"] = $details;
 464         }
 465         $page->assign_by_ref('lists', $lists);
 466
 467         $page->addJsLink('motdepasse.js');
 468     }
 469
 470     function handler_save(&$page)
 471     {
 472         global $globals;
 473
 474         // Finish registration procedure
 475         if (Post::v('register_from_ax_question')) {
 476             XDB::execute('UPDATE auth_user_quick
 477                                      SET profile_from_ax = 1
 478                                    WHERE user_id = {?}',
 479                                  S::v('uid'));
 480         }
 481         if (Post::v('add_to_nl')) {
 482             require_once 'newsletter.inc.php';
 483             NewsLetter::subscribe();
 484         }
 485         if (Post::v('add_to_ax')) {
 486             Platal::load('axletter', 'axletter.inc.php');
 487             AXLetter::subscribe();
 488         }
 489         if (Post::v('add_to_promo')) {
 490             $r = XDB::query('SELECT id FROM groupex.asso WHERE diminutif = {?}',
 491                 S::v('promo'));
 492             $asso_id = $r->fetchOneCell();
 493             XDB::execute('REPLACE INTO groupex.membres (uid,asso_id)
 494                                      VALUES ({?}, {?})',
 495                                  S::v('uid'), $asso_id);
 496             $mmlist = new MMList(S::v('uid'), S::v('password'));
 497             $mmlist->subscribe("promo".S::v('promo'));
 498         }
 499         if (Post::v('sub_ml')) {
 500             $subs = array_keys(Post::v('sub_ml'));
 501             $current_domain = null;
 502             foreach ($subs as $list) {
 503                 list($sub, $domain) = explode('@', $list);
 504                 if ($domain != $current_domain) {
 505                     $current_domain = $domain;
 506                     $client = new MMList(S::v('uid'), S::v('password'), $domain);
 507                 }
 508                 $client->subscribe($sub);
 509             }
 510         }
 511         if (Post::v('imap')) {
 512             require_once 'emails.inc.php';
 513             $user = S::user();
 514             $storage = new EmailStorage($user, 'imap');
 515             $storage->activate();
 516         }
 517
 518         pl_redirect('profile/edit');
 519     }
 520 }
 521
 522 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
 523 ?>