f1d8b58fbb4c459117d69357ba39aa4cda4ea0e7
2 /***************************************************************************
3 * Copyright (C) 2003-2010 Polytechnique.org *
4 * http://opensource.polytechnique.org/ *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
22 class RegisterModule
extends PLModule
27 'register' => $this->make_hook('register', AUTH_PUBLIC
),
28 'register/end' => $this->make_hook('end', AUTH_PUBLIC
),
32 function handler_register(&$page, $hash = null
)
35 $subState = new PlDict(S
::v('subState', array()));
36 if (!$subState->has('step')) {
37 $subState->set('step', 0);
39 if (!$subState->has('backs')) {
40 $subState->set('backs', new PlDict());
42 if (Get
::has('back') && Get
::i('back') < $subState->i('step')) {
43 $subState->set('step', max(0, Get
::i('back')));
44 $subState->v('back')->set($subState->v('back')->count() +
1, $subState->dict());
45 $subState->v('back')->kill('back');
46 if ($subState->v('backs')->count() == 3) {
47 $alert .= "Tentative d'inscription très hésitante - ";
52 $nameTypes = DirEnum
::getOptions(DirEnum
::NAMETYPES
);
53 $nameTypes = array_flip($nameTypes);
54 $res = XDB
::query("SELECT a.uid, pd.promo, pnl.name AS lastname, pnf.name AS firstname, p.xorg_id AS xorgid,
55 p.birthdate_ref AS birthdateRef, FIND_IN_SET('watch', a.flags) AS watch, m.hash
56 FROM register_marketing AS m
57 INNER JOIN accounts AS a ON (m.uid = a.uid)
58 INNER JOIN account_profiles AS ap ON (a.uid = ap.uid AND FIND_IN_SET('owner', ap.perms))
59 INNER JOIN profiles AS p ON (p.pid = ap.pid)
60 INNER JOIN profile_display AS pd ON (p.pid = pd.pid)
61 INNER JOIN profile_name AS pnl ON (p.pid = pnl.pid AND pnl.typeid = {?})
62 INNER JOIN profile_name AS pnf ON (p.pid = pnf.pid AND pnf.typeid = {?})
63 WHERE m.hash = {?} AND a.state = 'pending'",
64 $nameTypes['name_ini'], $nameTypes['firstname_ini'], $hash);
66 if ($res->numRows() == 1) {
67 $subState->merge($res->fetchOneRow());
68 $subState->set('yearpromo', substr($subState->s('promo'), 1, 4));
70 XDB
::execute('INSERT INTO register_mstats (uid, sender, success)
71 SELECT m.uid, m.sender, 0
72 FROM register_marketing AS m
74 ON DUPLICATE KEY UPDATE sender = VALUES(sender), success = VALUES(success)',
75 $subState->s('hash'));
79 switch ($subState->i('step')) {
81 $wp = new PlWikiPage('Reference.Charte');
83 if (Post
::has('step1')) {
84 $subState->set('step', 1);
85 if ($subState->has('hash')) {
86 $subState->set('step', 3);
87 $this->load('register.inc.php');
88 createAliases($subState);
94 if (Post
::has('yearpromo')) {
95 $promo = Post
::t('edu_type') . Post
::t('yearpromo');
96 $yearpromo = Post
::i('yearpromo');
97 $res = XDB
::query("SELECT COUNT(*)
99 INNER JOIN account_profiles AS ap ON (a.uid = ap.uid AND FIND_IN_SET('owner', ap.perms))
100 INNER JOIN profiles AS p ON (p.pid = ap.pid)
101 INNER JOIN profile_display AS pd ON (p.pid = pd.pid)
102 WHERE a.state = 'pending' AND p.deathdate IS NULL AND pd.promo = {?}",
105 if (!$res->fetchOneCell()) {
106 $error = 'La promotion saisie est incorrecte ou tous les camarades de cette promotion sont inscrits !';
108 $subState->set('step', 2);
109 $subState->set('promo', $promo);
110 $subState->set('yearpromo', $yearpromo);
111 if ($yearpromo >= 1996 && $yearpromo < 2000) {
112 $subState->set('schoolid', ($yearpromo %
100) * 10 . '???');
113 } elseif($yearpromo >= 2000) {
114 $subState->set('schoolid', 100 +
($yearpromo %
100) . '???');
122 $this->load('register.inc.php');
123 $subState->set('firstname', Post
::t('firstname'));
124 $subState->set('lastname', Post
::t('lastname'));
125 $subState->set('schoolid', Post
::i('schoolid'));
126 $error = checkNewUser($subState);
128 if ($error !== true
) {
131 $error = createAliases($subState);
132 if ($error === true
) {
134 $subState->set('step', 3);
141 $this->load('register.inc.php');
143 // Validate the email address format and domain.
144 require_once 'emails.inc.php';
146 if (!isvalid_email(Post
::v('email'))) {
147 $error[] = "Le champ 'Email' n'est pas valide.";
148 } elseif (!isvalid_email_redirection(Post
::v('email'))) {
149 $error[] = $subState->s('forlife') . ' doit renvoyer vers un email existant '
150 . 'valide, en particulier, il ne peut pas être renvoyé vers lui-même.';
153 // Validate the birthday format and range.
154 $birth = Post
::t('birthdate');
155 if (!preg_match('@^[0-3]?\d/[01]?\d/(19|20)?\d{2}$@', $birth)) {
156 $error[] = "La 'Date de naissance' n'est pas correcte.";
158 $birth = explode('/', $birth, 3);
159 for ($i = 0; $i < 3; ++
$i)
160 $birth[$i] = intval($birth[$i]);
161 if ($birth[2] < 100) {
165 $promo = $subState->i('yearpromo');
166 if ($year > $promo - 15 ||
$year < $promo - 30) {
167 $error[] = "La 'Date de naissance' n'est pas correcte.";
168 $alert = "Date de naissance incorrecte à l'inscription - ";
169 $subState->set('wrong_birthdate', $birth);
173 // Register the optional services requested by the user.
175 foreach (array('ax_letter', 'imap', 'ml_promo', 'nl') as $service) {
176 if (Post
::b($service)) {
177 $services[] = $service;
180 $subState->set('services', $services);
182 // Validate the password.
183 if (!Post
::v('pwhash', false
)) {
184 $error[] = "Le mot de passe n'est pas valide.";
187 // Check if the given email is known as dangerous.
188 $res = XDB
::query("SELECT state, description
190 WHERE email = {?} AND state != 'safe'",
192 $bannedEmail = false
;
193 if ($res->numRows()) {
194 list($state, $description) = $res->fetchOneRow();
195 $alert .= "Email surveillé proposé à l'inscription - ";
196 $subState->set('email_desc', $description);
197 if ($state == 'dangerous') {
201 if ($subState->i('watch') != 0) {
202 $alert .= "Inscription d'un utilisateur surveillé - ";
205 if (($bannedIp = check_ip('unsafe'))) {
210 $error = join('<br />', $error);
212 $subState->set('birthdate', sprintf("%04d-%02d-%02d",
213 intval($birth[2]), intval($birth[1]), intval($birth[0])));
214 $subState->set('email', Post
::t('email'));
215 $subState->set('password', Post
::t('pwhash'));
217 // Update the current alert if the birthdate is incorrect,
218 // or if the IP address of the user has been banned.
219 if ($subState->s('birthdateRef') != '0000-00-00'
220 && $subState->s('birthdateRef') != $subState->s('birthdate')) {
221 $alert .= "Date de naissance incorrecte à l'inscription - ";
224 $alert .= "Tentative d'inscription depuis une IP surveillée";
227 // Prevent banned user from actually registering; save the current state for others.
228 if ($bannedEmail ||
$bannedIp) {
230 $error = "Une erreur s'est produite lors de l'inscription."
231 . " Merci de contacter <a href='mailto:register@{$globals->mail->domain}>"
232 . " register@{$globals->mail->domain}</a>"
233 . " pour nous faire part de cette erreur.";
235 $subState->set('step', 4);
236 if ($subState->v('backs')->count() >= 3) {
237 $alert .= "Fin d'une inscription hésitante.";
239 finishRegistration($subState);
246 $_SESSION['subState'] = $subState->dict();
247 if (!empty($alert)) {
248 send_warning_mail($alert);
251 $page->changeTpl('register/step' . $subState->i('step') . '.tpl');
252 $page->addJsLink('password.js');
254 $page->trigError($error);
258 function handler_end(&$page, $hash = null
)
261 $_SESSION['subState'] = array('step' => 5);
263 // Reject registration requests from unsafe IP addresses (and remove the
264 // registration information from the database, to prevent IP changes).
265 if (check_ip('unsafe')) {
266 send_warning_mail('Une IP surveillée a tenté de finaliser son inscription.');
267 XDB
::execute("DELETE FROM register_pending
268 WHERE hash = {?} AND hash != 'INSCRIT'", $hash);
272 $nameTypes = DirEnum
::getOptions(DirEnum
::NAMETYPES
);
273 $nameTypes = array_flip($nameTypes);
275 // Retrieve the pre-registration information using the url-provided
276 // authentication token.
277 $res = XDB
::query("SELECT r.uid, p.pid, r.forlife, r.bestalias, r.mailorg2,
278 r.password, r.email, r.services, r.naissance,
279 pnl.name AS lastname, pnf.name AS firstname,
280 pd.promo, p.sex, p.birthdate_ref, a.type AS eduType
281 FROM register_pending AS r
282 INNER JOIN accounts AS a ON (r.uid = a.uid)
283 INNER JOIN account_profiles AS ap ON (a.uid = ap.uid AND FIND_IN_SET('owner', ap.perms))
284 INNER JOIN profiles AS p ON (p.pid = ap.pid)
285 INNER JOIN profile_name AS pnl ON (p.pid = pnl.pid AND pnl.typeid = {?})
286 INNER JOIN profile_name AS pnf ON (p.pid = pnf.pid AND pnf.typeid = {?})
287 INNER JOIN profile_display AS pd ON (p.pid = pd.pid)
288 WHERE hash = {?} AND hash != 'INSCRIT' AND a.state = 'pending'",
289 $nameTypes['name_ini'], $nameTypes['firstname_ini'], $hash);
290 if (!$hash ||
$res->numRows() == 0) {
291 $page->kill("<p>Cette adresse n'existe pas, ou plus, sur le serveur.</p>
292 <p>Causes probables :</p>
294 <li>Vérifie que tu visites l'adresse du dernier
295 email reçu s'il y en a eu plusieurs.</li>
296 <li>Tu as peut-être mal copié l'adresse reçue par
297 email, vérifie-la à la main.</li>
298 <li>Tu as peut-être attendu trop longtemps pour
299 confirmer. Les pré-inscriptions sont annulées
300 tous les 30 jours.</li>
301 <li>Tu es en fait déjà inscrit.</li>
305 list($uid, $pid, $forlife, $bestalias, $emailXorg2, $password, $email, $services,
306 $birthdate, $lastname, $firstname, $promo, $sex, $birthdate_ref, $eduType) = $res->fetchOneRow();
307 $isX = ($eduType == 'x');
308 $yearpromo = substr($promo, 1, 4);
310 // Prepare the template for display.
311 $page->changeTpl('register/end.tpl');
312 $page->addJsLink('do_challenge_response_logged.js');
313 $page->assign('forlife', $forlife);
314 $page->assign('firstname', $firstname);
316 // Check if the user did enter a valid password; if not (or if none is found),
317 // get her an information page.
318 if (Post
::has('response')) {
319 $expected_response = sha1("$forlife:$password:" . S
::v('challenge'));
320 if (Post
::v('response') != $expected_response) {
321 $page->trigError("Mot de passe invalide.");
322 S
::logger($uid)->log('auth_fail', 'bad password (register/end)');
330 // Create the user account.
332 XDB
::startTransaction();
333 XDB
::execute("UPDATE accounts
334 SET password = {?}, state = 'active',
335 registration_date = NOW(), email = NULL
336 WHERE uid = {?}", $password, $uid);
337 XDB
::execute("UPDATE profiles
338 SET birthdate = {?}, last_change = NOW()
339 WHERE pid = {?}", $birthdate, $pid);
340 XDB
::execute("INSERT INTO aliases (uid, alias, type)
341 VALUES ({?}, {?}, 'a_vie')", $uid, $forlife);
342 XDB
::execute("INSERT INTO aliases (uid, alias, type, flags)
343 VALUES ({?}, {?}, 'alias', 'bestalias')", $uid, $bestalias);
345 XDB
::execute("INSERT INTO aliases (uid, alias, type)
346 VALUES ({?}, {?}, 'alias')", $uid, $emailXorg2);
350 // Add the registration email address as first and only redirection.
351 require_once 'emails.inc.php';
352 $redirect = new Redirect($user);
353 $redirect->add_email($email);
355 // Try to start a session (so the user don't have to log in); we will use
356 // the password available in Post:: to authenticate the user.
357 $success = Platal
::session()->start(AUTH_MDP
);
359 // Subscribe the user to the services she did request at registration time.
360 foreach (explode(',', $services) as $service) {
363 Platal
::load('axletter', 'axletter.inc.php');
364 AXLetter
::subscribe($uid);
367 $storage = new EmailStorage($user, 'imap');
368 $storage->activate();
371 $r = XDB
::query('SELECT id FROM groups WHERE diminutif = {?}', $yearpromo);
373 $asso_id = $r->fetchOneCell();
374 XDB
::execute('INSERT IGNORE INTO group_members (uid, asso_id)
378 $mmlist = new MMList($user);
379 $mmlist->subscribe("promo" . $yearpromo);
380 } catch (Exception
$e) {
381 PlErrorReport
::report($e);
382 $page->trigError("L'inscription à la liste promo" . $yearpromo . " a échouée.");
387 require_once 'newsletter.inc.php';
388 NewsLetter
::subscribe($uid);
393 // Log the registration in the user session.
394 S
::logger($uid)->log('inscription', $email);
395 XDB
::execute("UPDATE register_pending
397 WHERE uid = {?}", $uid);
399 // Congratulate our newly registered user by email.
400 $mymail = new PlMailer('register/success.mail.tpl');
401 $mymail->addTo("\"{$user->fullName()}\" <{$user->forlifeEmail()}>");
403 $mymail->setSubject('Bienvenue parmi les X sur le web !');
405 $mymail->setSubject('Bienvenue sur Polytechnique.org !');
407 $mymail->assign('forlife', $forlife);
408 $mymail->assign('firstname', $firstname);
411 // Index the user, to allow her to appear in searches.
412 Profile
::rebuildSearchTokens($pid);
414 // Notify other users which were watching for her arrival.
415 XDB
::execute('INSERT INTO contacts (uid, contact)
418 WHERE ni_id = {?}', $uid);
419 XDB
::execute('DELETE FROM watch_nonins
420 WHERE ni_id = {?}', $uid);
421 Platal
::session()->updateNbNotifs();
423 // Forcibly register the new user on default forums.
424 $promoForum = 'xorg.promo.' . strtolower($promo);
425 $registeredForums = array('xorg.general', 'xorg.pa.divers', 'xorg.pa.logements', $promoForum);
426 foreach ($registeredForums as $forum) {
427 XDB
::execute("INSERT INTO forum_subs (fid, uid)
433 // Notify the newsgroup admin of the promotion forum needs be created.
434 if (XDB
::affectedRows() == 0 && $forum == $promoForum) {
435 $promoFull = new UserFilter(new UFC_Promo('=', UserFilter
::DISPLAY
, $promo));
436 $promoRegistered = new UserFilter(new PFC_And(
437 new UFC_Promo('=', UserFilter
::DISPLAY
, $promo),
438 new UFC_Registered(true
),
439 new PFC_Not(new UFC_Dead())
441 if ($promoRegistered->getTotalCount() > 0.2 * $promoFull->getTotalCount()) {
442 $mymail = new PlMailer('admin/forums-promo.mail.tpl');
443 $mymail->assign('promo', $promo);
449 // Update the global registration count stats.
450 $globals->updateNbIns();
453 // Update collateral data sources, and inform watchers by email.
456 // Email the referrer(s) of this new user.
457 $res = XDB
::iterRow("SELECT sender, GROUP_CONCAT(email SEPARATOR ', ') AS mails, MAX(last) AS lastDate
458 FROM register_marketing
461 ORDER BY lastDate DESC", $uid);
462 XDB
::execute("UPDATE register_mstats
464 WHERE uid = {?}", $uid);
467 while (list($senderid, $maketingEmails, $lastDate) = $res->next()) {
468 $sender = User
::getWithUID($senderid);
469 $market[] = " - par {$sender->fullName()} sur $maketingEmails (le plus récemment le $lastDate)";
470 $mymail = new PlMailer('register/marketer.mail.tpl');
471 $mymail->setSubject("$firstname $lastname s'est inscrit à Polytechnique.org !");
472 $mymail->addTo($sender);
473 $mymail->assign('sender', $sender);
474 $mymail->assign('firstname', $firstname);
475 $mymail->assign('lastname', $lastname);
476 $mymail->assign('promo', $promo);
477 $mymail->assign('sex', $sex);
478 $mymail->setTxtBody(wordwrap($msg, 72));
482 // Email the plat/al administrators about the registration.
483 if ($globals->register
->notif
) {
484 $mymail = new PlMailer('register/registration.mail.tpl');
485 $mymail->setSubject("Inscription de $firstname $lastname ($promo)");
486 $mymail->assign('firstname', $firstname);
487 $mymail->assign('lastname', $lastname);
488 $mymail->assign('promo', $promo);
489 $mymail->assign('sex', $sex);
490 $mymail->assign('birthdate', $birthdate);
491 $mymail->assign('birthdate_ref', $birthdate_ref);
492 $mymail->assign('forlife', $forlife);
493 $mymail->assign('email', $email);
494 $mymail->assign('logger', S
::logger());
495 if (count($market) > 0) {
496 $mymail->assign('market', implode("\n", $market));
498 $mymail->setTxtBody($msg);
502 // Remove old pending marketing requests for the new user.
503 Marketing
::clear($uid);
505 pl_redirect('profile/edit');
509 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8: