modules/register.php

   1 <?php
   2 /***************************************************************************
   3  *  Copyright (C) 2003-2006 Polytechnique.org                              *
   4  *  http://opensource.polytechnique.org/                                   *
   5  *                                                                         *
   6  *  This program is free software; you can redistribute it and/or modify   *
   7  *  it under the terms of the GNU General Public License as published by   *
   8  *  the Free Software Foundation; either version 2 of the License, or      *
   9  *  (at your option) any later version.                                    *
  10  *                                                                         *
  11  *  This program is distributed in the hope that it will be useful,        *
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
  14  *  GNU General Public License for more details.                           *
  15  *                                                                         *
  16  *  You should have received a copy of the GNU General Public License      *
  17  *  along with this program; if not, write to the Free Software            *
  18  *  Foundation, Inc.,                                                      *
  19  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
  20  ***************************************************************************/
  21
  22 class RegisterModule extends PLModule
  23 {
  24     function handlers()
  25     {
  26         return array(
  27             'register'         => $this->make_hook('register', AUTH_PUBLIC),
  28             'register/end'     => $this->make_hook('end',      AUTH_PUBLIC),
  29             'register/end.php' => $this->make_hook('end_old',  AUTH_PUBLIC),
  30             'register/success' => $this->make_hook('success',  AUTH_MDP),
  31         );
  32     }
  33
  34     function handler_register(&$page, $hash = null)
  35     {
  36         $sub_state = S::v('sub_state', Array());
  37         if (!isset($sub_state['step'])) {
  38             $sub_state['step'] = 0;
  39         }
  40         if (Get::has('back') && Get::i('back') < $sub_state['step']) {
  41             $sub_state['step'] = max(0,Get::i('back'));
  42         }
  43
  44         // Compatibility with old sources, keep it atm
  45         if (!$hash && Env::has('hash')) {
  46             $hash = Env::v('hash');
  47         }
  48
  49         if ($hash) {
  50             $res = XDB::query(
  51                     "SELECT  m.uid, u.promo, u.nom, u.prenom, u.matricule
  52                        FROM  register_marketing AS m
  53                  INNER JOIN  auth_user_md5      AS u ON u.user_id = m.uid
  54                       WHERE  m.hash={?}", $hash);
  55             if (list($uid, $promo, $nom, $prenom, $ourmat) = $res->fetchOneRow()) {
  56                 $sub_state['uid']    = $uid;
  57                 $sub_state['hash']   = $hash;
  58                 $sub_state['promo']  = $promo;
  59                 $sub_state['nom']    = $nom;
  60                 $sub_state['prenom'] = $prenom;
  61                 $sub_state['ourmat'] = $ourmat;
  62
  63                 XDB::execute(
  64                         "REPLACE INTO  register_mstats (uid,sender,success)
  65                                SELECT  m.uid, m.sender, 0
  66                                  FROM  register_marketing AS m
  67                                 WHERE  m.hash", $sub_state['hash']);
  68             }
  69         }
  70
  71         switch ($sub_state['step']) {
  72             case 0:
  73                 if (Post::has('step1')) {
  74                     $sub_state['step'] = 1;
  75                     if (isset($sub_state['hash'])) {
  76                         $sub_state['step'] = 3;
  77                         require_once('register.inc.php');
  78                         create_aliases($sub_state);
  79                     }
  80                 }
  81                 break;
  82
  83             case 1:
  84                 if (Post::has('promo')) {
  85                     $promo = Post::i('promo');
  86                     if ($promo < 1900 || $promo > date('Y')) {
  87                         $err = "La promotion saisie est incorrecte !";
  88                     } else {
  89                         $sub_state['step']  = 2;
  90                         $sub_state['promo'] = $promo;
  91                         if ($promo >= 1996 && $promo<2000) {
  92                             $sub_state['mat'] = ($promo % 100)*10 . '???';
  93                         } elseif($promo >= 2000) {
  94                             $sub_state['mat'] = 100 + ($promo % 100) . '???';
  95                         }
  96                     }
  97                 }
  98                 break;
  99
 100             case 2:
 101                 if (count($_POST)) {
 102                     require_once('register.inc.php');
 103                     $sub_state['prenom'] = Post::v('prenom');
 104                     $sub_state['nom']    = Post::v('nom');
 105                     $sub_state['mat']    = Post::v('mat');
 106                     $err = check_new_user($sub_state);
 107
 108                     if ($err !== true) { break; }
 109                     $err = create_aliases($sub_state);
 110                     if ($err === true) {
 111                         unset($err);
 112                         $sub_state['step'] = 3;
 113                     }
 114                 }
 115                 break;
 116
 117             case 3:
 118                 if (count($_POST)) {
 119                     require_once('register.inc.php');
 120                     if (!isvalid_email(Post::v('email'))) {
 121                         $err[] = "Le champ 'E-mail' n'est pas valide.";
 122                     } elseif (!isvalid_email_redirection(Post::v('email'))) {
 123                         $err[] = $sub_state['forlife']." doit renvoyer vers un email existant ".
 124                             "valide, en particulier, il ne peut pas être renvoyé vers lui-même.";
 125                     }
 126                     $birth = Env::v('naissance');
 127                     if (!preg_match('/^[0-3][0-9][01][0-9][12][90][0-9][0-9]$/', $birth)) {
 128                         $err[] = "La 'Date de naissance' n'est pas correcte.";
 129                     } else {
 130                         $year  = (int)substr($birth, 4, 4);
 131                         $promo = (int)$sub_state['promo'];
 132                         if ($year > $promo - 15 || $year < $promo - 30) {
 133                             $err[] = "La 'Date de naissance' n'est pas correcte.";
 134
 135                             require_once("diogenes/diogenes.hermes.inc.php");
 136                             $mailer = new HermesMailer();
 137                             $mailer->setFrom("webmaster@polytechnique.org");
 138                             $mailer->addTo("hotliners@polytechnique.org");
 139                             $mailer->setSubject("ERREUR LORS DE L'INSCRIPTION de "
 140                                    . $sub_state['prenom'] . ' ' . $sub_state['nom'] . '(' . $promo . ')');
 141                             $mailer->setTxtBody(
 142                                     "Date de naissance proposée $birth"
 143                                    . "\n\nIndentifiants :\n" . var_export($sub_state, true)
 144                                    . "\n\nInformations de connexion :\n" . var_export($_SERVER, true));
 145                             $mailer->send();
 146                         }
 147                     }
 148
 149                     if (isset($err)) {
 150                         $err = join('<br />', $err);
 151                     } else {
 152                         $sub_state['naissance'] = sprintf("%s-%s-%s",
 153                                                           substr($birth,4,4),
 154                                                           substr($birth,2,2),
 155                                                           substr($birth,0,2));
 156                         $sub_state['email']     = Post::v('email');
 157                         $sub_state['step']      = 4;
 158                         finish_ins($sub_state);
 159                     }
 160                 }
 161                 break;
 162         }
 163
 164         $_SESSION['sub_state'] = $sub_state;
 165         $page->changeTpl('register/step'.intval($sub_state['step']).'.tpl', SIMPLE);
 166         if (isset($err)) {
 167             $page->trig($err);
 168         }
 169     }
 170
 171     function handler_end_old(&$page)
 172     {
 173         return $this->handler_end($page, Env::v('hash'));
 174     }
 175
 176     function handler_end(&$page, $hash = null)
 177     {
 178         global $globals;
 179
 180         $page->changeTpl('register/end.tpl');
 181
 182         require_once('user.func.inc.php');
 183
 184         if ($hash) {
 185             $res = XDB::query(
 186                     "SELECT  r.uid, r.forlife, r.bestalias, r.mailorg2,
 187                              r.password, r.email, r.naissance, u.nom, u.prenom,
 188                              u.promo, u.flags
 189                        FROM  register_pending AS r
 190                  INNER JOIN  auth_user_md5    AS u ON r.uid = u.user_id
 191                       WHERE  hash={?} AND hash!='INSCRIT'", $hash);
 192         }
 193
 194         if (!$hash || !list($uid, $forlife, $bestalias, $mailorg2, $password, $email,
 195                             $naissance, $nom, $prenom, $promo, $femme) = $res->fetchOneRow())
 196         {
 197             $page->kill("<p>Cette adresse n'existe pas, ou plus, sur le serveur.</p>
 198                          <p>Causes probables :</p>
 199                          <ol>
 200                            <li>Vérifie que tu visites l'adresse du dernier
 201                                e-mail reçu s'il y en a eu plusieurs.</li>
 202                            <li>Tu as peut-être mal copié l'adresse reçue par
 203                                mail, vérifie-la à la main.</li>
 204                            <li>Tu as peut-être attendu trop longtemps pour
 205                                confirmer.  Les pré-inscriptions sont annulées
 206                                tous les 30 jours.</li>
 207                            <li>Tu es en fait déjà inscrit.</li>
 208                         </ol>");
 209         }
 210
 211
 212
 213         /***********************************************************/
 214         /****************** REALLY CREATE ACCOUNT ******************/
 215         /***********************************************************/
 216
 217         XDB::execute('UPDATE  auth_user_md5
 218                                    SET  password={?}, perms="user",
 219                                         date=NOW(), naissance={?}, date_ins = NOW()
 220                                  WHERE  user_id={?}', $password, $naissance, $uid);
 221         XDB::execute('REPLACE INTO auth_user_quick (user_id) VALUES ({?})', $uid);
 222         XDB::execute('INSERT INTO aliases (id,alias,type)
 223                                      VALUES ({?}, {?}, "a_vie")', $uid,
 224                                      $forlife);
 225         XDB::execute('INSERT INTO aliases (id,alias,type,flags)
 226                                      VALUES ({?}, {?}, "alias", "bestalias")',
 227                                      $uid, $bestalias);
 228         if ($mailorg2) {
 229             XDB::execute('INSERT INTO aliases (id,alias,type)
 230                                          VALUES ({?}, {?}, "alias")', $uid,
 231                                          $mailorg2);
 232         }
 233
 234         require_once('emails.inc.php');
 235         $redirect = new Redirect($uid);
 236         $redirect->add_email($email);
 237
 238         // on cree un objet logger et on log l'inscription
 239         $logger = new DiogenesCoreLogger($uid);
 240         $logger->log('inscription', $email);
 241
 242         XDB::execute('UPDATE register_pending SET hash="INSCRIT" WHERE uid={?}', $uid);
 243
 244         $globals->hook->subscribe($forlife, $uid, $promo, $password);
 245
 246         require_once('xorg.mailer.inc.php');
 247         $mymail = new XOrgMailer('register/inscription.reussie.tpl');
 248         $mymail->assign('forlife', $forlife);
 249         $mymail->assign('prenom', $prenom);
 250         $mymail->send();
 251
 252         start_connexion($uid,false);
 253         $_SESSION['auth'] = AUTH_MDP;
 254
 255         /***********************************************************/
 256         /************* envoi d'un mail au démarcheur ***************/
 257         /***********************************************************/
 258         $res = XDB::iterRow(
 259                 "SELECT  DISTINCT sa.alias, IF(s.nom_usage,s.nom_usage,s.nom) AS nom,
 260                          s.prenom, s.flags AS femme
 261                    FROM  register_marketing AS m
 262              INNER JOIN  auth_user_md5      AS s  ON ( m.sender = s.user_id )
 263              INNER JOIN  aliases            AS sa ON ( sa.id = m.sender
 264                                                        AND FIND_IN_SET('bestalias', sa.flags) )
 265                   WHERE  m.uid = {?}", $uid);
 266         XDB::execute("UPDATE register_mstats SET success=NOW() WHERE uid={?}", $uid);
 267
 268         while (list($salias, $snom, $sprenom, $sfemme) = $res->next()) {
 269             require_once('diogenes/diogenes.hermes.inc.php');
 270             $mymail = new HermesMailer();
 271             $mymail->setSubject("$prenom $nom s'est inscrit à Polytechnique.org !");
 272             $mymail->setFrom('"Marketing Polytechnique.org" <register@polytechnique.org>');
 273             $mymail->addTo("\"$sprenom $snom\" <$salias@{$globals->mail->domain}>");
 274             $msg = ($sfemme?'Cher':'Chère')." $sprenom,\n\n"
 275                  . "Nous t'écrivons pour t'informer que {$prenom} {$nom} (X{$promo}), "
 276                  . "que tu avais incité".($femme?'e':'')." à s'inscrire à Polytechnique.org, "
 277                  . "vient à l'instant de terminer son inscription.\n\n"
 278                  . "Merci de ta participation active à la reconnaissance de ce site !!!\n\n"
 279                  . "Bien cordialement,\n"
 280                  . "L'équipe Polytechnique.org";
 281             $mymail->setTxtBody(wordwrap($msg, 72));
 282             $mymail->send();
 283         }
 284
 285         XDB::execute("DELETE FROM register_marketing WHERE uid = {?}", $uid);
 286
 287         pl_redirect('register/success');
 288         $page->assign('uid', $uid);
 289     }
 290
 291     function handler_success(&$page)
 292     {
 293         $page->changeTpl('register/success.tpl');
 294
 295         if (Env::has('response2'))  {
 296             $_SESSION['password'] = $password = Post::v('response2');
 297
 298             XDB::execute('UPDATE auth_user_md5 SET password={?}
 299                                      WHERE user_id={?}', $password,
 300                                    S::v('uid'));
 301
 302             $log =& S::v('log');
 303             $log->log('passwd', '');
 304
 305             if (Cookie::v('ORGaccess')) {
 306                 require_once('secure_hash.inc.php');
 307                 setcookie('ORGaccess', hash_encrypt($password), (time()+25920000), '/', '' ,0);
 308             }
 309
 310             $page->assign('mdpok', true);
 311         }
 312
 313         $page->addJsLink('javascript/motdepasse.js');
 314     }
 315 }
 316
 317 ?>