X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;f=modules%2Fregister.php;h=59af771ffaf3a9b3832e38f2c5fd009b70e5939f;hb=af744c2d5f4ddf83b738b9cb390926eaca4cf7c3;hp=98f1daf5b15b41a30ac22717a4ab5e481b40ee41;hpb=842706532d5214d69a31086d78de90fff35d8153;p=platal.git diff --git a/modules/register.php b/modules/register.php index 98f1daf..59af771 100644 --- a/modules/register.php +++ b/modules/register.php @@ -1,6 +1,6 @@ buildCache(); if (Post::has('step1')) { $sub_state['step'] = 1; if (isset($sub_state['hash'])) { $sub_state['step'] = 3; - require_once(dirname(__FILE__) . '/register/register.inc.php'); + $this->load('register.inc.php'); create_aliases($sub_state); } } @@ -119,7 +119,7 @@ class RegisterModule extends PLModule case 2: if (count($_POST)) { - require_once(dirname(__FILE__) . '/register/register.inc.php'); + $this->load('register.inc.php'); $sub_state['prenom'] = Post::v('prenom'); $sub_state['nom'] = Post::v('nom'); $sub_state['mat'] = Post::v('mat'); @@ -136,7 +136,8 @@ class RegisterModule extends PLModule case 3: if (count($_POST)) { - require_once(dirname(__FILE__) . '/register/register.inc.php'); + $this->load('register.inc.php'); + require_once 'emails.inc.php'; if (!isvalid_email(Post::v('email'))) { $err[] = "Le champ 'E-mail' n'est pas valide."; } elseif (!isvalid_email_redirection(Post::v('email'))) { @@ -161,23 +162,21 @@ class RegisterModule extends PLModule } // Check if the given email is known as dangerous - $res = Xdb::iterRow("SELECT w.state, w.description, a.alias - FROM emails AS e - INNER JOIN emails_watch AS w ON (e.email = w.email AND w.state != 'safe') - INNER JOIN aliases AS a ON (e.uid = a.id AND a.type = 'a_vie') - WHERE e.email = {?} - ORDER BY a.alias", Post::v('email')); - $aliases = array(); - while(list($gstate, $gdescription, $alias) = $res->next()) { - $state = $gstate; - $description = $gdescription; - $aliases[] = $alias; - } - if (count($aliases) != 0) { + $res = XDB::query("SELECT w.state, w.description + FROM emails_watch AS w + WHERE w.email = {?} AND w.state != 'safe'", + Post::v('email')); + $email_banned = false; + if ($res->numRows()) { + list($state, $description) = $res->fetchOneRow(); $alert .= "Email surveille propose a l'inscription - "; + $sub_state['email_desc'] = $description; + if ($state == 'dangerous') { + $email_banned = true; + } } if ($sub_state['watch']) { - $alter .= "Inscription d'un utilisateur surveillé - "; + $alert .= "Inscription d'un utilisateur surveillé - "; } if (check_ip('unsafe')) { @@ -193,12 +192,16 @@ class RegisterModule extends PLModule $alert .= "Date de naissance incorrecte à l'inscription - "; } $sub_state['email'] = Post::v('email'); - if (check_ip('unsafe')) { + $ip_banned = check_ip('unsafe'); + if ($ip_banned) { + $alert .= "Tentative d'inscription depuis une IP surveillee"; + } + if ($email_banned || $ip_banned) { + global $globals; $err = "Une erreur s'est produite lors de l'inscription." . " Merci de contacter = 3) { @@ -212,12 +215,12 @@ class RegisterModule extends PLModule } $_SESSION['sub_state'] = $sub_state; - if ($alert) { + if (!empty($alert)) { send_warning_mail($alert); } $page->changeTpl('register/step'.intval($sub_state['step']).'.tpl'); if (isset($err)) { - $page->trig($err); + $page->trigError($err); } } @@ -294,33 +297,54 @@ class RegisterModule extends PLModule } require_once('emails.inc.php'); - $redirect = new Redirect($uid); + $user = User::getSilent($uid); + $redirect = new Redirect($user); $redirect->add_email($email); // on cree un objet logger et on log l'inscription - $logger = new CoreLogger($uid); - $logger->log('inscription', $email); - + S::logger($uid)->log('inscription', $email); XDB::execute('UPDATE register_pending SET hash="INSCRIT" WHERE uid={?}', $uid); - global $platal; - $platal->on_subscribe($forlife, $uid, $promo, $password); $mymail = new PlMailer('register/inscription.reussie.tpl'); $mymail->assign('forlife', $forlife); $mymail->assign('prenom', $prenom); $mymail->send(); + // Enable search on the user require_once('user.func.inc.php'); user_reindex($uid); + // Add notification for people looking for this registration + require_once 'notifs.inc.php'; + register_watch_op($uid, WATCH_INSCR); + inscription_notifs_base($uid); + + // Default registration on forums + $p_for = 'xorg.promo.x' . $promo; + $cible = array('xorg.general', 'xorg.pa.divers', 'xorg.pa.logements', $p_for); + foreach ($cible as $val) { + XDB::execute("INSERT INTO forums.abos (fid,uid) + SELECT fid, {?} FROM forums.list WHERE nom={?}", $uid, $val); + if (XDB::affectedRows() == 0 && $val == $p_for) { + $res = XDB::query("SELECT SUM(perms IN ('admin','user') AND deces = 0), COUNT(*) + FROM auth_user_md5 + WHERE promo = {?}", $promo); + list($effau, $effid) = $res->fetchOneRow(); + if (5 * $effau > $effid) { // + + $mymail = new PlMailer('admin/forums-promo.mail.tpl'); + $mymail->assign('promo', $promo); + $mymail->send(); + } + } + } + // update number of subscribers (perms has changed) - update_NbIns(); + $globals->updateNbIns(); - if (!start_connexion($uid, false)) { + if (!Platal::session()->startWeakSession($uid)) { return PL_FORBIDDEN; } - $_SESSION['auth'] = AUTH_MDP; /***********************************************************/ /************* envoi d'un mail au démarcheur ***************/ @@ -328,18 +352,19 @@ class RegisterModule extends PLModule $res = XDB::iterRow( "SELECT sa.alias, IF(s.nom_usage,s.nom_usage,s.nom) AS nom, s.prenom, FIND_IN_SET('femme', s.flags) AS femme, - GROUP_CONCAT(m.email) AS mails + GROUP_CONCAT(m.email) AS mails, MAX(m.last) AS dateDernier FROM register_marketing AS m INNER JOIN auth_user_md5 AS s ON ( m.sender = s.user_id ) INNER JOIN aliases AS sa ON ( sa.id = m.sender AND FIND_IN_SET('bestalias', sa.flags) ) WHERE m.uid = {?} - GROUP BY m.sender", $uid); + GROUP BY m.sender + ORDER BY dateDernier DESC", $uid); XDB::execute("UPDATE register_mstats SET success=NOW() WHERE uid={?}", $uid); $market = array(); - while (list($salias, $snom, $sprenom, $sfemme, $mails) = $res->next()) { - $market[] = " - par $snom $sprenom sur $mails"; + while (list($salias, $snom, $sprenom, $sfemme, $mails, $dateDernier) = $res->next()) { + $market[] = " - par $snom $sprenom sur $mails (le plus récemment le $dateDernier)"; $mymail = new PlMailer(); $mymail->setSubject("$prenom $nom s'est inscrit à Polytechnique.org !"); $mymail->setFrom('"Marketing Polytechnique.org" mail->domain . '>'); @@ -361,6 +386,7 @@ class RegisterModule extends PLModule $mymail->setSubject("Inscription de $prenom $nom (X$promo)"); $mymail->setFrom('"Webmaster Polytechnique.org" mail->domain . '>'); $mymail->addTo($globals->register->notif); + $mymail->addHeader('Reply-To', $globals->register->notif); $msg = "$prenom $nom (X$promo) a terminé son inscription avec les données suivantes :\n" . " - nom : $nom\n" . " - prenom : $prenom\n" @@ -369,11 +395,15 @@ class RegisterModule extends PLModule . " - forlife : $forlife\n" . " - email : $email\n" . " - sexe : $femme\n" - . " - ip : {$logger->ip} ({$logger->host})\n" - . ($logger->proxy_ip ? " - proxy : {$logger->proxy_ip} ({$logger->proxy_host})\n" : "") - . "\n\n" - . "Les marketings suivants avaient été effectués :\n" - . implode("\n", $market); + . " - ip : " . S::logger()->ip . " (" . S::logger()->host . ")\n" + . (S::logger()->proxy_ip ? " - proxy : " . S::logger()->proxy_ip . " (" . S::logger()->proxy_host . ")\n" : "") + . "\n\n"; + if (count($market) > 0) { + $msg .= "Les marketings suivants avaient été effectués :\n" + . implode("\n", $market); + } else { + $msg .= "$prenom $nom n'a jamais reçu d'email de marketing."; + } $mymail->setTxtBody($msg); $mymail->send(); } @@ -388,6 +418,7 @@ class RegisterModule extends PLModule { global $globals; $page->changeTpl('register/success.tpl'); + $page->assign('user', S::user()); $_SESSION['sub_state'] = array('step' => 5); if (Env::has('response2')) { @@ -398,23 +429,18 @@ class RegisterModule extends PLModule S::v('uid')); // If GoogleApps is enabled, and the user did choose to use synchronized passwords, - // and if the (stupid) user has decided to user /register/success another time, + // and if the (stupid) user has decided to use /register/success another time, // updates the Google Apps password as well. if ($globals->mailstorage->googleapps_domain) { require_once 'googleapps.inc.php'; - $account = new GoogleAppsAccount(S::v('uid'), S::v('forlife')); - if ($account->g_status == 'active' && $account->sync_password) { + $account = new GoogleAppsAccount(S::user()); + if ($account->active() && $account->sync_password) { $account->set_password($password); } } - $log = S::v('log'); - $log->log('passwd', ''); - - if (Cookie::v('ORGaccess')) { - require_once('secure_hash.inc.php'); - setcookie('ORGaccess', hash_encrypt($password), (time()+25920000), '/', '' ,0); - } + S::logger()->log('passwd'); + Platal::session()->setAccessCookie(true); $page->assign('mdpok', true); } @@ -455,7 +481,7 @@ class RegisterModule extends PLModule NewsLetter::subscribe(); } if (Post::v('add_to_ax')) { - require_once dirname(__FILE__) . '/axletter/axletter.inc.php'; + Platal::load('axletter', 'axletter.inc.php'); AXLetter::subscribe(); } if (Post::v('add_to_promo')) { @@ -482,8 +508,9 @@ class RegisterModule extends PLModule } if (Post::v('imap')) { require_once 'emails.inc.php'; - $storage = new MailStorageIMAP(S::v('uid')); - $storage->enable(); + $user = S::user(); + $storage = new EmailStorage($user, 'imap'); + $storage->activate(); } pl_redirect('profile/edit');