= 3) {
- $alert .= "Fin d'une inscription hésitante";
+ $subState->set('step', 4);
+ if ($subState->v('backs')->count() >= 3) {
+ $alert[] = "Fin d'une inscription hésitante";
+ $alert_details .= "\n * Nombre de retours en arrière : " . $subState->v('backs')->count();
}
- finish_ins($sub_state);
+ finishRegistration($subState);
}
}
}
break;
}
- $_SESSION['sub_state'] = $sub_state;
- if (!empty($alert)) {
- send_warning_mail($alert);
+ $_SESSION['subState'] = $subState->dict();
+ if (count($alert)) {
+ $alert_details = "Détails des alertes :" . $alert_details . "\n\n";
+ $alert_details .= 'Compte concerné : ' . $subState->s('forlife') . ' (redirection vers : '
+ . ($subState->s('email') == '' ? Post::t('email') : $subState->s('email')). ")\n\n\n";
+ send_warning_mail(implode(' - ', $alert), $alert_details);
}
- $page->changeTpl('register/step'.intval($sub_state['step']).'.tpl');
- if (isset($err)) {
- $page->trigError($err);
- }
- }
- function handler_end_old(&$page)
- {
- return $this->handler_end($page, Env::v('hash'));
+ $page->changeTpl('register/step' . $subState->i('step') . '.tpl');
+ if (isset($error)) {
+ $page->trigError($error);
+ }
}
- function handler_end(&$page, $hash = null)
+ function handler_end($page, $hash = null)
{
global $globals;
+ $_SESSION['subState'] = array('step' => 5);
-
- $page->changeTpl('register/end.tpl');
- $_SESSION['sub_state'] = array('step' => 5);
-
+ // Reject registration requests from unsafe IP addresses (and remove the
+ // registration information from the database, to prevent IP changes).
if (check_ip('unsafe')) {
- send_warning_mail('Une IP surveillée a tenté de finaliser son inscription');
- XDB::execute('DELETE FROM register_pending
- WHERE hash = {?} AND hash != \'INSCRIT\'', $hash);
+ send_warning_mail('Une IP surveillée a tenté de finaliser son inscription.');
+ XDB::execute("DELETE FROM register_pending
+ WHERE hash = {?} AND hash != 'INSCRIT'", $hash);
return PL_FORBIDDEN;
}
- require_once('user.func.inc.php');
-
- if ($hash) {
- $res = XDB::query(
- "SELECT r.uid, r.forlife, r.bestalias, r.mailorg2,
- r.password, r.email, r.naissance, u.nom, u.prenom,
- u.promo, FIND_IN_SET('femme', u.flags), u.naissance_ini
- FROM register_pending AS r
- INNER JOIN auth_user_md5 AS u ON r.uid = u.user_id
- WHERE hash={?} AND hash!='INSCRIT'", $hash);
- }
-
- if (!$hash || !list($uid, $forlife, $bestalias, $mailorg2, $password, $email,
- $naissance, $nom, $prenom, $promo, $femme, $naiss_ini) = $res->fetchOneRow())
- {
+ // Retrieve the pre-registration information using the url-provided
+ // authentication token.
+ $res = XDB::query("SELECT r.uid, p.pid, r.forlife, r.bestalias, r.mailorg2,
+ r.password, r.email, r.services, r.naissance,
+ ppn.lastname_initial, ppn.firstname_initial, pe.promo_year,
+ pd.promo, p.sex, p.birthdate_ref, a.type, a.email AS old_account_email
+ FROM register_pending AS r
+ INNER JOIN accounts AS a ON (r.uid = a.uid)
+ INNER JOIN account_profiles AS ap ON (a.uid = ap.uid AND FIND_IN_SET('owner', ap.perms))
+ INNER JOIN profiles AS p ON (p.pid = ap.pid)
+ INNER JOIN profile_public_names AS ppn ON (ppn.pid = p.pid)
+ INNER JOIN profile_display AS pd ON (p.pid = pd.pid)
+ INNER JOIN profile_education AS pe ON (pe.pid = p.pid AND FIND_IN_SET('primary', pe.flags))
+ WHERE hash = {?} AND hash != 'INSCRIT' AND a.state = 'pending'",
+ $hash);
+ if (!$hash || $res->numRows() == 0) {
$page->kill("Cette adresse n'existe pas, ou plus, sur le serveur.
- Causes probables :
+ Causes probables :
- Vérifie que tu visites l'adresse du dernier
- e-mail reçu s'il y en a eu plusieurs.
+ email reçu s'il y en a eu plusieurs.
- Tu as peut-être mal copié l'adresse reçue par
- mail, vérifie-la à la main.
+ email, vérifie-la à la main.
- Tu as peut-être attendu trop longtemps pour
- confirmer. Les pré-inscriptions sont annulées
+ confirmer. Les pré-inscriptions sont annulées
tous les 30 jours.
- Tu es en fait déjà inscrit.
");
}
+ list($uid, $pid, $forlife, $bestalias, $emailXorg2, $password, $email, $services,
+ $birthdate, $lastname, $firstname, $yearpromo, $promo, $sex, $birthdate_ref, $type, $old_account_email) = $res->fetchOneRow();
+ $isX = ($type == 'x');
+ $mail_domain = User::$sub_mail_domains[$type] . $globals->mail->domain;
+ // Prepare the template for display.
+ $page->changeTpl('register/end.tpl');
+ $page->assign('forlife', $forlife);
+ $page->assign('firstname', $firstname);
+
+ // Check if the user did enter a valid password; if not (or if none is found),
+ // get her an information page.
+ if (Post::has('response')) {
+ $expected_response = sha1("$forlife:$password:" . S::v('challenge'));
+ if (Post::v('response') != $expected_response) {
+ $page->trigError("Mot de passe invalide.");
+ S::logger($uid)->log('auth_fail', 'bad password (register/end)');
+ return;
+ }
+ } else {
+ return;
+ }
- /***********************************************************/
- /****************** REALLY CREATE ACCOUNT ******************/
- /***********************************************************/
-
- XDB::execute('UPDATE auth_user_md5
- SET password={?}, perms="user",
- date=NOW(), naissance={?}, date_ins = NOW()
- WHERE user_id={?}', $password, $naissance, $uid);
- XDB::execute('REPLACE INTO auth_user_quick (user_id) VALUES ({?})', $uid);
- XDB::execute('INSERT INTO aliases (id,alias,type)
- VALUES ({?}, {?}, "a_vie")', $uid,
- $forlife);
- XDB::execute('INSERT INTO aliases (id,alias,type,flags)
- VALUES ({?}, {?}, "alias", "bestalias")',
- $uid, $bestalias);
- if ($mailorg2) {
- XDB::execute('INSERT INTO aliases (id,alias,type)
- VALUES ({?}, {?}, "alias")', $uid,
- $mailorg2);
+ //
+ // Create the user account.
+ //
+ XDB::startTransaction();
+ XDB::execute("UPDATE accounts
+ SET password = {?}, state = 'active',
+ registration_date = NOW(), email = NULL
+ WHERE uid = {?}", $password, $uid);
+ XDB::execute("UPDATE profiles
+ SET birthdate = {?}, last_change = NOW()
+ WHERE pid = {?}", $birthdate, $pid);
+ XDB::execute('INSERT INTO email_source_account (email, uid, type, flags, domain)
+ SELECT {?}, {?}, \'forlife\', \'\', id
+ FROM email_virtual_domains
+ WHERE name = {?}',
+ $forlife, $uid, $mail_domain);
+ XDB::execute('INSERT INTO email_source_account (email, uid, type, flags, domain)
+ SELECT {?}, {?}, \'alias\', \'bestalias\', id
+ FROM email_virtual_domains
+ WHERE name = {?}',
+ $bestalias, $uid, $mail_domain);
+ if ($emailXorg2) {
+ XDB::execute('INSERT INTO email_source_account (email, uid, type, flags, domain)
+ SELECT {?}, {?}, \'alias\', \'\', id
+ FROM email_virtual_domains
+ WHERE name = {?}',
+ $emailXorg2, $uid, $mail_domain);
}
+ XDB::commit();
- require_once('emails.inc.php');
- $user = User::getSilent($uid);
+ // Add the registration email address as first and only redirection.
+ require_once 'emails.inc.php';
+ $user = User::getSilentWithUID($uid);
$redirect = new Redirect($user);
$redirect->add_email($email);
+ fix_bestalias($user);
+
+ // If the user was registered to some aliases and MLs, we must change
+ // the subscription to her forlife email.
+ if ($old_account_email) {
+ $listClient = new MMList($user);
+ $listClient->change_user_email($old_account_email, $user->forlifeEmail());
+ update_alias_user($old_account_email, $user->forlifeEmail());
+ }
- // on cree un objet logger et on log l'inscription
- S::logger($uid)->log('inscription', $email);
- XDB::execute('UPDATE register_pending SET hash="INSCRIT" WHERE uid={?}', $uid);
-
+ // Try to start a session (so the user don't have to log in); we will use
+ // the password available in Post:: to authenticate the user.
+ Platal::session()->start(AUTH_PASSWD);
+
+ // Subscribe the user to the services she did request at registration time.
+ require_once 'newsletter.inc.php';
+ foreach (explode(',', $services) as $service) {
+ switch ($service) {
+ case 'ax_letter':
+ NewsLetter::forGroup(NewsLetter::GROUP_AX)->subscribe($user);
+ break;
+ case 'nl':
+ NewsLetter::forGroup(NewsLetter::GROUP_XORG)->subscribe($user);
+ break;
+ case 'imap':
+ Email::activate_storage($user, 'imap', Bogo::IMAP_DEFAULT);
+ break;
+ case 'ml_promo':
+ if ($isX) {
+ $r = XDB::query('SELECT id FROM groups WHERE diminutif = {?}', $yearpromo);
+ if ($r->numRows()) {
+ $asso_id = $r->fetchOneCell();
+ XDB::execute('INSERT IGNORE INTO group_members (uid, asso_id)
+ VALUES ({?}, {?})',
+ $uid, $asso_id);
+ try {
+ $mmlist = new MMList($user);
+ $mmlist->subscribe("promo" . $yearpromo);
+ } catch (Exception $e) {
+ PlErrorReport::report($e);
+ $page->trigError("L'inscription à la liste promo" . $yearpromo . " a échouée.");
+ }
+ }
+ }
+ break;
+ }
+ }
- $mymail = new PlMailer('register/inscription.reussie.tpl');
+ // Log the registration in the user session.
+ S::logger($uid)->log('inscription', $email);
+ XDB::execute("UPDATE register_pending
+ SET hash = 'INSCRIT'
+ WHERE uid = {?}", $uid);
+
+ // Congratulate our newly registered user by email.
+ $mymail = new PlMailer('register/success.mail.tpl');
+ $mymail->addTo("\"{$user->fullName()}\" <{$user->forlifeEmail()}>");
+ if ($isX) {
+ $mymail->setSubject('Bienvenue parmi les X sur le web !');
+ } else {
+ $mymail->setSubject('Bienvenue sur Polytechnique.org !');
+ }
$mymail->assign('forlife', $forlife);
- $mymail->assign('prenom', $prenom);
+ $mymail->assign('firstname', $firstname);
$mymail->send();
- // Enable search on the user
- require_once('user.func.inc.php');
- user_reindex($uid);
-
- // Add notification for people looking for this registration
- require_once 'notifs.inc.php';
- register_watch_op($uid, WATCH_INSCR);
- inscription_notifs_base($uid);
-
- // Default registration on forums
- $p_for = 'xorg.promo.x' . $promo;
- $cible = array('xorg.general', 'xorg.pa.divers', 'xorg.pa.logements', $p_for);
- foreach ($cible as $val) {
- XDB::execute("INSERT INTO forums.abos (fid,uid)
- SELECT fid, {?} FROM forums.list WHERE nom={?}", $uid, $val);
- if (XDB::affectedRows() == 0 && $val == $p_for) {
- $res = XDB::query("SELECT SUM(perms IN ('admin','user') AND deces = 0), COUNT(*)
- FROM auth_user_md5
- WHERE promo = {?}", $promo);
- list($effau, $effid) = $res->fetchOneRow();
- if (5 * $effau > $effid) { // +
+ // Index the user, to allow her to appear in searches.
+ Profile::rebuildSearchTokens($pid);
+
+ // Notify other users which were watching for her arrival.
+ XDB::execute('INSERT INTO contacts (uid, contact)
+ SELECT uid, {?}
+ FROM watch_nonins
+ WHERE ni_id = {?}', $pid, $uid);
+ XDB::execute('DELETE FROM watch_nonins
+ WHERE ni_id = {?}', $uid);
+ Platal::session()->updateNbNotifs();
+
+ // Forcibly register the new user on default forums.
+ $registeredForums = array('xorg.general', 'xorg.pa.divers', 'xorg.pa.logements');
+
+ if ($isX) {
+ $promoForum = 'xorg.promo.' . strtolower($promo);
+ $exists = XDB::fetchOneCell('SELECT COUNT(*)
+ FROM forums
+ WHERE name = {?}',
+ $promoForum);
+
+ if ($exists == 0) {
+ // Notify the newsgroup admin of the promotion forum needs be created.
+ $promoFull = new UserFilter(new UFC_Promo('=', UserFilter::DISPLAY, $promo));
+ $promoRegistered = new UserFilter(new PFC_And(
+ new UFC_Promo('=', UserFilter::DISPLAY, $promo),
+ new UFC_Registered(true),
+ new PFC_Not(new UFC_Dead())
+ ));
+ if ($promoRegistered->getTotalCount() > 0.2 * $promoFull->getTotalCount()) {
$mymail = new PlMailer('admin/forums-promo.mail.tpl');
$mymail->assign('promo', $promo);
$mymail->send();
}
+ } else {
+ $registeredForums[] = $promoForum;
}
}
- // update number of subscribers (perms has changed)
+ foreach ($registeredForums as $forum) {
+ XDB::execute("INSERT INTO forum_subs (fid, uid)
+ SELECT fid, {?}
+ FROM forums
+ WHERE name = {?}",
+ $uid, $val);
+ }
+
+ // Update the global registration count stats.
$globals->updateNbIns();
- if (!start_connexion($uid, false)) {
- return PL_FORBIDDEN;
- }
- $_SESSION['auth'] = AUTH_MDP;
-
- /***********************************************************/
- /************* envoi d'un mail au démarcheur ***************/
- /***********************************************************/
- $res = XDB::iterRow(
- "SELECT sa.alias, IF(s.nom_usage,s.nom_usage,s.nom) AS nom,
- s.prenom, FIND_IN_SET('femme', s.flags) AS femme,
- GROUP_CONCAT(m.email) AS mails, MAX(m.last) AS dateDernier
- FROM register_marketing AS m
- INNER JOIN auth_user_md5 AS s ON ( m.sender = s.user_id )
- INNER JOIN aliases AS sa ON ( sa.id = m.sender
- AND FIND_IN_SET('bestalias', sa.flags) )
- WHERE m.uid = {?}
- GROUP BY m.sender
- ORDER BY dateDernier DESC", $uid);
- XDB::execute("UPDATE register_mstats SET success=NOW() WHERE uid={?}", $uid);
+ //
+ // Update collateral data sources, and inform watchers by email.
+ //
+
+ // Email the referrer(s) of this new user.
+ $res = XDB::iterRow("SELECT sender, GROUP_CONCAT(email SEPARATOR ', ') AS mails, MAX(last) AS lastDate
+ FROM register_marketing
+ WHERE uid = {?}
+ GROUP BY sender
+ ORDER BY lastDate DESC", $uid);
+ XDB::execute("UPDATE register_mstats
+ SET success = NOW()
+ WHERE uid = {?}", $uid);
$market = array();
- while (list($salias, $snom, $sprenom, $sfemme, $mails, $dateDernier) = $res->next()) {
- $market[] = " - par $snom $sprenom sur $mails (le plus récemment le $dateDernier)";
- $mymail = new PlMailer();
- $mymail->setSubject("$prenom $nom s'est inscrit à Polytechnique.org !");
- $mymail->setFrom('"Marketing Polytechnique.org" mail->domain . '>');
- $mymail->addTo("\"$sprenom $snom\" <$salias@{$globals->mail->domain}>");
- $msg = ($sfemme?'Chère':'Cher')." $sprenom,\n\n"
- . "Nous t'écrivons pour t'informer que $prenom $nom (X$promo), "
- . "que tu avais incité".($femme?'e':'')." à s'inscrire à Polytechnique.org, "
- . "vient à l'instant de terminer son inscription.\n\n"
- . "Merci de ta participation active à la reconnaissance de ce site !!!\n\n"
- . "Bien cordialement,\n"
- . "L'équipe Polytechnique.org";
+ while (list($senderid, $maketingEmails, $lastDate) = $res->next()) {
+ $sender = User::getWithUID($senderid);
+ $market[] = " - par {$sender->fullName()} sur $maketingEmails (le plus récemment le $lastDate)";
+ $mymail = new PlMailer('register/marketer.mail.tpl');
+ $mymail->setSubject("$firstname $lastname s'est inscrit à Polytechnique.org !");
+ $mymail->setTo($sender);
+ $mymail->assign('sender', $sender);
+ $mymail->assign('firstname', $firstname);
+ $mymail->assign('lastname', $lastname);
+ $mymail->assign('promo', $promo);
+ $mymail->assign('sex', $sex);
$mymail->setTxtBody(wordwrap($msg, 72));
$mymail->send();
}
- /**** send a mail to X.org administrators ****/
+ // Email the plat/al administrators about the registration.
if ($globals->register->notif) {
- $mymail = new PlMailer();
- $mymail->setSubject("Inscription de $prenom $nom (X$promo)");
- $mymail->setFrom('"Webmaster Polytechnique.org" mail->domain . '>');
- $mymail->addTo($globals->register->notif);
- $mymail->addHeader('Reply-To', $globals->register->notif);
- $msg = "$prenom $nom (X$promo) a terminé son inscription avec les données suivantes :\n"
- . " - nom : $nom\n"
- . " - prenom : $prenom\n"
- . " - promo : $promo\n"
- . " - naissance : $naissance (date connue : $naiss_ini)\n"
- . " - forlife : $forlife\n"
- . " - email : $email\n"
- . " - sexe : $femme\n"
- . " - ip : {$logger->ip} ({$logger->host})\n"
- . ($logger->proxy_ip ? " - proxy : {$logger->proxy_ip} ({$logger->proxy_host})\n" : "")
- . "\n\n";
+ $mymail = new PlMailer('register/registration.mail.tpl');
+ $mymail->setSubject("Inscription de $firstname $lastname ($promo)");
+ $mymail->assign('firstname', $firstname);
+ $mymail->assign('lastname', $lastname);
+ $mymail->assign('promo', $promo);
+ $mymail->assign('sex', $sex);
+ $mymail->assign('birthdate', $birthdate);
+ $mymail->assign('birthdate_ref', $birthdate_ref);
+ $mymail->assign('forlife', $forlife);
+ $mymail->assign('email', $email);
+ $mymail->assign('logger', S::logger());
if (count($market) > 0) {
- $msg .= "Les marketings suivants avaient été effectués :\n"
- . implode("\n", $market);
- } else {
- $msg .= "$prenom $nom n'a jamais reçu d\'email de marketing.";
+ $mymail->assign('market', implode("\n", $market));
}
$mymail->setTxtBody($msg);
$mymail->send();
}
+ // Remove old pending marketing requests for the new user.
Marketing::clear($uid);
- pl_redirect('register/success');
- $page->assign('uid', $uid);
- }
-
- function handler_success(&$page)
- {
- global $globals;
- $page->changeTpl('register/success.tpl');
- $page->assign('user', S::user());
-
- $_SESSION['sub_state'] = array('step' => 5);
- if (Env::has('response2')) {
- $_SESSION['password'] = $password = Post::v('response2');
-
- XDB::execute('UPDATE auth_user_md5 SET password={?}
- WHERE user_id={?}', $password,
- S::v('uid'));
-
- // If GoogleApps is enabled, and the user did choose to use synchronized passwords,
- // and if the (stupid) user has decided to use /register/success another time,
- // updates the Google Apps password as well.
- if ($globals->mailstorage->googleapps_domain) {
- require_once 'googleapps.inc.php';
- $account = new GoogleAppsAccount(S::user());
- if ($account->active() && $account->sync_password) {
- $account->set_password($password);
- }
- }
-
- $log = S::v('log');
- S::logger()->log('passwd', '');
-
- if (Cookie::v('ORGaccess')) {
- require_once('secure_hash.inc.php');
- setcookie('ORGaccess', hash_encrypt($password), (time()+25920000), '/', '' ,0);
- S::logger()->log('cookie_on', '');
- }
-
- $page->assign('mdpok', true);
- }
-
- $res = XDB::iterRow("SELECT sub, domain
- FROM register_subs
- WHERE uid = {?} AND type = 'list'
- ORDER BY domain",
- S::i('uid'));
- $current_domain = null;
- $lists = array();
- while (list($sub, $domain) = $res->next()) {
- if ($current_domain != $domain) {
- $current_domain = $domain;
- $client = new MMList(S::v('uid'), S::v('password'), $domain);
- }
- list($details, ) = $client->get_members($sub);
- $lists["$sub@$domain"] = $details;
- }
- $page->assign_by_ref('lists', $lists);
-
- $page->addJsLink('motdepasse.js');
- }
-
- function handler_save(&$page)
- {
- global $globals;
-
- // Finish registration procedure
- if (Post::v('register_from_ax_question')) {
- XDB::execute('UPDATE auth_user_quick
- SET profile_from_ax = 1
- WHERE user_id = {?}',
- S::v('uid'));
- }
- if (Post::v('add_to_nl')) {
- require_once 'newsletter.inc.php';
- NewsLetter::subscribe();
- }
- if (Post::v('add_to_ax')) {
- Platal::load('axletter', 'axletter.inc.php');
- AXLetter::subscribe();
- }
- if (Post::v('add_to_promo')) {
- $r = XDB::query('SELECT id FROM groupex.asso WHERE diminutif = {?}',
- S::v('promo'));
- $asso_id = $r->fetchOneCell();
- XDB::execute('REPLACE INTO groupex.membres (uid,asso_id)
- VALUES ({?}, {?})',
- S::v('uid'), $asso_id);
- $mmlist = new MMList(S::v('uid'), S::v('password'));
- $mmlist->subscribe("promo".S::v('promo'));
- }
- if (Post::v('sub_ml')) {
- $subs = array_keys(Post::v('sub_ml'));
- $current_domain = null;
- foreach ($subs as $list) {
- list($sub, $domain) = explode('@', $list);
- if ($domain != $current_domain) {
- $current_domain = $domain;
- $client = new MMList(S::v('uid'), S::v('password'), $domain);
- }
- $client->subscribe($sub);
- }
- }
- if (Post::v('imap')) {
- require_once 'emails.inc.php';
- $storage = new EmailStorage(S::v('uid'), 'imap');
- $storage->activate();
- }
-
pl_redirect('profile/edit');
}
}