ManageRegistration.php 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350
  1. <?php
  2. /**
  3. * This file helps the administrator setting registration settings and policy
  4. * as well as allow the administrator to register new members themselves.
  5. *
  6. * Simple Machines Forum (SMF)
  7. *
  8. * @package SMF
  9. * @author Simple Machines http://www.simplemachines.org
  10. * @copyright 2014 Simple Machines and individual contributors
  11. * @license http://www.simplemachines.org/about/smf/license.php BSD
  12. *
  13. * @version 2.1 Alpha 1
  14. */
  15. if (!defined('SMF'))
  16. die('No direct access...');
  17. /**
  18. * Entrance point for the registration center, it checks permissions and forwards
  19. * to the right function based on the subaction.
  20. * Accessed by ?action=admin;area=regcenter.
  21. * Requires either the moderate_forum or the admin_forum permission.
  22. *
  23. * @uses Login language file
  24. * @uses Register template.
  25. */
  26. function RegCenter()
  27. {
  28. global $context, $txt, $scripturl;
  29. // Old templates might still request this.
  30. if (isset($_REQUEST['sa']) && $_REQUEST['sa'] == 'browse')
  31. redirectexit('action=admin;area=viewmembers;sa=browse' . (isset($_REQUEST['type']) ? ';type=' . $_REQUEST['type'] : ''));
  32. $subActions = array(
  33. 'register' => array('AdminRegister', 'moderate_forum'),
  34. 'agreement' => array('EditAgreement', 'admin_forum'),
  35. 'reservednames' => array('SetReserved', 'admin_forum'),
  36. 'settings' => array('ModifyRegistrationSettings', 'admin_forum'),
  37. );
  38. call_integration_hook('integrate_manage_registrations', array(&$subActions));
  39. // Work out which to call...
  40. $context['sub_action'] = isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : (allowedTo('moderate_forum') ? 'register' : 'settings');
  41. // Must have sufficient permissions.
  42. isAllowedTo($subActions[$context['sub_action']][1]);
  43. // Loading, always loading.
  44. loadLanguage('Login');
  45. loadTemplate('Register');
  46. // Next create the tabs for the template.
  47. $context[$context['admin_menu_name']]['tab_data'] = array(
  48. 'title' => $txt['registration_center'],
  49. 'help' => 'registrations',
  50. 'description' => $txt['admin_settings_desc'],
  51. 'tabs' => array(
  52. 'register' => array(
  53. 'description' => $txt['admin_register_desc'],
  54. ),
  55. 'agreement' => array(
  56. 'description' => $txt['registration_agreement_desc'],
  57. ),
  58. 'reservednames' => array(
  59. 'description' => $txt['admin_reserved_desc'],
  60. ),
  61. 'settings' => array(
  62. 'description' => $txt['admin_settings_desc'],
  63. )
  64. )
  65. );
  66. // Finally, get around to calling the function...
  67. $subActions[$context['sub_action']][0]();
  68. }
  69. /**
  70. * This function allows the admin to register a new member by hand.
  71. * It also allows assigning a primary group to the member being registered.
  72. * Accessed by ?action=admin;area=regcenter;sa=register
  73. * Requires the moderate_forum permission.
  74. *
  75. * @uses Register template, admin_register sub-template.
  76. */
  77. function AdminRegister()
  78. {
  79. global $txt, $context, $sourcedir, $scripturl, $smcFunc;
  80. if (!empty($_POST['regSubmit']))
  81. {
  82. checkSession();
  83. validateToken('admin-regc');
  84. foreach ($_POST as $key => $value)
  85. if (!is_array($_POST[$key]))
  86. $_POST[$key] = htmltrim__recursive(str_replace(array("\n", "\r"), '', $_POST[$key]));
  87. $regOptions = array(
  88. 'interface' => 'admin',
  89. 'username' => $_POST['user'],
  90. 'email' => $_POST['email'],
  91. 'password' => $_POST['password'],
  92. 'password_check' => $_POST['password'],
  93. 'check_reserved_name' => true,
  94. 'check_password_strength' => false,
  95. 'check_email_ban' => false,
  96. 'send_welcome_email' => isset($_POST['emailPassword']) || empty($_POST['password']),
  97. 'require' => isset($_POST['emailActivate']) ? 'activation' : 'nothing',
  98. 'memberGroup' => empty($_POST['group']) || !allowedTo('manage_membergroups') ? 0 : (int) $_POST['group'],
  99. );
  100. require_once($sourcedir . '/Subs-Members.php');
  101. $memberID = registerMember($regOptions);
  102. if (!empty($memberID))
  103. {
  104. $context['new_member'] = array(
  105. 'id' => $memberID,
  106. 'name' => $_POST['user'],
  107. 'href' => $scripturl . '?action=profile;u=' . $memberID,
  108. 'link' => '<a href="' . $scripturl . '?action=profile;u=' . $memberID . '">' . $_POST['user'] . '</a>',
  109. );
  110. $context['registration_done'] = sprintf($txt['admin_register_done'], $context['new_member']['link']);
  111. }
  112. }
  113. // Load the assignable member groups.
  114. if (allowedTo('manage_membergroups'))
  115. {
  116. $request = $smcFunc['db_query']('', '
  117. SELECT group_name, id_group
  118. FROM {db_prefix}membergroups
  119. WHERE id_group != {int:moderator_group}
  120. AND min_posts = {int:min_posts}' . (allowedTo('admin_forum') ? '' : '
  121. AND id_group != {int:admin_group}
  122. AND group_type != {int:is_protected}') . '
  123. AND hidden != {int:hidden_group}
  124. ORDER BY min_posts, CASE WHEN id_group < {int:newbie_group} THEN id_group ELSE 4 END, group_name',
  125. array(
  126. 'moderator_group' => 3,
  127. 'min_posts' => -1,
  128. 'admin_group' => 1,
  129. 'is_protected' => 1,
  130. 'hidden_group' => 2,
  131. 'newbie_group' => 4,
  132. )
  133. );
  134. $context['member_groups'] = array(0 => $txt['admin_register_group_none']);
  135. while ($row = $smcFunc['db_fetch_assoc']($request))
  136. $context['member_groups'][$row['id_group']] = $row['group_name'];
  137. $smcFunc['db_free_result']($request);
  138. }
  139. else
  140. $context['member_groups'] = array();
  141. // Basic stuff.
  142. $context['sub_template'] = 'admin_register';
  143. $context['page_title'] = $txt['registration_center'];
  144. createToken('admin-regc');
  145. loadJavascriptFile('register.js', array('default_theme' => true, 'defer' => false), 'smf_register');
  146. }
  147. /**
  148. * Allows the administrator to edit the registration agreement, and choose whether
  149. * it should be shown or not. It writes and saves the agreement to the agreement.txt
  150. * file.
  151. * Accessed by ?action=admin;area=regcenter;sa=agreement.
  152. * Requires the admin_forum permission.
  153. *
  154. * @uses Admin template and the edit_agreement sub template.
  155. */
  156. function EditAgreement()
  157. {
  158. // I hereby agree not to be a lazy bum.
  159. global $txt, $boarddir, $context, $modSettings, $smcFunc;
  160. // By default we look at agreement.txt.
  161. $context['current_agreement'] = '';
  162. // Is there more than one to edit?
  163. $context['editable_agreements'] = array(
  164. '' => $txt['admin_agreement_default'],
  165. );
  166. // Get our languages.
  167. getLanguages();
  168. // Try to figure out if we have more agreements.
  169. foreach ($context['languages'] as $lang)
  170. {
  171. if (file_exists($boarddir . '/agreement.' . $lang['filename'] . '.txt'))
  172. {
  173. $context['editable_agreements']['.' . $lang['filename']] = $lang['name'];
  174. // Are we editing this?
  175. if (isset($_POST['agree_lang']) && $_POST['agree_lang'] == '.' . $lang['filename'])
  176. $context['current_agreement'] = '.' . $lang['filename'];
  177. }
  178. }
  179. if (isset($_POST['agreement']))
  180. {
  181. checkSession();
  182. validateToken('admin-rega');
  183. // Off it goes to the agreement file.
  184. $to_write = str_replace("\r", '', $_POST['agreement']);
  185. $bytes = file_put_contents($boarddir . '/agreement' . $context['current_agreement'] . '.txt', $to_write, LOCK_EX);
  186. updateSettings(array('requireAgreement' => !empty($_POST['requireAgreement'])));
  187. if ($bytes == strlen($to_write))
  188. $context['saved_successful'] = true;
  189. else
  190. $context['could_not_save'] = true;
  191. }
  192. $context['agreement'] = file_exists($boarddir . '/agreement' . $context['current_agreement'] . '.txt') ? $smcFunc['htmlspecialchars'](file_get_contents($boarddir . '/agreement' . $context['current_agreement'] . '.txt')) : '';
  193. $context['warning'] = is_writable($boarddir . '/agreement' . $context['current_agreement'] . '.txt') ? '' : $txt['agreement_not_writable'];
  194. $context['require_agreement'] = !empty($modSettings['requireAgreement']);
  195. $context['sub_template'] = 'edit_agreement';
  196. $context['page_title'] = $txt['registration_agreement'];
  197. createToken('admin-rega');
  198. }
  199. /**
  200. * Set the names under which users are not allowed to register.
  201. * Accessed by ?action=admin;area=regcenter;sa=reservednames.
  202. * Requires the admin_forum permission.
  203. *
  204. * @uses Register template, reserved_words sub-template.
  205. */
  206. function SetReserved()
  207. {
  208. global $txt, $context, $modSettings;
  209. // Submitting new reserved words.
  210. if (!empty($_POST['save_reserved_names']))
  211. {
  212. checkSession();
  213. validateToken('admin-regr');
  214. // Set all the options....
  215. updateSettings(array(
  216. 'reserveWord' => (isset($_POST['matchword']) ? '1' : '0'),
  217. 'reserveCase' => (isset($_POST['matchcase']) ? '1' : '0'),
  218. 'reserveUser' => (isset($_POST['matchuser']) ? '1' : '0'),
  219. 'reserveName' => (isset($_POST['matchname']) ? '1' : '0'),
  220. 'reserveNames' => str_replace("\r", '', $_POST['reserved'])
  221. ));
  222. $context['saved_successful'] = true;
  223. }
  224. // Get the reserved word options and words.
  225. $modSettings['reserveNames'] = str_replace('\n', "\n", $modSettings['reserveNames']);
  226. $context['reserved_words'] = explode("\n", $modSettings['reserveNames']);
  227. $context['reserved_word_options'] = array();
  228. $context['reserved_word_options']['match_word'] = $modSettings['reserveWord'] == '1';
  229. $context['reserved_word_options']['match_case'] = $modSettings['reserveCase'] == '1';
  230. $context['reserved_word_options']['match_user'] = $modSettings['reserveUser'] == '1';
  231. $context['reserved_word_options']['match_name'] = $modSettings['reserveName'] == '1';
  232. // Ready the template......
  233. $context['sub_template'] = 'edit_reserved_words';
  234. $context['page_title'] = $txt['admin_reserved_set'];
  235. createToken('admin-regr');
  236. }
  237. /**
  238. * This function handles registration settings, and provides a few pretty stats too while it's at it.
  239. * General registration settings and Coppa compliance settings.
  240. * Accessed by ?action=admin;area=regcenter;sa=settings.
  241. * Requires the admin_forum permission.
  242. *
  243. * @param bool $return_config = false
  244. */
  245. function ModifyRegistrationSettings($return_config = false)
  246. {
  247. global $txt, $context, $scripturl, $modSettings, $sourcedir;
  248. // This is really quite wanting.
  249. require_once($sourcedir . '/ManageServer.php');
  250. $config_vars = array(
  251. array('select', 'registration_method', array($txt['setting_registration_standard'], $txt['setting_registration_activate'], $txt['setting_registration_approval'], $txt['setting_registration_disabled'])),
  252. array('select', 'enableOpenID', array(0 => $txt['enableOpenID_disabled'], 1 => $txt['enableOpenID_enabled'], 2 => $txt['enableOpenID_enabled_login'])),
  253. array('check', 'send_welcomeEmail'),
  254. '',
  255. array('int', 'coppaAge', 'subtext' => $txt['setting_coppaAge_desc'], 'onchange' => 'checkCoppa();', 'onkeyup' => 'checkCoppa();'),
  256. array('select', 'coppaType', array($txt['setting_coppaType_reject'], $txt['setting_coppaType_approval']), 'onchange' => 'checkCoppa();'),
  257. array('large_text', 'coppaPost', 'subtext' => $txt['setting_coppaPost_desc']),
  258. array('text', 'coppaFax'),
  259. array('text', 'coppaPhone'),
  260. );
  261. call_integration_hook('integrate_modify_registration_settings', array(&$config_vars));
  262. if ($return_config)
  263. return $config_vars;
  264. // Setup the template
  265. $context['sub_template'] = 'show_settings';
  266. $context['page_title'] = $txt['registration_center'];
  267. if (isset($_GET['save']))
  268. {
  269. checkSession();
  270. // Are there some contacts missing?
  271. if (!empty($_POST['coppaAge']) && !empty($_POST['coppaType']) && empty($_POST['coppaPost']) && empty($_POST['coppaFax']))
  272. fatal_lang_error('admin_setting_coppa_require_contact');
  273. // Post needs to take into account line breaks.
  274. $_POST['coppaPost'] = str_replace("\n", '<br>', empty($_POST['coppaPost']) ? '' : $_POST['coppaPost']);
  275. call_integration_hook('integrate_save_registration_settings');
  276. saveDBSettings($config_vars);
  277. $_SESSION['adm-save'] = true;
  278. redirectexit('action=admin;area=regcenter;sa=settings');
  279. }
  280. $context['post_url'] = $scripturl . '?action=admin;area=regcenter;save;sa=settings';
  281. $context['settings_title'] = $txt['settings'];
  282. // Define some javascript for COPPA.
  283. $context['settings_post_javascript'] = '
  284. function checkCoppa()
  285. {
  286. var coppaDisabled = document.getElementById(\'coppaAge\').value == 0;
  287. document.getElementById(\'coppaType\').disabled = coppaDisabled;
  288. var disableContacts = coppaDisabled || document.getElementById(\'coppaType\').options[document.getElementById(\'coppaType\').selectedIndex].value != 1;
  289. document.getElementById(\'coppaPost\').disabled = disableContacts;
  290. document.getElementById(\'coppaFax\').disabled = disableContacts;
  291. document.getElementById(\'coppaPhone\').disabled = disableContacts;
  292. }
  293. checkCoppa();';
  294. // Turn the postal address into something suitable for a textbox.
  295. $modSettings['coppaPost'] = !empty($modSettings['coppaPost']) ? preg_replace('~<br ?/?' . '>~', "\n", $modSettings['coppaPost']) : '';
  296. prepareDBSettingContext($config_vars);
  297. }
  298. ?>