inscription.php 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345
  1. <?php
  2. // $Id: inscription.php 14212 2008-01-31 02:09:57Z yannoo $
  3. /*
  4. ==============================================================================
  5. Dokeos - elearning and course management software
  6. Copyright (c) 2004 Dokeos S.A.
  7. Copyright (c) 2003 Ghent University (UGent)
  8. Copyright (c) 2001 Universite catholique de Louvain (UCL)
  9. Copyright (c) various contributors
  10. Copyright (c) Bart Mollet, Hogeschool Gent
  11. For a full list of contributors, see "credits.txt".
  12. The full license can be read in "license.txt".
  13. This program is free software; you can redistribute it and/or
  14. modify it under the terms of the GNU General Public License
  15. as published by the Free Software Foundation; either version 2
  16. of the License, or (at your option) any later version.
  17. See the GNU General Public License for more details.
  18. Contact: Dokeos, 181 rue Royale, B-1000 Brussels, Belgium, info@dokeos.com
  19. ==============================================================================
  20. */
  21. /**
  22. ==============================================================================
  23. * This script displays a form for registering new users.
  24. * @package dokeos.auth
  25. ==============================================================================
  26. */
  27. // name of the language file that needs to be included
  28. $language_file = "registration";
  29. include ("../inc/global.inc.php");
  30. require_once (api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php');
  31. require_once (api_get_path(LIBRARY_PATH).'usermanager.lib.php');
  32. require_once (api_get_path(CONFIGURATION_PATH).'profile.conf.php');
  33. $tool_name = get_lang('Registration');
  34. Display :: display_header($tool_name);
  35. // Forbidden to self-register
  36. if (get_setting('allow_registration') == 'false')
  37. {
  38. api_not_allowed();
  39. }
  40. //api_display_tool_title($tool_name);
  41. if (get_setting('allow_registration')=='approval')
  42. {
  43. Display::display_normal_message(get_lang('YourAccountHasToBeApproved'));
  44. }
  45. //if openid was not found
  46. if (!empty($_GET['openid_msg']) && $_GET['openid_msg'] == 'idnotfound')
  47. {
  48. Display::display_warning_message(get_lang('OpenIDCouldNotBeFoundPleaseRegister'));
  49. }
  50. $fck_attribute['Height'] = "150";
  51. $fck_attribute['Width'] = "450";
  52. $fck_attribute['ToolbarSet'] = "Profil";
  53. $form = new FormValidator('registration');
  54. // LAST NAME and FIRST NAME
  55. $form->addElement('text', 'lastname', get_lang('LastName'), array('size' => 40));
  56. $form->addElement('text', 'firstname', get_lang('FirstName'), array('size' => 40));
  57. $form->addRule('lastname', get_lang('ThisFieldIsRequired'), 'required');
  58. $form->addRule('firstname', get_lang('ThisFieldIsRequired'), 'required');
  59. // EMAIL
  60. $form->addElement('text', 'email', get_lang('Email'), array('size' => 40));
  61. if (api_get_setting('registration', 'email') == 'true')
  62. $form->addRule('email', get_lang('ThisFieldIsRequired'), 'required');
  63. $form->addRule('email', get_lang('EmailWrong'), 'email');
  64. if (api_get_setting('openid_authentication')=='true')
  65. {
  66. $form->addElement('text', 'openid', get_lang('OpenIDURL'), array('size' => 40));
  67. }
  68. // OFFICIAL CODE
  69. if (CONFVAL_ASK_FOR_OFFICIAL_CODE)
  70. {
  71. $form->addElement('text', 'official_code', get_lang('OfficialCode'), array('size' => 40));
  72. if (api_get_setting('registration', 'officialcode') == 'true')
  73. $form->addRule('official_code', get_lang('ThisFieldIsRequired'), 'required');
  74. }
  75. // USERNAME
  76. $form->addElement('text', 'username', get_lang('UserName'), array('size' => 20));
  77. $form->addRule('username', get_lang('ThisFieldIsRequired'), 'required');
  78. $form->addRule('username', get_lang('UsernameWrong'), 'username');
  79. $form->addRule('username', get_lang('UserTaken'), 'username_available');
  80. $form->addRule('username', sprintf(get_lang('UsernameMaxXCharacters'),'20'), 'maxlength',20);
  81. // PASSWORD
  82. $form->addElement('password', 'pass1', get_lang('Pass'), array('size' => 40));
  83. $form->addElement('password', 'pass2', get_lang('Confirmation'), array('size' => 40));
  84. $form->addRule('pass1', get_lang('ThisFieldIsRequired'), 'required');
  85. $form->addRule('pass2', get_lang('ThisFieldIsRequired'), 'required');
  86. $form->addRule(array('pass1', 'pass2'), get_lang('PassTwo'), 'compare');
  87. if (CHECK_PASS_EASY_TO_FIND)
  88. $form->addRule('password1', get_lang('PassTooEasy').': '.api_generate_password(), 'callback', 'api_check_password');
  89. // LANGUAGE
  90. if (get_setting('registration', 'language') == 'true')
  91. {
  92. $form->addElement('select_language', 'language', get_lang('Language'));
  93. }
  94. // STUDENT/TEACHER
  95. if (get_setting('allow_registration_as_teacher') <> 'false')
  96. {
  97. $form->addElement('radio', 'status', get_lang('Status'), get_lang('RegStudent'), STUDENT);
  98. $form->addElement('radio', 'status', null, get_lang('RegAdmin'), COURSEMANAGER);
  99. }
  100. // EXTENDED FIELDS
  101. if (api_get_setting('extended_profile') == 'true' AND api_get_setting('extendedprofile_registration','mycomptetences') == 'true')
  102. {
  103. $form->add_html_editor('competences', get_lang('MyCompetences'), false);
  104. }
  105. if (api_get_setting('extended_profile') == 'true' AND api_get_setting('extendedprofile_registration','mydiplomas') == 'true')
  106. {
  107. $form->add_html_editor('diplomas', get_lang('MyDiplomas'), false);
  108. }
  109. if (api_get_setting('extended_profile') == 'true' AND api_get_setting('extendedprofile_registration','myteach') == 'true')
  110. {
  111. $form->add_html_editor('teach', get_lang('MyTeach'), false);
  112. }
  113. if (api_get_setting('extended_profile') == 'true' AND api_get_setting('extendedprofile_registration','mypersonalopenarea') == 'true')
  114. {
  115. $form->add_html_editor('openarea', get_lang('MyPersonalOpenArea'), false);
  116. }
  117. if (api_get_setting('extended_profile') == 'true')
  118. {
  119. if (api_get_setting('extendedprofile_registrationrequired','mycomptetences') == 'true')
  120. {
  121. $form->addRule('competences', get_lang('ThisFieldIsRequired'), 'required');
  122. }
  123. if (api_get_setting('extendedprofile_registrationrequired','mydiplomas') == 'true')
  124. {
  125. $form->addRule('diplomas', get_lang('ThisFieldIsRequired'), 'required');
  126. }
  127. if (api_get_setting('extendedprofile_registrationrequired','myteach') == 'true')
  128. {
  129. $form->addRule('teach', get_lang('ThisFieldIsRequired'), 'required');
  130. }
  131. if (api_get_setting('extendedprofile_registrationrequired','mypersonalopenarea') == 'true')
  132. {
  133. $form->addRule('openarea', get_lang('ThisFieldIsRequired'), 'required');
  134. }
  135. }
  136. $form->addElement('submit', 'submit', get_lang('Ok'));
  137. if(isset($_SESSION["user_language_choice"]) && $_SESSION["user_language_choice"]!=""){
  138. $defaults['language'] = $_SESSION["user_language_choice"];
  139. }
  140. else{
  141. $defaults['language'] = api_get_setting('platformLanguage');
  142. }
  143. if(!empty($_GET['username']))
  144. {
  145. $defaults['username'] = Security::remove_XSS($_GET['username']);
  146. }
  147. if(!empty($_GET['email']))
  148. {
  149. $defaults['email'] = Security::remove_XSS($_GET['email']);
  150. }
  151. if (api_get_setting('openid_authentication')=='true' && !empty($_GET['openid']))
  152. {
  153. $defaults['openid'] = Security::remove_XSS($_GET['openid']);
  154. }
  155. $defaults['status'] = STUDENT;
  156. $form->setDefaults($defaults);
  157. if ($form->validate())
  158. {
  159. /*-----------------------------------------------------
  160. STORE THE NEW USER DATA INSIDE THE MAIN DOKEOS DATABASE
  161. -----------------------------------------------------*/
  162. $values = $form->exportValues();
  163. $values['username'] = substr($values['username'],0,20); //make *sure* the login isn't too long
  164. if (get_setting('allow_registration_as_teacher') == 'false')
  165. {
  166. $values['status'] = STUDENT;
  167. }
  168. // creating a new user
  169. $user_id = UserManager::create_user($values['firstname'],$values['lastname'],$values['status'],$values['email'],$values['username'],$values['pass1'],$values['official_code'], $values['language']);
  170. if ($user_id)
  171. {
  172. // storing the extended profile
  173. $store_extended = false;
  174. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)." SET ";
  175. if (api_get_setting('extended_profile') == 'true' AND api_get_setting('extendedprofile_registration','mycomptetences') == 'true')
  176. {
  177. $sql_set[] = "competences = '".Database::escape_string($values['competences'])."'";
  178. $store_extended = true;
  179. }
  180. if (api_get_setting('extended_profile') == 'true' AND api_get_setting('extendedprofile_registration','mydiplomas') == 'true')
  181. {
  182. $sql_set[] = "diplomas = '".Database::escape_string($values['diplomas'])."'";
  183. $store_extended = true;
  184. }
  185. if (api_get_setting('extended_profile') == 'true' AND api_get_setting('extendedprofile_registration','myteach') == 'true')
  186. {
  187. $sql_set[] = "teach = '".Database::escape_string($values['teach'])."'";
  188. $store_extended = true;
  189. }
  190. if (api_get_setting('extended_profile') == 'true' AND api_get_setting('extendedprofile_registration','mypersonalopenarea') == 'true')
  191. {
  192. $sql_set[] = "openarea = '".Database::escape_string($values['openarea'])."'";
  193. $store_extended = true;
  194. }
  195. if ($store_extended)
  196. {
  197. $sql .= implode(',',$sql_set);
  198. $sql .= " WHERE user_id = '".Database::escape_string($user_id)."'";
  199. api_sql_query($sql,__FILE__,__LINE__);
  200. }
  201. // if there is a default duration of a valid account then we have to change the expiration_date accordingly
  202. if (get_setting('account_valid_duration')<>'')
  203. {
  204. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)."
  205. SET expiration_date='registration_date+1' WHERE user_id='".$user_id."'";
  206. api_sql_query($sql,__FILE__,__LINE__);
  207. }
  208. // if the account has to be approved then we set the account to inactive, sent a mail to the platform admin and exit the page.
  209. if (get_setting('allow_registration')=='approval')
  210. {
  211. // 1. set account inactive
  212. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)."
  213. SET active='0' WHERE user_id='".$user_id."'";
  214. api_sql_query($sql,__FILE__,__LINE__);
  215. // 2. send mail to the platform admin
  216. $emailfromaddr = api_get_setting('emailAdministrator');
  217. $emailfromname = api_get_setting('siteName');
  218. $emailto = api_get_setting('emailAdministrator');
  219. $emailsubject = get_lang('ApprovalForNewAccount').': '.$values['username'];
  220. $emailbody = get_lang('ApprovalForNewAccount')."\n";
  221. $emailbody .=get_lang('UserName').': '.$values['username']."\n";
  222. $emailbody .=get_lang('LastName').': '.$values['lastname']."\n";
  223. $emailbody .=get_lang('FirstName').': '.$values['firstname']."\n";
  224. $emailbody .=get_lang('Email').': '.$values['email']."\n";
  225. $emailbody .=get_lang('Status').': '.$values['status']."\n\n";
  226. $emailbody .=get_lang('ManageUser').': '.api_get_path(WEB_CODE_PATH).'admin/user_edit.php?user_id='.$user_id;
  227. $emailheaders = "From: ".get_setting('administratorSurname')." ".get_setting('administratorName')." <".get_setting('emailAdministrator').">\n";
  228. $emailheaders .= "Reply-To: ".get_setting('emailAdministrator');
  229. @ api_send_mail($emailto, $emailsubject, $emailbody, $emailheaders);
  230. // 3. exit the page
  231. unset($user_id);
  232. Display :: display_footer();
  233. exit;
  234. }
  235. /*--------------------------------------
  236. SESSION REGISTERING
  237. --------------------------------------*/
  238. $_user['firstName'] = stripslashes($values['firstname']);
  239. $_user['lastName'] = stripslashes($values['lastname']);
  240. $_user['mail'] = $values['email'];
  241. $_user['language'] = $values['language'];
  242. $_user['user_id'] = $user_id;
  243. $is_allowedCreateCourse = ($values['status'] == 1) ? true : false;
  244. api_session_register('_user');
  245. api_session_register('is_allowedCreateCourse');
  246. //stats
  247. include (api_get_path(LIBRARY_PATH)."events.lib.inc.php");
  248. event_login();
  249. // last user login date is now
  250. $user_last_login_datetime = 0; // used as a unix timestamp it will correspond to : 1 1 1970
  251. api_session_register('user_last_login_datetime');
  252. /*--------------------------------------
  253. EMAIL NOTIFICATION
  254. --------------------------------------*/
  255. if (strstr($values['email'], '@'))
  256. {
  257. // Lets predefine some variables. Be sure to change the from address!
  258. $firstname = $values['firstname'];
  259. $lastname = $values['lastname'];
  260. $emailto = "\"$firstname $lastname\" <".$values['email'].">";
  261. $emailfromaddr = api_get_setting('emailAdministrator');
  262. $emailfromname = api_get_setting('siteName');
  263. $emailsubject = "[".get_setting('siteName')."] ".get_lang('YourReg')." ".get_setting('siteName');
  264. // The body can be as long as you wish, and any combination of text and variables
  265. $emailbody = get_lang('Dear')." ".stripslashes("$firstname $lastname").",\n\n".get_lang('YouAreReg')." ".get_setting('siteName')." ".get_lang('Settings')." ".$values['username']."\n".get_lang('Pass')." : ".stripslashes($values['pass1'])."\n\n".get_lang('Address')." ".get_setting('siteName')." ".get_lang('Is')." : ".$_configuration['root_web']."\n\n".get_lang('Problem')."\n\n".get_lang('Formula').",\n\n".get_setting('administratorName')." ".get_setting('administratorSurname')."\n".get_lang('Manager')." ".get_setting('siteName')."\nT. ".get_setting('administratorTelephone')."\n".get_lang('Email')." : ".get_setting('emailAdministrator');
  266. // Here we are forming one large header line
  267. // Every header must be followed by a \n except the last
  268. $emailheaders = "From: ".get_setting('administratorSurname')." ".get_setting('administratorName')." <".get_setting('emailAdministrator').">\n";
  269. $emailheaders .= "Reply-To: ".get_setting('emailAdministrator');
  270. // Because I predefined all of my variables, this api_send_mail() function looks nice and clean hmm?
  271. @ api_send_mail($emailto, $emailsubject, $emailbody, $emailheaders);
  272. }
  273. }
  274. echo "<p>".get_lang('Dear')." ".stripslashes("$firstname $lastname").",<br><br>".get_lang('PersonalSettings').".</p>\n";
  275. if (!empty ($values['email']))
  276. {
  277. echo "<p>".get_lang('MailHasBeenSent').".</p>";
  278. }
  279. if ($is_allowedCreateCourse)
  280. {
  281. echo "<p>", get_lang('NowGoCreateYourCourse'), ".</p>\n";
  282. $actionUrl = "../create_course/add_course.php";
  283. }
  284. else
  285. {
  286. echo "<p>", get_lang('NowGoChooseYourCourses'), ".</p>\n";
  287. $actionUrl = "courses.php?action=subscribe";
  288. }
  289. // ?uidReset=true&uidReq=$_user['user_id']
  290. echo "<form action=\"", $actionUrl, "\" method=\"post\">\n", "<input type=\"submit\" name=\"next\" value=\"", get_lang('Next'), "\" validationmsg=\" ", get_lang('Next'), " \">\n", "</form><br>\n";
  291. }
  292. else
  293. {
  294. $form->display();
  295. }
  296. ?>
  297. <a href="<?php echo api_get_path(WEB_PATH); ?>">&lt;&lt; <?php echo get_lang('Back'); ?></a>
  298. <?php
  299. /*
  300. ==============================================================================
  301. FOOTER
  302. ==============================================================================
  303. */
  304. Display :: display_footer();
  305. ?>