inscription.php 35 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This script displays a form for registering new users.
  5. * @package chamilo.auth
  6. */
  7. /**
  8. * Code
  9. */
  10. $language_file = array('registration', 'admin');
  11. if (!empty($_POST['language'])) { //quick hack to adapt the registration form result to the selected registration language
  12. $_GET['language'] = $_POST['language'];
  13. }
  14. require_once '../inc/global.inc.php';
  15. require_once api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php';
  16. require_once api_get_path(CONFIGURATION_PATH).'profile.conf.php';
  17. require_once api_get_path(LIBRARY_PATH).'mail.lib.inc.php';
  18. require_once api_get_path(LIBRARY_PATH).'legal.lib.php';
  19. require_once api_get_path(LIBRARY_PATH).'custompages.lib.php';
  20. // Load terms & conditions from the current lang
  21. if (api_get_setting('allow_terms_conditions') == 'true') {
  22. $get = array_keys($_GET);
  23. if (isset($get)) {
  24. if ($get[0] == 'legal'){
  25. $language = api_get_interface_language();
  26. $language = api_get_language_id($language);
  27. $term_preview = LegalManager::get_last_condition($language);
  28. if (!$term_preview) {
  29. //look for the default language
  30. $language = api_get_setting('platformLanguage');
  31. $language = api_get_language_id($language);
  32. $term_preview = LegalManager::get_last_condition($language);
  33. }
  34. $tool_name = get_lang('TermsAndConditions');
  35. Display :: display_header('');
  36. echo '<div class="actions-title">';
  37. echo $tool_name;
  38. echo '</div>';
  39. if (!empty($term_preview['content'])) {
  40. echo $term_preview['content'];
  41. } else {
  42. echo get_lang('ComingSoon');
  43. }
  44. Display :: display_footer();
  45. exit;
  46. }
  47. }
  48. }
  49. // Custom pages
  50. if (api_get_setting('use_custom_pages') == 'true') {
  51. if (isset($_POST['username'])) {
  52. $values = array();
  53. $values['firstname'] = $_POST['firstname'];
  54. $values['lastname'] = $_POST['lastname'];
  55. $values['status'] = $_POST['status'];
  56. $values['email'] = $_POST['email'];
  57. $values['username'] = $_POST['username'];
  58. $values['pass1'] = $_POST['pass1'];
  59. $values['official_code'] = '';
  60. $values['language'] = $_POST['language'];
  61. $values['phone'] = $_POST['phone'];
  62. $picture_uri = null;
  63. $user_id = UserManager::create_user($values['firstname'], $values['lastname'], $values['status'], $values['email'], $values['username'], $values['pass1'], $values['official_code'], $values['language'], $values['phone'], $picture_uri);
  64. if ($user_id) {
  65. /*
  66. SESSION REGISTERING
  67. */
  68. $_user['firstName'] = stripslashes($values['firstname']);
  69. $_user['lastName'] = stripslashes($values['lastname']);
  70. $_user['mail'] = $values['email'];
  71. $_user['language'] = $values['language'];
  72. $_user['user_id'] = $user_id;
  73. $is_allowedCreateCourse = $values['status'] == 1;
  74. api_session_register('_user');
  75. api_session_register('is_allowedCreateCourse');
  76. //stats
  77. event_login();
  78. // last user login date is now
  79. $user_last_login_datetime = 0; // used as a unix timestamp it will correspond to : 1 1 1970
  80. api_session_register('user_last_login_datetime');
  81. /*
  82. EMAIL NOTIFICATION
  83. */
  84. if (strpos($values['email'], '@') !== false) {
  85. // Let us predefine some variables. Be sure to change the from address!
  86. $recipient_name = api_get_person_name($values['firstname'], $values['lastname']);
  87. $email = $values['email'];
  88. $emailfromaddr = api_get_setting('emailAdministrator');
  89. $emailfromname = api_get_setting('siteName');
  90. $emailsubject = '['.api_get_setting('siteName').'] '.get_lang('YourReg',null,$_user['language']).' '.api_get_setting('siteName');
  91. // The body can be as long as you wish, and any combination of text and variables
  92. $portal_url = $_configuration['root_web'];
  93. if ($_configuration['multiple_access_urls']) {
  94. $access_url_id = api_get_current_access_url_id();
  95. if ($access_url_id != -1 ){
  96. $url = api_get_access_url($access_url_id);
  97. $portal_url = $url['url'];
  98. }
  99. }
  100. $emailbody = get_lang('Dear',null,$_user['language']).' '.stripslashes(Security::remove_XSS($recipient_name)).",\n\n".get_lang('YouAreReg',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('WithTheFollowingSettings',null,$_user['language'])."\n\n".get_lang('Username',null,$_user['language']).' : '.$values['username']."\n".get_lang('Pass',null,$_user['language']).' : '.stripslashes($values['pass1'])."\n\n".get_lang('Address',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('Is',null,$_user['language']).' : '.$portal_url."\n\n".get_lang('Problem',null,$_user['language'])."\n\n".get_lang('Formula',null,$_user['language']).",\n\n".api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'))."\n".get_lang('Manager',null,$_user['language']).' '.api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n".get_lang('Email',null,$_user['language']).' : '.api_get_setting('emailAdministrator');
  101. // Here we are forming one large header line
  102. // Every header must be followed by a \n except the last
  103. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  104. $email_admin = api_get_setting('emailAdministrator');
  105. @api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin);
  106. }
  107. CustomPages::displayPage('registration-feedback');
  108. }
  109. } else {
  110. CustomPages::displayPage('registration');
  111. }
  112. }
  113. $tool_name = get_lang('Registration',null,(!empty($_POST['language'])?$_POST['language']:$_user['language']));
  114. Display :: display_header($tool_name);
  115. echo Display::tag('h1', $tool_name);
  116. $home = api_get_path(SYS_PATH).'home/';
  117. if ($_configuration['multiple_access_urls']) {
  118. $access_url_id = api_get_current_access_url_id();
  119. if ($access_url_id != -1) {
  120. $url_info = api_get_access_url($access_url_id);
  121. $url = api_remove_trailing_slash(preg_replace('/https?:\/\//i', '', $url_info['url']));
  122. $clean_url = replace_dangerous_char($url);
  123. $clean_url = str_replace('/', '-', $clean_url);
  124. $clean_url .= '/';
  125. $home_old = api_get_path(SYS_PATH).'home/';
  126. $home = api_get_path(SYS_PATH).'home/'.$clean_url;
  127. }
  128. }
  129. if (!empty($_SESSION['user_language_choice'])) {
  130. $user_selected_language = $_SESSION['user_language_choice'];
  131. } elseif (!empty($_SESSION['_user']['language'])) {
  132. $user_selected_language = $_SESSION['_user']['language'];
  133. } else {
  134. $user_selected_language = get_setting('platformLanguage');
  135. }
  136. if (file_exists($home.'register_top_'.$user_selected_language.'.html')) {
  137. $home_top_temp = @(string)file_get_contents($home.'register_top_'.$user_selected_language.'.html');
  138. $open = str_replace('{rel_path}', api_get_path(REL_PATH), $home_top_temp);
  139. $open = api_to_system_encoding($open, api_detect_encoding(strip_tags($open)));
  140. if (!empty($open)) {
  141. echo '<div style="border:1px solid #E1E1E1; padding:2px;">'.$open.'</div>';
  142. }
  143. }
  144. // Forbidden to self-register
  145. if (api_get_setting('allow_registration') == 'false') {
  146. api_not_allowed();
  147. }
  148. //api_display_tool_title($tool_name);
  149. if (api_get_setting('allow_registration') == 'approval') {
  150. Display::display_normal_message(get_lang('YourAccountHasToBeApproved'));
  151. }
  152. //if openid was not found
  153. if (!empty($_GET['openid_msg']) && $_GET['openid_msg'] == 'idnotfound') {
  154. Display::display_warning_message(get_lang('OpenIDCouldNotBeFoundPleaseRegister'));
  155. }
  156. $form = new FormValidator('registration');
  157. if (api_get_setting('allow_terms_conditions') == 'true') {
  158. $display_all_form = !isset($_SESSION['update_term_and_condition'][1]);
  159. } else {
  160. $display_all_form = true;
  161. }
  162. if ($display_all_form) {
  163. if (api_is_western_name_order()) {
  164. // FIRST NAME and LAST NAME
  165. $form->addElement('text', 'firstname', get_lang('FirstName'), array('size' => 40));
  166. $form->addElement('text', 'lastname', get_lang('LastName'), array('size' => 40));
  167. } else {
  168. // LAST NAME and FIRST NAME
  169. $form->addElement('text', 'lastname', get_lang('LastName'), array('size' => 40));
  170. $form->addElement('text', 'firstname', get_lang('FirstName'), array('size' => 40));
  171. }
  172. $form->applyFilter(array('lastname', 'firstname'), 'trim');
  173. $form->addRule('lastname', get_lang('ThisFieldIsRequired'), 'required');
  174. $form->addRule('firstname', get_lang('ThisFieldIsRequired'), 'required');
  175. // EMAIL
  176. $form->addElement('text', 'email', get_lang('Email'), array('size' => 40));
  177. if (api_get_setting('registration', 'email') == 'true') {
  178. $form->addRule('email', get_lang('ThisFieldIsRequired'), 'required');
  179. }
  180. $form->addRule('email', get_lang('EmailWrong'), 'email');
  181. if (api_get_setting('openid_authentication') == 'true') {
  182. $form->addElement('text', 'openid', get_lang('OpenIDURL'), array('size' => 40));
  183. }
  184. // Enabled by Ivan Tcholakov, 06-APR-2009. CONFVAL_ASK_FOR_OFFICIAL_CODE = false by default.
  185. // OFFICIAL CODE
  186. if (CONFVAL_ASK_FOR_OFFICIAL_CODE) {
  187. $form->addElement('text', 'official_code', get_lang('OfficialCode'), array('size' => 40));
  188. if (api_get_setting('registration', 'officialcode') == 'true')
  189. $form->addRule('official_code', get_lang('ThisFieldIsRequired'), 'required');
  190. }
  191. //
  192. // USERNAME
  193. $form->addElement('text', 'username', get_lang('UserName'), array('size' => USERNAME_MAX_LENGTH));
  194. $form->applyFilter('username','trim');
  195. $form->addRule('username', get_lang('ThisFieldIsRequired'), 'required');
  196. $form->addRule('username', sprintf(get_lang('UsernameMaxXCharacters'), (string)USERNAME_MAX_LENGTH), 'maxlength', USERNAME_MAX_LENGTH);
  197. $form->addRule('username', get_lang('UsernameWrong'), 'username');
  198. $form->addRule('username', get_lang('UserTaken'), 'username_available');
  199. // PASSWORD
  200. $form->addElement('password', 'pass1', get_lang('Pass'), array('size' => 20, 'autocomplete' => 'off'));
  201. $form->addElement('password', 'pass2', get_lang('Confirmation'), array('size' => 20, 'autocomplete' => 'off'));
  202. $form->addRule('pass1', get_lang('ThisFieldIsRequired'), 'required');
  203. $form->addRule('pass2', get_lang('ThisFieldIsRequired'), 'required');
  204. $form->addRule(array('pass1', 'pass2'), get_lang('PassTwo'), 'compare');
  205. if (CHECK_PASS_EASY_TO_FIND)
  206. $form->addRule('password1', get_lang('PassTooEasy').': '.api_generate_password(), 'callback', 'api_check_password');
  207. // PHONE
  208. $form->addElement('text', 'phone', get_lang('Phone'), array('size' => 20));
  209. if (api_get_setting('registration', 'phone') == 'true')
  210. $form->addRule('phone', get_lang('ThisFieldIsRequired'), 'required');
  211. // PICTURE
  212. /*if (api_get_setting('profile', 'picture') == 'true') {
  213. $form->addElement('file', 'picture', get_lang('AddPicture'));
  214. $allowed_picture_types = array ('jpg', 'jpeg', 'png', 'gif');
  215. $form->addRule('picture', get_lang('OnlyImagesAllowed').' ('.implode(',', $allowed_picture_types).')', 'filetype', $allowed_picture_types);
  216. }*/
  217. // LANGUAGE
  218. if (api_get_setting('registration', 'language') == 'true') {
  219. $form->addElement('select_language', 'language', get_lang('Language'));
  220. }
  221. // STUDENT/TEACHER
  222. if (api_get_setting('allow_registration_as_teacher') != 'false') {
  223. $form->addElement('radio', 'status', get_lang('Status'), get_lang('RegStudent'), STUDENT);
  224. $form->addElement('radio', 'status', null, get_lang('RegAdmin'), COURSEMANAGER);
  225. }
  226. // EXTENDED FIELDS
  227. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true') {
  228. $form->add_html_editor('competences', get_lang('MyCompetences'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  229. }
  230. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true') {
  231. $form->add_html_editor('diplomas', get_lang('MyDiplomas'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  232. }
  233. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'myteach') == 'true') {
  234. $form->add_html_editor('teach', get_lang('MyTeach'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  235. }
  236. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true') {
  237. $form->add_html_editor('openarea', get_lang('MyPersonalOpenArea'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  238. }
  239. if (api_get_setting('extended_profile') == 'true') {
  240. if (api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true' && api_get_setting('extendedprofile_registrationrequired', 'mycomptetences') == 'true') {
  241. $form->addRule('competences', get_lang('ThisFieldIsRequired'), 'required');
  242. }
  243. if (api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true' && api_get_setting('extendedprofile_registrationrequired', 'mydiplomas') == 'true') {
  244. $form->addRule('diplomas', get_lang('ThisFieldIsRequired'), 'required');
  245. }
  246. if (api_get_setting('extendedprofile_registration', 'myteach') == 'true' && api_get_setting('extendedprofile_registrationrequired', 'myteach') == 'true') {
  247. $form->addRule('teach', get_lang('ThisFieldIsRequired'), 'required');
  248. }
  249. if (api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true' && api_get_setting('extendedprofile_registrationrequired','mypersonalopenarea') == 'true') {
  250. $form->addRule('openarea', get_lang('ThisFieldIsRequired'), 'required');
  251. }
  252. }
  253. // EXTRA FIELDS
  254. $extra = UserManager::get_extra_fields(0, 50, 5, 'ASC');
  255. $extra_data = UserManager::get_extra_user_data(api_get_user_id(), true);
  256. foreach ($extra as $id => $field_details) {
  257. if ($field_details[6] == 0) {
  258. continue;
  259. }
  260. switch($field_details[2]) {
  261. case USER_FIELD_TYPE_TEXT:
  262. $form->addElement('text', 'extra_'.$field_details[1], $field_details[3], array('size' => 40));
  263. $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
  264. $form->applyFilter('extra_'.$field_details[1], 'trim');
  265. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  266. break;
  267. case USER_FIELD_TYPE_TEXTAREA:
  268. $form->add_html_editor('extra_'.$field_details[1], $field_details[3], false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  269. //$form->addElement('textarea', 'extra_'.$field_details[1], $field_details[3], array('size' => 80));
  270. $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
  271. $form->applyFilter('extra_'.$field_details[1], 'trim');
  272. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  273. break;
  274. case USER_FIELD_TYPE_RADIO:
  275. $group = array();
  276. foreach ($field_details[9] as $option_id => $option_details) {
  277. $options[$option_details[1]] = $option_details[2];
  278. $group[] =& HTML_QuickForm::createElement('radio', 'extra_'.$field_details[1], $option_details[1], $option_details[2].'<br />',$option_details[1]);
  279. }
  280. $form->addGroup($group, 'extra_'.$field_details[1], $field_details[3], '');
  281. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  282. break;
  283. case USER_FIELD_TYPE_SELECT:
  284. $get_lang_variables = false;
  285. if (in_array($field_details[1], array('mail_notify_message','mail_notify_invitation', 'mail_notify_group_message'))) {
  286. $get_lang_variables = true;
  287. }
  288. $options = array();
  289. foreach($field_details[9] as $option_id => $option_details) {
  290. if ($get_lang_variables) {
  291. $option_details[2] = get_lang($option_details[2]);
  292. }
  293. $options[$option_details[1]] = $option_details[2];
  294. }
  295. if ($get_lang_variables) {
  296. $field_details[3] = get_lang($field_details[3]);
  297. }
  298. $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('class'=>'chzn-select', 'id'=>'extra_'.$field_details[1]));
  299. break;
  300. case USER_FIELD_TYPE_SELECT_MULTIPLE:
  301. $options = array();
  302. foreach ($field_details[9] as $option_id => $option_details) {
  303. $options[$option_details[1]] = $option_details[2];
  304. }
  305. $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('multiple' => 'multiple'));
  306. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  307. break;
  308. case USER_FIELD_TYPE_DATE:
  309. $form->addElement('datepickerdate', 'extra_'.$field_details[1], $field_details[3], array('form_name' => 'registration'));
  310. $form->_elements[$form->_elementIndex['extra_'.$field_details[1]]]->setLocalOption('minYear', 1900);
  311. $defaults['extra_'.$field_details[1]] = date('Y-m-d 12:00:00');
  312. $form -> setDefaults($defaults);
  313. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  314. $form->applyFilter('theme', 'trim');
  315. break;
  316. case USER_FIELD_TYPE_DATETIME:
  317. $form->addElement('datepicker', 'extra_'.$field_details[1], $field_details[3], array('form_name' => 'registration'));
  318. $form->_elements[$form->_elementIndex['extra_'.$field_details[1]]]->setLocalOption('minYear', 1900);
  319. $defaults['extra_'.$field_details[1]] = date('Y-m-d 12:00:00');
  320. $form -> setDefaults($defaults);
  321. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  322. $form->applyFilter('theme', 'trim');
  323. break;
  324. case USER_FIELD_TYPE_DOUBLE_SELECT:
  325. foreach ($field_details[9] as $key => $element) {
  326. if ($element[2][0] == '*') {
  327. $values['*'][$element[0]] = str_replace('*', '', $element[2]);
  328. } else {
  329. $values[0][$element[0]] = $element[2];
  330. }
  331. }
  332. $group = '';
  333. $group[] =& HTML_QuickForm::createElement('select', 'extra_'.$field_details[1], '', $values[0], '');
  334. $group[] =& HTML_QuickForm::createElement('select', 'extra_'.$field_details[1].'*', '', $values['*'], '');
  335. $form->addGroup($group, 'extra_'.$field_details[1], $field_details[3], '&nbsp;');
  336. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  337. // recoding the selected values for double : if the user has selected certain values, we have to assign them to the correct select form
  338. if (key_exists('extra_'.$field_details[1], $extra_data)) {
  339. // exploding all the selected values (of both select forms)
  340. $selected_values = explode(';', $extra_data['extra_'.$field_details[1]]);
  341. $extra_data['extra_'.$field_details[1]] =array();
  342. // looping through the selected values and assigning the selected values to either the first or second select form
  343. foreach ($selected_values as $key => $selected_value) {
  344. if(is_array($values)){
  345. if (array_key_exists($selected_value, $values[0])) {
  346. $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1]] = $selected_value;
  347. } else {
  348. $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1].'*'] = $selected_value;
  349. }
  350. }
  351. }
  352. }
  353. break;
  354. case USER_FIELD_TYPE_DIVIDER:
  355. $form->addElement('static', $field_details[1], '<br /><strong>'.$field_details[3].'</strong>');
  356. break;
  357. }
  358. }
  359. }
  360. // Terms and conditions
  361. if (api_get_setting('allow_terms_conditions') == 'true') {
  362. $language = api_get_interface_language();
  363. $language = api_get_language_id($language);
  364. $term_preview = LegalManager::get_last_condition($language);
  365. if (!$term_preview) {
  366. //we load from the platform
  367. $language = api_get_setting('platformLanguage');
  368. $language = api_get_language_id($language);
  369. $term_preview = LegalManager::get_last_condition($language);
  370. //if is false we load from english
  371. if (!$term_preview){
  372. $language = api_get_language_id('english'); //this must work
  373. $term_preview = LegalManager::get_last_condition($language);
  374. }
  375. }
  376. // Version and language
  377. $form->addElement('hidden', 'legal_accept_type', $term_preview['version'].':'.$term_preview['language_id']);
  378. $form->addElement('hidden', 'legal_info', $term_preview['legal_id'].':'.$term_preview['language_id']);
  379. // Password
  380. if (isset($_SESSION['info_current_user'][1]) && isset($_SESSION['info_current_user'][2])) {
  381. $form->addElement('hidden', 'login', $_SESSION['info_current_user'][1]);
  382. $form->addElement('hidden', 'password', $_SESSION['info_current_user'][2]);
  383. }
  384. if ($term_preview['type'] == 1) {
  385. $form->addElement('checkbox', 'legal_accept', null, get_lang('IHaveReadAndAgree').'&nbsp;<a href="inscription.php?legal" target="_blank">'.get_lang('TermsAndConditions').'</a>');
  386. $form->addRule('legal_accept', get_lang('ThisFieldIsRequired'), 'required');
  387. } else {
  388. if (!empty($term_preview['content'])) {
  389. $preview = LegalManager::show_last_condition($term_preview);
  390. $term_preview = '<div class="row">
  391. <div class="label">'.get_lang('TermsAndConditions').'</div>
  392. <div class="formw">
  393. '.$preview.'
  394. <br />
  395. </div>
  396. </div>';
  397. $form->addElement('html', $term_preview);
  398. }
  399. }
  400. }
  401. $form->addElement('style_submit_button', 'submit', get_lang('RegisterUser'), 'class="save"');
  402. if (isset($_SESSION['user_language_choice']) && $_SESSION['user_language_choice'] != '') {
  403. $defaults['language'] = $_SESSION['user_language_choice'];
  404. } else {
  405. $defaults['language'] = api_get_setting('platformLanguage');
  406. }
  407. if (!empty($_GET['username'])) {
  408. $defaults['username'] = Security::remove_XSS($_GET['username']);
  409. }
  410. if (!empty($_GET['email'])) {
  411. $defaults['email'] = Security::remove_XSS($_GET['email']);
  412. }
  413. if (!empty($_GET['phone'])) {
  414. $defaults['phone'] = Security::remove_XSS($_GET['phone']);
  415. }
  416. if (api_get_setting('openid_authentication') == 'true' && !empty($_GET['openid'])) {
  417. $defaults['openid'] = Security::remove_XSS($_GET['openid']);
  418. }
  419. $defaults['status'] = STUDENT;
  420. if (is_array($extra_data)) {
  421. $defaults = array_merge($defaults, $extra_data);
  422. }
  423. $form->setDefaults($defaults);
  424. if ($form->validate()) {
  425. /*
  426. STORE THE NEW USER DATA INSIDE THE MAIN DATABASE
  427. */
  428. $values = $form->exportValues();
  429. $values['username'] = api_substr($values['username'], 0, USERNAME_MAX_LENGTH); //make *sure* the login isn't too long
  430. if (api_get_setting('allow_registration_as_teacher') == 'false') {
  431. $values['status'] = STUDENT;
  432. }
  433. // Added by Ivan Tcholakov, 06-MAR-2008.
  434. if (empty($values['official_code'])) {
  435. $values['official_code'] = api_strtoupper($values['username']);
  436. }
  437. // creating a new user
  438. $user_id = UserManager::create_user($values['firstname'], $values['lastname'], $values['status'], $values['email'], $values['username'], $values['pass1'], $values['official_code'], $values['language'], $values['phone'], $picture_uri);
  439. // Terms & Conditions
  440. if (api_get_setting('allow_terms_conditions') == 'true') {
  441. // update the terms & conditions
  442. if (isset($values['legal_accept_type'])) {
  443. $cond_array = explode(':', $values['legal_accept_type']);
  444. if (!empty($cond_array[0]) && !empty($cond_array[1])) {
  445. $time = time();
  446. $condition_to_save = intval($cond_array[0]).':'.intval($cond_array[1]).':'.$time;
  447. UserManager::update_extra_field_value($user_id, 'legal_accept', $condition_to_save);
  448. }
  449. }
  450. }
  451. // Register extra fields
  452. $extras = array();
  453. foreach ($values as $key => $value) {
  454. if (substr($key, 0, 6) == 'extra_') { //an extra field
  455. $extras[substr($key,6)] = $value;
  456. }
  457. }
  458. //update the extra fields
  459. $count_extra_field = count($extras);
  460. if ($count_extra_field > 0) {
  461. foreach ($extras as $key => $value) {
  462. $myres = UserManager::update_extra_field_value($user_id, $key, $value);
  463. }
  464. }
  465. if ($user_id) {
  466. // storing the extended profile
  467. $store_extended = false;
  468. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)." SET ";
  469. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true') {
  470. $sql_set[] = "competences = '".Database::escape_string($values['competences'])."'";
  471. $store_extended = true;
  472. }
  473. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true') {
  474. $sql_set[] = "diplomas = '".Database::escape_string($values['diplomas'])."'";
  475. $store_extended = true;
  476. }
  477. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'myteach') == 'true') {
  478. $sql_set[] = "teach = '".Database::escape_string($values['teach'])."'";
  479. $store_extended = true;
  480. }
  481. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true') {
  482. $sql_set[] = "openarea = '".Database::escape_string($values['openarea'])."'";
  483. $store_extended = true;
  484. }
  485. if ($store_extended) {
  486. $sql .= implode(',', $sql_set);
  487. $sql .= " WHERE user_id = '".Database::escape_string($user_id)."'";
  488. Database::query($sql);
  489. }
  490. // if there is a default duration of a valid account then we have to change the expiration_date accordingly
  491. if (api_get_setting('account_valid_duration') != '') {
  492. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)." SET expiration_date='registration_date+1' WHERE user_id='".$user_id."'";
  493. Database::query($sql);
  494. }
  495. // if the account has to be approved then we set the account to inactive, sent a mail to the platform admin and exit the page.
  496. if (api_get_setting('allow_registration') == 'approval') {
  497. $TABLE_USER = Database::get_main_table(TABLE_MAIN_USER);
  498. // 1. set account inactive
  499. $sql = "UPDATE ".$TABLE_USER." SET active='0' WHERE user_id='".$user_id."'";
  500. Database::query($sql);
  501. $table_main_admin = Database::get_main_table(TABLE_MAIN_ADMIN);
  502. if ($_configuration['multiple_access_urls']) {
  503. $access_url_id = api_get_current_access_url_id();
  504. $tbl_url_rel_user = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  505. $sql_get_id_admin = "SELECT admin.user_id FROM ".$tbl_url_rel_user." as url, ".$table_main_admin." as admin WHERE access_url_id='".$access_url_id."' AND admin.user_id=url.user_id";
  506. } else {
  507. $sql_get_id_admin = "SELECT * FROM ".$table_main_admin;
  508. }
  509. $result = Database::query($sql_get_id_admin);
  510. while ($row = Database::fetch_array($result)) {
  511. $sql_admin_list = "SELECT * FROM ".$TABLE_USER." WHERE user_id='".$row['user_id']."'";
  512. $result_list = Database::query($sql_admin_list);
  513. $admin_list = Database::fetch_array($result_list);
  514. $emailto = $admin_list['email'];
  515. // 2. send mail to the platform admin
  516. $emailfromaddr = api_get_setting('emailAdministrator');
  517. $emailfromname = api_get_setting('siteName');
  518. $emailsubject = get_lang('ApprovalForNewAccount',null,$values['language']).': '.$values['username'];
  519. $emailbody = get_lang('ApprovalForNewAccount',null,$values['language'])."\n";
  520. $emailbody .= get_lang('UserName',null,$values['language']).': '.$values['username']."\n";
  521. if (api_is_western_name_order()) {
  522. $emailbody .= get_lang('FirstName',null,$values['language']).': '.$values['firstname']."\n";
  523. $emailbody .= get_lang('LastName',null,$values['language']).': '.$values['lastname']."\n";
  524. } else {
  525. $emailbody .= get_lang('LastName',null,$values['language']).': '.$values['lastname']."\n";
  526. $emailbody .= get_lang('FirstName',null,$values['language']).': '.$values['firstname']."\n";
  527. }
  528. $emailbody .= get_lang('Email',null,$values['language']).': '.$values['email']."\n";
  529. $emailbody .= get_lang('Status',null,$values['language']).': '.$values['status']."\n\n";
  530. $emailbody .= get_lang('ManageUser',null,$values['language']).': '.api_get_path(WEB_CODE_PATH).'admin/user_edit.php?user_id='.$user_id;
  531. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  532. $email_admin = api_get_setting('emailAdministrator');
  533. @api_mail('', $emailto, $emailsubject, $emailbody, $sender_name, $email_admin);
  534. }
  535. // 3. exit the page
  536. unset($user_id);
  537. Display :: display_footer();
  538. exit;
  539. }
  540. /*
  541. SESSION REGISTERING
  542. */
  543. $_user['firstName'] = stripslashes($values['firstname']);
  544. $_user['lastName'] = stripslashes($values['lastname']);
  545. $_user['mail'] = $values['email'];
  546. $_user['language'] = $values['language'];
  547. $_user['user_id'] = $user_id;
  548. $is_allowedCreateCourse = $values['status'] == 1;
  549. api_session_register('_user');
  550. api_session_register('is_allowedCreateCourse');
  551. //stats
  552. event_login();
  553. // last user login date is now
  554. $user_last_login_datetime = 0; // used as a unix timestamp it will correspond to : 1 1 1970
  555. api_session_register('user_last_login_datetime');
  556. /*
  557. EMAIL NOTIFICATION
  558. */
  559. if (strpos($values['email'], '@') !== false) {
  560. // Let us predefine some variables. Be sure to change the from address!
  561. $recipient_name = api_get_person_name($values['firstname'], $values['lastname']);
  562. $email = $values['email'];
  563. $emailfromaddr = api_get_setting('emailAdministrator');
  564. $emailfromname = api_get_setting('siteName');
  565. $emailsubject = '['.api_get_setting('siteName').'] '.get_lang('YourReg',null,$_user['language']).' '.api_get_setting('siteName');
  566. // The body can be as long as you wish, and any combination of text and variables
  567. $portal_url = $_configuration['root_web'];
  568. if ($_configuration['multiple_access_urls']) {
  569. $access_url_id = api_get_current_access_url_id();
  570. if ($access_url_id != -1 ){
  571. $url = api_get_access_url($access_url_id);
  572. $portal_url = $url['url'];
  573. }
  574. }
  575. $emailbody = get_lang('Dear',null,$_user['language']).' '.stripslashes(Security::remove_XSS($recipient_name)).",\n\n".get_lang('YouAreReg',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('WithTheFollowingSettings',null,$_user['language'])."\n\n".get_lang('Username',null,$_user['language']).' : '.$values['username']."\n".get_lang('Pass',null,$_user['language']).' : '.stripslashes($values['pass1'])."\n\n".get_lang('Address',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('Is',null,$_user['language']).' : '.$portal_url."\n\n".get_lang('Problem',null,$_user['language'])."\n\n".get_lang('Formula',null,$_user['language']).",\n\n".api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'))."\n".get_lang('Manager',null,$_user['language']).' '.api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n".get_lang('Email',null,$_user['language']).' : '.api_get_setting('emailAdministrator');
  576. // Here we are forming one large header line
  577. // Every header must be followed by a \n except the last
  578. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  579. $email_admin = api_get_setting('emailAdministrator');
  580. @api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin);
  581. }
  582. }
  583. echo '<p>'.get_lang('Dear',null,$_user['language']).' '.stripslashes(Security::remove_XSS($recipient_name)).',<br /><br />'.get_lang('PersonalSettings',null,$_user['language']).".</p>\n";
  584. if (!empty ($values['email'])) {
  585. echo '<p>'.get_lang('MailHasBeenSent',null,$_user['language']).'.</p>';
  586. }
  587. $button_text = '';
  588. if ($is_allowedCreateCourse) {
  589. echo '<p>', get_lang('NowGoCreateYourCourse',null,$_user['language']), ".</p>\n";
  590. $action_url = '../create_course/add_course.php';
  591. $button_text = api_get_setting('course_validation') == 'true'
  592. ? get_lang('CreateCourseRequest', null, $_user['language'])
  593. : get_lang('CourseCreate', null, $_user['language']);
  594. } else {
  595. if (api_get_setting('allow_students_to_browse_courses') == 'true')
  596. $action_url = 'courses.php?action=subscribe';
  597. else
  598. $action_url = api_get_path(WEB_PATH).'user_portal.php';
  599. echo '<p>', get_lang('NowGoChooseYourCourses',null,$_user['language']), ".</p>\n";
  600. $button_text = get_lang('Next',null,$_user['language']);
  601. }
  602. // ?uidReset=true&uidReq=$_user['user_id']
  603. echo '<form action="', $action_url, '" method="post">', "\n", '<button type="submit" class="next" name="next" value="', get_lang('Next',null,$_user['language']), '" validationmsg=" ', get_lang('Next',null,$_user['language']), ' ">', $button_text, '</button>', "\n", '</form><br />', "\n";
  604. } else {
  605. $form->display();
  606. }
  607. ?>
  608. <br />
  609. <?php
  610. if (!isset($_POST['username'])) {
  611. /*
  612. <div class="actions">
  613. <a href="<?php echo api_get_path(WEB_PATH); ?>" class="fake_button_back" ><?php echo get_lang('Back'); ?></a>
  614. </div>
  615. */
  616. ?>
  617. <?php
  618. }
  619. Display :: display_footer();