inscription.php 35 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This script displays a form for registering new users.
  5. * @package chamilo.auth
  6. */
  7. /**
  8. * Code
  9. */
  10. $language_file = array('registration', 'admin');
  11. if (!empty($_POST['language'])) { //quick hack to adapt the registration form result to the selected registration language
  12. $_GET['language'] = $_POST['language'];
  13. }
  14. require_once '../inc/global.inc.php';
  15. require_once api_get_path(CONFIGURATION_PATH).'profile.conf.php';
  16. require_once api_get_path(LIBRARY_PATH).'mail.lib.inc.php';
  17. require_once api_get_path(LIBRARY_PATH).'legal.lib.php';
  18. require_once api_get_path(LIBRARY_PATH).'custompages.lib.php';
  19. // Load terms & conditions from the current lang
  20. if (api_get_setting('allow_terms_conditions') == 'true') {
  21. $get = array_keys($_GET);
  22. if (isset($get)) {
  23. if ($get[0] == 'legal'){
  24. $language = api_get_interface_language();
  25. $language = api_get_language_id($language);
  26. $term_preview = LegalManager::get_last_condition($language);
  27. if (!$term_preview) {
  28. //look for the default language
  29. $language = api_get_setting('platformLanguage');
  30. $language = api_get_language_id($language);
  31. $term_preview = LegalManager::get_last_condition($language);
  32. }
  33. $tool_name = get_lang('TermsAndConditions');
  34. Display :: display_header('');
  35. echo '<div class="actions-title">';
  36. echo $tool_name;
  37. echo '</div>';
  38. if (!empty($term_preview['content'])) {
  39. echo $term_preview['content'];
  40. } else {
  41. echo get_lang('ComingSoon');
  42. }
  43. Display :: display_footer();
  44. exit;
  45. }
  46. }
  47. }
  48. // Custom pages
  49. if (api_get_setting('use_custom_pages') == 'true') {
  50. if (isset($_POST['username'])) {
  51. $values = array();
  52. $values['firstname'] = $_POST['firstname'];
  53. $values['lastname'] = $_POST['lastname'];
  54. $values['status'] = $_POST['status'];
  55. $values['email'] = $_POST['email'];
  56. $values['username'] = $_POST['username'];
  57. $values['pass1'] = $_POST['pass1'];
  58. $values['official_code'] = '';
  59. $values['language'] = $_POST['language'];
  60. $values['phone'] = $_POST['phone'];
  61. $picture_uri = null;
  62. $user_id = UserManager::create_user($values['firstname'], $values['lastname'], $values['status'], $values['email'], $values['username'], $values['pass1'], $values['official_code'], $values['language'], $values['phone'], $picture_uri);
  63. if ($user_id) {
  64. /*
  65. SESSION REGISTERING
  66. */
  67. $_user['firstName'] = stripslashes($values['firstname']);
  68. $_user['lastName'] = stripslashes($values['lastname']);
  69. $_user['mail'] = $values['email'];
  70. $_user['language'] = $values['language'];
  71. $_user['user_id'] = $user_id;
  72. $is_allowedCreateCourse = $values['status'] == 1;
  73. api_session_register('_user');
  74. api_session_register('is_allowedCreateCourse');
  75. //stats
  76. event_login();
  77. // last user login date is now
  78. $user_last_login_datetime = 0; // used as a unix timestamp it will correspond to : 1 1 1970
  79. api_session_register('user_last_login_datetime');
  80. /*
  81. EMAIL NOTIFICATION
  82. */
  83. if (strpos($values['email'], '@') !== false) {
  84. // Let us predefine some variables. Be sure to change the from address!
  85. $recipient_name = api_get_person_name($values['firstname'], $values['lastname']);
  86. $email = $values['email'];
  87. $emailfromaddr = api_get_setting('emailAdministrator');
  88. $emailfromname = api_get_setting('siteName');
  89. $emailsubject = '['.api_get_setting('siteName').'] '.get_lang('YourReg',null,$_user['language']).' '.api_get_setting('siteName');
  90. // The body can be as long as you wish, and any combination of text and variables
  91. $portal_url = $_configuration['root_web'];
  92. if ($_configuration['multiple_access_urls']) {
  93. $access_url_id = api_get_current_access_url_id();
  94. if ($access_url_id != -1 ){
  95. $url = api_get_access_url($access_url_id);
  96. $portal_url = $url['url'];
  97. }
  98. }
  99. $emailbody = get_lang('Dear',null,$_user['language']).' '.stripslashes(Security::remove_XSS($recipient_name)).",\n\n".get_lang('YouAreReg',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('WithTheFollowingSettings',null,$_user['language'])."\n\n".get_lang('Username',null,$_user['language']).' : '.$values['username']."\n".get_lang('Pass',null,$_user['language']).' : '.stripslashes($values['pass1'])."\n\n".get_lang('Address',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('Is',null,$_user['language']).' : '.$portal_url."\n\n".get_lang('Problem',null,$_user['language'])."\n\n".get_lang('Formula',null,$_user['language']).",\n\n".api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'))."\n".get_lang('Manager',null,$_user['language']).' '.api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n".get_lang('Email',null,$_user['language']).' : '.api_get_setting('emailAdministrator');
  100. // Here we are forming one large header line
  101. // Every header must be followed by a \n except the last
  102. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  103. $email_admin = api_get_setting('emailAdministrator');
  104. @api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin);
  105. }
  106. CustomPages::displayPage('registration-feedback');
  107. }
  108. } else {
  109. CustomPages::displayPage('registration');
  110. }
  111. }
  112. $tool_name = get_lang('Registration',null,(!empty($_POST['language'])?$_POST['language']:$_user['language']));
  113. Display :: display_header($tool_name);
  114. $home = api_get_path(SYS_PATH).'home/';
  115. if ($_configuration['multiple_access_urls']) {
  116. $access_url_id = api_get_current_access_url_id();
  117. if ($access_url_id != -1) {
  118. $url_info = api_get_access_url($access_url_id);
  119. $url = api_remove_trailing_slash(preg_replace('/https?:\/\//i', '', $url_info['url']));
  120. $clean_url = replace_dangerous_char($url);
  121. $clean_url = str_replace('/', '-', $clean_url);
  122. $clean_url .= '/';
  123. $home_old = api_get_path(SYS_PATH).'home/';
  124. $home = api_get_path(SYS_PATH).'home/'.$clean_url;
  125. }
  126. }
  127. if (!empty($_SESSION['user_language_choice'])) {
  128. $user_selected_language = $_SESSION['user_language_choice'];
  129. } elseif (!empty($_SESSION['_user']['language'])) {
  130. $user_selected_language = $_SESSION['_user']['language'];
  131. } else {
  132. $user_selected_language = get_setting('platformLanguage');
  133. }
  134. if (file_exists($home.'register_top_'.$user_selected_language.'.html')) {
  135. $home_top_temp = @(string)file_get_contents($home.'register_top_'.$user_selected_language.'.html');
  136. $open = str_replace('{rel_path}', api_get_path(REL_PATH), $home_top_temp);
  137. $open = api_to_system_encoding($open, api_detect_encoding(strip_tags($open)));
  138. if (!empty($open)) {
  139. echo '<div style="border:1px solid #E1E1E1; padding:2px;">'.$open.'</div>';
  140. }
  141. }
  142. // Forbidden to self-register
  143. if (api_get_setting('allow_registration') == 'false') {
  144. api_not_allowed();
  145. }
  146. //api_display_tool_title($tool_name);
  147. if (api_get_setting('allow_registration') == 'approval') {
  148. Display::display_normal_message(get_lang('YourAccountHasToBeApproved'));
  149. }
  150. //if openid was not found
  151. if (!empty($_GET['openid_msg']) && $_GET['openid_msg'] == 'idnotfound') {
  152. Display::display_warning_message(get_lang('OpenIDCouldNotBeFoundPleaseRegister'));
  153. }
  154. $form = new FormValidator('registration');
  155. $form->addElement('header', '', $tool_name);
  156. if (api_get_setting('allow_terms_conditions') == 'true') {
  157. $display_all_form = !isset($_SESSION['update_term_and_condition'][1]);
  158. } else {
  159. $display_all_form = true;
  160. }
  161. if ($display_all_form) {
  162. if (api_is_western_name_order()) {
  163. // FIRST NAME and LAST NAME
  164. $form->addElement('text', 'firstname', get_lang('FirstName'), array('size' => 40));
  165. $form->addElement('text', 'lastname', get_lang('LastName'), array('size' => 40));
  166. } else {
  167. // LAST NAME and FIRST NAME
  168. $form->addElement('text', 'lastname', get_lang('LastName'), array('size' => 40));
  169. $form->addElement('text', 'firstname', get_lang('FirstName'), array('size' => 40));
  170. }
  171. $form->applyFilter(array('lastname', 'firstname'), 'trim');
  172. $form->addRule('lastname', get_lang('ThisFieldIsRequired'), 'required');
  173. $form->addRule('firstname', get_lang('ThisFieldIsRequired'), 'required');
  174. // EMAIL
  175. $form->addElement('text', 'email', get_lang('Email'), array('size' => 40));
  176. if (api_get_setting('registration', 'email') == 'true') {
  177. $form->addRule('email', get_lang('ThisFieldIsRequired'), 'required');
  178. }
  179. $form->addRule('email', get_lang('EmailWrong'), 'email');
  180. if (api_get_setting('openid_authentication') == 'true') {
  181. $form->addElement('text', 'openid', get_lang('OpenIDURL'), array('size' => 40));
  182. }
  183. // Enabled by Ivan Tcholakov, 06-APR-2009. CONFVAL_ASK_FOR_OFFICIAL_CODE = false by default.
  184. // OFFICIAL CODE
  185. if (CONFVAL_ASK_FOR_OFFICIAL_CODE) {
  186. $form->addElement('text', 'official_code', get_lang('OfficialCode'), array('size' => 40));
  187. if (api_get_setting('registration', 'officialcode') == 'true')
  188. $form->addRule('official_code', get_lang('ThisFieldIsRequired'), 'required');
  189. }
  190. //
  191. // USERNAME
  192. $form->addElement('text', 'username', get_lang('UserName'), array('size' => USERNAME_MAX_LENGTH));
  193. $form->applyFilter('username','trim');
  194. $form->addRule('username', get_lang('ThisFieldIsRequired'), 'required');
  195. $form->addRule('username', sprintf(get_lang('UsernameMaxXCharacters'), (string)USERNAME_MAX_LENGTH), 'maxlength', USERNAME_MAX_LENGTH);
  196. $form->addRule('username', get_lang('UsernameWrong'), 'username');
  197. $form->addRule('username', get_lang('UserTaken'), 'username_available');
  198. // PASSWORD
  199. $form->addElement('password', 'pass1', get_lang('Pass'), array('size' => 20, 'autocomplete' => 'off'));
  200. $form->addElement('password', 'pass2', get_lang('Confirmation'), array('size' => 20, 'autocomplete' => 'off'));
  201. $form->addRule('pass1', get_lang('ThisFieldIsRequired'), 'required');
  202. $form->addRule('pass2', get_lang('ThisFieldIsRequired'), 'required');
  203. $form->addRule(array('pass1', 'pass2'), get_lang('PassTwo'), 'compare');
  204. if (CHECK_PASS_EASY_TO_FIND)
  205. $form->addRule('password1', get_lang('PassTooEasy').': '.api_generate_password(), 'callback', 'api_check_password');
  206. // PHONE
  207. $form->addElement('text', 'phone', get_lang('Phone'), array('size' => 20));
  208. if (api_get_setting('registration', 'phone') == 'true')
  209. $form->addRule('phone', get_lang('ThisFieldIsRequired'), 'required');
  210. // PICTURE
  211. /*if (api_get_setting('profile', 'picture') == 'true') {
  212. $form->addElement('file', 'picture', get_lang('AddPicture'));
  213. $allowed_picture_types = array ('jpg', 'jpeg', 'png', 'gif');
  214. $form->addRule('picture', get_lang('OnlyImagesAllowed').' ('.implode(',', $allowed_picture_types).')', 'filetype', $allowed_picture_types);
  215. }*/
  216. // LANGUAGE
  217. if (api_get_setting('registration', 'language') == 'true') {
  218. $form->addElement('select_language', 'language', get_lang('Language'));
  219. }
  220. // STUDENT/TEACHER
  221. if (api_get_setting('allow_registration_as_teacher') != 'false') {
  222. $form->addElement('radio', 'status', get_lang('Status'), get_lang('RegStudent'), STUDENT);
  223. $form->addElement('radio', 'status', null, get_lang('RegAdmin'), COURSEMANAGER);
  224. }
  225. // EXTENDED FIELDS
  226. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true') {
  227. $form->add_html_editor('competences', get_lang('MyCompetences'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  228. }
  229. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true') {
  230. $form->add_html_editor('diplomas', get_lang('MyDiplomas'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  231. }
  232. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'myteach') == 'true') {
  233. $form->add_html_editor('teach', get_lang('MyTeach'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  234. }
  235. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true') {
  236. $form->add_html_editor('openarea', get_lang('MyPersonalOpenArea'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  237. }
  238. if (api_get_setting('extended_profile') == 'true') {
  239. if (api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true' && api_get_setting('extendedprofile_registrationrequired', 'mycomptetences') == 'true') {
  240. $form->addRule('competences', get_lang('ThisFieldIsRequired'), 'required');
  241. }
  242. if (api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true' && api_get_setting('extendedprofile_registrationrequired', 'mydiplomas') == 'true') {
  243. $form->addRule('diplomas', get_lang('ThisFieldIsRequired'), 'required');
  244. }
  245. if (api_get_setting('extendedprofile_registration', 'myteach') == 'true' && api_get_setting('extendedprofile_registrationrequired', 'myteach') == 'true') {
  246. $form->addRule('teach', get_lang('ThisFieldIsRequired'), 'required');
  247. }
  248. if (api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true' && api_get_setting('extendedprofile_registrationrequired','mypersonalopenarea') == 'true') {
  249. $form->addRule('openarea', get_lang('ThisFieldIsRequired'), 'required');
  250. }
  251. }
  252. // EXTRA FIELDS
  253. $extra = UserManager::get_extra_fields(0, 50, 5, 'ASC');
  254. $extra_data = UserManager::get_extra_user_data(api_get_user_id(), true);
  255. foreach ($extra as $id => $field_details) {
  256. if ($field_details[6] == 0) {
  257. continue;
  258. }
  259. switch($field_details[2]) {
  260. case USER_FIELD_TYPE_TEXT:
  261. $form->addElement('text', 'extra_'.$field_details[1], $field_details[3], array('size' => 40));
  262. $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
  263. $form->applyFilter('extra_'.$field_details[1], 'trim');
  264. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  265. break;
  266. case USER_FIELD_TYPE_TEXTAREA:
  267. $form->add_html_editor('extra_'.$field_details[1], $field_details[3], false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  268. //$form->addElement('textarea', 'extra_'.$field_details[1], $field_details[3], array('size' => 80));
  269. $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
  270. $form->applyFilter('extra_'.$field_details[1], 'trim');
  271. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  272. break;
  273. case USER_FIELD_TYPE_RADIO:
  274. $group = array();
  275. foreach ($field_details[9] as $option_id => $option_details) {
  276. $options[$option_details[1]] = $option_details[2];
  277. $group[] =& HTML_QuickForm::createElement('radio', 'extra_'.$field_details[1], $option_details[1], $option_details[2].'<br />',$option_details[1]);
  278. }
  279. $form->addGroup($group, 'extra_'.$field_details[1], $field_details[3], '');
  280. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  281. break;
  282. case USER_FIELD_TYPE_SELECT:
  283. $get_lang_variables = false;
  284. if (in_array($field_details[1], array('mail_notify_message','mail_notify_invitation', 'mail_notify_group_message'))) {
  285. $get_lang_variables = true;
  286. }
  287. $options = array();
  288. foreach($field_details[9] as $option_id => $option_details) {
  289. if ($get_lang_variables) {
  290. $option_details[2] = get_lang($option_details[2]);
  291. }
  292. $options[$option_details[1]] = $option_details[2];
  293. }
  294. if ($get_lang_variables) {
  295. $field_details[3] = get_lang($field_details[3]);
  296. }
  297. $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('class'=>'chzn-select', 'id'=>'extra_'.$field_details[1]));
  298. break;
  299. case USER_FIELD_TYPE_SELECT_MULTIPLE:
  300. $options = array();
  301. foreach ($field_details[9] as $option_id => $option_details) {
  302. $options[$option_details[1]] = $option_details[2];
  303. }
  304. $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('multiple' => 'multiple'));
  305. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  306. break;
  307. case USER_FIELD_TYPE_DATE:
  308. $form->addElement('datepickerdate', 'extra_'.$field_details[1], $field_details[3], array('form_name' => 'registration'));
  309. $form->_elements[$form->_elementIndex['extra_'.$field_details[1]]]->setLocalOption('minYear', 1900);
  310. $defaults['extra_'.$field_details[1]] = date('Y-m-d 12:00:00');
  311. $form -> setDefaults($defaults);
  312. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  313. $form->applyFilter('theme', 'trim');
  314. break;
  315. case USER_FIELD_TYPE_DATETIME:
  316. $form->addElement('datepicker', 'extra_'.$field_details[1], $field_details[3], array('form_name' => 'registration'));
  317. $form->_elements[$form->_elementIndex['extra_'.$field_details[1]]]->setLocalOption('minYear', 1900);
  318. $defaults['extra_'.$field_details[1]] = date('Y-m-d 12:00:00');
  319. $form -> setDefaults($defaults);
  320. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  321. $form->applyFilter('theme', 'trim');
  322. break;
  323. case USER_FIELD_TYPE_DOUBLE_SELECT:
  324. foreach ($field_details[9] as $key => $element) {
  325. if ($element[2][0] == '*') {
  326. $values['*'][$element[0]] = str_replace('*', '', $element[2]);
  327. } else {
  328. $values[0][$element[0]] = $element[2];
  329. }
  330. }
  331. $group = '';
  332. $group[] =& HTML_QuickForm::createElement('select', 'extra_'.$field_details[1], '', $values[0], '');
  333. $group[] =& HTML_QuickForm::createElement('select', 'extra_'.$field_details[1].'*', '', $values['*'], '');
  334. $form->addGroup($group, 'extra_'.$field_details[1], $field_details[3], '&nbsp;');
  335. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  336. // recoding the selected values for double : if the user has selected certain values, we have to assign them to the correct select form
  337. if (key_exists('extra_'.$field_details[1], $extra_data)) {
  338. // exploding all the selected values (of both select forms)
  339. $selected_values = explode(';', $extra_data['extra_'.$field_details[1]]);
  340. $extra_data['extra_'.$field_details[1]] =array();
  341. // looping through the selected values and assigning the selected values to either the first or second select form
  342. foreach ($selected_values as $key => $selected_value) {
  343. if(is_array($values)){
  344. if (array_key_exists($selected_value, $values[0])) {
  345. $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1]] = $selected_value;
  346. } else {
  347. $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1].'*'] = $selected_value;
  348. }
  349. }
  350. }
  351. }
  352. break;
  353. case USER_FIELD_TYPE_DIVIDER:
  354. $form->addElement('static', $field_details[1], '<br /><strong>'.$field_details[3].'</strong>');
  355. break;
  356. }
  357. }
  358. }
  359. // Terms and conditions
  360. if (api_get_setting('allow_terms_conditions') == 'true') {
  361. $language = api_get_interface_language();
  362. $language = api_get_language_id($language);
  363. $term_preview = LegalManager::get_last_condition($language);
  364. if (!$term_preview) {
  365. //we load from the platform
  366. $language = api_get_setting('platformLanguage');
  367. $language = api_get_language_id($language);
  368. $term_preview = LegalManager::get_last_condition($language);
  369. //if is false we load from english
  370. if (!$term_preview){
  371. $language = api_get_language_id('english'); //this must work
  372. $term_preview = LegalManager::get_last_condition($language);
  373. }
  374. }
  375. // Version and language
  376. $form->addElement('hidden', 'legal_accept_type', $term_preview['version'].':'.$term_preview['language_id']);
  377. $form->addElement('hidden', 'legal_info', $term_preview['legal_id'].':'.$term_preview['language_id']);
  378. // Password
  379. if (isset($_SESSION['info_current_user'][1]) && isset($_SESSION['info_current_user'][2])) {
  380. $form->addElement('hidden', 'login', $_SESSION['info_current_user'][1]);
  381. $form->addElement('hidden', 'password', $_SESSION['info_current_user'][2]);
  382. }
  383. if ($term_preview['type'] == 1) {
  384. $form->addElement('checkbox', 'legal_accept', null, get_lang('IHaveReadAndAgree').'&nbsp;<a href="inscription.php?legal" target="_blank">'.get_lang('TermsAndConditions').'</a>');
  385. $form->addRule('legal_accept', get_lang('ThisFieldIsRequired'), 'required');
  386. } else {
  387. if (!empty($term_preview['content'])) {
  388. $preview = LegalManager::show_last_condition($term_preview);
  389. $term_preview = '<div class="row">
  390. <div class="label">'.get_lang('TermsAndConditions').'</div>
  391. <div class="formw">
  392. '.$preview.'
  393. <br />
  394. </div>
  395. </div>';
  396. $form->addElement('html', $term_preview);
  397. }
  398. }
  399. }
  400. $form->addElement('style_submit_button', 'submit', get_lang('RegisterUser'), 'class="a_button gray"');
  401. if (isset($_SESSION['user_language_choice']) && $_SESSION['user_language_choice'] != '') {
  402. $defaults['language'] = $_SESSION['user_language_choice'];
  403. } else {
  404. $defaults['language'] = api_get_setting('platformLanguage');
  405. }
  406. if (!empty($_GET['username'])) {
  407. $defaults['username'] = Security::remove_XSS($_GET['username']);
  408. }
  409. if (!empty($_GET['email'])) {
  410. $defaults['email'] = Security::remove_XSS($_GET['email']);
  411. }
  412. if (!empty($_GET['phone'])) {
  413. $defaults['phone'] = Security::remove_XSS($_GET['phone']);
  414. }
  415. if (api_get_setting('openid_authentication') == 'true' && !empty($_GET['openid'])) {
  416. $defaults['openid'] = Security::remove_XSS($_GET['openid']);
  417. }
  418. $defaults['status'] = STUDENT;
  419. if (is_array($extra_data)) {
  420. $defaults = array_merge($defaults, $extra_data);
  421. }
  422. $form->setDefaults($defaults);
  423. if ($form->validate()) {
  424. /*
  425. STORE THE NEW USER DATA INSIDE THE MAIN DATABASE
  426. */
  427. $values = $form->exportValues();
  428. $values['username'] = api_substr($values['username'], 0, USERNAME_MAX_LENGTH); //make *sure* the login isn't too long
  429. if (api_get_setting('allow_registration_as_teacher') == 'false') {
  430. $values['status'] = STUDENT;
  431. }
  432. // Added by Ivan Tcholakov, 06-MAR-2008.
  433. if (empty($values['official_code'])) {
  434. $values['official_code'] = api_strtoupper($values['username']);
  435. }
  436. // creating a new user
  437. $user_id = UserManager::create_user($values['firstname'], $values['lastname'], $values['status'], $values['email'], $values['username'], $values['pass1'], $values['official_code'], $values['language'], $values['phone'], $picture_uri);
  438. // Terms & Conditions
  439. if (api_get_setting('allow_terms_conditions') == 'true') {
  440. // update the terms & conditions
  441. if (isset($values['legal_accept_type'])) {
  442. $cond_array = explode(':', $values['legal_accept_type']);
  443. if (!empty($cond_array[0]) && !empty($cond_array[1])) {
  444. $time = time();
  445. $condition_to_save = intval($cond_array[0]).':'.intval($cond_array[1]).':'.$time;
  446. UserManager::update_extra_field_value($user_id, 'legal_accept', $condition_to_save);
  447. }
  448. }
  449. }
  450. // Register extra fields
  451. $extras = array();
  452. foreach ($values as $key => $value) {
  453. if (substr($key, 0, 6) == 'extra_') { //an extra field
  454. $extras[substr($key,6)] = $value;
  455. }
  456. }
  457. //update the extra fields
  458. $count_extra_field = count($extras);
  459. if ($count_extra_field > 0) {
  460. foreach ($extras as $key => $value) {
  461. $myres = UserManager::update_extra_field_value($user_id, $key, $value);
  462. }
  463. }
  464. if ($user_id) {
  465. // storing the extended profile
  466. $store_extended = false;
  467. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)." SET ";
  468. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true') {
  469. $sql_set[] = "competences = '".Database::escape_string($values['competences'])."'";
  470. $store_extended = true;
  471. }
  472. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true') {
  473. $sql_set[] = "diplomas = '".Database::escape_string($values['diplomas'])."'";
  474. $store_extended = true;
  475. }
  476. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'myteach') == 'true') {
  477. $sql_set[] = "teach = '".Database::escape_string($values['teach'])."'";
  478. $store_extended = true;
  479. }
  480. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true') {
  481. $sql_set[] = "openarea = '".Database::escape_string($values['openarea'])."'";
  482. $store_extended = true;
  483. }
  484. if ($store_extended) {
  485. $sql .= implode(',', $sql_set);
  486. $sql .= " WHERE user_id = '".Database::escape_string($user_id)."'";
  487. Database::query($sql);
  488. }
  489. // if there is a default duration of a valid account then we have to change the expiration_date accordingly
  490. if (api_get_setting('account_valid_duration') != '') {
  491. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)." SET expiration_date='registration_date+1' WHERE user_id='".$user_id."'";
  492. Database::query($sql);
  493. }
  494. // if the account has to be approved then we set the account to inactive, sent a mail to the platform admin and exit the page.
  495. if (api_get_setting('allow_registration') == 'approval') {
  496. $TABLE_USER = Database::get_main_table(TABLE_MAIN_USER);
  497. // 1. set account inactive
  498. $sql = "UPDATE ".$TABLE_USER." SET active='0' WHERE user_id='".$user_id."'";
  499. Database::query($sql);
  500. $table_main_admin = Database::get_main_table(TABLE_MAIN_ADMIN);
  501. if ($_configuration['multiple_access_urls']) {
  502. $access_url_id = api_get_current_access_url_id();
  503. $tbl_url_rel_user = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  504. $sql_get_id_admin = "SELECT admin.user_id FROM ".$tbl_url_rel_user." as url, ".$table_main_admin." as admin WHERE access_url_id='".$access_url_id."' AND admin.user_id=url.user_id";
  505. } else {
  506. $sql_get_id_admin = "SELECT * FROM ".$table_main_admin;
  507. }
  508. $result = Database::query($sql_get_id_admin);
  509. while ($row = Database::fetch_array($result)) {
  510. $sql_admin_list = "SELECT * FROM ".$TABLE_USER." WHERE user_id='".$row['user_id']."'";
  511. $result_list = Database::query($sql_admin_list);
  512. $admin_list = Database::fetch_array($result_list);
  513. $emailto = $admin_list['email'];
  514. // 2. send mail to the platform admin
  515. $emailfromaddr = api_get_setting('emailAdministrator');
  516. $emailfromname = api_get_setting('siteName');
  517. $emailsubject = get_lang('ApprovalForNewAccount',null,$values['language']).': '.$values['username'];
  518. $emailbody = get_lang('ApprovalForNewAccount',null,$values['language'])."\n";
  519. $emailbody .= get_lang('UserName',null,$values['language']).': '.$values['username']."\n";
  520. if (api_is_western_name_order()) {
  521. $emailbody .= get_lang('FirstName',null,$values['language']).': '.$values['firstname']."\n";
  522. $emailbody .= get_lang('LastName',null,$values['language']).': '.$values['lastname']."\n";
  523. } else {
  524. $emailbody .= get_lang('LastName',null,$values['language']).': '.$values['lastname']."\n";
  525. $emailbody .= get_lang('FirstName',null,$values['language']).': '.$values['firstname']."\n";
  526. }
  527. $emailbody .= get_lang('Email',null,$values['language']).': '.$values['email']."\n";
  528. $emailbody .= get_lang('Status',null,$values['language']).': '.$values['status']."\n\n";
  529. $emailbody .= get_lang('ManageUser',null,$values['language']).': '.api_get_path(WEB_CODE_PATH).'admin/user_edit.php?user_id='.$user_id;
  530. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  531. $email_admin = api_get_setting('emailAdministrator');
  532. @api_mail('', $emailto, $emailsubject, $emailbody, $sender_name, $email_admin);
  533. }
  534. // 3. exit the page
  535. unset($user_id);
  536. Display :: display_footer();
  537. exit;
  538. }
  539. /*
  540. SESSION REGISTERING
  541. */
  542. $_user['firstName'] = stripslashes($values['firstname']);
  543. $_user['lastName'] = stripslashes($values['lastname']);
  544. $_user['mail'] = $values['email'];
  545. $_user['language'] = $values['language'];
  546. $_user['user_id'] = $user_id;
  547. $is_allowedCreateCourse = $values['status'] == 1;
  548. api_session_register('_user');
  549. api_session_register('is_allowedCreateCourse');
  550. //stats
  551. event_login();
  552. // last user login date is now
  553. $user_last_login_datetime = 0; // used as a unix timestamp it will correspond to : 1 1 1970
  554. api_session_register('user_last_login_datetime');
  555. /*
  556. EMAIL NOTIFICATION
  557. */
  558. if (strpos($values['email'], '@') !== false) {
  559. // Let us predefine some variables. Be sure to change the from address!
  560. $recipient_name = api_get_person_name($values['firstname'], $values['lastname']);
  561. $email = $values['email'];
  562. $emailfromaddr = api_get_setting('emailAdministrator');
  563. $emailfromname = api_get_setting('siteName');
  564. $emailsubject = '['.api_get_setting('siteName').'] '.get_lang('YourReg',null,$_user['language']).' '.api_get_setting('siteName');
  565. // The body can be as long as you wish, and any combination of text and variables
  566. $portal_url = $_configuration['root_web'];
  567. if ($_configuration['multiple_access_urls']) {
  568. $access_url_id = api_get_current_access_url_id();
  569. if ($access_url_id != -1 ){
  570. $url = api_get_access_url($access_url_id);
  571. $portal_url = $url['url'];
  572. }
  573. }
  574. $emailbody = get_lang('Dear',null,$_user['language']).' '.stripslashes(Security::remove_XSS($recipient_name)).",\n\n".get_lang('YouAreReg',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('WithTheFollowingSettings',null,$_user['language'])."\n\n".get_lang('Username',null,$_user['language']).' : '.$values['username']."\n".get_lang('Pass',null,$_user['language']).' : '.stripslashes($values['pass1'])."\n\n".get_lang('Address',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('Is',null,$_user['language']).' : '.$portal_url."\n\n".get_lang('Problem',null,$_user['language'])."\n\n".get_lang('Formula',null,$_user['language']).",\n\n".api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'))."\n".get_lang('Manager',null,$_user['language']).' '.api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n".get_lang('Email',null,$_user['language']).' : '.api_get_setting('emailAdministrator');
  575. // Here we are forming one large header line
  576. // Every header must be followed by a \n except the last
  577. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  578. $email_admin = api_get_setting('emailAdministrator');
  579. @api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin);
  580. }
  581. }
  582. echo '<p>'.get_lang('Dear',null,$_user['language']).' '.stripslashes(Security::remove_XSS($recipient_name)).',<br /><br />'.get_lang('PersonalSettings',null,$_user['language']).".</p>\n";
  583. if (!empty ($values['email'])) {
  584. echo '<p>'.get_lang('MailHasBeenSent',null,$_user['language']).'.</p>';
  585. }
  586. $button_text = '';
  587. if ($is_allowedCreateCourse) {
  588. echo '<p>', get_lang('NowGoCreateYourCourse',null,$_user['language']), ".</p>\n";
  589. $action_url = '../create_course/add_course.php';
  590. $button_text = api_get_setting('course_validation') == 'true'
  591. ? get_lang('CreateCourseRequest', null, $_user['language'])
  592. : get_lang('CourseCreate', null, $_user['language']);
  593. } else {
  594. if (api_get_setting('allow_students_to_browse_courses') == 'true')
  595. $action_url = 'courses.php?action=subscribe';
  596. else
  597. $action_url = api_get_path(WEB_PATH).'user_portal.php';
  598. echo '<p>', get_lang('NowGoChooseYourCourses',null,$_user['language']), ".</p>\n";
  599. $button_text = get_lang('Next',null,$_user['language']);
  600. }
  601. // ?uidReset=true&uidReq=$_user['user_id']
  602. echo '<form action="', $action_url, '" method="post">', "\n", '<button type="submit" class="next" name="next" value="', get_lang('Next',null,$_user['language']), '" validationmsg=" ', get_lang('Next',null,$_user['language']), ' ">', $button_text, '</button>', "\n", '</form><br />', "\n";
  603. } else {
  604. $form->display();
  605. }
  606. Display :: display_footer();