inscription.php 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600
  1. <?php
  2. /* For licensing terms, see /dokeos_license.txt */
  3. /**
  4. ==============================================================================
  5. * This script displays a form for registering new users.
  6. * @package dokeos.auth
  7. ==============================================================================
  8. */
  9. // name of the language file that needs to be included
  10. $language_file = array('registration', 'admin');
  11. require '../inc/global.inc.php';
  12. require_once api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php';
  13. require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php';
  14. require_once api_get_path(CONFIGURATION_PATH).'profile.conf.php';
  15. require_once api_get_path(LIBRARY_PATH).'mail.lib.inc.php';
  16. require_once api_get_path(LIBRARY_PATH).'legal.lib.php';
  17. //require_once(api_get_path(LIBRARY_PATH).'fileManage.lib.php');
  18. //require_once(api_get_path(LIBRARY_PATH).'fileUpload.lib.php');
  19. //require_once (api_get_path(LIBRARY_PATH).'image.lib.php');
  20. // Load terms & conditions from the current lang
  21. if (api_get_setting('allow_terms_conditions') == 'true') {
  22. $get = array_keys($_GET);
  23. if (isset($get)) {
  24. if ($get[0] == 'legal'){
  25. //$language = api_get_setting('platformLanguage');
  26. $language = api_get_interface_language();
  27. $language = api_get_language_id($language);
  28. $term_preview = LegalManager::get_last_condition($language);
  29. if (!$term_preview) {
  30. //look for the default language
  31. $language = api_get_setting('platformLanguage');
  32. $language = api_get_language_id($language);
  33. $term_preview = LegalManager::get_last_condition($language);
  34. }
  35. $tool_name = get_lang('TermsAndConditions');
  36. Display :: display_header('');
  37. echo '<div class="actions-title">';
  38. echo $tool_name;
  39. echo '</div>';
  40. if (!empty($term_preview['content'])) {
  41. echo $term_preview['content'];
  42. } else {
  43. echo get_lang('ComingSoon');
  44. }
  45. Display :: display_footer();
  46. exit;
  47. }
  48. }
  49. }
  50. $tool_name = get_lang('Registration');
  51. Display :: display_header($tool_name);
  52. echo '<div class="actions-title">';
  53. echo $tool_name;
  54. echo '</div>';
  55. /****************/
  56. //Header of Configure Inscription
  57. $home= '../../home/';
  58. if ($_configuration['multiple_access_urls']==true) {
  59. $access_url_id = api_get_current_access_url_id();
  60. if ($access_url_id != -1){
  61. $url_info = api_get_access_url($access_url_id);
  62. // "http://" and the final "/" replaced
  63. $url = substr($url_info['url'],7,strlen($url_info['url'])-8);
  64. $clean_url = replace_dangerous_char($url);
  65. $clean_url = str_replace('/','-',$clean_url);
  66. $clean_url = $clean_url.'/';
  67. $home_old = '../../home/';
  68. $home= '../../home/'.$clean_url;
  69. }
  70. }
  71. if (!empty($_SESSION['user_language_choice'])) {
  72. $user_selected_language=$_SESSION['user_language_choice'];
  73. } elseif(!empty($_SESSION['_user']['language'])) {
  74. $user_selected_language=$_SESSION['_user']['language'];
  75. } else {
  76. $user_selected_language=get_setting('platformLanguage');
  77. }
  78. if(file_exists($home.'register_top_'.$user_selected_language.'.html')) {
  79. $home_top_temp = file_get_contents($home.'register_top_'.$user_selected_language.'.html');
  80. $open=str_replace('{rel_path}',api_get_path(REL_PATH),$home_top_temp);
  81. echo '<div style="border:1px solid #E1E1E1; padding:2px;">'.$open.'</div>';
  82. }
  83. /****************/
  84. // Forbidden to self-register
  85. if (api_get_setting('allow_registration') == 'false') {
  86. api_not_allowed();
  87. }
  88. //api_display_tool_title($tool_name);
  89. if (api_get_setting('allow_registration') == 'approval') {
  90. Display::display_normal_message(get_lang('YourAccountHasToBeApproved'));
  91. }
  92. //if openid was not found
  93. if (!empty($_GET['openid_msg']) && $_GET['openid_msg'] == 'idnotfound') {
  94. Display::display_warning_message(get_lang('OpenIDCouldNotBeFoundPleaseRegister'));
  95. }
  96. $form = new FormValidator('registration');
  97. if (api_get_setting('allow_terms_conditions') == 'true') {
  98. if (!isset($_SESSION['update_term_and_condition'][1])) {
  99. $display_all_form = true;
  100. } else {
  101. $display_all_form = false;
  102. }
  103. } else {
  104. $display_all_form = true;
  105. }
  106. if ($display_all_form === true) {
  107. if (api_is_western_name_order()) {
  108. // FIRST NAME and LAST NAME
  109. $form->addElement('text', 'firstname', get_lang('FirstName'), array('size' => 40));
  110. $form->addElement('text', 'lastname', get_lang('LastName'), array('size' => 40));
  111. } else {
  112. // LAST NAME and FIRST NAME
  113. $form->addElement('text', 'lastname', get_lang('LastName'), array('size' => 40));
  114. $form->addElement('text', 'firstname', get_lang('FirstName'), array('size' => 40));
  115. }
  116. $form->applyFilter(array('lastname', 'firstname'), 'trim');
  117. $form->addRule('lastname', get_lang('ThisFieldIsRequired'), 'required');
  118. $form->addRule('firstname', get_lang('ThisFieldIsRequired'), 'required');
  119. // EMAIL
  120. $form->addElement('text', 'email', get_lang('Email'), array('size' => 40));
  121. if (api_get_setting('registration', 'email') == 'true') {
  122. $form->addRule('email', get_lang('ThisFieldIsRequired'), 'required');
  123. }
  124. $form->addRule('email', get_lang('EmailWrong'), 'email');
  125. if (api_get_setting('openid_authentication') == 'true') {
  126. $form->addElement('text', 'openid', get_lang('OpenIDURL'), array('size' => 40));
  127. }
  128. /*
  129. // OFFICIAL CODE
  130. if (CONFVAL_ASK_FOR_OFFICIAL_CODE) {
  131. $form->addElement('text', 'official_code', get_lang('OfficialCode'), array('size' => 40));
  132. if (api_get_setting('registration', 'officialcode') == 'true')
  133. $form->addRule('official_code', get_lang('ThisFieldIsRequired'), 'required');
  134. }
  135. */
  136. // USERNAME
  137. $form->addElement('text', 'username', get_lang('UserName'), array('size' => USERNAME_MAX_LENGTH));
  138. $form->applyFilter('username','trim');
  139. $form->addRule('username', get_lang('ThisFieldIsRequired'), 'required');
  140. $form->addRule('username', sprintf(get_lang('UsernameMaxXCharacters'), (string)USERNAME_MAX_LENGTH), 'maxlength', USERNAME_MAX_LENGTH);
  141. $form->addRule('username', get_lang('UsernameWrong'), 'username');
  142. $form->addRule('username', get_lang('UserTaken'), 'username_available');
  143. // PASSWORD
  144. $form->addElement('password', 'pass1', get_lang('Pass'), array('size' => 20));
  145. $form->addElement('password', 'pass2', get_lang('Confirmation'), array('size' => 20));
  146. $form->addRule('pass1', get_lang('ThisFieldIsRequired'), 'required');
  147. $form->addRule('pass2', get_lang('ThisFieldIsRequired'), 'required');
  148. $form->addRule(array('pass1', 'pass2'), get_lang('PassTwo'), 'compare');
  149. if (CHECK_PASS_EASY_TO_FIND)
  150. $form->addRule('password1', get_lang('PassTooEasy').': '.api_generate_password(), 'callback', 'api_check_password');
  151. // PHONE
  152. $form->addElement('text', 'phone', get_lang('Phone'), array('size' => 20));
  153. if (api_get_setting('registration', 'phone') == 'true')
  154. $form->addRule('phone', get_lang('ThisFieldIsRequired'), 'required');
  155. // PICTURE
  156. /*if (api_get_setting('profile', 'picture') == 'true') {
  157. $form->addElement('file', 'picture', get_lang('AddPicture'));
  158. $allowed_picture_types = array ('jpg', 'jpeg', 'png', 'gif');
  159. $form->addRule('picture', get_lang('OnlyImagesAllowed').' ('.implode(',', $allowed_picture_types).')', 'filetype', $allowed_picture_types);
  160. }*/
  161. // LANGUAGE
  162. if (api_get_setting('registration', 'language') == 'true') {
  163. $form->addElement('select_language', 'language', get_lang('Language'));
  164. }
  165. // STUDENT/TEACHER
  166. if (api_get_setting('allow_registration_as_teacher') != 'false') {
  167. $form->addElement('radio', 'status', get_lang('Status'), get_lang('RegStudent'), STUDENT);
  168. $form->addElement('radio', 'status', null, get_lang('RegAdmin'), COURSEMANAGER);
  169. }
  170. // EXTENDED FIELDS
  171. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true') {
  172. $form->add_html_editor('competences', get_lang('MyCompetences'), false, false, array('ToolbarSet' => 'Profile', 'Width' => '100%', 'Height' => '130'));
  173. }
  174. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true') {
  175. $form->add_html_editor('diplomas', get_lang('MyDiplomas'), false, false, array('ToolbarSet' => 'Profile', 'Width' => '100%', 'Height' => '130'));
  176. }
  177. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'myteach') == 'true') {
  178. $form->add_html_editor('teach', get_lang('MyTeach'), false, false, array('ToolbarSet' => 'Profile', 'Width' => '100%', 'Height' => '130'));
  179. }
  180. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true') {
  181. $form->add_html_editor('openarea', get_lang('MyPersonalOpenArea'), false, false, array('ToolbarSet' => 'Profile', 'Width' => '100%', 'Height' => '130'));
  182. }
  183. if (api_get_setting('extended_profile') == 'true') {
  184. if (api_get_setting('extendedprofile_registrationrequired', 'mycomptetences') == 'true') {
  185. $form->addRule('competences', get_lang('ThisFieldIsRequired'), 'required');
  186. }
  187. if (api_get_setting('extendedprofile_registrationrequired', 'mydiplomas') == 'true') {
  188. $form->addRule('diplomas', get_lang('ThisFieldIsRequired'), 'required');
  189. }
  190. if (api_get_setting('extendedprofile_registrationrequired', 'myteach') == 'true') {
  191. $form->addRule('teach', get_lang('ThisFieldIsRequired'), 'required');
  192. }
  193. if (api_get_setting('extendedprofile_registrationrequired','mypersonalopenarea') == 'true') {
  194. $form->addRule('openarea', get_lang('ThisFieldIsRequired'), 'required');
  195. }
  196. }
  197. // EXTRA FIELDS
  198. $extra = UserManager::get_extra_fields(0, 50, 5, 'ASC');
  199. $extra_data = UserManager::get_extra_user_data(api_get_user_id(), true);
  200. foreach ($extra as $id => $field_details) {
  201. if ($field_details[6] == 0) {
  202. continue;
  203. }
  204. switch($field_details[2]) {
  205. case USER_FIELD_TYPE_TEXT:
  206. $form->addElement('text', 'extra_'.$field_details[1], $field_details[3], array('size' => 40));
  207. $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
  208. $form->applyFilter('extra_'.$field_details[1], 'trim');
  209. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  210. break;
  211. case USER_FIELD_TYPE_TEXTAREA:
  212. $form->add_html_editor('extra_'.$field_details[1], $field_details[3], false, false, array('ToolbarSet' => 'Profile', 'Width' => '100%', 'Height' => '130'));
  213. //$form->addElement('textarea', 'extra_'.$field_details[1], $field_details[3], array('size' => 80));
  214. $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
  215. $form->applyFilter('extra_'.$field_details[1], 'trim');
  216. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  217. break;
  218. case USER_FIELD_TYPE_RADIO:
  219. $group = array();
  220. foreach ($field_details[9] as $option_id => $option_details) {
  221. $options[$option_details[1]] = $option_details[2];
  222. $group[] =& HTML_QuickForm::createElement('radio', 'extra_'.$field_details[1], $option_details[1], $option_details[2].'<br />',$option_details[1]);
  223. }
  224. $form->addGroup($group, 'extra_'.$field_details[1], $field_details[3], '');
  225. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  226. break;
  227. case USER_FIELD_TYPE_SELECT:
  228. $options = array();
  229. foreach($field_details[9] as $option_id => $option_details) {
  230. $options[$option_details[1]] = $option_details[2];
  231. }
  232. $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, '');
  233. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  234. break;
  235. case USER_FIELD_TYPE_SELECT_MULTIPLE:
  236. $options = array();
  237. foreach ($field_details[9] as $option_id => $option_details) {
  238. $options[$option_details[1]] = $option_details[2];
  239. }
  240. $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('multiple' => 'multiple'));
  241. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  242. break;
  243. case USER_FIELD_TYPE_DATE:
  244. $form->addElement('datepickerdate', 'extra_'.$field_details[1], $field_details[3], array('form_name' => 'registration'));
  245. $form->_elements[$form->_elementIndex['extra_'.$field_details[1]]]->setLocalOption('minYear', 1900);
  246. $defaults['extra_'.$field_details[1]] = date('Y-m-d 12:00:00');
  247. $form -> setDefaults($defaults);
  248. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  249. $form->applyFilter('theme', 'trim');
  250. break;
  251. case USER_FIELD_TYPE_DATETIME:
  252. $form->addElement('datepicker', 'extra_'.$field_details[1], $field_details[3], array('form_name' => 'registration'));
  253. $form->_elements[$form->_elementIndex['extra_'.$field_details[1]]]->setLocalOption('minYear', 1900);
  254. $defaults['extra_'.$field_details[1]] = date('Y-m-d 12:00:00');
  255. $form -> setDefaults($defaults);
  256. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  257. $form->applyFilter('theme', 'trim');
  258. break;
  259. case USER_FIELD_TYPE_DOUBLE_SELECT:
  260. foreach ($field_details[9] as $key => $element) {
  261. if ($element[2][0] == '*') {
  262. $values['*'][$element[0]] = str_replace('*', '', $element[2]);
  263. } else {
  264. $values[0][$element[0]] = $element[2];
  265. }
  266. }
  267. $group = '';
  268. $group[] =& HTML_QuickForm::createElement('select', 'extra_'.$field_details[1], '', $values[0], '');
  269. $group[] =& HTML_QuickForm::createElement('select', 'extra_'.$field_details[1].'*', '', $values['*'], '');
  270. $form->addGroup($group, 'extra_'.$field_details[1], $field_details[3], '&nbsp;');
  271. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  272. // recoding the selected values for double : if the user has selected certain values, we have to assign them to the correct select form
  273. if (key_exists('extra_'.$field_details[1], $extra_data)) {
  274. // exploding all the selected values (of both select forms)
  275. $selected_values = explode(';', $extra_data['extra_'.$field_details[1]]);
  276. $extra_data['extra_'.$field_details[1]] =array();
  277. // looping through the selected values and assigning the selected values to either the first or second select form
  278. foreach ($selected_values as $key => $selected_value) {
  279. if(is_array($values)){
  280. if (array_key_exists($selected_value, $values[0])) {
  281. $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1]] = $selected_value;
  282. } else {
  283. $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1].'*'] = $selected_value;
  284. }
  285. }
  286. }
  287. }
  288. break;
  289. case USER_FIELD_TYPE_DIVIDER:
  290. $form->addElement('static', $field_details[1], '<br /><strong>'.$field_details[3].'</strong>');
  291. break;
  292. }
  293. }
  294. }
  295. //------------ Terms and conditions
  296. if (api_get_setting('allow_terms_conditions') == 'true') {
  297. //$language = api_get_setting('platformLanguage');
  298. $language = api_get_interface_language();
  299. $language = api_get_language_id($language);
  300. $term_preview = LegalManager::get_last_condition($language);
  301. if (!$term_preview) {
  302. //we load from the platform
  303. $language = api_get_setting('platformLanguage');
  304. $language = api_get_language_id($language);
  305. $term_preview = LegalManager::get_last_condition($language);
  306. //if is false we load from english
  307. if (!$term_preview){
  308. $language = api_get_language_id('english'); //this must work
  309. $term_preview = LegalManager::get_last_condition($language);
  310. }
  311. }
  312. // Version and language //password
  313. $form->addElement('hidden', 'legal_accept_type', $term_preview['version'].':'.$term_preview['language_id']);
  314. $form->addElement('hidden', 'legal_info', $term_preview['legal_id'].':'.$term_preview['language_id']);
  315. if (isset($_SESSION['info_current_user'][1]) && isset($_SESSION['info_current_user'][2])) {
  316. $form->addElement('hidden', 'login',$_SESSION['info_current_user'][1]);
  317. $form->addElement('hidden', 'password',$_SESSION['info_current_user'][2]);
  318. }
  319. if($term_preview['type'] == 1) {
  320. $form->addElement('checkbox', 'legal_accept', null, get_lang('IHaveReadAndAgree').'&nbsp;<a href="inscription.php?legal" target="_blank">'.get_lang('TermsAndConditions').'</a>');
  321. $form->addRule('extra_legal_accept', get_lang('ThisFieldIsRequired'), 'required');
  322. } else {
  323. if (!empty($term_preview['content'])) {
  324. $preview = LegalManager::show_last_condition($term_preview);
  325. $term_preview = '<div class="row">
  326. <div class="label">'.get_lang('TermsAndConditions').'</div>
  327. <div class="formw">
  328. '.$preview.'
  329. <br />
  330. </div>
  331. </div>';
  332. $form->addElement('html', $term_preview);
  333. }
  334. }
  335. }
  336. $form->addElement('style_submit_button', 'submit', get_lang('RegisterUser'), 'class="save"');
  337. if (isset($_SESSION['user_language_choice']) && $_SESSION['user_language_choice'] != '') {
  338. $defaults['language'] = $_SESSION['user_language_choice'];
  339. } else {
  340. $defaults['language'] = api_get_setting('platformLanguage');
  341. }
  342. if (!empty($_GET['username'])) {
  343. $defaults['username'] = Security::remove_XSS($_GET['username']);
  344. }
  345. if (!empty($_GET['email'])) {
  346. $defaults['email'] = Security::remove_XSS($_GET['email']);
  347. }
  348. if (!empty($_GET['phone'])) {
  349. $defaults['phone'] = Security::remove_XSS($_GET['phone']);
  350. }
  351. if (api_get_setting('openid_authentication') == 'true' && !empty($_GET['openid'])) {
  352. $defaults['openid'] = Security::remove_XSS($_GET['openid']);
  353. }
  354. $defaults['status'] = STUDENT;
  355. $defaults = array_merge($defaults, $extra_data);
  356. $form->setDefaults($defaults);
  357. if ($form->validate()) {
  358. /*-----------------------------------------------------
  359. STORE THE NEW USER DATA INSIDE THE MAIN DOKEOS DATABASE
  360. -----------------------------------------------------*/
  361. $values = $form->exportValues();
  362. $values['username'] = api_substr($values['username'], 0, USERNAME_MAX_LENGTH); //make *sure* the login isn't too long
  363. if (api_get_setting('allow_registration_as_teacher') == 'false') {
  364. $values['status'] = STUDENT;
  365. }
  366. // creating a new user
  367. $user_id = UserManager::create_user($values['firstname'], $values['lastname'], $values['status'], $values['email'], $values['username'], $values['pass1'], $values['official_code'], $values['language'], $values['phone'], $picture_uri);
  368. // Terms & Conditions
  369. if (api_get_setting('allow_terms_conditions') == 'true') {
  370. // update the terms & conditions
  371. if (isset($values['legal_accept_type'])) {
  372. $cond_array = explode(':', $values['legal_accept_type']);
  373. if (!empty($cond_array[0]) && !empty($cond_array[1])) {
  374. $time = time();
  375. $condition_to_save = intval($cond_array[0]).':'.intval($cond_array[1]).':'.$time;
  376. UserManager::update_extra_field_value($user_id, 'legal_accept', $condition_to_save);
  377. }
  378. }
  379. }
  380. /****** register extra fields*************/
  381. $extras = array();
  382. foreach ($values as $key => $value) {
  383. if (substr($key, 0, 6) == 'extra_') { //an extra field
  384. $extras[substr($key,6)] = $value;
  385. } else {
  386. $sql .= " $key = '".Database::escape_string($value)."',";
  387. }
  388. }
  389. //update the extra fields
  390. $count_extra_field = count($extras);
  391. if ($count_extra_field > 0) {
  392. foreach ($extras as $key => $value) {
  393. $myres = UserManager::update_extra_field_value($user_id, $key, $value);
  394. }
  395. }
  396. /********************************************/
  397. if ($user_id) {
  398. // storing the extended profile
  399. $store_extended = false;
  400. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)." SET ";
  401. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true') {
  402. $sql_set[] = "competences = '".Database::escape_string($values['competences'])."'";
  403. $store_extended = true;
  404. }
  405. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true') {
  406. $sql_set[] = "diplomas = '".Database::escape_string($values['diplomas'])."'";
  407. $store_extended = true;
  408. }
  409. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'myteach') == 'true') {
  410. $sql_set[] = "teach = '".Database::escape_string($values['teach'])."'";
  411. $store_extended = true;
  412. }
  413. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true') {
  414. $sql_set[] = "openarea = '".Database::escape_string($values['openarea'])."'";
  415. $store_extended = true;
  416. }
  417. if ($store_extended) {
  418. $sql .= implode(',', $sql_set);
  419. $sql .= " WHERE user_id = '".Database::escape_string($user_id)."'";
  420. Database::query($sql, __FILE__, __LINE__);
  421. }
  422. // if there is a default duration of a valid account then we have to change the expiration_date accordingly
  423. if (api_get_setting('account_valid_duration') != '') {
  424. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)."
  425. SET expiration_date='registration_date+1' WHERE user_id='".$user_id."'";
  426. Database::query($sql, __FILE__, __LINE__);
  427. }
  428. // if the account has to be approved then we set the account to inactive, sent a mail to the platform admin and exit the page.
  429. if (api_get_setting('allow_registration') == 'approval') {
  430. $TABLE_USER = Database::get_main_table(TABLE_MAIN_USER);
  431. // 1. set account inactive
  432. $sql = "UPDATE ".$TABLE_USER." SET active='0' WHERE user_id='".$user_id."'";
  433. Database::query($sql, __FILE__, __LINE__);
  434. $sql_get_id_admin = "SELECT * FROM ".Database::get_main_table(TABLE_MAIN_ADMIN);
  435. $result = Database::query($sql_get_id_admin, __FILE__, __LINE__);
  436. while ($row = Database::fetch_array($result)) {
  437. $sql_admin_list = "SELECT * FROM ".$TABLE_USER." WHERE user_id='".$row['user_id']."'";
  438. $result_list = Database::query($sql_admin_list, __FILE__, __LINE__);
  439. $admin_list = Database::fetch_array($result_list);
  440. $emailto = $admin_list['email'];
  441. // 2. send mail to the platform admin
  442. $emailfromaddr = api_get_setting('emailAdministrator');
  443. $emailfromname = api_get_setting('siteName');
  444. $emailsubject = get_lang('ApprovalForNewAccount').': '.$values['username'];
  445. $emailbody = get_lang('ApprovalForNewAccount')."\n";
  446. $emailbody .= get_lang('UserName').': '.$values['username']."\n";
  447. if (api_is_western_name_order()) {
  448. $emailbody .= get_lang('FirstName').': '.$values['firstname']."\n";
  449. $emailbody .= get_lang('LastName').': '.$values['lastname']."\n";
  450. } else {
  451. $emailbody .= get_lang('LastName').': '.$values['lastname']."\n";
  452. $emailbody .= get_lang('FirstName').': '.$values['firstname']."\n";
  453. }
  454. $emailbody .= get_lang('Email').': '.$values['email']."\n";
  455. $emailbody .= get_lang('Status').': '.$values['status']."\n\n";
  456. $emailbody .= get_lang('ManageUser').': '.api_get_path(WEB_CODE_PATH).'admin/user_edit.php?user_id='.$user_id;
  457. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  458. $email_admin = api_get_setting('emailAdministrator');
  459. @api_mail('', $emailto, $emailsubject, $emailbody, $sender_name, $email_admin);
  460. }
  461. // 3. exit the page
  462. unset($user_id);
  463. Display :: display_footer();
  464. exit;
  465. }
  466. /*--------------------------------------
  467. SESSION REGISTERING
  468. --------------------------------------*/
  469. $_user['firstName'] = stripslashes($values['firstname']);
  470. $_user['lastName'] = stripslashes($values['lastname']);
  471. $_user['mail'] = $values['email'];
  472. $_user['language'] = $values['language'];
  473. $_user['user_id'] = $user_id;
  474. $is_allowedCreateCourse = $values['status'] == 1;
  475. api_session_register('_user');
  476. api_session_register('is_allowedCreateCourse');
  477. //stats
  478. event_login();
  479. // last user login date is now
  480. $user_last_login_datetime = 0; // used as a unix timestamp it will correspond to : 1 1 1970
  481. api_session_register('user_last_login_datetime');
  482. /*--------------------------------------
  483. EMAIL NOTIFICATION
  484. --------------------------------------*/
  485. if (strpos($values['email'], '@') !== false) {
  486. // Let us predefine some variables. Be sure to change the from address!
  487. $recipient_name = api_get_person_name($values['firstname'], $values['lastname']);
  488. $email = $values['email'];
  489. $emailfromaddr = api_get_setting('emailAdministrator');
  490. $emailfromname = api_get_setting('siteName');
  491. $emailsubject = "[".api_get_setting('siteName')."] ".get_lang('YourReg')." ".api_get_setting('siteName');
  492. // The body can be as long as you wish, and any combination of text and variables
  493. $portal_url = $_configuration['root_web'];
  494. if ($_configuration['multiple_access_urls']) {
  495. $access_url_id = api_get_current_access_url_id();
  496. if ($access_url_id != -1 ){
  497. $url = api_get_access_url($access_url_id);
  498. $portal_url = $url['url'];
  499. }
  500. }
  501. $emailbody = get_lang('Dear')." ".stripslashes(Security::remove_XSS($recipient_name)).",\n\n".get_lang('YouAreReg')." ".api_get_setting('siteName')." ".get_lang('WithTheFollowingSettings')."\n\n".get_lang('Username')." : ".$values['username']."\n".get_lang('Pass')." : ".stripslashes($values['pass1'])."\n\n".get_lang('Address')." ".api_get_setting('siteName')." ".get_lang('Is')." : ".$portal_url."\n\n".get_lang('Problem')."\n\n".get_lang('Formula').",\n\n".api_get_setting('administratorName')." ".api_get_setting('administratorSurname')."\n".get_lang('Manager')." ".api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n".get_lang('Email')." : ".api_get_setting('emailAdministrator');
  502. // Here we are forming one large header line
  503. // Every header must be followed by a \n except the last
  504. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  505. $email_admin = api_get_setting('emailAdministrator');
  506. @api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin);
  507. }
  508. }
  509. echo "<p>".get_lang('Dear')." ".stripslashes(Security::remove_XSS($recipient_name)).",<br /><br />".get_lang('PersonalSettings').".</p>\n";
  510. if (!empty ($values['email'])) {
  511. echo "<p>".get_lang('MailHasBeenSent').".</p>";
  512. }
  513. $button_text = "";
  514. if ($is_allowedCreateCourse) {
  515. echo "<p>", get_lang('NowGoCreateYourCourse'), ".</p>\n";
  516. $action_url = "../create_course/add_course.php";
  517. $button_text = get_lang('CourseCreate');
  518. } else {
  519. echo "<p>", get_lang('NowGoChooseYourCourses'), ".</p>\n";
  520. $action_url = "courses.php?action=subscribe";
  521. $button_text = get_lang('Next');
  522. }
  523. // ?uidReset=true&uidReq=$_user['user_id']
  524. echo "<form action=\"", $action_url, "\" method=\"post\">\n", "<button type=\"submit\" class=\"next\" name=\"next\" value=\"", get_lang('Next'), "\" validationmsg=\" ", get_lang('Next'), " \">".$button_text."</button>\n", "</form><br />\n";
  525. } else {
  526. $form->display();
  527. }
  528. ?>
  529. <br />
  530. <?php
  531. if (!isset($_POST['username'])) {
  532. ?>
  533. <div class="actions">
  534. <a href="<?php echo api_get_path(WEB_PATH); ?>" class="fake_button_back" ><?php echo get_lang('Back'); ?></a>
  535. </div>
  536. <?php
  537. }
  538. ?>
  539. <?php
  540. /*
  541. ==============================================================================
  542. FOOTER
  543. ==============================================================================
  544. */
  545. Display :: display_footer();