inscription.php 31 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * This script displays a form for registering new users.
  5. * @package chamilo.auth
  6. */
  7. $language_file = array('registration', 'admin');
  8. if (!empty($_POST['language'])) { //quick hack to adapt the registration form result to the selected registration language
  9. $_GET['language'] = $_POST['language'];
  10. }
  11. require_once '../inc/global.inc.php';
  12. require_once api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php';
  13. require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php';
  14. require_once api_get_path(CONFIGURATION_PATH).'profile.conf.php';
  15. require_once api_get_path(LIBRARY_PATH).'mail.lib.inc.php';
  16. require_once api_get_path(LIBRARY_PATH).'legal.lib.php';
  17. // Load terms & conditions from the current lang
  18. if (api_get_setting('allow_terms_conditions') == 'true') {
  19. $get = array_keys($_GET);
  20. if (isset($get)) {
  21. if ($get[0] == 'legal'){
  22. $language = api_get_interface_language();
  23. $language = api_get_language_id($language);
  24. $term_preview = LegalManager::get_last_condition($language);
  25. if (!$term_preview) {
  26. //look for the default language
  27. $language = api_get_setting('platformLanguage');
  28. $language = api_get_language_id($language);
  29. $term_preview = LegalManager::get_last_condition($language);
  30. }
  31. $tool_name = get_lang('TermsAndConditions');
  32. Display :: display_header('');
  33. echo '<div class="actions-title">';
  34. echo $tool_name;
  35. echo '</div>';
  36. if (!empty($term_preview['content'])) {
  37. echo $term_preview['content'];
  38. } else {
  39. echo get_lang('ComingSoon');
  40. }
  41. Display :: display_footer();
  42. exit;
  43. }
  44. }
  45. }
  46. $tool_name = get_lang('Registration',null,(!empty($_POST['language'])?api_get_valid_language($_POST['language']):$_user['language']));
  47. Display :: display_header($tool_name);
  48. echo Display::tag('h1', $tool_name);
  49. $home = api_get_path(SYS_PATH).'home/';
  50. if ($_configuration['multiple_access_urls']) {
  51. $access_url_id = api_get_current_access_url_id();
  52. if ($access_url_id != -1) {
  53. $url_info = api_get_access_url($access_url_id);
  54. $url = api_remove_trailing_slash(preg_replace('/https?:\/\//i', '', $url_info['url']));
  55. $clean_url = replace_dangerous_char($url);
  56. $clean_url = str_replace('/', '-', $clean_url);
  57. $clean_url .= '/';
  58. $home_old = api_get_path(SYS_PATH).'home/';
  59. $home = api_get_path(SYS_PATH).'home/'.$clean_url;
  60. }
  61. }
  62. if (!empty($_SESSION['user_language_choice'])) {
  63. $user_selected_language = $_SESSION['user_language_choice'];
  64. } elseif (!empty($_SESSION['_user']['language'])) {
  65. $user_selected_language = $_SESSION['_user']['language'];
  66. } else {
  67. $user_selected_language = get_setting('platformLanguage');
  68. }
  69. if (file_exists($home.'register_top_'.$user_selected_language.'.html')) {
  70. $home_top_temp = @(string)file_get_contents($home.'register_top_'.$user_selected_language.'.html');
  71. $open = str_replace('{rel_path}', api_get_path(REL_PATH), $home_top_temp);
  72. $open = api_to_system_encoding($open, api_detect_encoding(strip_tags($open)));
  73. if (!empty($open)) {
  74. echo '<div style="border:1px solid #E1E1E1; padding:2px;">'.$open.'</div>';
  75. }
  76. }
  77. // Forbidden to self-register
  78. if (api_get_setting('allow_registration') == 'false') {
  79. api_not_allowed();
  80. }
  81. //api_display_tool_title($tool_name);
  82. if (api_get_setting('allow_registration') == 'approval') {
  83. Display::display_normal_message(get_lang('YourAccountHasToBeApproved'));
  84. }
  85. //if openid was not found
  86. if (!empty($_GET['openid_msg']) && $_GET['openid_msg'] == 'idnotfound') {
  87. Display::display_warning_message(get_lang('OpenIDCouldNotBeFoundPleaseRegister'));
  88. }
  89. $form = new FormValidator('registration');
  90. if (api_get_setting('allow_terms_conditions') == 'true') {
  91. $display_all_form = !isset($_SESSION['update_term_and_condition'][1]);
  92. } else {
  93. $display_all_form = true;
  94. }
  95. if ($display_all_form) {
  96. if (api_is_western_name_order()) {
  97. // FIRST NAME and LAST NAME
  98. $form->addElement('text', 'firstname', get_lang('FirstName'), array('size' => 40));
  99. $form->addElement('text', 'lastname', get_lang('LastName'), array('size' => 40));
  100. } else {
  101. // LAST NAME and FIRST NAME
  102. $form->addElement('text', 'lastname', get_lang('LastName'), array('size' => 40));
  103. $form->addElement('text', 'firstname', get_lang('FirstName'), array('size' => 40));
  104. }
  105. $form->applyFilter(array('lastname', 'firstname'), 'trim');
  106. $form->addRule('lastname', get_lang('ThisFieldIsRequired'), 'required');
  107. $form->addRule('firstname', get_lang('ThisFieldIsRequired'), 'required');
  108. // EMAIL
  109. $form->addElement('text', 'email', get_lang('Email'), array('size' => 40));
  110. if (api_get_setting('registration', 'email') == 'true') {
  111. $form->addRule('email', get_lang('ThisFieldIsRequired'), 'required');
  112. }
  113. $form->addRule('email', get_lang('EmailWrong'), 'email');
  114. if (api_get_setting('openid_authentication') == 'true') {
  115. $form->addElement('text', 'openid', get_lang('OpenIDURL'), array('size' => 40));
  116. }
  117. // Enabled by Ivan Tcholakov, 06-APR-2009. CONFVAL_ASK_FOR_OFFICIAL_CODE = false by default.
  118. // OFFICIAL CODE
  119. if (CONFVAL_ASK_FOR_OFFICIAL_CODE) {
  120. $form->addElement('text', 'official_code', get_lang('OfficialCode'), array('size' => 40));
  121. if (api_get_setting('registration', 'officialcode') == 'true')
  122. $form->addRule('official_code', get_lang('ThisFieldIsRequired'), 'required');
  123. }
  124. //
  125. // USERNAME
  126. $form->addElement('text', 'username', get_lang('UserName'), array('size' => USERNAME_MAX_LENGTH));
  127. $form->applyFilter('username','trim');
  128. $form->addRule('username', get_lang('ThisFieldIsRequired'), 'required');
  129. $form->addRule('username', sprintf(get_lang('UsernameMaxXCharacters'), (string)USERNAME_MAX_LENGTH), 'maxlength', USERNAME_MAX_LENGTH);
  130. $form->addRule('username', get_lang('UsernameWrong'), 'username');
  131. $form->addRule('username', get_lang('UserTaken'), 'username_available');
  132. // PASSWORD
  133. $form->addElement('password', 'pass1', get_lang('Pass'), array('size' => 20, 'autocomplete' => 'off'));
  134. $form->addElement('password', 'pass2', get_lang('Confirmation'), array('size' => 20, 'autocomplete' => 'off'));
  135. $form->addRule('pass1', get_lang('ThisFieldIsRequired'), 'required');
  136. $form->addRule('pass2', get_lang('ThisFieldIsRequired'), 'required');
  137. $form->addRule(array('pass1', 'pass2'), get_lang('PassTwo'), 'compare');
  138. if (CHECK_PASS_EASY_TO_FIND)
  139. $form->addRule('password1', get_lang('PassTooEasy').': '.api_generate_password(), 'callback', 'api_check_password');
  140. // PHONE
  141. $form->addElement('text', 'phone', get_lang('Phone'), array('size' => 20));
  142. if (api_get_setting('registration', 'phone') == 'true')
  143. $form->addRule('phone', get_lang('ThisFieldIsRequired'), 'required');
  144. // PICTURE
  145. /*if (api_get_setting('profile', 'picture') == 'true') {
  146. $form->addElement('file', 'picture', get_lang('AddPicture'));
  147. $allowed_picture_types = array ('jpg', 'jpeg', 'png', 'gif');
  148. $form->addRule('picture', get_lang('OnlyImagesAllowed').' ('.implode(',', $allowed_picture_types).')', 'filetype', $allowed_picture_types);
  149. }*/
  150. // LANGUAGE
  151. if (api_get_setting('registration', 'language') == 'true') {
  152. $form->addElement('select_language', 'language', get_lang('Language'));
  153. }
  154. // STUDENT/TEACHER
  155. if (api_get_setting('allow_registration_as_teacher') != 'false') {
  156. $form->addElement('radio', 'status', get_lang('Status'), get_lang('RegStudent'), STUDENT);
  157. $form->addElement('radio', 'status', null, get_lang('RegAdmin'), COURSEMANAGER);
  158. }
  159. // EXTENDED FIELDS
  160. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true') {
  161. $form->add_html_editor('competences', get_lang('MyCompetences'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  162. }
  163. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true') {
  164. $form->add_html_editor('diplomas', get_lang('MyDiplomas'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  165. }
  166. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'myteach') == 'true') {
  167. $form->add_html_editor('teach', get_lang('MyTeach'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  168. }
  169. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true') {
  170. $form->add_html_editor('openarea', get_lang('MyPersonalOpenArea'), false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  171. }
  172. if (api_get_setting('extended_profile') == 'true') {
  173. if (api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true' && api_get_setting('extendedprofile_registrationrequired', 'mycomptetences') == 'true') {
  174. $form->addRule('competences', get_lang('ThisFieldIsRequired'), 'required');
  175. }
  176. if (api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true' && api_get_setting('extendedprofile_registrationrequired', 'mydiplomas') == 'true') {
  177. $form->addRule('diplomas', get_lang('ThisFieldIsRequired'), 'required');
  178. }
  179. if (api_get_setting('extendedprofile_registration', 'myteach') == 'true' && api_get_setting('extendedprofile_registrationrequired', 'myteach') == 'true') {
  180. $form->addRule('teach', get_lang('ThisFieldIsRequired'), 'required');
  181. }
  182. if (api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true' && api_get_setting('extendedprofile_registrationrequired','mypersonalopenarea') == 'true') {
  183. $form->addRule('openarea', get_lang('ThisFieldIsRequired'), 'required');
  184. }
  185. }
  186. // EXTRA FIELDS
  187. $extra = UserManager::get_extra_fields(0, 50, 5, 'ASC');
  188. $extra_data = UserManager::get_extra_user_data(api_get_user_id(), true);
  189. foreach ($extra as $id => $field_details) {
  190. if ($field_details[6] == 0) {
  191. continue;
  192. }
  193. switch($field_details[2]) {
  194. case USER_FIELD_TYPE_TEXT:
  195. $form->addElement('text', 'extra_'.$field_details[1], $field_details[3], array('size' => 40));
  196. $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
  197. $form->applyFilter('extra_'.$field_details[1], 'trim');
  198. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  199. break;
  200. case USER_FIELD_TYPE_TEXTAREA:
  201. $form->add_html_editor('extra_'.$field_details[1], $field_details[3], false, false, array('ToolbarSet' => 'register', 'Width' => '100%', 'Height' => '130'));
  202. //$form->addElement('textarea', 'extra_'.$field_details[1], $field_details[3], array('size' => 80));
  203. $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
  204. $form->applyFilter('extra_'.$field_details[1], 'trim');
  205. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  206. break;
  207. case USER_FIELD_TYPE_RADIO:
  208. $group = array();
  209. foreach ($field_details[9] as $option_id => $option_details) {
  210. $options[$option_details[1]] = $option_details[2];
  211. $group[] =& HTML_QuickForm::createElement('radio', 'extra_'.$field_details[1], $option_details[1], $option_details[2].'<br />',$option_details[1]);
  212. }
  213. $form->addGroup($group, 'extra_'.$field_details[1], $field_details[3], '');
  214. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  215. break;
  216. case USER_FIELD_TYPE_SELECT:
  217. $get_lang_variables = false;
  218. if (in_array($field_details[1], array('mail_notify_message','mail_notify_invitation', 'mail_notify_group_message'))) {
  219. $get_lang_variables = true;
  220. }
  221. $options = array();
  222. foreach($field_details[9] as $option_id => $option_details) {
  223. if ($get_lang_variables) {
  224. $option_details[2] = get_lang($option_details[2]);
  225. }
  226. $options[$option_details[1]] = $option_details[2];
  227. }
  228. if ($get_lang_variables) {
  229. $field_details[3] = get_lang($field_details[3]);
  230. }
  231. $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, '');
  232. break;
  233. case USER_FIELD_TYPE_SELECT_MULTIPLE:
  234. $options = array();
  235. foreach ($field_details[9] as $option_id => $option_details) {
  236. $options[$option_details[1]] = $option_details[2];
  237. }
  238. $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('multiple' => 'multiple'));
  239. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  240. break;
  241. case USER_FIELD_TYPE_DATE:
  242. $form->addElement('datepickerdate', 'extra_'.$field_details[1], $field_details[3], array('form_name' => 'registration'));
  243. $form->_elements[$form->_elementIndex['extra_'.$field_details[1]]]->setLocalOption('minYear', 1900);
  244. $defaults['extra_'.$field_details[1]] = date('Y-m-d 12:00:00');
  245. $form -> setDefaults($defaults);
  246. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  247. $form->applyFilter('theme', 'trim');
  248. break;
  249. case USER_FIELD_TYPE_DATETIME:
  250. $form->addElement('datepicker', 'extra_'.$field_details[1], $field_details[3], array('form_name' => 'registration'));
  251. $form->_elements[$form->_elementIndex['extra_'.$field_details[1]]]->setLocalOption('minYear', 1900);
  252. $defaults['extra_'.$field_details[1]] = date('Y-m-d 12:00:00');
  253. $form -> setDefaults($defaults);
  254. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  255. $form->applyFilter('theme', 'trim');
  256. break;
  257. case USER_FIELD_TYPE_DOUBLE_SELECT:
  258. foreach ($field_details[9] as $key => $element) {
  259. if ($element[2][0] == '*') {
  260. $values['*'][$element[0]] = str_replace('*', '', $element[2]);
  261. } else {
  262. $values[0][$element[0]] = $element[2];
  263. }
  264. }
  265. $group = '';
  266. $group[] =& HTML_QuickForm::createElement('select', 'extra_'.$field_details[1], '', $values[0], '');
  267. $group[] =& HTML_QuickForm::createElement('select', 'extra_'.$field_details[1].'*', '', $values['*'], '');
  268. $form->addGroup($group, 'extra_'.$field_details[1], $field_details[3], '&nbsp;');
  269. if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
  270. // recoding the selected values for double : if the user has selected certain values, we have to assign them to the correct select form
  271. if (key_exists('extra_'.$field_details[1], $extra_data)) {
  272. // exploding all the selected values (of both select forms)
  273. $selected_values = explode(';', $extra_data['extra_'.$field_details[1]]);
  274. $extra_data['extra_'.$field_details[1]] =array();
  275. // looping through the selected values and assigning the selected values to either the first or second select form
  276. foreach ($selected_values as $key => $selected_value) {
  277. if(is_array($values)){
  278. if (array_key_exists($selected_value, $values[0])) {
  279. $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1]] = $selected_value;
  280. } else {
  281. $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1].'*'] = $selected_value;
  282. }
  283. }
  284. }
  285. }
  286. break;
  287. case USER_FIELD_TYPE_DIVIDER:
  288. $form->addElement('static', $field_details[1], '<br /><strong>'.$field_details[3].'</strong>');
  289. break;
  290. }
  291. }
  292. }
  293. // Terms and conditions
  294. if (api_get_setting('allow_terms_conditions') == 'true') {
  295. $language = api_get_interface_language();
  296. $language = api_get_language_id($language);
  297. $term_preview = LegalManager::get_last_condition($language);
  298. if (!$term_preview) {
  299. //we load from the platform
  300. $language = api_get_setting('platformLanguage');
  301. $language = api_get_language_id($language);
  302. $term_preview = LegalManager::get_last_condition($language);
  303. //if is false we load from english
  304. if (!$term_preview){
  305. $language = api_get_language_id('english'); //this must work
  306. $term_preview = LegalManager::get_last_condition($language);
  307. }
  308. }
  309. // Version and language
  310. $form->addElement('hidden', 'legal_accept_type', $term_preview['version'].':'.$term_preview['language_id']);
  311. $form->addElement('hidden', 'legal_info', $term_preview['legal_id'].':'.$term_preview['language_id']);
  312. // Password
  313. if (isset($_SESSION['info_current_user'][1]) && isset($_SESSION['info_current_user'][2])) {
  314. $form->addElement('hidden', 'login', $_SESSION['info_current_user'][1]);
  315. $form->addElement('hidden', 'password', $_SESSION['info_current_user'][2]);
  316. }
  317. if ($term_preview['type'] == 1) {
  318. $form->addElement('checkbox', 'legal_accept', null, get_lang('IHaveReadAndAgree').'&nbsp;<a href="inscription.php?legal" target="_blank">'.get_lang('TermsAndConditions').'</a>');
  319. $form->addRule('legal_accept', get_lang('ThisFieldIsRequired'), 'required');
  320. } else {
  321. if (!empty($term_preview['content'])) {
  322. $preview = LegalManager::show_last_condition($term_preview);
  323. $term_preview = '<div class="row">
  324. <div class="label">'.get_lang('TermsAndConditions').'</div>
  325. <div class="formw">
  326. '.$preview.'
  327. <br />
  328. </div>
  329. </div>';
  330. $form->addElement('html', $term_preview);
  331. }
  332. }
  333. }
  334. $form->addElement('style_submit_button', 'submit', get_lang('RegisterUser'), 'class="save"');
  335. if (isset($_SESSION['user_language_choice']) && $_SESSION['user_language_choice'] != '') {
  336. $defaults['language'] = $_SESSION['user_language_choice'];
  337. } else {
  338. $defaults['language'] = api_get_setting('platformLanguage');
  339. }
  340. if (!empty($_GET['username'])) {
  341. $defaults['username'] = Security::remove_XSS($_GET['username']);
  342. }
  343. if (!empty($_GET['email'])) {
  344. $defaults['email'] = Security::remove_XSS($_GET['email']);
  345. }
  346. if (!empty($_GET['phone'])) {
  347. $defaults['phone'] = Security::remove_XSS($_GET['phone']);
  348. }
  349. if (api_get_setting('openid_authentication') == 'true' && !empty($_GET['openid'])) {
  350. $defaults['openid'] = Security::remove_XSS($_GET['openid']);
  351. }
  352. $defaults['status'] = STUDENT;
  353. if (is_array($extra_data)) {
  354. $defaults = array_merge($defaults, $extra_data);
  355. }
  356. $form->setDefaults($defaults);
  357. if ($form->validate()) {
  358. /*
  359. STORE THE NEW USER DATA INSIDE THE MAIN DATABASE
  360. */
  361. $values = $form->exportValues();
  362. $values['username'] = api_substr($values['username'], 0, USERNAME_MAX_LENGTH); //make *sure* the login isn't too long
  363. if (api_get_setting('allow_registration_as_teacher') == 'false') {
  364. $values['status'] = STUDENT;
  365. }
  366. // Added by Ivan Tcholakov, 06-MAR-2008.
  367. if (empty($values['official_code'])) {
  368. $values['official_code'] = api_strtoupper($values['username']);
  369. }
  370. // creating a new user
  371. $user_id = UserManager::create_user($values['firstname'], $values['lastname'], $values['status'], $values['email'], $values['username'], $values['pass1'], $values['official_code'], $values['language'], $values['phone'], $picture_uri);
  372. // Terms & Conditions
  373. if (api_get_setting('allow_terms_conditions') == 'true') {
  374. // update the terms & conditions
  375. if (isset($values['legal_accept_type'])) {
  376. $cond_array = explode(':', $values['legal_accept_type']);
  377. if (!empty($cond_array[0]) && !empty($cond_array[1])) {
  378. $time = time();
  379. $condition_to_save = intval($cond_array[0]).':'.intval($cond_array[1]).':'.$time;
  380. UserManager::update_extra_field_value($user_id, 'legal_accept', $condition_to_save);
  381. }
  382. }
  383. }
  384. // Register extra fields
  385. $extras = array();
  386. foreach ($values as $key => $value) {
  387. if (substr($key, 0, 6) == 'extra_') { //an extra field
  388. $extras[substr($key,6)] = $value;
  389. }
  390. }
  391. //update the extra fields
  392. $count_extra_field = count($extras);
  393. if ($count_extra_field > 0) {
  394. foreach ($extras as $key => $value) {
  395. $myres = UserManager::update_extra_field_value($user_id, $key, $value);
  396. }
  397. }
  398. if ($user_id) {
  399. // storing the extended profile
  400. $store_extended = false;
  401. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)." SET ";
  402. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mycomptetences') == 'true') {
  403. $sql_set[] = "competences = '".Database::escape_string($values['competences'])."'";
  404. $store_extended = true;
  405. }
  406. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mydiplomas') == 'true') {
  407. $sql_set[] = "diplomas = '".Database::escape_string($values['diplomas'])."'";
  408. $store_extended = true;
  409. }
  410. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'myteach') == 'true') {
  411. $sql_set[] = "teach = '".Database::escape_string($values['teach'])."'";
  412. $store_extended = true;
  413. }
  414. if (api_get_setting('extended_profile') == 'true' && api_get_setting('extendedprofile_registration', 'mypersonalopenarea') == 'true') {
  415. $sql_set[] = "openarea = '".Database::escape_string($values['openarea'])."'";
  416. $store_extended = true;
  417. }
  418. if ($store_extended) {
  419. $sql .= implode(',', $sql_set);
  420. $sql .= " WHERE user_id = '".Database::escape_string($user_id)."'";
  421. Database::query($sql);
  422. }
  423. // if there is a default duration of a valid account then we have to change the expiration_date accordingly
  424. if (api_get_setting('account_valid_duration') != '') {
  425. $sql = "UPDATE ".Database::get_main_table(TABLE_MAIN_USER)." SET expiration_date='registration_date+1' WHERE user_id='".$user_id."'";
  426. Database::query($sql);
  427. }
  428. // if the account has to be approved then we set the account to inactive, sent a mail to the platform admin and exit the page.
  429. if (api_get_setting('allow_registration') == 'approval') {
  430. $TABLE_USER = Database::get_main_table(TABLE_MAIN_USER);
  431. // 1. set account inactive
  432. $sql = "UPDATE ".$TABLE_USER." SET active='0' WHERE user_id='".$user_id."'";
  433. Database::query($sql);
  434. $table_main_admin = Database::get_main_table(TABLE_MAIN_ADMIN);
  435. if ($_configuration['multiple_access_urls']) {
  436. $access_url_id = api_get_current_access_url_id();
  437. $tbl_url_rel_user = Database::get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER);
  438. $sql_get_id_admin = "SELECT admin.user_id FROM ".$tbl_url_rel_user." as url, ".$table_main_admin." as admin WHERE access_url_id='".$access_url_id."' AND admin.user_id=url.user_id";
  439. } else {
  440. $sql_get_id_admin = "SELECT * FROM ".$table_main_admin;
  441. }
  442. $result = Database::query($sql_get_id_admin);
  443. while ($row = Database::fetch_array($result)) {
  444. $sql_admin_list = "SELECT * FROM ".$TABLE_USER." WHERE user_id='".$row['user_id']."'";
  445. $result_list = Database::query($sql_admin_list);
  446. $admin_list = Database::fetch_array($result_list);
  447. $emailto = $admin_list['email'];
  448. // 2. send mail to the platform admin
  449. $emailfromaddr = api_get_setting('emailAdministrator');
  450. $emailfromname = api_get_setting('siteName');
  451. $emailsubject = get_lang('ApprovalForNewAccount',null,$values['language']).': '.$values['username'];
  452. $emailbody = get_lang('ApprovalForNewAccount',null,$values['language'])."\n";
  453. $emailbody .= get_lang('UserName',null,$values['language']).': '.$values['username']."\n";
  454. if (api_is_western_name_order()) {
  455. $emailbody .= get_lang('FirstName',null,$values['language']).': '.$values['firstname']."\n";
  456. $emailbody .= get_lang('LastName',null,$values['language']).': '.$values['lastname']."\n";
  457. } else {
  458. $emailbody .= get_lang('LastName',null,$values['language']).': '.$values['lastname']."\n";
  459. $emailbody .= get_lang('FirstName',null,$values['language']).': '.$values['firstname']."\n";
  460. }
  461. $emailbody .= get_lang('Email',null,$values['language']).': '.$values['email']."\n";
  462. $emailbody .= get_lang('Status',null,$values['language']).': '.$values['status']."\n\n";
  463. $emailbody .= get_lang('ManageUser',null,$values['language']).': '.api_get_path(WEB_CODE_PATH).'admin/user_edit.php?user_id='.$user_id;
  464. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  465. $email_admin = api_get_setting('emailAdministrator');
  466. @api_mail('', $emailto, $emailsubject, $emailbody, $sender_name, $email_admin);
  467. }
  468. // 3. exit the page
  469. unset($user_id);
  470. Display :: display_footer();
  471. exit;
  472. }
  473. /*
  474. SESSION REGISTERING
  475. */
  476. $_user['firstName'] = stripslashes($values['firstname']);
  477. $_user['lastName'] = stripslashes($values['lastname']);
  478. $_user['mail'] = $values['email'];
  479. $_user['language'] = $values['language'];
  480. $_user['user_id'] = $user_id;
  481. $is_allowedCreateCourse = $values['status'] == 1;
  482. api_session_register('_user');
  483. api_session_register('is_allowedCreateCourse');
  484. //stats
  485. event_login();
  486. // last user login date is now
  487. $user_last_login_datetime = 0; // used as a unix timestamp it will correspond to : 1 1 1970
  488. api_session_register('user_last_login_datetime');
  489. /*
  490. EMAIL NOTIFICATION
  491. */
  492. if (strpos($values['email'], '@') !== false) {
  493. // Let us predefine some variables. Be sure to change the from address!
  494. $recipient_name = api_get_person_name($values['firstname'], $values['lastname']);
  495. $email = $values['email'];
  496. $emailfromaddr = api_get_setting('emailAdministrator');
  497. $emailfromname = api_get_setting('siteName');
  498. $emailsubject = '['.api_get_setting('siteName').'] '.get_lang('YourReg',null,$_user['language']).' '.api_get_setting('siteName');
  499. // The body can be as long as you wish, and any combination of text and variables
  500. $portal_url = $_configuration['root_web'];
  501. if ($_configuration['multiple_access_urls']) {
  502. $access_url_id = api_get_current_access_url_id();
  503. if ($access_url_id != -1 ){
  504. $url = api_get_access_url($access_url_id);
  505. $portal_url = $url['url'];
  506. }
  507. }
  508. $emailbody = get_lang('Dear',null,$_user['language']).' '.stripslashes(Security::remove_XSS($recipient_name)).",\n\n".get_lang('YouAreReg',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('WithTheFollowingSettings',null,$_user['language'])."\n\n".get_lang('Username',null,$_user['language']).' : '.$values['username']."\n".get_lang('Pass',null,$_user['language']).' : '.stripslashes($values['pass1'])."\n\n".get_lang('Address',null,$_user['language']).' '.api_get_setting('siteName').' '.get_lang('Is',null,$_user['language']).' : '.$portal_url."\n\n".get_lang('Problem',null,$_user['language'])."\n\n".get_lang('Formula',null,$_user['language']).",\n\n".api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'))."\n".get_lang('Manager',null,$_user['language']).' '.api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n".get_lang('Email',null,$_user['language']).' : '.api_get_setting('emailAdministrator');
  509. // Here we are forming one large header line
  510. // Every header must be followed by a \n except the last
  511. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  512. $email_admin = api_get_setting('emailAdministrator');
  513. @api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin);
  514. }
  515. }
  516. echo '<p>'.get_lang('Dear',null,$_user['language']).' '.stripslashes(Security::remove_XSS($recipient_name)).',<br /><br />'.get_lang('PersonalSettings',null,$_user['language']).".</p>\n";
  517. if (!empty ($values['email'])) {
  518. echo '<p>'.get_lang('MailHasBeenSent',null,$_user['language']).'.</p>';
  519. }
  520. $button_text = '';
  521. if ($is_allowedCreateCourse) {
  522. echo '<p>', get_lang('NowGoCreateYourCourse',null,$_user['language']), ".</p>\n";
  523. $action_url = '../create_course/add_course.php';
  524. $button_text = api_get_setting('course_validation') == 'true'
  525. ? get_lang('CreateCourseRequest', null, $_user['language'])
  526. : get_lang('CourseCreate', null, $_user['language']);
  527. } else {
  528. if (api_get_setting('allow_students_to_browse_courses') == 'true')
  529. $action_url = 'courses.php?action=subscribe';
  530. else
  531. $action_url = api_get_path(WEB_PATH).'user_portal.php';
  532. echo '<p>', get_lang('NowGoChooseYourCourses',null,$_user['language']), ".</p>\n";
  533. $button_text = get_lang('Next',null,$_user['language']);
  534. }
  535. // ?uidReset=true&uidReq=$_user['user_id']
  536. echo '<form action="', $action_url, '" method="post">', "\n", '<button type="submit" class="next" name="next" value="', get_lang('Next',null,$_user['language']), '" validationmsg=" ', get_lang('Next',null,$_user['language']), ' ">', $button_text, '</button>', "\n", '</form><br />', "\n";
  537. } else {
  538. $form->display();
  539. }
  540. ?>
  541. <br />
  542. <?php
  543. if (!isset($_POST['username'])) {
  544. /*
  545. <div class="actions">
  546. <a href="<?php echo api_get_path(WEB_PATH); ?>" class="fake_button_back" ><?php echo get_lang('Back'); ?></a>
  547. </div>
  548. */
  549. ?>
  550. <?php
  551. }
  552. Display :: display_footer();