<?php 
defined('C5_EXECUTE') or die("Access Denied.");
class RegisterController extends Controller {
 
   public $helpers = array('form', 'html');
 
   public function __construct() {
      if(!ENABLE_REGISTRATION) {
         $this->render("/page_not_found");
      }
      parent::__construct();
      Loader::model('user_attributes');
 
      $u = new User();
      $this->set('u', $u);
 
      if (USER_REGISTRATION_WITH_EMAIL_ADDRESS) {
         $this->set('displayUserName', false);
      } else {
         $this->set('displayUserName', true);
      }
 
      // $this->set('displayUserName', true);
 
   }
 
   public function forward($cID = 0) {
      $this->set('rcID', $cID);
   }
 
   public function do_register() {
 
      $registerData['success']=0;
 
      $userHelper = Loader::helper('concrete/user');
      $e = Loader::helper('validation/error');
      $ip = Loader::helper('validation/ip');      
      $txt = Loader::helper('text');
      $vals = Loader::helper('validation/strings');
      $valc = Loader::helper('concrete/validation');
 
      $username = $_POST['uName'];
      $password = $_POST['uPassword'];
      $passwordConfirm = $_POST['uPasswordConfirm'];
 
      // clean the username
      $username = trim($username);
      $username = preg_replace("/ +/", " ", $username);
 
 
      if (!$ip->check()) {
         $e->add($ip->getErrorMessage());
      }      
 
      if (ENABLE_REGISTRATION_CAPTCHA) { 
         $captcha = Loader::helper('validation/captcha');
         if (!$captcha->check()) {
            $e->add(t("Incorrect image validation code. Please check the image and re-enter the letters or numbers as necessary."));
         }
      }
 
      if (!$vals->email($_POST['uEmail'])) {
         $e->add(t('Invalid email address provided.'));
      } else if (!$valc->isUniqueEmail($_POST['uEmail'])) {
         $e->add(t("The email address %s is already in use. Please choose another.", $_POST['uEmail']));
      }
 
      if (USER_REGISTRATION_WITH_EMAIL_ADDRESS == false) {
 
         if (strlen($username) < USER_USERNAME_MINIMUM) {
            $e->add(t('A username must be between at least %s characters long.', USER_USERNAME_MINIMUM));
         }
 
         if (strlen($username) > USER_USERNAME_MAXIMUM) {
            $e->add(t('A username cannot be more than %s characters long.', USER_USERNAME_MAXIMUM));
         }
 
 
         if (strlen($username) >= USER_USERNAME_MINIMUM && !$valc->username($username)) {
            if(USER_USERNAME_ALLOW_SPACES) {
               $e->add(t('A username may only contain letters, numbers and spaces.'));
            } else {
               $e->add(t('A username may only contain letters or numbers.'));
            }
 
         }
         if (!$valc->isUniqueUsername($username)) {
            $e->add(t("The username %s already exists. Please choose another", $username));
         }      
      }
      else {
         $username = preg_replace('/[ @\+\.]/','', $_POST['uEmail']);
      }
 
      if ($username == USER_SUPER) {
         $e->add(t('Invalid Username'));
      }
 
      /*
      if ((strlen($password) < USER_PASSWORD_MINIMUM) || (strlen($password) > USER_PASSWORD_MAXIMUM)) {
         $e->add(t('A password must be between %s and %s characters', USER_PASSWORD_MINIMUM, USER_PASSWORD_MAXIMUM));
      }
 
      if (strlen($password) >= USER_PASSWORD_MINIMUM && !$valc->password($password)) {
         $e->add(t('A password may not contain ", \', >, <, or any spaces.'));
      }
      */
 
      $userHelper->validNewPassword($password,$e);
 
      if ($password) {
         if ($password != $passwordConfirm) {
            $e->add(t('The two passwords provided do not match.'));
         }
      }
 
      $aks = UserAttributeKey::getRegistrationList();
 
      foreach($aks as $uak) {
         if ($uak->isAttributeKeyRequiredOnRegister()) {
            $e1 = $uak->validateAttributeForm();
            if ($e1 == false) {
               $e->add(t('The field "%s" is required', $uak->getAttributeKeyName()));
            } else if ($e1 instanceof ValidationErrorHelper) {
               $e->add($e1);
            }
         }
      }
 
      if (!$e->has()) {
 
         // do the registration
         $data = $_POST;
         $data['uName'] = $username;
         $data['uPassword'] = $password;
         $data['uPasswordConfirm'] = $passwordConfirm;
 
         $process = UserInfo::register($data);
         if (is_object($process)) {
 
            foreach($aks as $uak) {
               $uak->saveAttributeForm($process);            
            }
 
            if (REGISTER_NOTIFICATION) { //do we notify someone if a new user is added?
               $mh = Loader::helper('mail');
               if(EMAIL_ADDRESS_REGISTER_NOTIFICATION) {
                  $mh->to(EMAIL_ADDRESS_REGISTER_NOTIFICATION);
               } else {
                  $adminUser = UserInfo::getByID(USER_SUPER_ID);
                  if (is_object($adminUser)) {
                     $mh->to($adminUser->getUserEmail());
                  }
               }
 
               $mh->addParameter('uName', $process->getUserName());
               $mh->addParameter('uID', $process->getUserID());
               $mh->addParameter('uEmail', $process->getUserEmail());
               $attribs = UserAttributeKey::getRegistrationList();
               foreach($attribs as $ak) {
                  $attribValues[] = $ak->getAttributeKeyDisplayHandle() . ': ' . $process->getAttribute($ak->getAttributeKeyHandle(), 'display');      
               }                  
               $mh->addParameter('attribs', $attribValues);
 
               if (defined('EMAIL_ADDRESS_REGISTER_NOTIFICATION_FROM')) {
                  $mh->from(EMAIL_ADDRESS_REGISTER_NOTIFICATION_FROM,  t('Website Registration Notification'));
               } else {
                  $adminUser = UserInfo::getByID(USER_SUPER_ID);
                  if (is_object($adminUser)) {
                     $mh->from($adminUser->getUserEmail(),  t('Website Registration Notification'));
                  }
               }
               if(REGISTRATION_TYPE == 'manual_approve') {
                  $mh->load('user_register_approval_required');
               } else {
                  $mh->load('user_register');
               }
               $mh->sendMail();
            }
 
            // now we log the user in
            if (USER_REGISTRATION_WITH_EMAIL_ADDRESS) {
               $u = new User($_POST['uEmail'], $_POST['uPassword']);
            } else {
               $u = new User($_POST['uName'], $_POST['uPassword']);
            }
            // if this is successful, uID is loaded into session for this user
 
            $rcID = $this->post('rcID');
            $nh = Loader::helper('validation/numbers');
            if (!$nh->integer($rcID)) {
               $rcID = 0;
            }
 
            // now we check whether we need to validate this user's email address
            if (defined("USER_VALIDATE_EMAIL") && USER_VALIDATE_EMAIL) {
               if (USER_VALIDATE_EMAIL > 0) {
                  $uHash = $process->setupValidation();
 
                  $mh = Loader::helper('mail');
                  if (defined('EMAIL_ADDRESS_VALIDATE')) {
                     $mh->from(EMAIL_ADDRESS_VALIDATE,  t('Validate Email Address'));
                  }
                  $mh->addParameter('uEmail', $_POST['uEmail']);
                  $mh->addParameter('uHash', $uHash);
                  $mh->to($_POST['uEmail']);
                  $mh->load('validate_user_email');
                  $mh->sendMail();
 
                  //$this->redirect('/register', 'register_success_validate', $rcID);
                  $redirectMethod='register_success_validate';
                  $registerData['msg']= join('<br><br>',$this->getRegisterSuccessValidateMsgs());
 
                  $u->logout();
 
               }
            } else if(defined('USER_REGISTRATION_APPROVAL_REQUIRED') && USER_REGISTRATION_APPROVAL_REQUIRED) {
               $ui = UserInfo::getByID($u->getUserID());
               $ui->deactivate();
               //$this->redirect('/register', 'register_pending', $rcID);
               $redirectMethod='register_pending';
               $registerData['msg']=$this->getRegisterPendingMsg();
               $u->logout();
            }
 
            if (!$u->isError()) {
               //$this->redirect('/register', 'register_success', $rcID);
               if(!$redirectMethod){
                  $redirectMethod='register_success';   
                  $registerData['msg']=$this->getRegisterSuccessMsg();
               }
               $registerData['uID']=intval($u->uID);      
            }
 
            $registerData['success']=1;
 
            if($_REQUEST['format']!='JSON')
               $this->redirect('/register', $redirectMethod, $rcID);            
         }
      } else {
         $ip->logSignupRequest();
         if ($ip->signupRequestThreshholdReached()) {
            $ip->createIPBan();
         }      
         $this->set('error', $e);
         $registerData['errors'] = $e->getList();
      }
 
      if( $_REQUEST['format']=='JSON' ){
         $jsonHelper=Loader::helper('json'); 
         echo $jsonHelper->encode($registerData);
         die;
      }      
   }
 
   public function register_success_validate($rcID = 0) {
      $this->set('rcID', $rcID);
      $this->set('success', 'validate');
      $this->set('successMsg', $this->getRegisterSuccessValidateMsgs() );
   }
 
   public function register_success($rcID = 0) {
      $this->set('rcID', $rcID);
      $this->set('success', 'registered');
      $this->set('successMsg', $this->getRegisterSuccessMsg() );
   }
 
   public function register_pending() {
      $this->set('rcID', $rcID);
      $this->set('success', 'pending');
      $this->set('successMsg', $this->getRegisterPendingMsg() );
   }
 
   public function getRegisterSuccessMsg(){
      return t('Your account has been created, and you are now logged in.');
   }
 
   public function getRegisterSuccessValidateMsgs(){
      $msgs=array();
      $msgs[]= t('You are registered but you need to validate your email address. Some or all functionality on this site will be limited until you do so.');
      $msgs[]= t('An email has been sent to your email address. Click on the URL contained in the email to validate your email address.');
      return $msgs;
   }
 
   public function getRegisterPendingMsg(){
      return t('You are registered but a site administrator must review your account, you will not be able to login until your account has been approved.');
   }   
}
 
?>
 

 
<?php defined('C5_EXECUTE') or die("Access Denied."); ?>
 
 
 
<!-- HIGHLIGHT USERNAME FIELD ON PAGE LOAD
________________________________________________________________________________________________ -->
 
<script type="text/javascript">
$(function() {
  $("input[name=uName]").focus();
});
</script>
 
 
 
<!-- VALIDATION - Moved from view.php because it casued duplicate validation messages during checkout
________________________________________________________________________________________________ -->
 
<?php // error validation logic
   if (isset($error) && $error != '') { ?>
 
   <?php  
      if ($error instanceof Exception) {
         $_error[] = $error->getMessage();
      } else if ($error instanceof ValidationErrorHelper) { 
         $_error = $error->getList();
      } else if (is_array($error)) {
         $_error = $error;
      } else if (is_string($error)) {
         $_error[] = $error;
      }
   ?>
 
   <?php // error validation output - markup comes from /helpers/validation/error.php
      if (isset($error) && $error->has()) {
         $error->output();
      }
   ?>
 
   <?php  
} ?>
 
<?php   
   if($success) { 
      switch($success) { 
         case "registered": 
            ?>
            <div class="alert alert-success">
               <p><?php  echo $successMsg ?></p>
               <p><br /><a class="btn" href="<?php  echo $this->url('/')?>"><?php  echo t('Return to Home')?></a></p>
            </div>
            <?php   
         break;
         case "validate": 
            ?>
            <div class="alert alert-success">
               <p><?php  echo $successMsg[0] ?></p>
               <p><?php  echo $successMsg[1] ?></p>
               <p><br /><a class="btn" href="<?php  echo $this->url('/')?>"><?php  echo t('Return to Home')?></a></p>
            </div>            
            <?php  
         break;
         case "pending":
            ?>
            <div class="alert alert-success">
               <p><?php  echo $successMsg ?></p>
               <p><br /><a class="btn" href="<?php  echo $this->url('/')?>"><?php  echo t('Return to Home')?></a></p>
            </div>            
 
       <?php  
         break;
      }
 
   } else { 
?>
 
 
 
<!-- CONTENT AREA FOR ADDING EXPLANATION TEXT
________________________________________________________________________________________________ -->
 
<?php
 $a = new Area('Content');
 $a->display($c);
?>
 
 
<div class="row">
   <div class="span6">
 
 
  <!-- REGISTRATION FORM
  ________________________________________________________________________________________________ -->
 
      <form class="form outline" method="post" action="<?php  echo $this->url('/register', 'do_register')?>">
 
       <legend>Register</legend>
 
      <?php  if ($displayUserName) { ?>
            <div class="control-group">
            <?php echo  $form->label('uName',t('Username')); ?>
            <div class="controls">
               <?php echo  $form->text('uName'); ?>
            </div>
         </div>
      <?php  } ?>
 
      <div class="control-group">
         <?php  echo $form->label('uEmail',t('Email Address')); ?>
         <div class="controls">
            <?php  echo $form->text('uEmail'); ?>
         </div>
      </div>
      <div class="control-group">
         <?php  echo $form->label('uPassword',t('Password')); ?>
         <div class="controls">
            <?php  echo $form->password('uPassword'); ?>
         </div>
      </div>
      <div class="control-group">
         <?php  echo $form->label('uPasswordConfirm',t('Confirm Password')); ?>
         <div class="controls">
            <?php  echo $form->password('uPasswordConfirm'); ?>
         </div>
      </div>
 
         <?php  
            $attribs = UserAttributeKey::getRegistrationList();
            $af = Loader::helper('form/attribute');
 
            foreach($attribs as $ak) { // output attributes - where dees the unordered list come from?
               print $af->display($ak, $ak->isAttributeKeyRequiredOnRegister());   
            }
 
            if (ENABLE_REGISTRATION_CAPTCHA) { 
               print $form->label('captcha', t('Please type the letters and numbers shown in the image.'));
               print '<br/>';
               $captcha = Loader::helper('validation/captcha');            
               $captcha->display();
               ?>
 
               <div><?php $captcha->showInput();?></div>
         <?php   } ?>
 
         <div class="form-actions">
            <input type="submit" value="Register" name="register" id="register" class="btn primary ccm-input-submit">
            <input type="hidden" value="" id="rcID" name="rcID">
         </div>
      </form>
      <?php   } ?>
   </div><!-- .span6 -->
 
 
 
  <!-- REGISTRATION LINK
  ________________________________________________________________________________________________ -->
 
   <div class="span6 login-link">
        <h4>Already a member?</h4>
        <a href="/login" class="btn primary" id="submit_button" type="submit"><?php echo t('Login'); ?></a>
     </div>
   </div><!-- .span6 -->
</div><!-- .row -->