EOT;
echo str_replace('{SITE_NAME}', $CONFIG['gallery_name'], $lang_register_disclamer);
echo <<
EOT;
endtable();
}
function input_user_info($errors = '')
{
global $CONFIG, $PHP_SELF, $HTTP_POST_VARS;
global $lang_register_php;
starttable(-1, $lang_register_php['enter_info'], 2);
echo <<
EOT;
$form_data = array(
array('label', $lang_register_php['required_info']),
array('input', 'username', $lang_register_php['username'], 25),
array('password', 'password', $lang_register_php['password'], 25),
array('password', 'password_verification', $lang_register_php['password_again'], 25),
array('input', 'email', $lang_register_php['email'], 255),
array('label', $lang_register_php['optional_info']),
array('input', 'location', $lang_register_php['location'], 255),
array('input', 'interests', $lang_register_php['interests'], 255),
array('input', 'website', $lang_register_php['website'], 255),
array('input', 'occupation', $lang_register_php['occupation'], 255),
);
foreach ($form_data as $element) switch ($element[0]) {
case 'label' :
echo <<
{$element[1]}
EOT;
break;
case 'input' :
if (isset($HTTP_POST_VARS[$element[1]])) {
$value = $HTTP_POST_VARS[$element[1]];
} else {
$value = '';
}
echo <<
{$element[2]}
EOT;
break;
case 'password' :
echo <<
{$element[2]}
EOT;
break;
default:
cpg_die(CRITICAL_ERROR, 'Invalid action for form creation ' . $element[0], __FILE__, __LINE__);
}
if ($errors) {
echo <<
• • • {$lang_register_php['error']} • • •
EOT;
}
echo <<
EOT;
endtable();
}
function get_post_var($var)
{
global $HTTP_POST_VARS, $lang_errors;
if (!isset($HTTP_POST_VARS[$var])) cpg_die(CRITICAL_ERROR, $lang_errors['param_missing'] . " ($var)", __FILE__, __LINE__);
return trim($HTTP_POST_VARS[$var]);
}
function check_user_info(&$error)
{
global $CONFIG, $HTTP_SERVER_VARS, $PHP_SELF;
global $lang_register_php, $lang_register_confirm_email, $lang_continue;
$user_name = trim(get_post_var('username'));
$password = trim(get_post_var('password'));
$password_again = trim(get_post_var('password_verification'));
$email = trim(get_post_var('email'));
$location = addslashes(get_post_var('location'));
$interests = addslashes(get_post_var('interests'));
$website = addslashes(get_post_var('website'));
$occupation = addslashes(get_post_var('occupation'));
$sql = "SELECT user_id " . "FROM {$CONFIG['TABLE_USERS']} " . "WHERE user_name = '" . addslashes($user_name) . "'";
$result = db_query($sql);
if (mysql_num_rows($result)) {
$error = '' . $lang_register_php['err_user_exists'];
return false;
}
mysql_free_result($result);
if (strlen($user_name) < 2) {
$error .= ' ' . $lang_register_php['err_uname_short'];
}
if (strlen($password) < 2) {
$error .= ' ' . $lang_register_php['err_password_short'];
}
if ($password == $user_name) {
$error .= ' ' . $lang_register_php['err_uname_pass_diff'];
}
if ($password != $password_again) {
$error .= ' ' . $lang_register_php['err_password_mismatch'];
}
if (strlen(htmlspecialchars($user_name)) > 25)
{
$error .= ' Your name is to long to be stored in the database. Choose a shorter one.';
}
if (!eregi("^[_\.0-9a-z\-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,6}$", $email)) $error .= ' ' . $lang_register_php['err_invalid_email'];
if ($error != '') return false;
if (!$CONFIG['allow_duplicate_emails_addr']) {
$sql = "SELECT user_id " . "FROM {$CONFIG['TABLE_USERS']} " . "WHERE user_email = '" . addslashes($email) . "'";
$result = db_query($sql);
if (mysql_num_rows($result)) {
$error = ' ' . $lang_register_php['err_duplicate_email'];
return false;
}
mysql_free_result($result);
}
if ($CONFIG['reg_requires_valid_email']) {
$active = 'NO';
list($usec, $sec) = explode(' ', microtime());
$seed = (float) $sec + ((float) $usec * 100000);
srand($seed);
$act_key = md5(uniqid(rand(), 1));
} else {
$active = 'YES';
$act_key = '';
}
$sql = "INSERT INTO {$CONFIG['TABLE_USERS']} " . "(user_regdate, user_active, user_actkey, user_name, user_password, user_email, user_location, user_interests, user_website, user_occupation) " . "VALUES (NOW(), '$active', '$act_key', '" . addslashes($user_name) . "', '" . addslashes($password) . "', '" . addslashes($email) . "', '$location', '$interests', '$website', '$occupation' )";
$result = db_query($sql);
if ($CONFIG['reg_requires_valid_email']) {
$act_link = $CONFIG['ecards_more_pic_target'] . 'register.php?activate=' . $act_key;
$template_vars = array('{SITE_NAME}' => $CONFIG['gallery_name'],
'{USER_NAME}' => $user_name,
'{PASSWORD}' => $password,
'{ACT_LINK}' => $act_link
);
if (!cpg_mail($email, sprintf($lang_register_php['confirm_email_subject'], $CONFIG['gallery_name']), strtr($lang_register_confirm_email, $template_vars))) {
cpg_die(CRITICAL_ERROR, $lang_register_php['failed_sending_email'], __FILE__, __LINE__);
}
msg_box($lang_register_php['information'], $lang_register_php['thank_you'], $lang_continue, 'index.php');
} else {
msg_box($lang_register_php['information'], $lang_register_php['acct_active'], $lang_continue, 'index.php');
}
// email notification to admin
if ($CONFIG['reg_notify_admin_email'])
{
cpg_mail($CONFIG['gallery_admin_email'], sprintf($lang_register_php['notify_admin_email_subject'], $CONFIG['gallery_name']), sprintf($lang_register_php['notify_admin_email_body'], $user_name));
}
return true;
}
pageheader($lang_register_php['page_title']);
if (isset($HTTP_POST_VARS['agree'])) {
input_user_info();
} elseif (isset($HTTP_POST_VARS['submit'])) {
$errors = '';
if (!check_user_info($errors)) {
input_user_info($errors);
}
} elseif (isset($HTTP_GET_VARS['activate'])) {
$act_key = addslashes(substr($HTTP_GET_VARS['activate'], 0 , 32));
if (strlen($act_key) != 32) cpg_die(ERROR, $lang_register_php['acct_act_failed'], __FILE__, __LINE__);
$sql = "SELECT user_active " . "FROM {$CONFIG['TABLE_USERS']} " . "WHERE user_actkey = '$act_key' " . "LIMIT 1";
$result = db_query($sql);
if (!mysql_num_rows($result)) cpg_die(ERROR, $lang_register_php['acct_act_failed'], __FILE__, __LINE__);
$row = mysql_fetch_array($result);
mysql_free_result($result);
if ($row['user_active'] == 'YES') cpg_die(ERROR, $lang_register_php['acct_already_act'], __FILE__, __LINE__);
$sql = "UPDATE {$CONFIG['TABLE_USERS']} " . "SET user_active = 'YES' " . "WHERE user_actkey = '$act_key' " . "LIMIT 1";
$result = db_query($sql);
msg_box($lang_register_php['information'], $lang_register_php['acct_active'], $lang_continue, 'index.php');
} else {
display_disclaimer();
}
pagefooter();
ob_end_flush();
?>