deon/khosb
Archived
1
0
Fork 0
Code Issues 6 Pull Requests Packages Projects Releases Wiki Activity
This repository has been archived on 2024-04-08. You can view files and clone it, but cannot push or open issues or pull requests.
06b442cdc0
khosb/modules/account/account.inc.php

1335 lines
42 KiB
PHP
Raw Normal View History

Initial Commit of AgileBill Open Source
2008-11-26 22:50:40 +00:00
<?php
/**
* AgileBill - Open Billing Software
*
* This body of work is free software; you can redistribute it and/or
* modify it under the terms of the Open AgileBill License
* License as published at http://www.agileco.com/agilebill/license1-4.txt
*
* For questions, help, comments, discussion, etc., please join the
* Agileco community forums at http://forum.agileco.com/
*
* @link http://www.agileco.com/
* @copyright 2004-2008 Agileco, LLC.
* @license http://www.agileco.com/agilebill/license1-4.txt
* @author Tony Landis <tony@agileco.com>
* @package AgileBill
* @version 1.4.93
*/
class account
{
var $parent_id;
# Open the constructor for this mod
function account_construct()
{
# name of this module:
$this->module = "account";
# location of the construct XML file:
$this->xml_construct = PATH_MODULES . "" . $this->module . "/" . $this->module . "_construct.xml";
# open the construct file for parsing
$C_xml = new CORE_xml;
$construct = $C_xml->xml_to_array($this->xml_construct);
$this->method = $construct["construct"]["method"];
$this->trigger = $construct["construct"]["trigger"];
$this->field = $construct["construct"]["field"];
$this->table = $construct["construct"]["table"];
$this->module = $construct["construct"]["module"];
$this->cache = $construct["construct"]["cache"];
$this->order_by = $construct["construct"]["order_by"];
$this->limit = $construct["construct"]["limit"];
}
/** add sub account */
function sub_account_add($VAR) {
if(!SESS_LOGGED) return false;
$this->parent_id=SESS_ACCOUNT;
if($this->add($VAR, $this)) {
// add any additional groups
if(!empty($VAR['groups']) && is_array($VAR['groups'])) {
global $C_auth;
$db=&DB();
foreach($VAR['groups'] as $key => $gid) {
if($C_auth->auth_group_by_id($gid)) {
$fields=Array('account_id'=>$this->account_id, 'active'=>1, 'group_id'=>$gid, 'date_orig'=>time());
$db->Execute($sql=sqlInsert($db,"account_group",$fields));
}
}
}
define('FORCE_PAGE', 'account:account');
global $C_debug;
$C_debug->alert("The sub-account has been added");
}
}
/** delete sub account */
function sub_delete($VAR) {
// return false;
// verify perms
if(empty($VAR['id']) || !$this->isParentAccount($VAR['id'])) {
return false;
}
// ok, do deletion
include_once(PATH_MODULES.'account_admin/account_admin.inc.php');
$aa = new account_admin;
$VAR['account_admin_id'] = $VAR['id'];
$aa->delete($VAR);
}
/* check if sub account auth */
function isParentAccount($sub_account_id) {
$db=&DB();
$rs = $db->Execute(sqlSelect($db,"account","parent_id","id=". $db->qstr($sub_account_id)."
AND parent_id != 0 AND parent_id IS NOT NULL AND parent_id != ''
AND parent_id = ". $db->qstr(SESS_ACCOUNT)));
if($rs && $rs->RecordCount()) {
return true;
}
return false;
}
/** Get authorized groups */
function get_auth_groups($VAR) {
$groups = false;
global $smarty, $C_auth;
$db=&DB();
/* get groups for this account */
$authgrp=array();
if(!empty($VAR['id'])) {
$grs = $db->Execute(sqlSelect($db,"account_group","group_id","group_id>2 and active=1 and account_id=". $db->qstr($VAR['id'])));
if($grs && $grs->RecordCount()) {
while(!$grs->EOF) {
$authgrp["{$grs->fields['group_id']}"] = true;
$grs->MoveNext();
}
}
}
$ids = implode(",", $C_auth->group);
$rs = $db->Execute($sql=sqlSelect($db,"group","id,name","id in ($ids) and id > 2"));
if($rs && $rs->RecordCount()) {
while(!$rs->EOF) {
$gid = $rs->fields['id'];
if ( (!empty($VAR['groups']) && is_array($VAR['groups']) && !empty($VAR['groups'][$gid]))
|| (!empty($authgrp["$gid"])) )
$rs->fields['checked']=true;
$groups[] = $rs->fields;
$rs->MoveNext();
}
}
$smarty->assign("groups", $groups);
}
/**
* Check account limitations
*/
function checkLimits() {
if(!defined('AGILE_RST_ACCOUNT') || AGILE_RST_ACCOUNT <= 0) return true;
$sql="SELECT count(*) as totalacct from ".AGILE_DB_PREFIX."account WHERE site_id=".DEFAULT_SITE;
$db=&DB();
$rs=$db->Execute($sql);
if($rs && $rs->RecordCount() && $rs->fields['totalacct'] <= AGILE_RST_ACCOUNT) {
return true;
} else {
global $C_debug;
$C_debug->alert("Licensed user limit of ".AGILE_RST_ACCOUNT." exceeded, operation failed.");
return false;
}
return true;
}
##############################
## ADD ##
##############################
function add($VAR)
{
if(!$this->checkLimits()) return false; // check account limits
$this->account_construct();
global $C_list, $C_translate, $C_debug, $VAR, $smarty;
$this->validated = true;
### Set the hidden values:
$VAR['account_date_orig'] = time();
$VAR['account_date_last'] = time();
if(defined("SESS_LANGUAGE"))
@$VAR['account_language_id'] = SESS_LANGUAGE;
else
@$VAR['account_language_id'] = DEFAULT_LANGUAGE;
if(defined("SESS_AFFILIATE"))
@$VAR['account_affiliate_id']= SESS_AFFILIATE;
else
@$VAR['account_affiliate_id']= DEFAULT_AFFILIATE;
if(defined("SESS_RESELLER"))
@$VAR['account_reseller_id'] = SESS_RESELLER;
else
@$VAR['account_reseller_id'] = DEFAULT_RESELLER;
if(defined("SESS_CURRENCY"))
@$VAR['account_currency_id'] = SESS_CURRENCY;
else
@$VAR['account_currency_id'] = DEFAULT_CURRENCY;
if(defined("SESS_THEME"))
@$VAR['account_theme_id'] = SESS_THEME;
else
@$VAR['account_theme_id'] = DEFAULT_THEME;
if(defined("SESS_CAMPAIGN"))
@$VAR['account_campaign_id'] = SESS_CAMPAIGN;
else
@$VAR['account_campaign_id'] = 0;
if(!isset($VAR['account_email_type']) && @$VAR['account_email_type'] != "1")
@$VAR['account_email_type'] = '0';
### Determine the proper account status:
if(DEFAULT_ACCOUNT_STATUS != '1')
$status = '1';
else
$status = '0';
## Single field login:
if(defined('SINGLE_FIELD_LOGIN') && SINGLE_FIELD_LOGIN==true && empty($VAR['account_password'])) {
$VAR['account_password']='none';
$VAR['confirm_password']='none';
}
####################################################################
### loop through the field list to validate the required fields
####################################################################
$type = 'add';
deprecated php methods
2009-03-26 04:10:40 +00:00
$this->method["$type"] = preg_split("/,/", $this->method["$type"]);
Initial Commit of AgileBill Open Source
2008-11-26 22:50:40 +00:00
$arr = $this->method["$type"];
include_once(PATH_CORE . 'validate.inc.php');
$validate = new CORE_validate;
$this->validated = true;
while (list ($key, $value) = each ($arr))
{
# get the field value
$field_var = $this->module . '_' . $value;
$field_name = $value;
####################################################################
### perform any field validation...
####################################################################
# check if this value is unique
if(isset($this->field["$value"]["unique"]) && isset($VAR["$field_var"]))
{
if(!$validate->validate_unique($this->table, $field_name, "record_id", $VAR["$field_var"]))
{
$this->validated = false;
$this->val_error[] = array('field' => $this->table . '_' . $field_name,
'field_trans' => $C_translate->translate('field_' . $field_name, $this->module, ""), # translate
'error' => $C_translate->translate('validate_unique',"", ""));
}
}
# check if the submitted value meets the specifed requirements
if(isset($this->field["$value"]["validate"]))
{
if(isset($VAR["$field_var"]))
{
if($VAR["$field_var"] != '')
{
if(!$validate->validate($field_name, $this->field["$value"], $VAR["$field_var"], $this->field["$value"]["validate"]))
{
$this->validated = false;
$this->val_error[] = array('field' => $this->module . '_' . $field_name,
'field_trans' => $C_translate->translate('field_' . $field_name, $this->module, ""),
'error' => $validate->error["$field_name"] );
}
}
else
{
$this->validated = false;
$this->val_error[] = array('field' => $this->module . '_' . $field_name,
'field_trans' => $C_translate->translate('field_' . $field_name, $this->module, ""),
'error' => $C_translate->translate('validate_any',"", ""));
}
}
else
{
$this->validated = false;
$this->val_error[] = array('field' => $this->module . '_' . $field_name,
'field_trans' => $C_translate->translate('field_' . $field_name, $this->module, ""),
'error' => $C_translate->translate('validate_any',"", ""));
}
}
}
####################################################################
### Validate the password
####################################################################
if(isset($VAR['account_password']) && $VAR['account_password'] != "")
{
if(isset($VAR['confirm_password']) && $VAR['account_password'] == $VAR['confirm_password'])
{
$password = $VAR['account_password'];
$smarty->assign('confirm_account_password', $VAR["account_password"]);
}
else
{
### ERROR: The passwords provided do not match!
$smarty->assign('confirm_account_password', '');
$this->validated = false;
$this->val_error[] = array('field' => 'account_confirm_password',
'field_trans' => $C_translate->translate('field_confirm_password', $this->module, ""), # translate
'error' => $C_translate->translate('password_change_match',"account", ""));
}
}
else
{
$smarty->assign('confirm_account_password', '');
}
####################################################################
### Validate that the user's IP & E-mail are not banned!
####################################################################
if($this->validated)
{
require_once(PATH_MODULES . 'blocked_email/blocked_email.inc.php');
$blocked_email = new blocked_email;
if(!$blocked_email->is_blocked($VAR['account_email']))
$this->val_error[] = array(
'field' => 'account_email',
'field_trans' => $C_translate->translate('field_email', $this->module, ""),
'error' => $C_translate->translate('validate_banned_email',"", ""));
require_once(PATH_MODULES . 'blocked_ip/blocked_ip.inc.php');
$blocked_ip = new blocked_ip;
if(!$blocked_ip->is_blocked(USER_IP))
$this->val_error[] = array(
'field' => 'IP Address',
'field_trans' => $C_translate->translate('ip_address', $this->module, ""),
'error' => $C_translate->translate('validate_banned_ip',"", ""));
}
// validate the tax_id
require_once(PATH_MODULES.'tax/tax.inc.php');
$taxObj=new tax;
$tax_arr = @$VAR['account_tax_id'];
if(is_array($tax_arr)) {
foreach($tax_arr as $country_id => $tax_id) {
if ($country_id == $VAR['account_country_id']) {
$exempt = @$VAR["account_tax_id_exempt"][$country_id];
if(!$taxObj->TaxIdsValidate($country_id, $tax_id, $exempt)) {
$this->validated = false;
$this->val_error[] = array(
'field' => 'account_tax_id',
'field_trans' => $taxObj->errField,
'error' => $C_translate->translate('validate_general', "", ""));
}
if($exempt)
$VAR['account_tax_id']=false;
else
$VAR['account_tax_id']=$tax_id;
}
}
}
####################################################################
### Get required static_Vars and validate them... return an array
### w/ ALL errors...
####################################################################
require_once(PATH_CORE . 'static_var.inc.php');
$static_var = new CORE_static_var;
if(!isset($this->val_error)) $this->val_error = false;
$all_error = $static_var->validate_form($this->module, $this->val_error);
if($all_error != false && gettype($all_error) == 'array')
$this->validated = false;
else
$this->validated = true;
####################################################################
### If validation was failed, skip the db insert &
### set the errors & origonal fields as Smarty objects,
### and change the page to be loaded.
####################################################################
if(!$this->validated)
{
global $smarty;
# set the errors as a Smarty Object
$smarty->assign('form_validation', $all_error);
# set the page to be loaded
if(!defined("FORCE_PAGE"))
{
define('FORCE_PAGE', $VAR['_page_current']);
}
# Stripslashes
global $C_vars;
$C_vars->strip_slashes_all();
return;
}
# Get default invoice options
$db=&DB();
$invopt=$db->Execute(sqlSelect($db,"setup_invoice","*",""));
if($invopt && $invopt->RecordCount()) {
$invoice_delivery=$invopt->fields['invoice_delivery'];
$invoice_format=$invopt->fields['invoice_show_itemized'];
}
/* hash the password */
if(defined('PASSWORD_ENCODING_SHA'))
$password_encoded = sha1($password);
else
$password_encoded = md5($password);
####################################################################
### Insert the account record
####################################################################
$this->account_id = $db->GenID(AGILE_DB_PREFIX . 'account_id');
$validation_str = time();
/** get parent id */
$this->account_id;
if(empty($this->parent_id)) $this->parent_id = $this->account_id;
$sql = '
INSERT INTO ' . AGILE_DB_PREFIX . 'account SET
id = ' . $db->qstr ( $this->account_id ) . ',
site_id = ' . $db->qstr ( DEFAULT_SITE ) . ',
date_orig = ' . $db->qstr ( $validation_str ) . ',
date_last = ' . $db->qstr ( time()) . ',
language_id = ' . $db->qstr ( $VAR["account_language_id"] ) . ',
country_id = ' . $db->qstr ( $VAR["account_country_id"] ) . ',
parent_id = ' . $db->qstr ( $this->parent_id ) . ',
affiliate_id = ' . $db->qstr ( @$VAR["account_affiliate_id"] ) . ',
campaign_id = ' . $db->qstr ( @$VAR["account_campaign_id"] ) . ',
reseller_id = ' . $db->qstr ( @$VAR["account_reseller_id"] ) . ',
currency_id = ' . $db->qstr ( $VAR["account_currency_id"] ) . ',
theme_id = ' . $db->qstr ( $VAR["account_theme_id"] ) . ',
username = ' . $db->qstr ( $VAR["account_username"] , get_magic_quotes_gpc()) . ',
password = ' . $db->qstr ( $password_encoded ) . ',
status = ' . $db->qstr ( $status ) . ',
first_name = ' . $db->qstr ( $VAR["account_first_name"] , get_magic_quotes_gpc()) . ',
middle_name = ' . $db->qstr ( $VAR["account_middle_name"], get_magic_quotes_gpc()) . ',
last_name = ' . $db->qstr ( $VAR["account_last_name"] , get_magic_quotes_gpc()) . ',
company = ' . $db->qstr ( $VAR["account_company"] , get_magic_quotes_gpc()) . ',
title = ' . $db->qstr ( $VAR["account_title"] , get_magic_quotes_gpc()) . ',
email = ' . $db->qstr ( $VAR["account_email"] , get_magic_quotes_gpc()) . ',
address1 = ' . $db->qstr ( $VAR["account_address1"] , get_magic_quotes_gpc()) . ',
address2 = ' . $db->qstr ( $VAR["account_address2"] , get_magic_quotes_gpc()) . ',
city = ' . $db->qstr ( $VAR["account_city"] , get_magic_quotes_gpc()) . ',
state = ' . $db->qstr ( $VAR["account_state"] , get_magic_quotes_gpc()) . ',
zip = ' . $db->qstr ( $VAR["account_zip"] , get_magic_quotes_gpc()) . ',
email_type = ' . $db->qstr ( $VAR["account_email_type"] , get_magic_quotes_gpc()). ',
invoice_delivery= ' . $db->qstr ( @$invoice_delivery ) . ',
invoice_show_itemized=' . $db->qstr ( @$invoice_format) . ',
invoice_advance_gen = ' . $db->qstr ( MAX_INV_GEN_PERIOD ) . ',
invoice_grace = ' . $db->qstr ( GRACE_PERIOD ) . ',
tax_id = ' . $db->qstr ( @$VAR['account_tax_id'] );
$result = $db->Execute($sql);
####################################################################
### error reporting:
####################################################################
if ($result === false)
{
global $C_debug;
$C_debug->error('account.inc.php','add', $db->ErrorMsg());
if(isset($this->trigger["$type"])) {
include_once(PATH_CORE . 'trigger.inc.php');
$trigger = new CORE_trigger;
$trigger->trigger($this->trigger["$type"], 0, $VAR);
}
return;
}
/* password logging class */
if($C_list->is_installed('account_password_history')) {
include_once(PATH_MODULES.'account_password_history/account_password_history.inc.php');
$accountHistory = new account_password_history();
$accountHistory->setNewPassword($this->account_id, $password_encoded);
}
####################################################################
### Add the account to the default group:
####################################################################
$group_id = $db->GenID(AGILE_DB_PREFIX . 'account_group_id');
$sql = '
INSERT INTO ' . AGILE_DB_PREFIX . 'account_group SET
id = ' . $db->qstr ( $group_id ) . ',
site_id = ' . $db->qstr ( DEFAULT_SITE ) . ',
date_orig = ' . $db->qstr ( time() ) . ',
group_id = ' . $db->qstr ( DEFAULT_GROUP ) . ',
account_id = ' . $db->qstr ( $this->account_id ) . ',
active = ' . $db->qstr ('1');
$db->Execute($sql);
####################################################################
### Insert the static vars:
####################################################################
$static_var->add($VAR, $this->module, $this->account_id);
####################################################################
### Mail the user the new_account email template
####################################################################
require_once(PATH_MODULES . 'email_template/email_template.inc.php');
$my = new email_template;
if($status == "1")
{
$my->send('account_registration_active', $this->account_id, $this->account_id, '', '');
} else {
$validation_str = strtoupper($validation_str. ':' .$this->account_id);
$my->send('account_registration_inactive', $this->account_id, '', '', $validation_str);
}
####################################################################
### Add the newsletters
####################################################################
if(NEWSLETTER_REGISTRATION == "1")
{
@$VAR['newsletter_html'] = $VAR['account_email_type'];
$VAR['newsletter_email'] = $VAR['account_email'];
$VAR['newsletter_first_name'] = $VAR['account_first_name'];
$VAR['newsletter_last_name'] = $VAR['account_last_name'];
require_once(PATH_MODULES . '/newsletter/newsletter.inc.php');
$newsletter = new newsletter;
$newsletter->subscribe($VAR, $this);
}
####################################################################
### Log in the user & display the welcome message
####################################################################
if($status == "1")
{
if($this->parent_id == $this->account_id || empty($this->parent_id))
{
$C_debug->alert($C_translate->translate("user_add_active_welcome","account",""));
if(SESSION_EXPIRE == 0) $exp = 99999;
else $exp = SESSION_EXPIRE;
$date_expire = (time() + (SESSION_EXPIRE * 60));
# update the session
$db = &DB();
$q = "UPDATE " . AGILE_DB_PREFIX . "session
SET
ip= " . $db->qstr(USER_IP) .",
date_expire = " . $db->qstr($date_expire) . ",
logged = " . $db->qstr('1').",
account_id = " . $db->qstr($this->account_id) . "
WHERE
id = " . $db->qstr(SESS) . "
AND
site_id = " . $db->qstr(DEFAULT_SITE);
$result = $db->Execute($q);
### constants
define('FORCE_SESS_ACCOUNT', $this->account_id);
define('FORCE_SESS_LOGGED', 1);
### Reload the session auth cache
if(CACHE_SESSIONS == '1') {
$force = true;
$C_auth = new CORE_auth($force);
global $C_auth2;
$C_auth2 = $C_auth;
}
if(isset($VAR['_page_next']))
define('REDIRECT_PAGE', '?_page='.$VAR['_page_next']);
elseif(isset($VAR['_page']))
define('REDIRECT_PAGE', '?_page='.$VAR['_page']);
}
####################################################################
### Do any db_mapping
####################################################################
if($C_list->is_installed('db_mapping'))
{
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
$db_map = new db_mapping;
if(!empty($password))
$db_map->plaintext_password = $password;
else
$db_map->plaintext_password = false;
$db_map->account_add ( $this->account_id );
$db_map = new db_mapping;
$db_map->login ( $this->account_id );
}
####################################################################
### Affiliate Auto Creation
####################################################################
if(AUTO_AFFILIATE == 1 && $C_list->is_installed("affiliate"))
{
$VAR['affiliate_account_id'] = $this->account_id;
$VAR['affiliate_template_id'] = DEFAULT_AFFILIATE_TEMPLATE;
include_once(PATH_MODULES . 'affiliate/affiliate.inc.php');
$affiliate = new affiliate;
$affiliate->add($VAR, $affiliate);
}
} else {
$C_debug->alert($C_translate->translate("user_add_inactive_welcome","account",""));
define('FORCE_PAGE', 'core:blank');
}
}
##############################
## VIEW ##
##############################
function view($VAR)
{
### Check that user is logged in:
if(SESS_LOGGED != '1') {
echo "Sorry, you must be logged in!";
return false;
}
$this->account_construct();
/* check for sub account */
if(!empty($VAR['id']) && $VAR['id'] != SESS_ACCOUNT) {
if($this->isParentAccount($VAR['id'])) {
$VAR['account_id'] = $VAR['id'];
global $smarty;
$smarty->assign('issubaccount', true);
} else {
return false;
}
} else {
$VAR['id'] = SESS_ACCOUNT;
$VAR['account_id'] = SESS_ACCOUNT;
}
### Retrieve the record:
$type = "view";
deprecated php methods
2009-03-26 04:10:40 +00:00
$this->method["$type"] = explode(",", $this->method["$type"]);
Initial Commit of AgileBill Open Source
2008-11-26 22:50:40 +00:00
$db = new CORE_database;
$db->view($VAR, $this, $type);
### Get the static vars:
global $smarty;
require_once(PATH_CORE . 'static_var.inc.php');
$static_var = new CORE_static_var;
$arr = $static_var->update_form('account', 'update', SESS_ACCOUNT);
if(gettype($arr) == 'array') {
$smarty->assign('static_var', $arr);
} else {
$smarty->assign('static_var', false);
}
/* get child accounts */
if(empty($smarty->_tpl_vars['account'][0]['parent_id']) || $smarty->_tpl_vars['account'][0]['parent_id']==$smarty->_tpl_vars['account'][0]['id']) {
$db=&DB();
$rs = $db->Execute(sqlSelect($db,"account","id,first_name,last_name,email,username","parent_id=". $db->qstr(SESS_ACCOUNT)));
if($rs && $rs->RecordCount()) {
while(!$rs->EOF) {
$smart[] = $rs->fields;
$rs->MoveNext();
}
$smarty->assign('subaccount', $smart);
}
}
}
##############################
## UPDATE ##
##############################
function update($VAR)
{
global $VAR;
### Check that user is logged in:
if(SESS_LOGGED != '1')
echo "Sorry, you must be logged in!";
/* check for sub account */
$issubaccount=false;
if(!empty($VAR['account_id']) && $VAR['account_id'] != SESS_ACCOUNT) {
if($this->isParentAccount($VAR['account_id'])) {
$VAR['id'] = $VAR['account_id'];
global $smarty;
$issubaccount=true;
} else {
return false;
}
} else {
$VAR['id'] = SESS_ACCOUNT;
$VAR['account_id'] = SESS_ACCOUNT;
}
$VAR['account_date_last']=time();
// validate the tax_id
require_once(PATH_MODULES.'tax/tax.inc.php');
$taxObj=new tax;
$tax_arr = @$VAR['account_tax_id'];
if(is_array($tax_arr)) {
foreach($tax_arr as $country_id => $tax_id) {
if ($country_id == $VAR['cid']) {
$exempt = @$VAR["account_tax_id_exempt"][$country_id];
if(!$txRs=$taxObj->TaxIdsValidate($country_id, $tax_id, $exempt)) {
$this->validated = false;
global $C_translate;
$this->val_error[] = array(
'field' => 'account_tax_id',
'field_trans' => $taxObj->errField,
'error' => $C_translate->translate('validate_general', "", ""));
}
if($exempt)
$VAR['account_tax_id']=false;
else
$VAR['account_tax_id']=$tax_id;
}
}
}
####################################################################
### Get required static_Vars and validate them... return an array
### w/ ALL errors...
####################################################################
require_once(PATH_CORE . 'static_var.inc.php');
$static_var = new CORE_static_var;
if(!isset($this->val_error)) $this->val_error = false;
$all_error = $static_var->validate_form('account', $this->val_error);
if($all_error != false && gettype($all_error) == 'array')
$this->validated = false;
else
$this->validated = true;
####################################################################
# If validation was failed, skip the db insert &
# set the errors & origonal fields as Smarty objects,
# and change the page to be loaded.
####################################################################
if(!$this->validated)
{
global $smarty;
# set the errors as a Smarty Object
$smarty->assign('form_validation', $all_error);
# set the page to be loaded
if(!defined("FORCE_PAGE"))
{
define('FORCE_PAGE', $VAR['_page_current']);
}
return;
}
### Change password
$password_changed = false;
if(isset($VAR['account_password']) && $VAR['account_password'] != "")
{
if(isset($VAR['confirm_password']) && $VAR['account_password'] == $VAR['confirm_password'])
{
$password = $VAR['account_password'];
unset($VAR['account_password']);
@$VAR["account_password"] = $password;
### Alert: the password has been changed!
global $C_debug, $C_translate;
$C_debug->alert($C_translate->translate('password_changed','account',''));
$password_changed=true;
/* check if new password is ok */
global $C_list;
if($C_list->is_installed('account_password_history')) {
include_once(PATH_MODULES.'account_password_history/account_password_history.inc.php');
$accountHistory = new account_password_history();
if(!$accountHistory->getIsPasswordOk(SESS_ACCOUNT, $VAR['account_password'], false)) {
$C_debug->alert("The password you have selected has been used recently and cannot be used again at this time for security purposes.");
unset($VAR["account_password"]);
$password_changed=false;
}
}
}
else
{
### ERROR: The passwords provided do not match!
global $C_debug, $C_translate;
$C_debug->alert($C_translate->translate('password_change_match','account',''));
unset($VAR["account_password"]);
}
}
else
{
unset($VAR["account_password"]);
}
### Change theme
if(isset($VAR['tid']) && $VAR['tid'] != "")
@$VAR["account_theme_id"] = $VAR['tid'];
### Change Language
if(isset($VAR['lid']) && $VAR['lid'] != "")
@$VAR["account_language_id"] = $VAR['lid'];
### Change country
if(isset($VAR['cid']) && $VAR['cid'] != "")
@$VAR["account_country_id"] = $VAR['cid'];
### Change currency
if(isset($VAR['cyid']) && $VAR['cyid'] != "")
@$VAR["account_currency_id"] = $VAR['cyid'];
### Get the old username ( for db mapping )
$db = &DB();
$sql = 'SELECT username FROM ' . AGILE_DB_PREFIX . 'account WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
id = ' . $db->qstr(SESS_ACCOUNT);
$result = $db->Execute($sql);
if($result->RecordCount() > 0)
{
$old_username = $result->fields['username'];
}
### Update the record
$this->account_construct();
$type = "update";
deprecated php methods
2009-03-26 04:10:40 +00:00
$this->method["$type"] = explode(",", $this->method["$type"]);
Initial Commit of AgileBill Open Source
2008-11-26 22:50:40 +00:00
$db = new CORE_database;
$db->update($VAR, $this, $type);
/* password logging class */
if($password_changed && is_object($accountHistory)) $accountHistory->setNewPassword(SESS_ACCOUNT, $VAR['account_password'], false);
### Update the static vars:
$static_var->update($VAR, 'account', SESS_ACCOUNT);
### Do any db_mapping
global $C_list;
if($C_list->is_installed('db_mapping'))
{
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
$db_map = new db_mapping;
if(!empty($password))
$db_map->plaintext_password = $password;
else
$db_map->plaintext_password = false;
$db_map->account_edit ( SESS_ACCOUNT, $old_username );
}
/* update groups for subaccount */
if($issubaccount) {
$db=&DB();
$db->Execute(sqlDelete($db,"account_group","group_id>2 and
(service_id is null or service_id=0 or service_id='')
and account_id=".$db->qstr($VAR['account_id'])));
if(!empty($VAR['groups']))
{
global $C_auth;
foreach($VAR['groups'] as $gid=>$val) {
if($gid==$val && $C_auth->auth_group_by_id($gid)) {
$fields=Array('account_id'=>$VAR['account_id'], 'group_id'=>$gid, 'active'=>1, 'date_orig'=>time() );
$db->Execute(sqlInsert($db,"account_group",$fields));
}
}
}
}
}
##############################
## PASSWORD ##
##############################
function password($VAR)
{
### Set the max time between password requests:
$LIMIT_SECONDS = 120;
global $C_translate, $C_debug;
### Is the username & email both set?
if(!isset($VAR["account_email"]) && !isset($VAR["account_username"]) )
{
#### ERROR: You must enter either your username or e-mail address!
$C_debug->alert($C_translate->translate('password_reset_req','account',''));
return;
}
else if($VAR["account_email"] == "" && $VAR["account_username"] == "")
{
#### ERROR: You must enter either your username or e-mail address!
$C_debug->alert($C_translate->translate('password_reset_req','account',''));
return;
}
$db = &DB();
if(isset($VAR["account_email"]) && $VAR["account_email"] != "")
{
$sql = ' email = '. $db->qstr($VAR["account_email"], get_magic_quotes_gpc());
}
else if(isset($VAR["account_username"]) && $VAR["account_username"] != "")
{
$sql = ' username = '. $db->qstr($VAR["account_username"], get_magic_quotes_gpc());
}
$q = 'SELECT id,email,first_name,last_name FROM ' . AGILE_DB_PREFIX . 'account
WHERE '. $sql . ' AND
site_id = ' . $db->qstr(DEFAULT_SITE);
$result = $db->Execute($q);
if($result->RecordCount() == 0)
{
### ERROR: No matches found!
$C_debug->alert($C_translate->translate('password_reset_no_match','account',''));
return;
}
$account = $result->fields["id"];
###################################################################
### Check that this email has not been requested already
### In the last 60 seconds
$db = &DB();
$sql = 'SELECT * FROM ' . AGILE_DB_PREFIX . 'temporary_data WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
field1 = ' . $db->qstr($account);
$result = $db->Execute($sql);
if($result->RecordCount() > 0)
{
$limit = $result->fields['date_orig'] + $LIMIT_SECONDS;
if($limit > time())
{
$error1 = $C_translate->translate("password_reset_spam_limit","account","");
$error = ereg_replace('%limit%', "$LIMIT_SECONDS", $error1);
$C_debug->alert( $error );
return;
}
else
{
### Delete the old request
$sql = 'DELETE FROM ' . AGILE_DB_PREFIX . 'temporary_data WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
field1 = ' . $db->qstr($account);
$db->Execute($sql);
}
}
###################################################################
### Ok to continue:
$now = md5(microtime());
$expire = time() + (15*60); // expires in 15 minutes
#####################################################
### Create the temporary DB Record:
$db = &DB();
$id = $db->GenID(AGILE_DB_PREFIX . "" . 'temporary_data_id');
$sql = 'INSERT INTO ' . AGILE_DB_PREFIX . 'temporary_data SET
site_id = ' . $db->qstr(DEFAULT_SITE) . ',
id = ' . $db->qstr($id) . ',
date_orig = ' . $db->qstr(time()) . ',
date_expire = ' . $db->qstr($expire) . ',
field1 = ' . $db->qstr($account) . ',
field2 = ' . $db->qstr($now);
$result = $db->Execute($sql);
#####################################################
### Send the password reset email template:
require_once(PATH_MODULES . 'email_template/email_template.inc.php');
$my = new email_template;
$my->send('account_reset_password', $account, '', '', $now);
### ALERT: we have sent an email to you....
$C_debug->alert($C_translate->translate('password_reset_sent','account',''));
}
##############################
## PASSWORD RESET ##
##############################
function password_reset($VAR)
{
global $C_translate, $C_debug, $smarty;
### Validate that the password is set... && confirm password is set...
if(!isset($VAR['account_password']) || !isset($VAR['confirm_password']))
{
### ERROR:
$message = $C_translate->translate('password_reset_reqq','account','');
$C_debug->alert($message);
return;
}
else if ($VAR['account_password'] == "")
{
### ERROR:
$message = $C_translate->translate('password_reset_reqq','account','');
$C_debug->alert($message);
return;
}
else if ($VAR['account_password'] != $VAR['confirm_password'])
{
### ERROR:
$message = $C_translate->translate('password_change_match','account','');
$C_debug->alert($message);
return;
}
else
{
$plaintext_password = $VAR['account_password'];
/* hash the password */
if(defined('PASSWORD_ENCODING_SHA'))
$password = sha1($VAR['account_password']);
else
$password = md5($VAR['account_password']);
}
if(!isset($VAR['validate']) || $VAR['validate'] == "")
{
### ERROR: bad link....
$url = '<br><a href="'. URL . '?_page=account:password">' . $C_translate->translate('submit','CORE','') . '</a>';
$message = $C_translate->translate('password_reset_bad_url','account','');
$C_debug->alert($message . '' . $url);
return;
}
### Get the temporary record from the database
$validate = @$VAR['validate'];
$db = &DB();
$sql = 'SELECT field1,field2 FROM ' . AGILE_DB_PREFIX . 'temporary_data WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
date_expire >= '. $db->qstr(time()) . ' AND
field2 = ' . $db->qstr($validate);
$result = $db->Execute($sql);
if($result->RecordCount() == 0)
{
### ERROR: no match for submitted link, invalid or expired.
$url = '<br><a href="'. URL . '?_page=account:password">' . $C_translate->translate('submit','CORE','') . '</a>';
$message = $C_translate->translate('password_reset_bad_url','account','');
$C_debug->alert($message . '' . $url);
return;
}
$account_id = $result->fields['field1'];
/* check if new password is ok */
global $C_list;
if($C_list->is_installed('account_password_history')) {
include_once(PATH_MODULES.'account_password_history/account_password_history.inc.php');
$accountHistory = new account_password_history();
if(!$accountHistory->getIsPasswordOk($account_id, $password)) {
$C_debug->alert("The password you have selected has been used recently and cannot be used again at this time for security purposes.");
return;
}
}
###############################################################
### Delete the temporary record
$sql = 'DELETE FROM ' . AGILE_DB_PREFIX . 'temporary_data WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
field2 = ' . $db->qstr($validate);
$db->Execute($sql);
###############################################################
### Update the password record:
$db = &DB();
$sql = 'UPDATE ' . AGILE_DB_PREFIX . 'account
SET
date_last = ' . $db->qstr(time()) . ',
password = ' . $db->qstr($password) . '
WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
id = ' . $db->qstr($account_id);
$db->Execute($sql);
/* password logging class */
if(!empty($accountHistory) && is_object($accountHistory)) $accountHistory->setNewPassword($account_id, $password);
####################################################################
### Get the old username ( for db mapping )
$db = &DB();
$sql = 'SELECT username FROM ' . AGILE_DB_PREFIX . 'account WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
id = ' . $db->qstr($account_id);
$result = $db->Execute($sql);
if($result->RecordCount() > 0)
{
$old_username = $result->fields['username'];
}
####################################################################
### Do any db_mapping
####################################################################
global $C_list;
if($C_list->is_installed('db_mapping'))
{
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
$db_map = new db_mapping;
$db_map->plaintext_password = $plaintext_password;
$db_map->account_edit ( $account_id, $old_username );
}
### Return the success message:
$C_debug->alert($C_translate->translate('password_update_success','account',''));
$smarty->assign('pw_changed', true);
}
##############################
## VERIFY ACCOUNT ##
##############################
function verify($VAR)
{
global $C_debug, $C_translate, $smarty;
### Validate $verify is set...
if(!isset($VAR['verify']) || $VAR['verify'] == "")
{
### Error: please use the form below ...
$smarty->assign('verify_results', false);
return;
}
@$verify = explode(':', $VAR['verify']);
### Validate the $verify string....
$db = &DB();
$sql = 'SELECT id,username,status FROM ' . AGILE_DB_PREFIX . 'account WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
id = ' . $db->qstr(@$verify[1]) . ' AND
date_orig = ' . $db->qstr(@$verify[0]);
$result = $db->Execute($sql);
if($result->RecordCount() == 0)
{
### Error: please use the form below ...
$smarty->assign('verify_results', false);
return;
}
### Check the status:
$status = $result->fields['status'];
$username = $result->fields['username'];
if($status == "1")
{
### Account already active!
$smarty->assign('verify_results', true);
return;
}
### Update the account status
$sql = 'UPDATE ' . AGILE_DB_PREFIX . 'account SET
status = ' . $db->qstr("1") . '
WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
id = ' . $db->qstr(@$verify[1]);
$result = $db->Execute($sql);
### Account now active!
$smarty->assign('verify_results', true);
### Return the success message:
$C_debug->alert($C_translate->translate('password_update_success','account',''));
####################################################################
### Do any db_mapping
####################################################################
global $C_list;
/*
if($C_list->is_installed('db_mapping'))
{
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
$db_map = new db_mapping;
$db_map->account_edit ( $VAR['verify'], $username );
}
*/
if($C_list->is_installed('db_mapping') )
{
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
$db_map = new db_mapping;
$db_map->plaintext_password = false;
$db_map->account_add ( $verify[1] );
}
}
##############################
## VERIFY ACCOUNT ##
##############################
function verify_resend($VAR)
{
global $C_translate, $C_debug;
### Is the username & email both set?
if(!isset($VAR["account_email"]) && !isset($VAR["account_username"]) )
{
#### ERROR: You must enter either your username or e-mail address!
$C_debug->alert($C_translate->translate('verify_resend_req','account',''));
return;
}
else if($VAR["account_email"] == "" && $VAR["account_username"] == "")
{
#### ERROR: You must enter either your username or e-mail address!
$C_debug->alert($C_translate->translate('verify_resend_req','account',''));
return;
}
$db = &DB();
if(isset($VAR["account_email"]) && $VAR["account_email"] != "")
{
$sql = ' email = '. $db->qstr($VAR["account_email"], get_magic_quotes_gpc());
}
else if(isset($VAR["account_username"]) && $VAR["account_username"] != "")
{
$sql = ' username = '. $db->qstr($VAR["account_username"], get_magic_quotes_gpc());
}
$q = 'SELECT id,date_orig,status,email,first_name,last_name FROM ' . AGILE_DB_PREFIX . 'account
WHERE '. $sql . ' AND
site_id = ' . $db->qstr(DEFAULT_SITE);
$result = $db->Execute($q);
if($result->RecordCount() == 0)
{
### ERROR: No matches found!
$C_debug->alert($C_translate->translate('password_reset_no_match','account',''));
return;
}
$account = $result->fields["id"];
$status = $result->fields["status"];
$validation_str = strtoupper($result->fields['date_orig']. ':' . $result->fields['id']);
if($status == "1")
{
### ERROR: This account is already active!
$C_debug->alert($C_translate->translate('verify_resend_active','account',''));
return;
}
### Resend the pending email:
require_once(PATH_MODULES . 'email_template/email_template.inc.php');
$my = new email_template;
$my->send('account_registration_inactive', $account, $account, '', $validation_str);
### Notice that the email is sent:
$C_debug->alert($C_translate->translate("user_add_inactive_welcome","account",""));
}
##############################
## STATIC VARS ##
##############################
function static_var($VAR)
{
global $smarty;
require_once(PATH_CORE . 'static_var.inc.php');
$static_var = new CORE_static_var;
if(ereg('search', $VAR['_page']))
$arr = $static_var->generate_form('account', 'add', 'search');
else
$arr = $static_var->generate_form('account', 'add', 'update');
if(gettype($arr) == 'array')
{
### Set everything as a smarty array, and return:
$smarty->assign('show_static_var', true);
$smarty->assign('static_var', $arr);
return true;
}
else
{
### Or if no results:
$smarty->assign('show_static_var', false);
return false;
}
}
}
?>
Reference in New Issue Copy Permalink