1335 lines
42 KiB
PHP
1335 lines
42 KiB
PHP
<?php
|
|
|
|
/**
|
|
* AgileBill - Open Billing Software
|
|
*
|
|
* This body of work is free software; you can redistribute it and/or
|
|
* modify it under the terms of the Open AgileBill License
|
|
* License as published at http://www.agileco.com/agilebill/license1-4.txt
|
|
*
|
|
* For questions, help, comments, discussion, etc., please join the
|
|
* Agileco community forums at http://forum.agileco.com/
|
|
*
|
|
* @link http://www.agileco.com/
|
|
* @copyright 2004-2008 Agileco, LLC.
|
|
* @license http://www.agileco.com/agilebill/license1-4.txt
|
|
* @author Tony Landis <tony@agileco.com>
|
|
* @package AgileBill
|
|
* @version 1.4.93
|
|
*/
|
|
|
|
class account
|
|
{
|
|
var $parent_id;
|
|
|
|
# Open the constructor for this mod
|
|
function account_construct()
|
|
{
|
|
# name of this module:
|
|
$this->module = "account";
|
|
|
|
# location of the construct XML file:
|
|
$this->xml_construct = PATH_MODULES . "" . $this->module . "/" . $this->module . "_construct.xml";
|
|
|
|
# open the construct file for parsing
|
|
$C_xml = new CORE_xml;
|
|
$construct = $C_xml->xml_to_array($this->xml_construct);
|
|
|
|
$this->method = $construct["construct"]["method"];
|
|
$this->trigger = $construct["construct"]["trigger"];
|
|
$this->field = $construct["construct"]["field"];
|
|
$this->table = $construct["construct"]["table"];
|
|
$this->module = $construct["construct"]["module"];
|
|
$this->cache = $construct["construct"]["cache"];
|
|
$this->order_by = $construct["construct"]["order_by"];
|
|
$this->limit = $construct["construct"]["limit"];
|
|
}
|
|
|
|
/** add sub account */
|
|
function sub_account_add($VAR) {
|
|
if(!SESS_LOGGED) return false;
|
|
$this->parent_id=SESS_ACCOUNT;
|
|
if($this->add($VAR, $this)) {
|
|
// add any additional groups
|
|
if(!empty($VAR['groups']) && is_array($VAR['groups'])) {
|
|
global $C_auth;
|
|
$db=&DB();
|
|
foreach($VAR['groups'] as $key => $gid) {
|
|
if($C_auth->auth_group_by_id($gid)) {
|
|
$fields=Array('account_id'=>$this->account_id, 'active'=>1, 'group_id'=>$gid, 'date_orig'=>time());
|
|
$db->Execute($sql=sqlInsert($db,"account_group",$fields));
|
|
}
|
|
}
|
|
}
|
|
define('FORCE_PAGE', 'account:account');
|
|
global $C_debug;
|
|
$C_debug->alert("The sub-account has been added");
|
|
}
|
|
}
|
|
|
|
/** delete sub account */
|
|
function sub_delete($VAR) {
|
|
// return false;
|
|
// verify perms
|
|
if(empty($VAR['id']) || !$this->isParentAccount($VAR['id'])) {
|
|
return false;
|
|
}
|
|
|
|
// ok, do deletion
|
|
include_once(PATH_MODULES.'account_admin/account_admin.inc.php');
|
|
$aa = new account_admin;
|
|
$VAR['account_admin_id'] = $VAR['id'];
|
|
$aa->delete($VAR);
|
|
}
|
|
|
|
/* check if sub account auth */
|
|
function isParentAccount($sub_account_id) {
|
|
$db=&DB();
|
|
$rs = $db->Execute(sqlSelect($db,"account","parent_id","id=". $db->qstr($sub_account_id)."
|
|
AND parent_id != 0 AND parent_id IS NOT NULL AND parent_id != ''
|
|
AND parent_id = ". $db->qstr(SESS_ACCOUNT)));
|
|
if($rs && $rs->RecordCount()) {
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/** Get authorized groups */
|
|
function get_auth_groups($VAR) {
|
|
$groups = false;
|
|
global $smarty, $C_auth;
|
|
$db=&DB();
|
|
|
|
/* get groups for this account */
|
|
$authgrp=array();
|
|
if(!empty($VAR['id'])) {
|
|
$grs = $db->Execute(sqlSelect($db,"account_group","group_id","group_id>2 and active=1 and account_id=". $db->qstr($VAR['id'])));
|
|
if($grs && $grs->RecordCount()) {
|
|
while(!$grs->EOF) {
|
|
$authgrp["{$grs->fields['group_id']}"] = true;
|
|
$grs->MoveNext();
|
|
}
|
|
}
|
|
}
|
|
|
|
$ids = implode(",", $C_auth->group);
|
|
$rs = $db->Execute($sql=sqlSelect($db,"group","id,name","id in ($ids) and id > 2"));
|
|
if($rs && $rs->RecordCount()) {
|
|
while(!$rs->EOF) {
|
|
$gid = $rs->fields['id'];
|
|
if ( (!empty($VAR['groups']) && is_array($VAR['groups']) && !empty($VAR['groups'][$gid]))
|
|
|| (!empty($authgrp["$gid"])) )
|
|
$rs->fields['checked']=true;
|
|
$groups[] = $rs->fields;
|
|
$rs->MoveNext();
|
|
}
|
|
}
|
|
$smarty->assign("groups", $groups);
|
|
}
|
|
|
|
|
|
/**
|
|
* Check account limitations
|
|
*/
|
|
function checkLimits() {
|
|
if(!defined('AGILE_RST_ACCOUNT') || AGILE_RST_ACCOUNT <= 0) return true;
|
|
$sql="SELECT count(*) as totalacct from ".AGILE_DB_PREFIX."account WHERE site_id=".DEFAULT_SITE;
|
|
$db=&DB();
|
|
$rs=$db->Execute($sql);
|
|
if($rs && $rs->RecordCount() && $rs->fields['totalacct'] <= AGILE_RST_ACCOUNT) {
|
|
return true;
|
|
} else {
|
|
global $C_debug;
|
|
$C_debug->alert("Licensed user limit of ".AGILE_RST_ACCOUNT." exceeded, operation failed.");
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
|
|
##############################
|
|
## ADD ##
|
|
##############################
|
|
function add($VAR)
|
|
{
|
|
if(!$this->checkLimits()) return false; // check account limits
|
|
|
|
$this->account_construct();
|
|
global $C_list, $C_translate, $C_debug, $VAR, $smarty;
|
|
$this->validated = true;
|
|
|
|
### Set the hidden values:
|
|
$VAR['account_date_orig'] = time();
|
|
$VAR['account_date_last'] = time();
|
|
|
|
if(defined("SESS_LANGUAGE"))
|
|
@$VAR['account_language_id'] = SESS_LANGUAGE;
|
|
else
|
|
@$VAR['account_language_id'] = DEFAULT_LANGUAGE;
|
|
|
|
if(defined("SESS_AFFILIATE"))
|
|
@$VAR['account_affiliate_id']= SESS_AFFILIATE;
|
|
else
|
|
@$VAR['account_affiliate_id']= DEFAULT_AFFILIATE;
|
|
|
|
if(defined("SESS_RESELLER"))
|
|
@$VAR['account_reseller_id'] = SESS_RESELLER;
|
|
else
|
|
@$VAR['account_reseller_id'] = DEFAULT_RESELLER;
|
|
|
|
if(defined("SESS_CURRENCY"))
|
|
@$VAR['account_currency_id'] = SESS_CURRENCY;
|
|
else
|
|
@$VAR['account_currency_id'] = DEFAULT_CURRENCY;
|
|
|
|
if(defined("SESS_THEME"))
|
|
@$VAR['account_theme_id'] = SESS_THEME;
|
|
else
|
|
@$VAR['account_theme_id'] = DEFAULT_THEME;
|
|
|
|
if(defined("SESS_CAMPAIGN"))
|
|
@$VAR['account_campaign_id'] = SESS_CAMPAIGN;
|
|
else
|
|
@$VAR['account_campaign_id'] = 0;
|
|
|
|
if(!isset($VAR['account_email_type']) && @$VAR['account_email_type'] != "1")
|
|
@$VAR['account_email_type'] = '0';
|
|
|
|
### Determine the proper account status:
|
|
if(DEFAULT_ACCOUNT_STATUS != '1')
|
|
$status = '1';
|
|
else
|
|
$status = '0';
|
|
|
|
## Single field login:
|
|
if(defined('SINGLE_FIELD_LOGIN') && SINGLE_FIELD_LOGIN==true && empty($VAR['account_password'])) {
|
|
$VAR['account_password']='none';
|
|
$VAR['confirm_password']='none';
|
|
}
|
|
|
|
####################################################################
|
|
### loop through the field list to validate the required fields
|
|
####################################################################
|
|
|
|
$type = 'add';
|
|
$this->method["$type"] = preg_split("/,/", $this->method["$type"]);
|
|
$arr = $this->method["$type"];
|
|
include_once(PATH_CORE . 'validate.inc.php');
|
|
$validate = new CORE_validate;
|
|
$this->validated = true;
|
|
|
|
while (list ($key, $value) = each ($arr))
|
|
{
|
|
# get the field value
|
|
$field_var = $this->module . '_' . $value;
|
|
$field_name = $value;
|
|
|
|
####################################################################
|
|
### perform any field validation...
|
|
####################################################################
|
|
|
|
# check if this value is unique
|
|
if(isset($this->field["$value"]["unique"]) && isset($VAR["$field_var"]))
|
|
{
|
|
if(!$validate->validate_unique($this->table, $field_name, "record_id", $VAR["$field_var"]))
|
|
{
|
|
$this->validated = false;
|
|
$this->val_error[] = array('field' => $this->table . '_' . $field_name,
|
|
'field_trans' => $C_translate->translate('field_' . $field_name, $this->module, ""), # translate
|
|
'error' => $C_translate->translate('validate_unique',"", ""));
|
|
}
|
|
}
|
|
|
|
# check if the submitted value meets the specifed requirements
|
|
if(isset($this->field["$value"]["validate"]))
|
|
{
|
|
if(isset($VAR["$field_var"]))
|
|
{
|
|
if($VAR["$field_var"] != '')
|
|
{
|
|
if(!$validate->validate($field_name, $this->field["$value"], $VAR["$field_var"], $this->field["$value"]["validate"]))
|
|
{
|
|
$this->validated = false;
|
|
$this->val_error[] = array('field' => $this->module . '_' . $field_name,
|
|
'field_trans' => $C_translate->translate('field_' . $field_name, $this->module, ""),
|
|
'error' => $validate->error["$field_name"] );
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$this->validated = false;
|
|
$this->val_error[] = array('field' => $this->module . '_' . $field_name,
|
|
'field_trans' => $C_translate->translate('field_' . $field_name, $this->module, ""),
|
|
'error' => $C_translate->translate('validate_any',"", ""));
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$this->validated = false;
|
|
$this->val_error[] = array('field' => $this->module . '_' . $field_name,
|
|
'field_trans' => $C_translate->translate('field_' . $field_name, $this->module, ""),
|
|
'error' => $C_translate->translate('validate_any',"", ""));
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
|
|
####################################################################
|
|
### Validate the password
|
|
####################################################################
|
|
|
|
if(isset($VAR['account_password']) && $VAR['account_password'] != "")
|
|
{
|
|
if(isset($VAR['confirm_password']) && $VAR['account_password'] == $VAR['confirm_password'])
|
|
{
|
|
$password = $VAR['account_password'];
|
|
$smarty->assign('confirm_account_password', $VAR["account_password"]);
|
|
}
|
|
else
|
|
{
|
|
### ERROR: The passwords provided do not match!
|
|
$smarty->assign('confirm_account_password', '');
|
|
$this->validated = false;
|
|
$this->val_error[] = array('field' => 'account_confirm_password',
|
|
'field_trans' => $C_translate->translate('field_confirm_password', $this->module, ""), # translate
|
|
'error' => $C_translate->translate('password_change_match',"account", ""));
|
|
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$smarty->assign('confirm_account_password', '');
|
|
}
|
|
|
|
|
|
####################################################################
|
|
### Validate that the user's IP & E-mail are not banned!
|
|
####################################################################
|
|
|
|
if($this->validated)
|
|
{
|
|
require_once(PATH_MODULES . 'blocked_email/blocked_email.inc.php');
|
|
$blocked_email = new blocked_email;
|
|
if(!$blocked_email->is_blocked($VAR['account_email']))
|
|
$this->val_error[] = array(
|
|
'field' => 'account_email',
|
|
'field_trans' => $C_translate->translate('field_email', $this->module, ""),
|
|
'error' => $C_translate->translate('validate_banned_email',"", ""));
|
|
|
|
|
|
require_once(PATH_MODULES . 'blocked_ip/blocked_ip.inc.php');
|
|
$blocked_ip = new blocked_ip;
|
|
if(!$blocked_ip->is_blocked(USER_IP))
|
|
$this->val_error[] = array(
|
|
'field' => 'IP Address',
|
|
'field_trans' => $C_translate->translate('ip_address', $this->module, ""),
|
|
'error' => $C_translate->translate('validate_banned_ip',"", ""));
|
|
}
|
|
|
|
// validate the tax_id
|
|
require_once(PATH_MODULES.'tax/tax.inc.php');
|
|
$taxObj=new tax;
|
|
$tax_arr = @$VAR['account_tax_id'];
|
|
if(is_array($tax_arr)) {
|
|
foreach($tax_arr as $country_id => $tax_id) {
|
|
if ($country_id == $VAR['account_country_id']) {
|
|
$exempt = @$VAR["account_tax_id_exempt"][$country_id];
|
|
if(!$taxObj->TaxIdsValidate($country_id, $tax_id, $exempt)) {
|
|
$this->validated = false;
|
|
$this->val_error[] = array(
|
|
'field' => 'account_tax_id',
|
|
'field_trans' => $taxObj->errField,
|
|
'error' => $C_translate->translate('validate_general', "", ""));
|
|
}
|
|
if($exempt)
|
|
$VAR['account_tax_id']=false;
|
|
else
|
|
$VAR['account_tax_id']=$tax_id;
|
|
}
|
|
}
|
|
}
|
|
|
|
####################################################################
|
|
### Get required static_Vars and validate them... return an array
|
|
### w/ ALL errors...
|
|
####################################################################
|
|
|
|
require_once(PATH_CORE . 'static_var.inc.php');
|
|
$static_var = new CORE_static_var;
|
|
|
|
if(!isset($this->val_error)) $this->val_error = false;
|
|
$all_error = $static_var->validate_form($this->module, $this->val_error);
|
|
|
|
if($all_error != false && gettype($all_error) == 'array')
|
|
$this->validated = false;
|
|
else
|
|
$this->validated = true;
|
|
|
|
|
|
|
|
####################################################################
|
|
### If validation was failed, skip the db insert &
|
|
### set the errors & origonal fields as Smarty objects,
|
|
### and change the page to be loaded.
|
|
####################################################################
|
|
|
|
if(!$this->validated)
|
|
{
|
|
global $smarty;
|
|
|
|
# set the errors as a Smarty Object
|
|
$smarty->assign('form_validation', $all_error);
|
|
|
|
# set the page to be loaded
|
|
if(!defined("FORCE_PAGE"))
|
|
{
|
|
define('FORCE_PAGE', $VAR['_page_current']);
|
|
}
|
|
|
|
# Stripslashes
|
|
global $C_vars;
|
|
$C_vars->strip_slashes_all();
|
|
|
|
return;
|
|
}
|
|
|
|
# Get default invoice options
|
|
$db=&DB();
|
|
$invopt=$db->Execute(sqlSelect($db,"setup_invoice","*",""));
|
|
if($invopt && $invopt->RecordCount()) {
|
|
$invoice_delivery=$invopt->fields['invoice_delivery'];
|
|
$invoice_format=$invopt->fields['invoice_show_itemized'];
|
|
}
|
|
|
|
/* hash the password */
|
|
if(defined('PASSWORD_ENCODING_SHA'))
|
|
$password_encoded = sha1($password);
|
|
else
|
|
$password_encoded = md5($password);
|
|
|
|
####################################################################
|
|
### Insert the account record
|
|
####################################################################
|
|
$this->account_id = $db->GenID(AGILE_DB_PREFIX . 'account_id');
|
|
$validation_str = time();
|
|
|
|
/** get parent id */
|
|
$this->account_id;
|
|
if(empty($this->parent_id)) $this->parent_id = $this->account_id;
|
|
|
|
$sql = '
|
|
INSERT INTO ' . AGILE_DB_PREFIX . 'account SET
|
|
id = ' . $db->qstr ( $this->account_id ) . ',
|
|
site_id = ' . $db->qstr ( DEFAULT_SITE ) . ',
|
|
date_orig = ' . $db->qstr ( $validation_str ) . ',
|
|
date_last = ' . $db->qstr ( time()) . ',
|
|
language_id = ' . $db->qstr ( $VAR["account_language_id"] ) . ',
|
|
country_id = ' . $db->qstr ( $VAR["account_country_id"] ) . ',
|
|
parent_id = ' . $db->qstr ( $this->parent_id ) . ',
|
|
affiliate_id = ' . $db->qstr ( @$VAR["account_affiliate_id"] ) . ',
|
|
campaign_id = ' . $db->qstr ( @$VAR["account_campaign_id"] ) . ',
|
|
reseller_id = ' . $db->qstr ( @$VAR["account_reseller_id"] ) . ',
|
|
currency_id = ' . $db->qstr ( $VAR["account_currency_id"] ) . ',
|
|
theme_id = ' . $db->qstr ( $VAR["account_theme_id"] ) . ',
|
|
username = ' . $db->qstr ( $VAR["account_username"] , get_magic_quotes_gpc()) . ',
|
|
password = ' . $db->qstr ( $password_encoded ) . ',
|
|
status = ' . $db->qstr ( $status ) . ',
|
|
first_name = ' . $db->qstr ( $VAR["account_first_name"] , get_magic_quotes_gpc()) . ',
|
|
middle_name = ' . $db->qstr ( $VAR["account_middle_name"], get_magic_quotes_gpc()) . ',
|
|
last_name = ' . $db->qstr ( $VAR["account_last_name"] , get_magic_quotes_gpc()) . ',
|
|
company = ' . $db->qstr ( $VAR["account_company"] , get_magic_quotes_gpc()) . ',
|
|
title = ' . $db->qstr ( $VAR["account_title"] , get_magic_quotes_gpc()) . ',
|
|
email = ' . $db->qstr ( $VAR["account_email"] , get_magic_quotes_gpc()) . ',
|
|
address1 = ' . $db->qstr ( $VAR["account_address1"] , get_magic_quotes_gpc()) . ',
|
|
address2 = ' . $db->qstr ( $VAR["account_address2"] , get_magic_quotes_gpc()) . ',
|
|
city = ' . $db->qstr ( $VAR["account_city"] , get_magic_quotes_gpc()) . ',
|
|
state = ' . $db->qstr ( $VAR["account_state"] , get_magic_quotes_gpc()) . ',
|
|
zip = ' . $db->qstr ( $VAR["account_zip"] , get_magic_quotes_gpc()) . ',
|
|
email_type = ' . $db->qstr ( $VAR["account_email_type"] , get_magic_quotes_gpc()). ',
|
|
invoice_delivery= ' . $db->qstr ( @$invoice_delivery ) . ',
|
|
invoice_show_itemized=' . $db->qstr ( @$invoice_format) . ',
|
|
invoice_advance_gen = ' . $db->qstr ( MAX_INV_GEN_PERIOD ) . ',
|
|
invoice_grace = ' . $db->qstr ( GRACE_PERIOD ) . ',
|
|
tax_id = ' . $db->qstr ( @$VAR['account_tax_id'] );
|
|
$result = $db->Execute($sql);
|
|
|
|
####################################################################
|
|
### error reporting:
|
|
####################################################################
|
|
|
|
if ($result === false)
|
|
{
|
|
global $C_debug;
|
|
$C_debug->error('account.inc.php','add', $db->ErrorMsg());
|
|
|
|
if(isset($this->trigger["$type"])) {
|
|
include_once(PATH_CORE . 'trigger.inc.php');
|
|
$trigger = new CORE_trigger;
|
|
$trigger->trigger($this->trigger["$type"], 0, $VAR);
|
|
}
|
|
return;
|
|
}
|
|
|
|
/* password logging class */
|
|
if($C_list->is_installed('account_password_history')) {
|
|
include_once(PATH_MODULES.'account_password_history/account_password_history.inc.php');
|
|
$accountHistory = new account_password_history();
|
|
$accountHistory->setNewPassword($this->account_id, $password_encoded);
|
|
}
|
|
|
|
####################################################################
|
|
### Add the account to the default group:
|
|
####################################################################
|
|
|
|
$group_id = $db->GenID(AGILE_DB_PREFIX . 'account_group_id');
|
|
$sql = '
|
|
INSERT INTO ' . AGILE_DB_PREFIX . 'account_group SET
|
|
id = ' . $db->qstr ( $group_id ) . ',
|
|
site_id = ' . $db->qstr ( DEFAULT_SITE ) . ',
|
|
date_orig = ' . $db->qstr ( time() ) . ',
|
|
group_id = ' . $db->qstr ( DEFAULT_GROUP ) . ',
|
|
account_id = ' . $db->qstr ( $this->account_id ) . ',
|
|
active = ' . $db->qstr ('1');
|
|
$db->Execute($sql);
|
|
|
|
|
|
####################################################################
|
|
### Insert the static vars:
|
|
####################################################################
|
|
|
|
$static_var->add($VAR, $this->module, $this->account_id);
|
|
|
|
|
|
####################################################################
|
|
### Mail the user the new_account email template
|
|
####################################################################
|
|
|
|
require_once(PATH_MODULES . 'email_template/email_template.inc.php');
|
|
$my = new email_template;
|
|
if($status == "1")
|
|
{
|
|
$my->send('account_registration_active', $this->account_id, $this->account_id, '', '');
|
|
} else {
|
|
$validation_str = strtoupper($validation_str. ':' .$this->account_id);
|
|
$my->send('account_registration_inactive', $this->account_id, '', '', $validation_str);
|
|
}
|
|
|
|
|
|
####################################################################
|
|
### Add the newsletters
|
|
####################################################################
|
|
|
|
if(NEWSLETTER_REGISTRATION == "1")
|
|
{
|
|
@$VAR['newsletter_html'] = $VAR['account_email_type'];
|
|
$VAR['newsletter_email'] = $VAR['account_email'];
|
|
$VAR['newsletter_first_name'] = $VAR['account_first_name'];
|
|
$VAR['newsletter_last_name'] = $VAR['account_last_name'];
|
|
require_once(PATH_MODULES . '/newsletter/newsletter.inc.php');
|
|
$newsletter = new newsletter;
|
|
$newsletter->subscribe($VAR, $this);
|
|
}
|
|
|
|
|
|
####################################################################
|
|
### Log in the user & display the welcome message
|
|
####################################################################
|
|
|
|
if($status == "1")
|
|
{
|
|
if($this->parent_id == $this->account_id || empty($this->parent_id))
|
|
{
|
|
$C_debug->alert($C_translate->translate("user_add_active_welcome","account",""));
|
|
if(SESSION_EXPIRE == 0) $exp = 99999;
|
|
else $exp = SESSION_EXPIRE;
|
|
$date_expire = (time() + (SESSION_EXPIRE * 60));
|
|
|
|
# update the session
|
|
$db = &DB();
|
|
$q = "UPDATE " . AGILE_DB_PREFIX . "session
|
|
SET
|
|
ip= " . $db->qstr(USER_IP) .",
|
|
date_expire = " . $db->qstr($date_expire) . ",
|
|
logged = " . $db->qstr('1').",
|
|
account_id = " . $db->qstr($this->account_id) . "
|
|
WHERE
|
|
id = " . $db->qstr(SESS) . "
|
|
AND
|
|
site_id = " . $db->qstr(DEFAULT_SITE);
|
|
$result = $db->Execute($q);
|
|
|
|
### constants
|
|
define('FORCE_SESS_ACCOUNT', $this->account_id);
|
|
define('FORCE_SESS_LOGGED', 1);
|
|
|
|
### Reload the session auth cache
|
|
if(CACHE_SESSIONS == '1') {
|
|
$force = true;
|
|
$C_auth = new CORE_auth($force);
|
|
global $C_auth2;
|
|
$C_auth2 = $C_auth;
|
|
}
|
|
|
|
if(isset($VAR['_page_next']))
|
|
define('REDIRECT_PAGE', '?_page='.$VAR['_page_next']);
|
|
elseif(isset($VAR['_page']))
|
|
define('REDIRECT_PAGE', '?_page='.$VAR['_page']);
|
|
}
|
|
|
|
####################################################################
|
|
### Do any db_mapping
|
|
####################################################################
|
|
if($C_list->is_installed('db_mapping'))
|
|
{
|
|
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
|
|
$db_map = new db_mapping;
|
|
if(!empty($password))
|
|
$db_map->plaintext_password = $password;
|
|
else
|
|
$db_map->plaintext_password = false;
|
|
$db_map->account_add ( $this->account_id );
|
|
|
|
$db_map = new db_mapping;
|
|
$db_map->login ( $this->account_id );
|
|
}
|
|
|
|
####################################################################
|
|
### Affiliate Auto Creation
|
|
####################################################################
|
|
if(AUTO_AFFILIATE == 1 && $C_list->is_installed("affiliate"))
|
|
{
|
|
$VAR['affiliate_account_id'] = $this->account_id;
|
|
$VAR['affiliate_template_id'] = DEFAULT_AFFILIATE_TEMPLATE;
|
|
|
|
include_once(PATH_MODULES . 'affiliate/affiliate.inc.php');
|
|
$affiliate = new affiliate;
|
|
$affiliate->add($VAR, $affiliate);
|
|
}
|
|
} else {
|
|
$C_debug->alert($C_translate->translate("user_add_inactive_welcome","account",""));
|
|
define('FORCE_PAGE', 'core:blank');
|
|
}
|
|
}
|
|
|
|
|
|
|
|
##############################
|
|
## VIEW ##
|
|
##############################
|
|
function view($VAR)
|
|
{
|
|
|
|
### Check that user is logged in:
|
|
if(SESS_LOGGED != '1') {
|
|
echo "Sorry, you must be logged in!";
|
|
return false;
|
|
}
|
|
|
|
$this->account_construct();
|
|
|
|
/* check for sub account */
|
|
if(!empty($VAR['id']) && $VAR['id'] != SESS_ACCOUNT) {
|
|
if($this->isParentAccount($VAR['id'])) {
|
|
$VAR['account_id'] = $VAR['id'];
|
|
global $smarty;
|
|
$smarty->assign('issubaccount', true);
|
|
} else {
|
|
return false;
|
|
}
|
|
} else {
|
|
$VAR['id'] = SESS_ACCOUNT;
|
|
$VAR['account_id'] = SESS_ACCOUNT;
|
|
}
|
|
|
|
### Retrieve the record:
|
|
$type = "view";
|
|
$this->method["$type"] = explode(",", $this->method["$type"]);
|
|
$db = new CORE_database;
|
|
$db->view($VAR, $this, $type);
|
|
|
|
|
|
### Get the static vars:
|
|
global $smarty;
|
|
require_once(PATH_CORE . 'static_var.inc.php');
|
|
$static_var = new CORE_static_var;
|
|
$arr = $static_var->update_form('account', 'update', SESS_ACCOUNT);
|
|
if(gettype($arr) == 'array') {
|
|
$smarty->assign('static_var', $arr);
|
|
} else {
|
|
$smarty->assign('static_var', false);
|
|
}
|
|
|
|
/* get child accounts */
|
|
if(empty($smarty->_tpl_vars['account'][0]['parent_id']) || $smarty->_tpl_vars['account'][0]['parent_id']==$smarty->_tpl_vars['account'][0]['id']) {
|
|
$db=&DB();
|
|
$rs = $db->Execute(sqlSelect($db,"account","id,first_name,last_name,email,username","parent_id=". $db->qstr(SESS_ACCOUNT)));
|
|
if($rs && $rs->RecordCount()) {
|
|
while(!$rs->EOF) {
|
|
$smart[] = $rs->fields;
|
|
$rs->MoveNext();
|
|
}
|
|
$smarty->assign('subaccount', $smart);
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
##############################
|
|
## UPDATE ##
|
|
##############################
|
|
function update($VAR)
|
|
{
|
|
global $VAR;
|
|
|
|
### Check that user is logged in:
|
|
if(SESS_LOGGED != '1')
|
|
echo "Sorry, you must be logged in!";
|
|
|
|
|
|
/* check for sub account */
|
|
$issubaccount=false;
|
|
if(!empty($VAR['account_id']) && $VAR['account_id'] != SESS_ACCOUNT) {
|
|
if($this->isParentAccount($VAR['account_id'])) {
|
|
$VAR['id'] = $VAR['account_id'];
|
|
global $smarty;
|
|
$issubaccount=true;
|
|
} else {
|
|
return false;
|
|
}
|
|
} else {
|
|
$VAR['id'] = SESS_ACCOUNT;
|
|
$VAR['account_id'] = SESS_ACCOUNT;
|
|
}
|
|
|
|
$VAR['account_date_last']=time();
|
|
|
|
|
|
// validate the tax_id
|
|
require_once(PATH_MODULES.'tax/tax.inc.php');
|
|
$taxObj=new tax;
|
|
$tax_arr = @$VAR['account_tax_id'];
|
|
if(is_array($tax_arr)) {
|
|
foreach($tax_arr as $country_id => $tax_id) {
|
|
if ($country_id == $VAR['cid']) {
|
|
$exempt = @$VAR["account_tax_id_exempt"][$country_id];
|
|
if(!$txRs=$taxObj->TaxIdsValidate($country_id, $tax_id, $exempt)) {
|
|
$this->validated = false;
|
|
global $C_translate;
|
|
$this->val_error[] = array(
|
|
'field' => 'account_tax_id',
|
|
'field_trans' => $taxObj->errField,
|
|
'error' => $C_translate->translate('validate_general', "", ""));
|
|
}
|
|
if($exempt)
|
|
$VAR['account_tax_id']=false;
|
|
else
|
|
$VAR['account_tax_id']=$tax_id;
|
|
}
|
|
}
|
|
}
|
|
|
|
####################################################################
|
|
### Get required static_Vars and validate them... return an array
|
|
### w/ ALL errors...
|
|
####################################################################
|
|
|
|
require_once(PATH_CORE . 'static_var.inc.php');
|
|
$static_var = new CORE_static_var;
|
|
if(!isset($this->val_error)) $this->val_error = false;
|
|
$all_error = $static_var->validate_form('account', $this->val_error);
|
|
|
|
if($all_error != false && gettype($all_error) == 'array')
|
|
$this->validated = false;
|
|
else
|
|
$this->validated = true;
|
|
|
|
|
|
|
|
####################################################################
|
|
# If validation was failed, skip the db insert &
|
|
# set the errors & origonal fields as Smarty objects,
|
|
# and change the page to be loaded.
|
|
####################################################################
|
|
|
|
if(!$this->validated)
|
|
{
|
|
global $smarty;
|
|
|
|
# set the errors as a Smarty Object
|
|
$smarty->assign('form_validation', $all_error);
|
|
|
|
# set the page to be loaded
|
|
if(!defined("FORCE_PAGE"))
|
|
{
|
|
define('FORCE_PAGE', $VAR['_page_current']);
|
|
}
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
### Change password
|
|
$password_changed = false;
|
|
if(isset($VAR['account_password']) && $VAR['account_password'] != "")
|
|
{
|
|
if(isset($VAR['confirm_password']) && $VAR['account_password'] == $VAR['confirm_password'])
|
|
{
|
|
$password = $VAR['account_password'];
|
|
unset($VAR['account_password']);
|
|
@$VAR["account_password"] = $password;
|
|
### Alert: the password has been changed!
|
|
global $C_debug, $C_translate;
|
|
$C_debug->alert($C_translate->translate('password_changed','account',''));
|
|
$password_changed=true;
|
|
|
|
/* check if new password is ok */
|
|
global $C_list;
|
|
if($C_list->is_installed('account_password_history')) {
|
|
include_once(PATH_MODULES.'account_password_history/account_password_history.inc.php');
|
|
$accountHistory = new account_password_history();
|
|
if(!$accountHistory->getIsPasswordOk(SESS_ACCOUNT, $VAR['account_password'], false)) {
|
|
$C_debug->alert("The password you have selected has been used recently and cannot be used again at this time for security purposes.");
|
|
unset($VAR["account_password"]);
|
|
$password_changed=false;
|
|
}
|
|
}
|
|
|
|
}
|
|
else
|
|
{
|
|
### ERROR: The passwords provided do not match!
|
|
global $C_debug, $C_translate;
|
|
$C_debug->alert($C_translate->translate('password_change_match','account',''));
|
|
unset($VAR["account_password"]);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
unset($VAR["account_password"]);
|
|
}
|
|
|
|
|
|
### Change theme
|
|
if(isset($VAR['tid']) && $VAR['tid'] != "")
|
|
@$VAR["account_theme_id"] = $VAR['tid'];
|
|
|
|
|
|
### Change Language
|
|
if(isset($VAR['lid']) && $VAR['lid'] != "")
|
|
@$VAR["account_language_id"] = $VAR['lid'];
|
|
|
|
|
|
### Change country
|
|
if(isset($VAR['cid']) && $VAR['cid'] != "")
|
|
@$VAR["account_country_id"] = $VAR['cid'];
|
|
|
|
|
|
### Change currency
|
|
if(isset($VAR['cyid']) && $VAR['cyid'] != "")
|
|
@$VAR["account_currency_id"] = $VAR['cyid'];
|
|
|
|
### Get the old username ( for db mapping )
|
|
$db = &DB();
|
|
$sql = 'SELECT username FROM ' . AGILE_DB_PREFIX . 'account WHERE
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
|
id = ' . $db->qstr(SESS_ACCOUNT);
|
|
$result = $db->Execute($sql);
|
|
if($result->RecordCount() > 0)
|
|
{
|
|
$old_username = $result->fields['username'];
|
|
}
|
|
|
|
### Update the record
|
|
$this->account_construct();
|
|
$type = "update";
|
|
$this->method["$type"] = explode(",", $this->method["$type"]);
|
|
$db = new CORE_database;
|
|
$db->update($VAR, $this, $type);
|
|
|
|
|
|
/* password logging class */
|
|
if($password_changed && is_object($accountHistory)) $accountHistory->setNewPassword(SESS_ACCOUNT, $VAR['account_password'], false);
|
|
|
|
|
|
|
|
### Update the static vars:
|
|
$static_var->update($VAR, 'account', SESS_ACCOUNT);
|
|
|
|
### Do any db_mapping
|
|
global $C_list;
|
|
if($C_list->is_installed('db_mapping'))
|
|
{
|
|
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
|
|
$db_map = new db_mapping;
|
|
if(!empty($password))
|
|
$db_map->plaintext_password = $password;
|
|
else
|
|
$db_map->plaintext_password = false;
|
|
$db_map->account_edit ( SESS_ACCOUNT, $old_username );
|
|
}
|
|
|
|
/* update groups for subaccount */
|
|
if($issubaccount) {
|
|
$db=&DB();
|
|
$db->Execute(sqlDelete($db,"account_group","group_id>2 and
|
|
(service_id is null or service_id=0 or service_id='')
|
|
and account_id=".$db->qstr($VAR['account_id'])));
|
|
if(!empty($VAR['groups']))
|
|
{
|
|
global $C_auth;
|
|
foreach($VAR['groups'] as $gid=>$val) {
|
|
if($gid==$val && $C_auth->auth_group_by_id($gid)) {
|
|
$fields=Array('account_id'=>$VAR['account_id'], 'group_id'=>$gid, 'active'=>1, 'date_orig'=>time() );
|
|
$db->Execute(sqlInsert($db,"account_group",$fields));
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
|
|
##############################
|
|
## PASSWORD ##
|
|
##############################
|
|
|
|
function password($VAR)
|
|
{
|
|
### Set the max time between password requests:
|
|
$LIMIT_SECONDS = 120;
|
|
|
|
global $C_translate, $C_debug;
|
|
|
|
### Is the username & email both set?
|
|
if(!isset($VAR["account_email"]) && !isset($VAR["account_username"]) )
|
|
{
|
|
#### ERROR: You must enter either your username or e-mail address!
|
|
$C_debug->alert($C_translate->translate('password_reset_req','account',''));
|
|
return;
|
|
}
|
|
else if($VAR["account_email"] == "" && $VAR["account_username"] == "")
|
|
{
|
|
#### ERROR: You must enter either your username or e-mail address!
|
|
$C_debug->alert($C_translate->translate('password_reset_req','account',''));
|
|
return;
|
|
}
|
|
|
|
$db = &DB();
|
|
|
|
if(isset($VAR["account_email"]) && $VAR["account_email"] != "")
|
|
{
|
|
$sql = ' email = '. $db->qstr($VAR["account_email"], get_magic_quotes_gpc());
|
|
}
|
|
else if(isset($VAR["account_username"]) && $VAR["account_username"] != "")
|
|
{
|
|
$sql = ' username = '. $db->qstr($VAR["account_username"], get_magic_quotes_gpc());
|
|
}
|
|
|
|
|
|
$q = 'SELECT id,email,first_name,last_name FROM ' . AGILE_DB_PREFIX . 'account
|
|
WHERE '. $sql . ' AND
|
|
site_id = ' . $db->qstr(DEFAULT_SITE);
|
|
$result = $db->Execute($q);
|
|
|
|
if($result->RecordCount() == 0)
|
|
{
|
|
### ERROR: No matches found!
|
|
$C_debug->alert($C_translate->translate('password_reset_no_match','account',''));
|
|
return;
|
|
}
|
|
$account = $result->fields["id"];
|
|
|
|
|
|
###################################################################
|
|
### Check that this email has not been requested already
|
|
### In the last 60 seconds
|
|
|
|
$db = &DB();
|
|
$sql = 'SELECT * FROM ' . AGILE_DB_PREFIX . 'temporary_data WHERE
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
|
field1 = ' . $db->qstr($account);
|
|
$result = $db->Execute($sql);
|
|
if($result->RecordCount() > 0)
|
|
{
|
|
$limit = $result->fields['date_orig'] + $LIMIT_SECONDS;
|
|
|
|
if($limit > time())
|
|
{
|
|
$error1 = $C_translate->translate("password_reset_spam_limit","account","");
|
|
$error = ereg_replace('%limit%', "$LIMIT_SECONDS", $error1);
|
|
$C_debug->alert( $error );
|
|
return;
|
|
}
|
|
else
|
|
{
|
|
### Delete the old request
|
|
$sql = 'DELETE FROM ' . AGILE_DB_PREFIX . 'temporary_data WHERE
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
|
field1 = ' . $db->qstr($account);
|
|
$db->Execute($sql);
|
|
}
|
|
|
|
}
|
|
|
|
|
|
###################################################################
|
|
### Ok to continue:
|
|
|
|
$now = md5(microtime());
|
|
$expire = time() + (15*60); // expires in 15 minutes
|
|
|
|
|
|
#####################################################
|
|
### Create the temporary DB Record:
|
|
|
|
$db = &DB();
|
|
$id = $db->GenID(AGILE_DB_PREFIX . "" . 'temporary_data_id');
|
|
$sql = 'INSERT INTO ' . AGILE_DB_PREFIX . 'temporary_data SET
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ',
|
|
id = ' . $db->qstr($id) . ',
|
|
date_orig = ' . $db->qstr(time()) . ',
|
|
date_expire = ' . $db->qstr($expire) . ',
|
|
field1 = ' . $db->qstr($account) . ',
|
|
field2 = ' . $db->qstr($now);
|
|
$result = $db->Execute($sql);
|
|
|
|
|
|
#####################################################
|
|
### Send the password reset email template:
|
|
|
|
require_once(PATH_MODULES . 'email_template/email_template.inc.php');
|
|
$my = new email_template;
|
|
$my->send('account_reset_password', $account, '', '', $now);
|
|
|
|
### ALERT: we have sent an email to you....
|
|
$C_debug->alert($C_translate->translate('password_reset_sent','account',''));
|
|
}
|
|
|
|
|
|
|
|
|
|
##############################
|
|
## PASSWORD RESET ##
|
|
##############################
|
|
|
|
function password_reset($VAR)
|
|
{
|
|
global $C_translate, $C_debug, $smarty;
|
|
|
|
### Validate that the password is set... && confirm password is set...
|
|
if(!isset($VAR['account_password']) || !isset($VAR['confirm_password']))
|
|
{
|
|
### ERROR:
|
|
$message = $C_translate->translate('password_reset_reqq','account','');
|
|
$C_debug->alert($message);
|
|
return;
|
|
}
|
|
else if ($VAR['account_password'] == "")
|
|
{
|
|
### ERROR:
|
|
$message = $C_translate->translate('password_reset_reqq','account','');
|
|
$C_debug->alert($message);
|
|
return;
|
|
}
|
|
else if ($VAR['account_password'] != $VAR['confirm_password'])
|
|
{
|
|
### ERROR:
|
|
$message = $C_translate->translate('password_change_match','account','');
|
|
$C_debug->alert($message);
|
|
return;
|
|
}
|
|
else
|
|
{
|
|
$plaintext_password = $VAR['account_password'];
|
|
|
|
/* hash the password */
|
|
if(defined('PASSWORD_ENCODING_SHA'))
|
|
$password = sha1($VAR['account_password']);
|
|
else
|
|
$password = md5($VAR['account_password']);
|
|
}
|
|
|
|
|
|
if(!isset($VAR['validate']) || $VAR['validate'] == "")
|
|
{
|
|
### ERROR: bad link....
|
|
$url = '<br><a href="'. URL . '?_page=account:password">' . $C_translate->translate('submit','CORE','') . '</a>';
|
|
$message = $C_translate->translate('password_reset_bad_url','account','');
|
|
$C_debug->alert($message . '' . $url);
|
|
return;
|
|
}
|
|
|
|
|
|
### Get the temporary record from the database
|
|
$validate = @$VAR['validate'];
|
|
$db = &DB();
|
|
$sql = 'SELECT field1,field2 FROM ' . AGILE_DB_PREFIX . 'temporary_data WHERE
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
|
date_expire >= '. $db->qstr(time()) . ' AND
|
|
field2 = ' . $db->qstr($validate);
|
|
$result = $db->Execute($sql);
|
|
|
|
if($result->RecordCount() == 0)
|
|
{
|
|
### ERROR: no match for submitted link, invalid or expired.
|
|
$url = '<br><a href="'. URL . '?_page=account:password">' . $C_translate->translate('submit','CORE','') . '</a>';
|
|
$message = $C_translate->translate('password_reset_bad_url','account','');
|
|
$C_debug->alert($message . '' . $url);
|
|
return;
|
|
}
|
|
|
|
$account_id = $result->fields['field1'];
|
|
|
|
/* check if new password is ok */
|
|
global $C_list;
|
|
if($C_list->is_installed('account_password_history')) {
|
|
include_once(PATH_MODULES.'account_password_history/account_password_history.inc.php');
|
|
$accountHistory = new account_password_history();
|
|
if(!$accountHistory->getIsPasswordOk($account_id, $password)) {
|
|
$C_debug->alert("The password you have selected has been used recently and cannot be used again at this time for security purposes.");
|
|
return;
|
|
}
|
|
}
|
|
|
|
|
|
###############################################################
|
|
### Delete the temporary record
|
|
$sql = 'DELETE FROM ' . AGILE_DB_PREFIX . 'temporary_data WHERE
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
|
field2 = ' . $db->qstr($validate);
|
|
$db->Execute($sql);
|
|
|
|
|
|
###############################################################
|
|
### Update the password record:
|
|
$db = &DB();
|
|
$sql = 'UPDATE ' . AGILE_DB_PREFIX . 'account
|
|
SET
|
|
date_last = ' . $db->qstr(time()) . ',
|
|
password = ' . $db->qstr($password) . '
|
|
WHERE
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
|
id = ' . $db->qstr($account_id);
|
|
$db->Execute($sql);
|
|
|
|
/* password logging class */
|
|
if(!empty($accountHistory) && is_object($accountHistory)) $accountHistory->setNewPassword($account_id, $password);
|
|
|
|
|
|
####################################################################
|
|
### Get the old username ( for db mapping )
|
|
|
|
$db = &DB();
|
|
$sql = 'SELECT username FROM ' . AGILE_DB_PREFIX . 'account WHERE
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
|
id = ' . $db->qstr($account_id);
|
|
$result = $db->Execute($sql);
|
|
if($result->RecordCount() > 0)
|
|
{
|
|
$old_username = $result->fields['username'];
|
|
}
|
|
|
|
####################################################################
|
|
### Do any db_mapping
|
|
####################################################################
|
|
global $C_list;
|
|
if($C_list->is_installed('db_mapping'))
|
|
{
|
|
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
|
|
$db_map = new db_mapping;
|
|
$db_map->plaintext_password = $plaintext_password;
|
|
$db_map->account_edit ( $account_id, $old_username );
|
|
}
|
|
|
|
|
|
### Return the success message:
|
|
$C_debug->alert($C_translate->translate('password_update_success','account',''));
|
|
$smarty->assign('pw_changed', true);
|
|
}
|
|
|
|
|
|
|
|
##############################
|
|
## VERIFY ACCOUNT ##
|
|
##############################
|
|
|
|
function verify($VAR)
|
|
{
|
|
global $C_debug, $C_translate, $smarty;
|
|
|
|
### Validate $verify is set...
|
|
if(!isset($VAR['verify']) || $VAR['verify'] == "")
|
|
{
|
|
### Error: please use the form below ...
|
|
$smarty->assign('verify_results', false);
|
|
return;
|
|
}
|
|
|
|
@$verify = explode(':', $VAR['verify']);
|
|
|
|
### Validate the $verify string....
|
|
$db = &DB();
|
|
$sql = 'SELECT id,username,status FROM ' . AGILE_DB_PREFIX . 'account WHERE
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
|
id = ' . $db->qstr(@$verify[1]) . ' AND
|
|
date_orig = ' . $db->qstr(@$verify[0]);
|
|
$result = $db->Execute($sql);
|
|
if($result->RecordCount() == 0)
|
|
{
|
|
### Error: please use the form below ...
|
|
$smarty->assign('verify_results', false);
|
|
return;
|
|
}
|
|
|
|
|
|
### Check the status:
|
|
$status = $result->fields['status'];
|
|
$username = $result->fields['username'];
|
|
if($status == "1")
|
|
{
|
|
### Account already active!
|
|
$smarty->assign('verify_results', true);
|
|
return;
|
|
}
|
|
|
|
### Update the account status
|
|
$sql = 'UPDATE ' . AGILE_DB_PREFIX . 'account SET
|
|
status = ' . $db->qstr("1") . '
|
|
WHERE
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
|
id = ' . $db->qstr(@$verify[1]);
|
|
$result = $db->Execute($sql);
|
|
|
|
|
|
### Account now active!
|
|
$smarty->assign('verify_results', true);
|
|
|
|
|
|
### Return the success message:
|
|
$C_debug->alert($C_translate->translate('password_update_success','account',''));
|
|
|
|
|
|
####################################################################
|
|
### Do any db_mapping
|
|
####################################################################
|
|
global $C_list;
|
|
/*
|
|
if($C_list->is_installed('db_mapping'))
|
|
{
|
|
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
|
|
$db_map = new db_mapping;
|
|
$db_map->account_edit ( $VAR['verify'], $username );
|
|
}
|
|
*/
|
|
if($C_list->is_installed('db_mapping') )
|
|
{
|
|
include_once ( PATH_MODULES . 'db_mapping/db_mapping.inc.php' );
|
|
$db_map = new db_mapping;
|
|
$db_map->plaintext_password = false;
|
|
$db_map->account_add ( $verify[1] );
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
##############################
|
|
## VERIFY ACCOUNT ##
|
|
##############################
|
|
|
|
function verify_resend($VAR)
|
|
{
|
|
global $C_translate, $C_debug;
|
|
|
|
### Is the username & email both set?
|
|
if(!isset($VAR["account_email"]) && !isset($VAR["account_username"]) )
|
|
{
|
|
#### ERROR: You must enter either your username or e-mail address!
|
|
$C_debug->alert($C_translate->translate('verify_resend_req','account',''));
|
|
return;
|
|
}
|
|
else if($VAR["account_email"] == "" && $VAR["account_username"] == "")
|
|
{
|
|
#### ERROR: You must enter either your username or e-mail address!
|
|
$C_debug->alert($C_translate->translate('verify_resend_req','account',''));
|
|
return;
|
|
}
|
|
|
|
$db = &DB();
|
|
|
|
if(isset($VAR["account_email"]) && $VAR["account_email"] != "")
|
|
{
|
|
$sql = ' email = '. $db->qstr($VAR["account_email"], get_magic_quotes_gpc());
|
|
}
|
|
else if(isset($VAR["account_username"]) && $VAR["account_username"] != "")
|
|
{
|
|
$sql = ' username = '. $db->qstr($VAR["account_username"], get_magic_quotes_gpc());
|
|
}
|
|
|
|
|
|
$q = 'SELECT id,date_orig,status,email,first_name,last_name FROM ' . AGILE_DB_PREFIX . 'account
|
|
WHERE '. $sql . ' AND
|
|
site_id = ' . $db->qstr(DEFAULT_SITE);
|
|
$result = $db->Execute($q);
|
|
|
|
if($result->RecordCount() == 0)
|
|
{
|
|
### ERROR: No matches found!
|
|
$C_debug->alert($C_translate->translate('password_reset_no_match','account',''));
|
|
return;
|
|
}
|
|
$account = $result->fields["id"];
|
|
$status = $result->fields["status"];
|
|
$validation_str = strtoupper($result->fields['date_orig']. ':' . $result->fields['id']);
|
|
|
|
if($status == "1")
|
|
{
|
|
### ERROR: This account is already active!
|
|
$C_debug->alert($C_translate->translate('verify_resend_active','account',''));
|
|
return;
|
|
}
|
|
|
|
### Resend the pending email:
|
|
require_once(PATH_MODULES . 'email_template/email_template.inc.php');
|
|
$my = new email_template;
|
|
$my->send('account_registration_inactive', $account, $account, '', $validation_str);
|
|
|
|
### Notice that the email is sent:
|
|
$C_debug->alert($C_translate->translate("user_add_inactive_welcome","account",""));
|
|
|
|
}
|
|
|
|
|
|
##############################
|
|
## STATIC VARS ##
|
|
##############################
|
|
|
|
function static_var($VAR)
|
|
{
|
|
global $smarty;
|
|
require_once(PATH_CORE . 'static_var.inc.php');
|
|
$static_var = new CORE_static_var;
|
|
|
|
|
|
if(ereg('search', $VAR['_page']))
|
|
$arr = $static_var->generate_form('account', 'add', 'search');
|
|
else
|
|
$arr = $static_var->generate_form('account', 'add', 'update');
|
|
|
|
if(gettype($arr) == 'array')
|
|
{
|
|
### Set everything as a smarty array, and return:
|
|
$smarty->assign('show_static_var', true);
|
|
$smarty->assign('static_var', $arr);
|
|
return true;
|
|
}
|
|
else
|
|
{
|
|
### Or if no results:
|
|
$smarty->assign('show_static_var', false);
|
|
return false;
|
|
}
|
|
}
|
|
}
|
|
?>
|