]> git.wh0rd.org - tt-rss.git/blame - register.php
merge logout.php inside backend.php
[tt-rss.git] / register.php
CommitLineData
4f7956b3 1<?php
a53f3dc4 2 // This file uses two additional include files:
4f7956b3 3 //
a53f3dc4
AD
4 // 1) templates/register_notice.txt - displayed above the registration form
5 // 2) register_expire_do.php - contains user expiration queries when necessary
4f7956b3 6
4f7956b3
AD
7 $action = $_REQUEST["action"];
8
fb074239 9 require_once "functions.php";
4f7956b3 10 require_once "sessions.php";
4f7956b3 11 require_once "sanity_check.php";
4f7956b3
AD
12 require_once "config.php";
13 require_once "db.php";
4f7956b3 14
133ab8c7
AD
15 $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
16
17 init_connection($link);
4f7956b3
AD
18
19 /* Remove users which didn't login after receiving their registration information */
20
21 if (DB_TYPE == "pgsql") {
133ab8c7 22 db_query($link, "DELETE FROM ttrss_users WHERE last_login IS NULL
4f7956b3
AD
23 AND created < NOW() - INTERVAL '1 day' AND access_level = 0");
24 } else {
133ab8c7 25 db_query($link, "DELETE FROM ttrss_users WHERE last_login IS NULL
4f7956b3
AD
26 AND created < DATE_SUB(NOW(), INTERVAL 1 DAY) AND access_level = 0");
27 }
28
a53f3dc4
AD
29 if (file_exists("register_expire_do.php")) {
30 require_once "register_expire_do.php";
31 }
32
4f7956b3
AD
33 if ($action == "check") {
34 header("Content-Type: application/xml");
35
36 $login = trim(db_escape_string($_REQUEST['login']));
37
38 $result = db_query($link, "SELECT id FROM ttrss_users WHERE
39 LOWER(login) = LOWER('$login')");
133ab8c7 40
4f7956b3
AD
41 $is_registered = db_num_rows($result) > 0;
42
43 print "<result>";
44
45 printf("%d", $is_registered);
46
47 print "</result>";
48
49 return;
50 }
51?>
52
53<html>
54<head>
55<title>Create new account</title>
56<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
57<link rel="stylesheet" type="text/css" href="utility.css">
4f7956b3 58<script type="text/javascript" src="functions.js"></script>
fe7537b5 59<script type="text/javascript" src="lib/prototype.js"></script>
bd40e88e 60<script type="text/javascript" src="lib/scriptaculous/scriptaculous.js?load=effects,dragdrop,controls"></script>
4f7956b3
AD
61</head>
62
63<script type="text/javascript">
64
65 function checkUsername() {
66
67 try {
68 var f = document.forms['register_form'];
69 var login = f.login.value;
70
71 if (login == "") {
72 new Effect.Highlight(f.login);
73 f.sub_btn.disabled = true;
74 return false;
75 }
76
133ab8c7 77 var query = "register.php?action=check&login=" +
4f7956b3
AD
78 param_escape(login);
79
80 new Ajax.Request(query, {
133ab8c7 81 onComplete: function(transport) {
4f7956b3
AD
82
83 try {
84
85 var reply = transport.responseXML;
86
87 var result = reply.getElementsByTagName('result')[0];
88 var result_code = result.firstChild.nodeValue;
89
90 if (result_code == 0) {
91 new Effect.Highlight(f.login, {startcolor : '#00ff00'});
92 f.sub_btn.disabled = false;
93 } else {
94 new Effect.Highlight(f.login, {startcolor : '#ff0000'});
95 f.sub_btn.disabled = true;
133ab8c7 96 }
4f7956b3
AD
97 } catch (e) {
98 exception_error("checkUsername_callback", e);
99 }
100
101 } });
102
103 } catch (e) {
104 exception_error("checkUsername", e);
105 }
106
107 return false;
108
109 }
110
111 function validateRegForm() {
112 try {
113
114 var f = document.forms['register_form'];
115
116 if (f.login.value.length == 0) {
117 new Effect.Highlight(f.login);
118 return false;
119 }
120
121 if (f.email.value.length == 0) {
122 new Effect.Highlight(f.email);
123 return false;
124 }
125
126 if (f.turing_test.value.length == 0) {
127 new Effect.Highlight(f.turing_test);
128 return false;
129 }
130
131 return true;
132
133 } catch (e) {
134 exception_error("validateRegForm", e);
135 return false;
136 }
137 }
138
139</script>
140
141<body>
142
133ab8c7 143<div class="floatingLogo"><img src="images/logo.png"></div>
4f7956b3
AD
144
145<h1><?php echo __("Create new account") ?></h1>
146
147<?php
148 if (!ENABLE_REGISTRATION) {
149 print_error(__("New user registrations are administratively disabled."));
150
1ca77e0a 151 print "<p><form method=\"GET\" action=\"backend.php?op=logout\">
4f7956b3
AD
152 <input type=\"submit\" value=\"".__("Return to Tiny Tiny RSS")."\">
153 </form>";
154 return;
155 }
156?>
157
4f7956b3
AD
158<?php if (REG_MAX_USERS > 0) {
159 $result = db_query($link, "SELECT COUNT(*) AS cu FROM ttrss_users");
160 $num_users = db_fetch_result($result, 0, "cu");
161} ?>
162
0844d6a9 163<?php if (!REG_MAX_USERS || $num_users < REG_MAX_USERS) { ?>
4f7956b3 164
4ca3d8c4
AD
165 <!-- If you have any rules or ToS you'd like to display, enter them here -->
166
167 <?php if (file_exists("templates/register_notice.txt")) {
168 require_once "templates/register_notice.txt";
169 } ?>
170
0844d6a9 171 <?php if (!$action) { ?>
133ab8c7
AD
172
173 <p><?php echo __('Your temporary password will be sent to the specified email. Accounts, which were not logged in once, are erased automatically 24 hours after temporary password is sent.') ?></p>
174
4f7956b3
AD
175 <form action="register.php" method="POST" name="register_form">
176 <input type="hidden" name="action" value="do_register">
177 <table>
178 <tr>
179 <td><?php echo __('Desired login:') ?></td><td>
180 <input name="login">
181 </td><td>
182 <input type="submit" value="<?php echo __('Check availability') ?>" onclick='return checkUsername()'>
183 </td></tr>
184 <td><?php echo __('Email:') ?></td><td>
185 <input name="email">
186 </td></tr>
187 <td><?php echo __('How much is two plus two:') ?></td><td>
188 <input name="turing_test"></td></tr>
189 <tr><td colspan="2" align="right">
2a52d96f 190 <input type="submit" name="sub_btn" value="<?php echo __('Submit registration') ?>"
4f7956b3
AD
191 disabled="true" onclick='return validateRegForm()'>
192 </td></tr>
193 </table>
194 </form>
1da195e2
AD
195
196 <?php print "<p><form method=\"GET\" action=\"tt-rss.php\">
197 <input type=\"submit\" value=\"".__("Return to Tiny Tiny RSS")."\">
198 </form>"; ?>
199
0844d6a9 200 <?php } else if ($action == "do_register") { ?>
133ab8c7 201
0844d6a9 202 <?php
4f7956b3
AD
203 $login = mb_strtolower(trim(db_escape_string($_REQUEST["login"])));
204 $email = trim(db_escape_string($_REQUEST["email"]));
205 $test = trim(db_escape_string($_REQUEST["turing_test"]));
133ab8c7 206
4f7956b3 207 if (!$login || !$email || !$test) {
c46a4a05
AD
208 print_error(__("Your registration information is incomplete."));
209 print "<p><form method=\"GET\" action=\"tt-rss.php\">
210 <input type=\"submit\" value=\"".__("Return to Tiny Tiny RSS")."\">
211 </form>";
4f7956b3
AD
212 return;
213 }
133ab8c7 214
4f7956b3 215 if ($test == "four" || $test == "4") {
133ab8c7 216
4f7956b3
AD
217 $result = db_query($link, "SELECT id FROM ttrss_users WHERE
218 login = '$login'");
133ab8c7 219
4f7956b3 220 $is_registered = db_num_rows($result) > 0;
133ab8c7 221
4f7956b3
AD
222 if ($is_registered) {
223 print_error(__('Sorry, this username is already taken.'));
224 print "<p><form method=\"GET\" action=\"tt-rss.php\">
225 <input type=\"submit\" value=\"".__("Return to Tiny Tiny RSS")."\">
226 </form>";
227 } else {
133ab8c7 228
4f7956b3 229 $password = make_password();
133ab8c7 230
4f7956b3 231 $pwd_hash = encrypt_password($password, $login);
133ab8c7
AD
232
233 db_query($link, "INSERT INTO ttrss_users
4f7956b3
AD
234 (login,pwd_hash,access_level,last_login, email, created)
235 VALUES ('$login', '$pwd_hash', 0, null, '$email', NOW())");
133ab8c7
AD
236
237 $result = db_query($link, "SELECT id FROM ttrss_users WHERE
4f7956b3 238 login = '$login' AND pwd_hash = '$pwd_hash'");
133ab8c7 239
4f7956b3
AD
240 if (db_num_rows($result) != 1) {
241 print_error(__('Registration failed.'));
242 print "<p><form method=\"GET\" action=\"tt-rss.php\">
243 <input type=\"submit\" value=\"".__("Return to Tiny Tiny RSS")."\">
244 </form>";
245 } else {
133ab8c7 246
4f7956b3 247 $new_uid = db_fetch_result($result, 0, "id");
133ab8c7 248
4f7956b3 249 initialize_user($link, $new_uid);
133ab8c7 250
4f7956b3
AD
251 $reg_text = "Hi!\n".
252 "\n".
253 "You are receiving this message, because you (or somebody else) have opened\n".
254 "an account at Tiny Tiny RSS.\n".
255 "\n".
256 "Your login information is as follows:\n".
257 "\n".
258 "Login: $login\n".
259 "Password: $password\n".
260 "\n".
261 "Don't forget to login at least once to your new account, otherwise\n".
262 "it will be deleted in 24 hours.\n".
263 "\n".
264 "If that wasn't you, just ignore this message. Thanks.";
133ab8c7 265
4f7956b3 266 $mail = new PHPMailer();
133ab8c7 267
d134e3a3
AD
268 $mail->PluginDir = "lib/phpmailer/";
269 $mail->SetLanguage("en", "lib/phpmailer/language/");
133ab8c7 270
4f7956b3 271 $mail->CharSet = "UTF-8";
133ab8c7 272
4f7956b3
AD
273 $mail->From = DIGEST_FROM_ADDRESS;
274 $mail->FromName = DIGEST_FROM_NAME;
275 $mail->AddAddress($email);
133ab8c7 276
4f7956b3
AD
277 if (DIGEST_SMTP_HOST) {
278 $mail->Host = DIGEST_SMTP_HOST;
279 $mail->Mailer = "smtp";
280 $mail->Username = DIGEST_SMTP_LOGIN;
281 $mail->Password = DIGEST_SMTP_PASSWORD;
282 }
133ab8c7 283
4f7956b3
AD
284 // $mail->IsHTML(true);
285 $mail->Subject = "Registration information for Tiny Tiny RSS";
286 $mail->Body = $reg_text;
287 // $mail->AltBody = $digest_text;
133ab8c7 288
4f7956b3 289 $rc = $mail->Send();
133ab8c7 290
4f7956b3 291 if (!$rc) print_error($mail->ErrorInfo);
133ab8c7 292
4f7956b3
AD
293 $reg_text = "Hi!\n".
294 "\n".
295 "New user had registered at your Tiny Tiny RSS installation.\n".
296 "\n".
297 "Login: $login\n".
298 "Email: $email\n";
133ab8c7 299
4f7956b3 300 $mail = new PHPMailer();
133ab8c7 301
d134e3a3
AD
302 $mail->PluginDir = "lib/phpmailer/";
303 $mail->SetLanguage("en", "lib/phpmailer/language/");
133ab8c7 304
4f7956b3 305 $mail->CharSet = "UTF-8";
133ab8c7 306
4f7956b3
AD
307 $mail->From = DIGEST_FROM_ADDRESS;
308 $mail->FromName = DIGEST_FROM_NAME;
309 $mail->AddAddress(REG_NOTIFY_ADDRESS);
133ab8c7 310
4f7956b3
AD
311 if (DIGEST_SMTP_HOST) {
312 $mail->Host = DIGEST_SMTP_HOST;
313 $mail->Mailer = "smtp";
314 $mail->Username = DIGEST_SMTP_LOGIN;
315 $mail->Password = DIGEST_SMTP_PASSWORD;
316 }
133ab8c7 317
4f7956b3
AD
318 // $mail->IsHTML(true);
319 $mail->Subject = "Registration notice for Tiny Tiny RSS";
320 $mail->Body = $reg_text;
321 // $mail->AltBody = $digest_text;
133ab8c7 322
4f7956b3 323 $rc = $mail->Send();
133ab8c7 324
4f7956b3 325 print_notice(__("Account created successfully."));
133ab8c7 326
4f7956b3
AD
327 print "<p><form method=\"GET\" action=\"tt-rss.php\">
328 <input type=\"submit\" value=\"".__("Return to Tiny Tiny RSS")."\">
329 </form>";
133ab8c7 330
4f7956b3 331 }
133ab8c7 332
4f7956b3 333 }
133ab8c7 334
4f7956b3
AD
335 } else {
336 print_error('Plese check the form again, you have failed the robot test.');
337 print "<p><form method=\"GET\" action=\"tt-rss.php\">
338 <input type=\"submit\" value=\"".__("Return to Tiny Tiny RSS")."\">
339 </form>";
133ab8c7 340
4f7956b3
AD
341 }
342 }
343 ?>
344
0844d6a9 345<?php } else { ?>
4f7956b3
AD
346
347 <?php print_notice(__('New user registrations are currently closed.')) ?>
348
349 <?php print "<p><form method=\"GET\" action=\"tt-rss.php\">
350 <input type=\"submit\" value=\"".__("Return to Tiny Tiny RSS")."\">
351 </form>"; ?>
352
0844d6a9 353<?php } ?>
4f7956b3
AD
354
355</body>
356</html>
357