<?php
/*-------------------------------------------------------+
| PHP-Fusion Content Management System
| Copyright (C) 2002 - 2011 Nick Jones
| http://www.php-fusion.co.uk/
+--------------------------------------------------------+
| Filename: register.php
| Author: Hans Kristian Flaatten {Starefossen}
+--------------------------------------------------------+
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at www.gnu.org/licenses/agpl.html. Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
require_once "maincore.php";
require_once THEMES."templates/header.php";
require_once CLASSES."UserFields.class.php";
require_once CLASSES."UserFieldsInput.class.php";
include LOCALE.LOCALESET."user_fields.php";
if (iMEMBER || !$settings['enable_registration']) { redirect("index.php"); }
 
$errors = array();
if (isset($_GET['email']) && isset($_GET['code'])) {
	if (!preg_check("/^[-0-9A-Z_\.]{1,50}@([-0-9A-Z_\.]+\.){1,50}([0-9A-Z]){2,4}$/i", $_GET['email'])) {
		redirect("register.php?error=activate");
	}
	if (!preg_check("/^[0-9a-z]{40}$/", $_GET['code'])) { redirect("register.php?error=activate"); }
	$result = dbquery(
		"SELECT user_info FROM ".DB_NEW_USERS."
		WHERE user_code='".$_GET['code']."' AND user_email='".$_GET['email']."'
		LIMIT 1"
	);
	if (dbrows($result)) {
		add_to_title($locale['global_200'].$locale['u155']);
 
		// getmequick at gmail dot com
		// http://www.php.net/manual/en/function.unserialize.php#71270
		function unserializeFix($var) {
			$var = preg_replace('!s:(\d+):"(.*?)";!e', "'s:'.strlen('$2').':\"$2\";'", $var);
			return unserialize($var);
		}
 
		$data = dbarray($result);
		$user_info = unserializeFix(stripslashes($data['user_info']));
		$result = dbquery("INSERT INTO ".DB_USERS." (".$user_info['user_field_fields'].") VALUES (".$user_info['user_field_inputs'].")") or die(mysql_error());
		$result = dbquery("DELETE FROM ".DB_NEW_USERS." WHERE user_code='".$_GET['code']."' LIMIT 1");
 
		opentable($locale['u155']);
		if ($settings['admin_activation'] == "1") {
			echo "<div style='text-align:center'>\n".$locale['u171']."\n".$locale['u162']."\n</div>\n";
		} else {
			echo "<div style='text-align:center'>\n".$locale['u171']."\n".$locale['u161']."\n</div>\n";
		}
		closetable();
	} else {
		redirect("index.php");
	}
} elseif (isset($_POST['register'])) {
	$userInput = new UserFieldsInput();
	$userInput->validation 				= $settings['display_validation'];
	$userInput->emailVerification 		= $settings['email_verification'];
	$userInput->adminActivation 		= $settings['admin_activation'];
	$userInput->skipCurrentPass 		= true;
	$userInput->registration			= true;
	$userInput->saveInsert();
	$userInput->displayMessages();
	$errors 							= $userInput->getErrorsArray();
	unset($userInput);
}
 
if ((!isset($_POST['register']) && !isset($_GET['code'])) || (isset($_POST['register']) && count($errors) > 0)) {
	opentable($locale['u101']);
	$userFields 						= new UserFields();
	$userFields->postName 				= "register";
	$userFields->postValue 				= $locale['u101'];
	$userFields->displayValidation 		= $settings['display_validation'];
	$userFields->displayTerms 			= $settings['enable_terms'];
	$userFields->showAdminPass 			= false;
	$userFields->showAvatarInput 		= false;
	$userFields->skipCurrentPass 		= true;
	$userFields->registration			= true;
	$userFields->errorsArray 			= $errors;
	$userFields->displayInput();
	closetable();
}
 
require_once THEMES."templates/footer.php";
?>
Parsed in 0.042 seconds, using GeSHi 1.0.8.10