<?php

/*-------------------------------------------------------+

| <span style="border-bottom: 1px dotted black;">PHP</span>-Fusion Content Management System

| Copyright (C) 2002 - 2011 Nick Jones

| <a href='http://www.php-fusion.co.uk/' target='_blank'><span style='color:005C5B'>http://www.php-fusion.co.uk/</span></a>

+--------------------------------------------------------+

| Filename: login.php

| Author: Nick Jones (Digitanium)

+--------------------------------------------------------+

| This program is released as free software under the

| Affero GPL license. You can redistribute it and/or

| modify it under the terms of this license which you

| can read by viewing the included agpl.txt or online

| at <a href='http://www.gnu.org/licenses/agpl.html.' target='_blank'><span style='color:005C5B'>www.gnu.org/licenses/agpl.html.</span></a> Removal of this

| copyright header is strictly prohibited without

| written permission from the original author(s).

+--------------------------------------------------------*/

require_once "maincore.php";

require_once THEMES."templates/header.php";

 

add_to_title($locale['global_200'].$locale['global_100']);

 

if (iMEMBER) {

	$msg_count = dbcount("(message_id)", DB_MESSAGES, "message_to='".$userdata['user_id']."' AND message_read='0' AND message_folder='0'");

 

	opentable($userdata['user_name']);

	echo "<div style='text-align:center'><br />\n";

	echo THEME_BULLET." <a href='".BASEDIR."edit_profile.php' class='side'>".$locale['global_120']."</a><br />\n";

	echo THEME_BULLET." <a href='".BASEDIR."messages.php' class='side'>".$locale['global_121']."</a><br />\n";

	echo THEME_BULLET." <a href='".BASEDIR."members.php' class='side'>".$locale['global_122']."</a><br />\n";

 

	if (iADMIN && (iUSER_RIGHTS != "" || iUSER_RIGHTS != "C")) {

		echo THEME_BULLET." <a href='".ADMIN."index.php".$aidlink."' class='side'>".$locale['global_123']."</a><br />\n";

	}

 

	echo THEME_BULLET." <a href='".BASEDIR."index.php?logout=yes' class='side'>".$locale['global_124']."</a>\n";

 

	if ($msg_count) {

		echo "<br /><br />\n";

		echo "<strong><a href='".BASEDIR."messages.php' class='side'>".sprintf($locale['global_125'], $msg_count);

		echo ($msg_count == 1 ? $locale['global_126'] : $locale['global_127'])."</a></strong>\n";

	}

 

	echo "<br /><br /></div>\n";

} else {

	$action_url = $settings['opening_page'];

	opentable($locale['global_100']);

 

	if (isset($_GET['error']) && isnum($_GET['error'])) {

		if (isset($_GET['redirect']) && strpos(urldecode($_GET['redirect']), "/") === 0) {

			$action_url = cleanurl(urldecode($_GET['redirect']));

		}

 

		echo "<div style='text-align: center;text-weight:bold;'>";

		switch ($_GET['error']) {

			case 1:

				echo $locale['global_196'];

				break;

			case 2:

				echo $locale['global_192'];

				break;

			case 3:

				if (isset($_COOKIE[COOKIE_PREFIX."user"])) {

					redirect($action_url);

				} else {

					echo $locale['global_193'];

				}

				break;

			case 4:

				if (isset($_GET['status']) && isnum($_GET['status'])) {

 

					$id = ((isset($_GET['id']) && isnum($_GET['id'])) ? $_GET['id'] : "0");

 

					switch($_GET['status']) {

						case 1:

							$data = dbarray(dbquery(

								"SELECT suspend_reason FROM ".DB_SUSPENDS."

								WHERE suspended_user='".$id."'

								ORDER BY suspend_date DESC  LIMIT 1"

							));

							echo $locale['global_406']."<br /><br />".$data['suspend_reason'];

							break;

						case 2:

							echo $locale['global_195'];

							break;

						case 3:

							$data = dbarray(dbquery(

								"SELECT u.user_actiontime, s.suspend_reason FROM ".DB_SUSPENDS." s

								LEFT JOIN ".DB_USERS." u ON u.user_id=s.suspended_user

								WHERE s.suspended_user='".$id."'

								ORDER BY s.suspend_date DESC LIMIT 1"

							));

							echo $locale['global_407'].showdate('shortdate', $data['user_actiontime']);

							echo $locale['global_408']."<br /><br />".$data['suspend_reason'];

							break;

						case 4:

							echo $locale['global_409'];

							break;

						case 5:

							echo $locale['global_411'];

 

							break;

						case 6:

							echo $locale['global_412'];

							break;

					}

				}

				break;

		}

		echo "</div>\n";

	}

 

	echo "<div style='text-align:center'><br />\n";

	echo "<form name='loginpageform' method='post' action='".$action_url."'>\n";

	echo $locale['global_101']."<br />\n<input type='text' name='user_name' class='textbox' style='width:100px' /><br />\n";

	echo $locale['global_102']."<br />\n<input type='password' name='user_pass' class='textbox' style='width:100px' /><br />\n";

	echo "<label><input type='checkbox' name='remember_me' value='y' />".$locale['global_103']."</label><br /><br />\n";

	echo "<input type='submit' name='login' value='".$locale['global_104']."' class='button' /><br />\n";

	echo "<br /></form>\n";

	if ($settings['enable_registration']) {

		echo "".$locale['global_105']."<br /><br />\n";

	}

	echo $locale['global_106'];

	echo "<br /><br /></div>\n";

}

closetable();

 

require_once THEMES."templates/footer.php";

?>

<?php

/*-------------------------------------------------------+

| <span style="border-bottom: 1px dotted black;">PHP</span>-Fusion Content Management System

| Copyright (C) 2002 - 2011 Nick Jones

| <a href='http://www.php-fusion.co.uk/' target='_blank'><span style='color:005C5B'>http://www.php-fusion.co.uk/</span></a>

+--------------------------------------------------------+

| Filename: register.php

| Author: Hans Kristian Flaatten {Starefossen}

+--------------------------------------------------------+

| This program is released as free software under the

| Affero GPL license. You can redistribute it and/or

| modify it under the terms of this license which you

| can read by viewing the included agpl.txt or online

| at <a href='http://www.gnu.org/licenses/agpl.html.' target='_blank'><span style='color:005C5B'>www.gnu.org/licenses/agpl.html.</span></a> Removal of this

| copyright header is strictly prohibited without

| written permission from the original author(s).

+--------------------------------------------------------*/

require_once "maincore.php";

require_once THEMES."templates/header.php";

require_once CLASSES."UserFields.class.php";

require_once CLASSES."UserFieldsInput.class.php";

include LOCALE.LOCALESET."user_fields.php";

 

if (iMEMBER || !$settings['enable_registration']) { redirect("index.php"); }

 

$errors = array();

if (isset($_GET['email']) && isset($_GET['code'])) {

	if (!preg_check("/^[-0-9A-Z_\.]{1,50}@([-0-9A-Z_\.]+\.){1,50}([0-9A-Z]){2,4}$/i", $_GET['email'])) {

		redirect("register.php?error=activate");

	}

	if (!preg_check("/^[0-9a-z]{40}$/", $_GET['code'])) { redirect("register.php?error=activate"); }

	$result = dbquery(

		"SELECT user_info FROM ".DB_NEW_USERS."

		WHERE user_code='".$_GET['code']."' AND user_email='".$_GET['email']."'

		LIMIT 1"

	);

	if (dbrows($result)) {

		add_to_title($locale['global_200'].$locale['u155']);

 

		// getmequick at gmail dot com

		// <a href='http://www.php.net/manual/en/function.unserialize.php#71270' target='_blank'><span style='color:005C5B'>http://www.php.net/manual/en/fun....php#71270</span></a>

		function unserializeFix($var) {

			$var = preg_replace('!s:(\d+):"(.*?)";!e', "'s:'.strlen('$2').':\"$2\";'", $var);

			return unserialize($var);

		}

 

		$data = dbarray($result);

		$user_info = unserializeFix(stripslashes($data['user_info']));

		$result = dbquery("INSERT INTO ".DB_USERS." (".$user_info['user_field_fields'].") VALUES (".$user_info['user_field_inputs'].")");

		score_positive("regis");

		$result = dbquery("DELETE FROM ".DB_NEW_USERS." WHERE user_code='".$_GET['code']."' LIMIT 1");

 

		opentable($locale['u155']);

		if ($settings['admin_activation'] == "1") {

			echo "<div style='text-align:center'><br />\n".$locale['u171']."<br /><br />\n".$locale['u162']."<br /><br />\n</div>\n";

		} else {

 

		score_positive("regis");

			echo "<div style='text-align:center'><br />\n".$locale['u171']."<br /><br />\n".$locale['u161']."<br /><br />\n</div>\n";

		}

		closetable();

	} else {

		redirect("index.php");

	}

} elseif (isset($_POST['register'])) {

	$userInput = new UserFieldsInput();

	$userInput->validation 				= $settings['display_validation'];

	$userInput->emailVerification 		= $settings['email_verification'];

	$userInput->adminActivation 		= $settings['admin_activation'];

	$userInput->skipCurrentPass 		= true;

	$userInput->registration			= true;

	$userInput->saveInsert();

	$userInput->displayMessages();

	$errors 							= $userInput->getErrorsArray();

	unset($userInput);

}

 

if ((!isset($_POST['register']) && !isset($_GET['code'])) || (isset($_POST['register']) && count($errors) > 0)) {

	opentable($locale['u101']);

	$userFields 						= new UserFields();

	$userFields->postName 				= "register";

	$userFields->postValue 				= $locale['u101'];

	$userFields->displayValidation 		= $settings['display_validation'];

	$userFields->displayTerms 			= $settings['enable_terms'];

	$userFields->showAdminPass 			= false;

	$userFields->showAvatarInput 		= false;

	$userFields->skipCurrentPass 		= true;

	$userFields->registration			= true;

	$userFields->errorsArray 			= $errors;

	$userFields->displayInput();

	closetable();

}

 

require_once THEMES."templates/footer.php";

?>