<?php
/*-------------------------------------------------------+
| <span style="border-bottom: 1px dotted black;">PHP</span>-Fusion Content Management System
| Copyright (C) 2002 - 2011 Nick Jones
| <a href='http://www.php-fusion.co.uk/' target='_blank'><span style='color:005C5B'>http://www.php-fusion.co.uk/</span></a>
+--------------------------------------------------------+
| Filename: register.php
| Author: Hans Kristian Flaatten {Starefossen}
+--------------------------------------------------------+
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at <a href='http://www.gnu.org/licenses/agpl.html.' target='_blank'><span style='color:005C5B'>www.gnu.org/licenses/agpl.html.</span></a> Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
require_once "maincore.php";
require_once THEMES."templates/header.php";
require_once CLASSES."UserFields.class.php";
require_once CLASSES."UserFieldsInput.class.php";
include LOCALE.LOCALESET."user_fields.php";
// start: secure code by phpfusion-freak.dk
if (file_exists(LOCALE.LOCALESET."register_security.php")) {
	include LOCALE.LOCALESET."register_security.php";
} else {
	include LOCALE."Lithuanian/register_security.php";
}
// end: secure code by phpfusion-freak.dk
 
if (iMEMBER || !$settings['enable_registration']) { redirect("index.php"); }
 
$errors = array();
if (isset($_GET['email']) && isset($_GET['code'])) {
	if (!preg_check("/^[-0-9A-Z_\.]{1,50}@([-0-9A-Z_\.]+\.){1,50}([0-9A-Z]){2,4}$/i", $_GET['email'])) {
		redirect("register.php?error=activate");
	}
	if (!preg_check("/^[0-9a-z]{40}$/", $_GET['code'])) { redirect("register.php?error=activate"); }
	$result = dbquery(
		"SELECT user_info FROM ".DB_NEW_USERS."
		WHERE user_code='".$_GET['code']."' AND user_email='".$_GET['email']."'
		LIMIT 1"
	);
 
 
// start: secure code by phpfusion-freak.dk
 
	$secure_con = isset($_POST['user_secure_con']) ? stripinput(trim($_POST['user_secure_con'])) : "";
	$secure_num = isset($_POST['user_secure_zahl']) ? stripinput(trim($_POST['user_secure_zahl'])) : "";
 
	if($secure_con == "" || $secure_num == "" || !isNum($secure_num)) { 
		$error .= $locale['secure_error1']."<br>\n";
	}
	elseif (strtolower($locale['secure_res'][$secure_num]) != strtolower($secure_con)) {
		$error .= $locale['secure_error2']."<br>\n";
	}
	// end: secure code by phpfusion-freak.dk
 
	if (dbrows($result)) {
		add_to_title($locale['global_200'].$locale['u155']);
 
		// getmequick at gmail dot com
		// <a href='http://www.php.net/manual/en/function.unserialize.php#71270' target='_blank'><span style='color:005C5B'>http://www.php.net/manual/en/fun....php#71270</span></a>
		function unserializeFix($var) {
			$var = preg_replace('!s:(\d+):"(.*?)";!e', "'s:'.strlen('$2').':\"$2\";'", $var);
			return unserialize($var);
		}
 
		$data = dbarray($result);
		$user_info = unserializeFix(stripslashes($data['user_info']));
		$result = dbquery("INSERT INTO ".DB_USERS." (".$user_info['user_field_fields'].") VALUES (".$user_info['user_field_inputs'].")");
		$result = dbquery("DELETE FROM ".DB_NEW_USERS." WHERE user_code='".$_GET['code']."' LIMIT 1");
 
		opentable($locale['u155']);
		if ($settings['admin_activation'] == "1") {
			echo "<div style='text-align:center'><br />\n".$locale['u171']."<br /><br />\n".$locale['u162']."<br /><br />\n</div>\n";
		} else {
			echo "<div style='text-align:center'><br />\n".$locale['u171']."<br /><br />\n".$locale['u161']."<br /><br />\n</div>\n";
		}
		closetable();
	} else {
		redirect("index.php");
	}
} elseif (isset($_POST['register'])) {
	$userInput = new UserFieldsInput();
	$userInput->validation 				= $settings['display_validation'];
	$userInput->emailVerification 		= $settings['email_verification'];
	$userInput->adminActivation 		= $settings['admin_activation'];
	$userInput->skipCurrentPass 		= true;
	$userInput->registration			= true;
	$userInput->saveInsert();
	$userInput->displayMessages();
	$errors 							= $userInput->getErrorsArray();
	unset($userInput);
}
 
 
// start: secure code by phpfusion-freak.dk
    srand ((double)microtime()*1000000);
    $zahl = rand(1, 5); 
    echo "<tr>
    <td class='tbl'>".$locale['secure_101'].":<span style='color:#ff0000'>*</span><br>".$locale['secure_ask'][$zahl]."</td>
    <td class='tbl'><input type='text' name='user_secure_con' maxlength='100' class='textbox' style='width:200px;'></td>
    </tr>\n
    <input type='hidden' name='user_secure_zahl' value='".$zahl."'>\n";
    unset($zahl);
    // end: secure code by phpfusion-freak.dk
 
 
 
if ((!isset($_POST['register']) && !isset($_GET['code'])) || (isset($_POST['register']) && count($errors) > 0)) {
	opentable($locale['u101']);
	$userFields 						= new UserFields();
	$userFields->postName 				= "register";
	$userFields->postValue 				= $locale['u101'];
	$userFields->displayValidation 		= $settings['display_validation'];
	$userFields->displayTerms 			= $settings['enable_terms'];
	$userFields->showAdminPass 			= false;
	$userFields->showAvatarInput 		= false;
	$userFields->skipCurrentPass 		= true;
	$userFields->registration			= true;
	$userFields->errorsArray 			= $errors;
	$userFields->displayInput();
	closetable();
 
 
 
 
}
 
 
 
 
 
 
 
 
 
require_once THEMES."templates/footer.php";
?>