336 lines
15 KiB
PHP
336 lines
15 KiB
PHP
<?php #
|
|
|
|
include_once dirname(__FILE__) . '/common.inc.php';
|
|
|
|
class serendipity_event_adduser extends serendipity_event
|
|
{
|
|
function introspect(&$propbag)
|
|
{
|
|
global $serendipity;
|
|
|
|
$propbag->add('name', PLUGIN_ADDUSER_NAME);
|
|
$propbag->add('description', PLUGIN_ADDUSER_DESC);
|
|
$propbag->add('stackable', false);
|
|
$propbag->add('author', 'Garvin Hicking');
|
|
$propbag->add('version', '2.38.4');
|
|
$propbag->add('requirements', array(
|
|
'serendipity' => '0.8',
|
|
'smarty' => '2.6.7',
|
|
'php' => '4.1.0'
|
|
));
|
|
$propbag->add('groups', array('BACKEND_USERMANAGEMENT'));
|
|
$propbag->add('event_hooks', array(
|
|
'frontend_configure' => true,
|
|
'frontend_display' => true,
|
|
'entries_header' => true,
|
|
'entry_display' => true,
|
|
'frontend_saveComment' => true,
|
|
'external_plugin' => true
|
|
));
|
|
|
|
$propbag->add('configuration', array(
|
|
'instructions',
|
|
'registered_only',
|
|
'registered_only_group',
|
|
'true_identities'
|
|
));
|
|
|
|
$propbag->add('legal', array(
|
|
'services' => array(
|
|
),
|
|
'frontend' => array(
|
|
'Visitors can create their own author accounts, all their information is stored in the database (username, password, etc.)',
|
|
),
|
|
'backend' => array(
|
|
),
|
|
'cookies' => array(
|
|
),
|
|
'stores_user_input' => true,
|
|
'stores_ip' => false,
|
|
'uses_ip' => false,
|
|
'transmits_user_input' => true
|
|
));
|
|
|
|
|
|
// Register (multiple) dependencies. KEY is the name of the depending plugin. VALUE is a mode of either 'remove' or 'keep'.
|
|
// If the mode 'remove' is set, removing the plugin results in a removal of the depending plugin. 'Keep' meens to
|
|
// not touch the depending plugin.
|
|
$this->dependencies = array('serendipity_plugin_adduser' => 'keep');
|
|
}
|
|
|
|
function introspect_config_item($name, &$propbag)
|
|
{
|
|
switch($name) {
|
|
case 'instructions':
|
|
$propbag->add('type', 'html');
|
|
$propbag->add('name', PLUGIN_ADDUSER_INSTRUCTIONS);
|
|
$propbag->add('description', PLUGIN_ADDUSER_INSTRUCTIONS_DESC);
|
|
$propbag->add('default', PLUGIN_ADDUSER_INSTRUCTIONS_DEFAULT);
|
|
break;
|
|
|
|
case 'registered_only':
|
|
$propbag->add('type', 'boolean');
|
|
$propbag->add('name', PLUGIN_ADDUSER_REGISTERED_ONLY);
|
|
$propbag->add('description', PLUGIN_ADDUSER_REGISTERED_ONLY_DESC);
|
|
$propbag->add('default', false);
|
|
break;
|
|
|
|
case 'registered_only_group':
|
|
$propbag->add('name', PLUGIN_ADDUSER_REGISTERED_ONLY_GROUP);
|
|
$propbag->add('description', PLUGIN_ADDUSER_REGISTERED_ONLY_GROUP_DESC);
|
|
$_groups =& serendipity_getAllGroups();
|
|
$groups = array();
|
|
foreach($_groups AS $group) {
|
|
$groups[$group['confkey']] = $group['confvalue'];
|
|
}
|
|
|
|
$propbag->add('type', 'multiselect');
|
|
$propbag->add('select_values', $groups);
|
|
$propbag->add('select_size', 5);
|
|
$propbag->add('default', 'all');
|
|
break;
|
|
|
|
case 'true_identities':
|
|
$propbag->add('type', 'boolean');
|
|
$propbag->add('name', PLUGIN_ADDUSER_REGISTERED_CHECK);
|
|
$propbag->add('description', PLUGIN_ADDUSER_REGISTERED_CHECK_DESC);
|
|
$propbag->add('default', true);
|
|
break;
|
|
|
|
default:
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
function generate_content(&$title) {
|
|
$title = PLUGIN_ADDUSER_NAME;
|
|
}
|
|
|
|
// Checks whether the current author is contained in one of the gorups that need no spam checking
|
|
function inGroup() {
|
|
global $serendipity;
|
|
|
|
$checkgroups = explode('^', $this->get_config('registered_only_group'));
|
|
|
|
// Not configured, so this shall not apply.
|
|
if ($checkgroups[0] == '') {
|
|
return true;
|
|
}
|
|
|
|
if (!isset($serendipity['authorid']) || !is_array($checkgroups)) {
|
|
return false;
|
|
}
|
|
|
|
$mygroups =& serendipity_getGroups($serendipity['authorid'], true);
|
|
if (!is_array($mygroups)) {
|
|
return false;
|
|
}
|
|
|
|
foreach($checkgroups AS $key => $groupid) {
|
|
if ($groupid == 'all') {
|
|
return true;
|
|
} elseif (in_array($groupid, $mygroups)) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
function event_hook($event, &$bag, &$eventData, $addData = null) {
|
|
global $serendipity;
|
|
static $login_url = null;
|
|
|
|
if ($login_url === null) {
|
|
$login_url = $serendipity['baseURL'] . $serendipity['indexFile'] . '?/plugin/loginbox';
|
|
}
|
|
|
|
$hooks = &$bag->get('event_hooks');
|
|
|
|
if (isset($hooks[$event])) {
|
|
switch($event) {
|
|
case 'frontend_saveComment':
|
|
if (!isset($serendipity['csuccess'])) {
|
|
$serendipity['csuccess'] = 'true';
|
|
}
|
|
|
|
if (serendipity_db_bool($this->get_config('registered_only')) && !serendipity_userLoggedIn() && $addData['source2'] != 'adduser') {
|
|
$eventData = array('allow_comments' => false);
|
|
$serendipity['messagestack']['comments'][] = PLUGIN_ADDUSER_REGISTERED_ONLY_REASON;
|
|
return false;
|
|
}
|
|
|
|
if (serendipity_db_bool($this->get_config('registered_only')) && !$this->inGroup() && $addData['source2'] != 'adduser') {
|
|
$eventData = array('allow_comments' => false);
|
|
$serendipity['messagestack']['comments'][] = PLUGIN_ADDUSER_REGISTERED_ONLY_REASON;
|
|
return false;
|
|
}
|
|
|
|
|
|
if (serendipity_db_bool($this->get_config('true_identities')) && !serendipity_userLoggedIn()) {
|
|
$user = str_replace("\xc2\xa0b", '', $addData['name']);
|
|
$user = serendipity_db_escape_string(preg_replace('@\s+@', ' ', trim($user)));
|
|
$user = trim($user);
|
|
$authors = serendipity_db_query("SELECT authorid FROM {$serendipity['dbPrefix']}authors WHERE realname = '" . $user . "'");
|
|
if (is_array($authors) && isset($authors[0]['authorid'])) {
|
|
$eventData = array('allow_comments' => false);
|
|
$serendipity['messagestack']['comments'][] = sprintf(
|
|
PLUGIN_ADDUSER_REGISTERED_CHECK_REASON,
|
|
|
|
$login_url,
|
|
'onclick="javascript:loginbox = window.open(this.href, \'loginbox\', \'width=300,height=300,locationbar=no,menubar=no,personalbar=no,statusbar=yes,status=yes,toolbar=no\'); return false;"'
|
|
);
|
|
}
|
|
}
|
|
|
|
break;
|
|
|
|
case 'external_plugin':
|
|
if ($eventData != 'loginbox') {
|
|
return true;
|
|
}
|
|
|
|
|
|
$out = array();
|
|
serendipity_plugin_api::hook_event('backend_login_page', $out);
|
|
serendipity_smarty_init();
|
|
$serendipity['smarty']->assign(array(
|
|
'loginform_add' => $out,
|
|
'loginform_url' => $login_url,
|
|
'loginform_user' => $_SESSION['serendipityUser'],
|
|
'loginform_mail' => $_SESSION['serendipityEmail'],
|
|
'close_window' => defined('LOGIN_ACTION'),
|
|
'is_logged_in' => serendipity_userLoggedIn(),
|
|
'is_error' => defined('LOGIN_ERROR')
|
|
));
|
|
$filename = 'loginbox.tpl';
|
|
$tfile = serendipity_getTemplateFile($filename, 'serendipityPath');
|
|
if (!$tfile || $tfile == $filename) {
|
|
$tfile = dirname(__FILE__) . '/' . $filename;
|
|
}
|
|
$inclusion = $serendipity['smarty']->security_settings['INCLUDE_ANY'];
|
|
$serendipity['smarty']->security_settings['INCLUDE_ANY'] = true;
|
|
$serendipity['smarty']->display($tfile);
|
|
|
|
break;
|
|
|
|
case 'frontend_display':
|
|
if (serendipity_db_bool($this->get_config('registered_only')) && !serendipity_userLoggedIn()) {
|
|
$serendipity['messagestack']['comments'][] = sprintf(
|
|
PLUGIN_ADDUSER_REGISTERED_ONLY_REASON,
|
|
$serendipity['baseURL'] . $serendipity['indexFile'] . '?serendipity[subpage]=adduser',
|
|
$serendipity['baseURL'] . 'serendipity_admin.php');
|
|
$eventData['allow_comments'] = false;
|
|
}
|
|
break;
|
|
|
|
case 'frontend_configure':
|
|
if (isset($serendipity['POST']['action']) && isset($serendipity['POST']['user']) && isset($serendipity['POST']['pass'])) {
|
|
serendipity_login();
|
|
if (serendipity_userLoggedIn()) {
|
|
define('LOGIN_ACTION', 'login');
|
|
header('X-s9y-auth: Login');
|
|
} else {
|
|
define('LOGIN_ERROR', true);
|
|
}
|
|
} elseif (isset($serendipity['POST']['action']) && isset($serendipity['POST']['logout'])) {
|
|
serendipity_logout();
|
|
if (!serendipity_userLoggedIn()) {
|
|
header('X-s9y-auth: Logout');
|
|
define('LOGIN_ACTION', 'logout');
|
|
}
|
|
}
|
|
|
|
if ((serendipity_db_bool($this->get_config('registered_only')) || serendipity_db_bool($this->get_config('true_identities'))) && $_SESSION['serendipityAuthedUser']) {
|
|
if (defined('IN_serendipity_admin') && $serendipity['GET']['adminAction'] == 'doEdit') {
|
|
// void
|
|
} else {
|
|
$serendipity['COOKIE']['name'] = (isset($_SESSION['serendipityRealname']) ? $_SESSION['serendipityRealname'] : $_SESSION['serendipityUser']);
|
|
$serendipity['COOKIE']['email'] = $_SESSION['serendipityEmail'];
|
|
if ($serendipity['POST']['comment']) {
|
|
$serendipity['POST']['name'] = $serendipity['COOKIE']['name'];
|
|
$serendipity['POST']['email'] = $serendipity['COOKIE']['email'];
|
|
}
|
|
}
|
|
}
|
|
|
|
return true;
|
|
break;
|
|
|
|
case 'entry_display':
|
|
if ($serendipity['GET']['subpage'] == 'adduser' || $serendipity['POST']['subpage'] == 'adduser' || !empty($serendipity['GET']['adduser_activation']) || !empty($this->clean_page)) {
|
|
if (is_array($eventData)) {
|
|
$eventData['clean_page'] = true;
|
|
}
|
|
}
|
|
break;
|
|
|
|
case 'entries_header':
|
|
if ($serendipity['GET']['subpage'] == 'adduser' || $serendipity['POST']['subpage'] == 'adduser' || !empty($serendipity['GET']['adduser_activation'])) {
|
|
$this->clean_page = true;
|
|
$url = $serendipity['baseURL'] . $serendipity['indexFile'];
|
|
$hidden['subpage'] = 'adduser';
|
|
|
|
$username = substr($serendipity['POST']['adduser_user'], 0, 40);
|
|
$password = substr($serendipity['POST']['adduser_pass'], 0, 32);
|
|
$email = $serendipity['POST']['adduser_email'];
|
|
|
|
echo '<div id="adduser_form" style="padding-left: 4px; padding-right: 10px"><a id="adduser"></a>';
|
|
|
|
// Get the config from the sidebar plugin
|
|
$pair_config = array(
|
|
'userlevel' => USERLEVEL_EDITOR,
|
|
'no_create' => false,
|
|
'right_publish' => false,
|
|
'instructions' => $this->get_config('instructions', ''),
|
|
'usergroups' => array(),
|
|
'straight_insert' => false,
|
|
'approve' => false,
|
|
'use_captcha' => false
|
|
);
|
|
$config = serendipity_db_query("SELECT name, value FROM {$serendipity['dbPrefix']}config WHERE name LIKE 'serendipity_plugin_adduser:%'");
|
|
|
|
if (is_array($config)) {
|
|
foreach($config AS $conf) {
|
|
$names = explode('/', $conf['name']);
|
|
if ($names[1] == 'instructions' && !empty($pair_config['instructions'])) {
|
|
continue;
|
|
}
|
|
|
|
if ($names[1] == 'usergroups') {
|
|
$ug = (array)explode(',', $conf['value']);
|
|
|
|
foreach($ug AS $cid) {
|
|
if ($cid === false || empty($cid)) {
|
|
continue;
|
|
}
|
|
$pair_config[$names[1]][$cid] = $cid;
|
|
}
|
|
} else {
|
|
$pair_config[$names[1]] = serendipity_get_bool($conf['value']);
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!serendipity_common_adduser::adduser($username, $password, $email, $pair_config['userlevel'], $pair_config['usergroups'], $pair_config['no_create'], $pair_config['right_publish'], $pair_config['straight_insert'], $pair_config['approve'], $pair_config['use_captcha'])) {
|
|
serendipity_common_adduser::loginform($url, $hidden, $pair_config['instructions'], $username, $password, $email, $pair_config['use_captcha']);
|
|
}
|
|
|
|
echo '</div>';
|
|
}
|
|
return true;
|
|
break;
|
|
|
|
default:
|
|
return false;
|
|
}
|
|
|
|
} else {
|
|
return false;
|
|
}
|
|
}
|
|
}
|
|
|
|
/* vim: set sts=4 ts=4 expandtab : */
|