<?php

// Alter user login form to use our validator and submit function (2 functions cuz there are 2 forms that can login user)
function wowauth_form_user_login_alter(&$form, $form_state)
{
    $form[&#039;#validate&#039;] = array(&#039;wowauth_login_validate&#039;);
    $form[&#039;#submit&#039;] = array(&#039;wowauth_login_submit&#039;);
}

// Alter user login form to use our validator and submit function (2 functions cuz there are 2 forms that can login user)
function wowauth_form_user_login_block_alter(&$form, $form_state)
{
    $form[&#039;#validate&#039;] = array(&#039;wowauth_login_validate&#039;);
    $form[&#039;#submit&#039;] = array(&#039;wowauth_login_submit&#039;);
}

// Validate user login
function wowauth_login_validate(&$form, $form_state)
{
    $name = $form[&#039;#post&#039;][&#039;name&#039;];
    $pass = $form[&#039;#post&#039;][&#039;pass&#039;];

    db_set_active(&#039;realmd&#039;);
    if (!$name || !$pass) // No password or username entered
        form_set_error(&#039;title&#039;, t(&#039;Fill all fields&#039;));
    else if (!db_result(db_query("SELECT 1 FROM account WHERE username=&#039;%s&#039; AND sha_pass_hash=&#039;%s&#039; LIMIT 1", $username, sha1(strtoupper($username . &#039;:&#039; . $pass))))) // Wrong username/password
        form_set_error(&#039;title&#039;, t(&#039;Wrong username or password&#039;));
    db_set_active(&#039;default&#039;);
}

// Login user
function wowauth_login_submit(&$form, $form_state)
{
    $username = $form_values[&#039;name&#039;];
    $pass =  $form_values[&#039;pass&#039;];

    db_set_active(&#039;realm&#039;);
    $result = db_fetch_array(db_query("SELECT username FROM account WHERE username=&#039;%s&#039; AND sha_pass_hash=&#039;%s&#039; LIMIT 1", $username, sha1(strtoupper($username . &#039;:&#039; . $pass))));
    db_set_active(&#039;default&#039;);
    if ($result !== false)
    {
        user_external_login_register($result[&#039;username&#039;], &#039;wowauth&#039;);
        $edit = array();
        user_authenticate_finalize($edit);
    }
}

// Handle user hooks
function wowauth_user($op, &$edit, &$account, $category = NULL)
{
    // Insert user in drupal database (basically it&#039;s registration)
    if ($op == &#039;insert&#039;)
    {
        db_set_active(&#039;realm&#039;);
        // Update email realmd->drupal
        $result = db_result(db_query("SELECT email FROM account WHERE username=&#039;%s&#039; LIMIT 1", $edit[&#039;name&#039;]));
        db_set_active(&#039;default&#039;);
        if ($result)
            db_query("UPDATE {users} SET mail=&#039;%s&#039;, pass=&#039;&#039; WHERE name=&#039;%s&#039; LIMIT 1", $result, $edit[&#039;name&#039;]); // Also remove drupal&#039;s hashed password cuz md5 is easy crackable
    }

    // Update user (any fields changed)
	if ($op == &#039;update&#039;)
	{
		$password = $edit[&#039;pass&#039;];
		db_set_active(&#039;realm&#039;);
        // Update password in realmd
        db_query("UPDATE account SET sha_pass_hash=&#039;%s&#039; WHERE username=&#039;%s&#039; LIMIT 1", sha1(strtoupper($username . &#039;:&#039; . $password)), $edit[&#039;name&#039;]);
		db_set_active(&#039;default&#039;);
	}
}

// Alter user registration to use our validator and submit function
function wowauth_form_user_register_alter($form, &$form_state)
{
    $form[&#039;#validate&#039;] = array(&#039;wowauth_register_validate&#039;);
    $form[&#039;#submit&#039;] = array(&#039;wowauth_register_submit&#039;);
}

// Validate user registration
function wowauth_register_validate($form, &$form_state)
{
    $name = $form[&#039;#post&#039;][&#039;name&#039;];
    $pass = $form[&#039;#post&#039;][&#039;pass&#039;][&#039;pass1&#039;];
    $mail = $form[&#039;#post&#039;][&#039;mail&#039;];

    db_set_active(&#039;realm&#039;);

    if ($form[&#039;#post&#039;][&#039;pass&#039;][&#039;pass2&#039;] !== $pass) // Passwords doesn&#039;t match
        form_set_error(&#039;title&#039;, t(&#039;Entered passwords does not match&#039;));
    else if (!valid_email_address($mail)) // Not valid email address
        form_set_error(&#039;title&#039;, t(&#039;Entered e-mail is not valid&#039;));
    else if (db_result(db_query("SELECT 1 FROM account WHERE username = &#039;%s&#039; LIMIT 1", $name))) // Username already taken
        form_set_error(&#039;title&#039;, t(&#039;This username is already taken&#039;));
    else if (db_result(db_query("SELECT 1 FROM account WHERE email = &#039;%s&#039; LIMIT 1", $mail))) // Email already taken
        form_set_error(&#039;title&#039;, t(&#039;This email is already used&#039;));

    db_set_active(&#039;default&#039;);
}

// Register account
function wowauth_register_submit($form, &$form_state)
{
    $name = $form[&#039;#post&#039;][&#039;name&#039;];
    $pass = $form[&#039;#post&#039;][&#039;pass&#039;][&#039;pass1&#039;];
    $mail = $form[&#039;#post&#039;][&#039;mail&#039;];

    db_set_active(&#039;realm&#039;);
    // Add data to realmd, don&#039;t add data to drupal (it will be handled on on &#039;wowauth_authenticate&#039;)
    db_query("INSERT INTO account (username, sha_pass_hash, email, expansion) VALUES (&#039;%s&#039;, &#039;%s&#039;, &#039;%s&#039;, 2)",
        strtoupper($name), sha1(strtoupper($name . &#039;:&#039; . $pass)), strtoupper($mail));
    db_set_active(&#039;default&#039;);

    wowauth_authenticate(array(&#039;name&#039; => $name, &#039;pass&#039; => $pass));
    $form_state[&#039;redirect&#039;] = &#039;/&#039;;
}