<?php

//@ validate inclusion
if(!defined('VALID_ACL_')) exit('direct access is not allowed.');

class Registration{
	public function check_user_exist(){

	}
	public function	form(){
			global $ACL_LANG;
			$htmlForm =	'<form id="frmregister">'.
						'<label>';
			switch(LOGIN_METHOD)	{
				case 'both':
					$htmlForm .= $ACL_LANG['USERNAME'].'/'.$ACL_LANG['EMAIL'];
					break;
				case 'email':
					$htmlForm .= $ACL_LANG['EMAIL'];
					break;
				default:
					$htmlForm .= $ACL_LANG['USERNAME'];
					break;
			}
			$htmlForm .= ':</label>'.
						 '<input type="text" name="u" id="u" class="textfield" />'.
						 '<label>'.$ACL_LANG['PASSWORD'].'</label>'.
						 '<input type="password" name="p" id="p" class="textfield" />'.
						 '<input type="password" name="cp" id="cp" class="textfield" />'.
						 '<input type="submit" name="btn" id="btn" class="buttonfield" value="'.$ACL_LANG['LOGIN'].'" />'.
						 '</form>';
			return $htmlForm;
		}

	public function register($u,$p){
			global $db_config,$user_config;

			if (USEDB){
					if($u&&$p){
							$this->db = @mysql_connect($db_config['server'],$db_config['user'],$db_config['pass']);
							if(!$this->db) return false;

							$opendb = @mysql_select_db($db_config['name'], $this->db);
							if(!$opendb) return false;

							$sql = "INSERT INTO".$db_config['tbl_user']." WHERE ";
							switch(LOGIN_METHOD){
									case 'both':
										$sql .= "(username='".mysql_real_escape_string($u)."' OR useremail='".mysql_real_escape_string($u)."')";
										break;
									case 'email':
										$sql .= "useremail='".mysql_real_escape_string($u)."'";
										break;
									default:
										$sql .= "username='".mysql_real_escape_string($u)."'";
										break;
								}
							$sql .= " AND userpassword = '".md5($p)."'";

							$rs = @mysql_query($sql,$this->db);

							if(!$rs) return false;

							if(mysql_num_rows($rs))	{
									$this->set_session(array_merge(mysql_fetch_assoc($rs),array('expires'=>time()+(45*60))));
									$return = true;
								}
							mysql_free_result($rs);
							mysql_close($this->db);
							unset($rs,$sql);
						}
				}else{
					for($i=0;$i<count($user_config);$i++){
							switch(LOGIN_METHOD)	{
									case 'both':
										if(($user_config[$i]['username']==$u||$user_config[$i]['useremail']==$u) &&
											$user_config[$i]['userpassword']==md5($p)) { $return = true;}
										break;
									case 'email':
										if($user_config[$i]['useremail']==$u &&
											$user_config[$i]['userpassword']==md5($p)) { $return = true;}
										break;
									default:
										if($user_config[$i]['username']==$u &&
											$user_config[$i]['userpassword']==md5($p)) { $return = true;}
										break;
								}

							if($return===true){
									$this->set_session(array_merge($user_config[$i],array('expires'=>time()+(45*60))));
								}
						}
				}

			return $return;

		}
	private function notify_user(){

	}


}
?>