modx-confirmregister

<?php


/**
 * Register
 *
 * Copyright 2010 by Shaun McCormick <[email protected]>
 *
 * Register is free software; you can redistribute it and/or modify it under the
 * terms of the GNU General Public License as published by the Free Software
 * Foundation; either version 2 of the License, or (at your option) any later
 * version.
 *
 * Register is distributed in the hope that it will be useful, but WITHOUT ANY
 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
 * A PARTICULAR PURPOSE. See the GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * Register; if not, write to the Free Software Foundation, Inc., 59 Temple
 * Place, Suite 330, Boston, MA 02111-1307 USA
 *
 * @package login
 */
/**
 * MODx Confirm Register Activation Snippet. Snippet to place on an activation
 * page that the user using the Register snippet would be sent to via the
 * activation email.
 *
 * @package login
 */
$model_path = $modx->getOption('core_path').'components/login/model/login/';
$Login = $modx->getService('login','Login',$model_path,$scriptProperties);
$modx->lexicon->load('login:register');

/* get default properties */
$errorPage = $modx->getOption('errorPage',$scriptProperties,false);

/* get user from query params */
if (empty($_REQUEST['lp']) || empty($_REQUEST['lu'])) {
    if (!empty($errorPage)) {
        $url = $modx->makeUrl($errorPage,'','','full');
        $modx->sendRedirect($url);
    } else {
        $modx->sendErrorPage();
    }
}
$username = base64_decode(urldecode(rawurldecode($_REQUEST['lu'])));
$password = base64_decode(urldecode(rawurldecode($_REQUEST['lp'])));

/* validate we have correct user */
$user = $modx->getObject('modUser',array('username' => $username));
if ($user == null || $user->get('active')) {
    if (!empty($errorPage)) {
        $url = $modx->makeUrl($errorPage,'','','full');
        $modx->sendRedirect($url);
    } else {
        $modx->sendErrorPage();
    }
}

/* validate password to prevent middleman attacks */
$modx->getService('registry', 'registry.modRegistry');
$modx->registry->addRegister('login','registry.modFileRegister');
$modx->registry->login->connect();
$modx->registry->login->subscribe('/useractivation/'.$user->get('username'));
$msgs = $modx->registry->login->read();
if (empty($msgs)) $modx->sendErrorPage();
$found = false;
foreach ($msgs as $msg) {
    if ($msg == $password) $found = true;
}
if (!$found) {
    if (!empty($errorPage)) {
        $url = $modx->makeUrl($errorPage,'','','full');
        $modx->sendRedirect($url);
    } else {
        $modx->sendErrorPage();
    }
}

/* invoke OnBeforeUserActivateEvent, if result returns anything, do not proceed */
$result = $modx->invokeEvent('OnBeforeUserActivate',array(
    'user' => &$user,
));
$preventActivation = $Login->getEventResult($result);
if (!empty($preventActivation)) {
    $modx->log(modX::LOG_LEVEL_ERROR,'[Register] OnBeforeUserActivate event prevented activation for "'.$user->get('username').'" by returning false: '.$preventActivation);
    if (!empty($errorPage)) {
        $url = $modx->makeUrl($errorPage,'','','full');
        $modx->sendRedirect($url);
    } else {
        $modx->sendErrorPage();
    }
}

/* activate user */
$user->set('active',1);
$user->set('cachepwd','');
if (!$user->save()) {
    $modx->log(modX::LOG_LEVEL_ERROR,'[Register] Could not save activated user: '.$user->get('username'));
    return '';
}

/* invoke OnUserActivate event */
$modx->invokeEvent('OnUserActivate',array(
    'user' => &$user,
));

/* authenticate user to contexts */
if ($modx->getOption('authenticate',$scriptProperties,true)) {
    $modx->user =& $user;
    $modx->getUser();
    $contexts = !empty($scriptProperties['authenticateContexts']) ? $scriptProperties['authenticateContexts'] : $modx->context->get('key');
    $contexts = explode(',',$contexts);
    foreach ($contexts as $ctx) {
        $modx->user->addSessionContext($ctx);
    }
}

$profile = $user->getOne('Profile');
$extended = $profile->get('extended');

$extended['joined_date'] = time();
$profile->set('extended', $extended);
$profile->save();

/* if wanting to redirect after confirmed registration (for shopping carts)
 * Also allow &redirectBack parameter sent in confirmation email to redirect
 * to a form requiring registration
 */
$redirectBack = $modx->getOption('redirectBack',$_REQUEST,$modx->getOption('redirectBack',$scriptProperties,''));
$redirectBackParams = $redirectBackParams = $modx->getOption('redirectBackParams',$_REQUEST,$modx->getOption('redirectBackParams',$scriptProperties,''));
if (!empty($redirectBackParams)) {
    $redirectBackParams = $Login->decodeParams($redirectBackParams);
}

$redirectTo = !empty($scriptProperties['redirectTo']) ? $scriptProperties['redirectTo'] : $redirectBack;
if (!empty($redirectTo)) {
    /* allow custom redirection params */
    $redirectParams = !empty($scriptProperties['redirectParams']) ? $scriptProperties['redirectParams'] : $redirectBackParams;
    if (!empty($redirectParams) && !is_array($redirectParams)) $redirectParams = $modx->fromJSON($redirectParams);
    if (empty($redirectParams) || !is_array($redirectParams)) $redirectParams = array();

    /* handle persist params from Register snippet */
    $persistParams = $_GET;
    unset($persistParams['lp'],$persistParams['lu']);
    $persistParams['username'] = $user->get('username');
    $persistParams['userid'] = $user->get('id');
    $redirectParams = array_merge($redirectParams,$persistParams);
    unset($redirectParams[$modx->getOption('request_param_alias',null,'q')],$redirectParams['redirectBack']);

    /* redirect user */
    $url = $modx->makeUrl($redirectTo,'',$redirectParams);
    $modx->sendRedirect($url);
}

return '';