<?php
/*
  Template Name: Login Page
 */
nocache_headers();
global $wpdb, $user_ID;
$redirectto	= $wpdb->escape(wp_strip_all_tags(esc_attr($_GET['redirect_to'])));
if(empty($redirectto) or $redirectto == '') { $redirectto = site_url();}

if (!$user_ID) {
	if(isset($_POST['task'])){
		if($_POST['task'] == 'login'){
			//We shall SQL escape all inputs
			$username = wp_strip_all_tags($wpdb->escape($_REQUEST['username']));
			$password = wp_strip_all_tags($wpdb->escape($_REQUEST['password']));
			$remember = wp_strip_all_tags($wpdb->escape($_REQUEST['rememberme']));

			if($remember) $remember = "true";
			else $remember = "false";
			$login_data = array();
			$login_data['user_login'] = $username;
			$login_data['user_password'] = $password;
			$login_data['remember'] = $remember;

			if( $login_data['user_login'] == "" || empty($login_data['user_login'])) {
				$err = __('<strong>ERROR</strong>: Please enter a username.');
			} elseif( $login_data['user_password'] == "" || empty($login_data['user_password'])) {
				$err = __('<strong>ERROR</strong>: The password field is empty.');
			} else {
			$user_verify = wp_signon( $login_data, false );
				if ( is_wp_error($user_verify) ) {
						$err	= __("<strong>ERROR</strong>: Invalid username or incorrect password.");
				} else {
						wp_safe_redirect($redirectto);
						exit();
				}
			}
		}elseif($_POST['task'] == 'register'){

		$pwd1 = $wpdb->escape(trim($_POST['pwd1']));
        $pwd2 = $wpdb->escape(trim($_POST['pwd2']));
        $email = $wpdb->escape(trim($_POST['email']));
        $username = $wpdb->escape(trim($_POST['reg_username']));
		$Phone = preg_replace('%[^0-9]%i', '', $_POST['phone']);

			if( $username == "" || empty($username)) { $err = __('<strong>ERROR</strong>: Please enter a username.');
			} elseif( $email == "" || empty($email)) { $err = __('<strong>ERROR</strong>: Please type your e-mail address.');
			} elseif( $pwd1 == "" || empty($pwd1)) { $err = __('<strong>ERROR</strong>: The password field is empty.');
			} elseif( !is_email($email)) { $err = __('<strong>ERROR</strong>: please enter a valid email address.');
			} elseif( email_exists($email) ) { $err = __('<strong>ERROR</strong>: This email is already registered, please choose another one.');
			} elseif( !validate_username($username)) {
			$err = __( '<strong>ERROR</strong>: This username is invalid because it uses illegal characters. Please enter a valid username.' );
			} elseif( username_exists($username)) { $err = __('<strong>ERROR</strong>: This username is already registered. Please choose another one.');
			} elseif( $pwd1 <> $pwd2 ){ $err = __('The passwords do not match.');
			} else {
				$user_id = wp_insert_user( array (
										'user_pass' => apply_filters('pre_user_user_pass', $pwd1),
										'user_login' => apply_filters('pre_user_user_login', $username),
										'user_email' => apply_filters('pre_user_user_email', $email),
										) );
				if( is_wp_error($user_id) ) {
					$err = __('<strong>ERROR</strong>: Couldn&#8217;t register you... please contact the <a href=\"mailto:%s\">webmaster</a> !', get_option('admin_email'));
					$err = str_replace('webmaster', __('Site Admin'), $err);
				} else {
					update_user_meta($user_id, 'phone', wp_strip_all_tags($Phone));
					do_action('user_register', $user_id);
						// Welcome mail to new user
						$from 		= get_option('admin_email');
						$blog_name	=	get_option('blogname');
						$headers = 'From: '.$from . "\r\n";
						$subject = sprintf(__('Welcome to %s', 'bizway'), $blog_name);
						$msg .= "شكرا لإشتراكك في ".$blog_name." إليك تفاصيل الدخول:\r\n\r\n";
						$msg .= sprintf(__('Username: %s'), $username) . "\r\n";
						$msg .= sprintf(__('E-mail: %s'), $email) . "\r\n";
						$msg .= sprintf(__('Password: %s'), '(كلمة المرور التي قمت بتسجيل بها)') . "\r\n\r\n";
						$msg .= "يمكنك تسجيل الدخول إلى النظام عبر هذا الرابط:\r\n";
						$msg .= home_url('login')."\r\n\r\n";
						$msg .= "شكراً لك..\r\n";
						$msg .= "فريق ".$blog_name.".\r\n\r\n";

						wp_mail( $email, $subject, $msg, $headers );

					$success = __('Registration complete. Please check your e-mail.') . "<br /><br />";
					$success .= sprintf( __('Your account is now activated. <a href="%1$s">Log in</a> or go back to the <a href="%2$s">homepage</a>.' ), home_url('login'), home_url() );
				}
			}
		}
	}
get_header(); ?>
<style>
.login input[type="text"],.login input[type="password"], .register input[type="text"],.register input[type="password"] {
background: #fff !important;
border: 1px solid #ddd !important;
color: #555 !important;
clear: both !important;
display: block !important;
margin: 10px 0 0 !important;
padding: 8px !important;
width: 80%;
}
.login input[type="submit"],.register input[type="submit"] {
width: 87px;
border: 0;
color: #FFF;
-webkit-border-radius: 5px;
-moz-border-radius: 5px;
border-radius: 5px;
}
.login .btn, .register .btn{
background: orange;
height: 30px;
text-indent: 0px;
}
</style>

<!--Start Page Heading -->
<div class="page-heading-container">
    <div class="container_24">
        <div class="grid_24">
            <div class="page-heading">
                <h1><?php the_title(); ?> </h1>
            </div>
        </div>
        <div class="clear"></div>
    </div>
</div>
<!--End Page Heading -->
<!--Start Page Content -->
<div class="page-content-container">
    <div class="container_24">
        <div class="grid_24">
            <div class="page-content">
                <div class="grid_24 sub_alpha">
				<?php if ( have_posts() ) : the_post(); ?>
					<h3 class=""><?php //the_content(); ?></h3>
                <?php endif; ?>
				<?php if($err != ''){ ?>
					<h4 style="color: red;"><?echo $err; ?></h4>
				<?php } ?>
				<?php if($success != ''){ ?>
					<h4 style="color: green;"><?echo $success; ?></h4>
				<?php } ?>
					<div class="grid_11 login" style="border-left: 1px dotted #ccc;">
						<h3 class="">تسجيل الدخول</h3>
							<form id="wp_login_form" action="" method="post">
								<p><label for="username"><?php _e('Username'); ?></label>
								<input type="text" name="username" id="username" class="text" value="" /></p>
								<p><label for="password"><?php _e('Password'); ?></label>
								<input type="password" name="password" id="password" class="text" value="" /></p>
								<p><label><input name="rememberme" type="checkbox" value="forever" checked /> <?php esc_attr_e('Remember Me'); ?></label></p>
								<p style="text-align: center; width: 80%;"><input type="submit" id="submitbtn" name="submit1" value="<?php esc_attr_e('Log In'); ?>" class="btn" />
								<input type="hidden" name="task" value="login" />
								<br /><br />
							</form>
						<p style="float: left; margin: 0px 0px 20px 20px;">
						<a href="<?php echo esc_url( site_url('wp-login.php?action=lostpassword') ); ?>" title="<?php esc_attr_e( 'Password Lost and Found' ); ?>"><?php _e( 'Lost your password?' ); ?></a>
						</p>
					</div>
					<div class="grid_11 register" style="margin-right: 1%;">
						<h3 class="">تسجيل حساب جديد</h3>

							<form id="wp_register_form" action="" method="post">
								<p><label for="reg_username"><?php _e('Username'); ?></label>
								<input type="text" name="reg_username" id="reg_username" class="text" value="" /></p>
								<p><label for="email"><?php _e('Email'); ?></label>
								<input type="text" name="email" id="email" class="text" value="" /></p>
								<p><label for="pwd1"><?php _e('Password'); ?></label>
								<input type="password" name="pwd1" id="pwd1" class="text" value="" /></p>
								<p><label for="pwd2"><?php echo str_replace('الجديدة', '', __('Confirm new password')); ?></label>
								<input type="password" name="pwd2" id="pwd2" class="text" value="" /></p>
								<p><label for="phone">رقم الهاتف <font style="size: 80%">(إختياري)</font></label>
								<input type="text" name="phone" id="phone" class="text" value="" /></p>
								<p style="text-align: center; width: 80%;"><input type="submit" id="submitbtn" name="submit2" value="<?php esc_attr_e('Register'); ?>" class="btn" />
								<input type="hidden" name="task" value="register" />
								<br /><br />
							</form>
					</div>

				</div>
            </div>
        </div>
        <div class="clear"></div>
    </div>
</div>
<?php get_footer();
} else {
	wp_safe_redirect($redirectto);
}
?>