takesignup.php

<?

/*
// +--------------------------------------------------------------------------+
// | Project:    TBDevYSE - TBDev Yuna Scatari Edition                        |
// +--------------------------------------------------------------------------+
// | This file is part of TBDevYSE. TBDevYSE is based on TBDev,               |
// | originally by RedBeard of TorrentBits, extensively modified by           |
// | Gartenzwerg.                                                             |
// |                                                                          |
// | TBDevYSE is free software; you can redistribute it and/or modify         |
// | it under the terms of the GNU General Public License as published by     |
// | the Free Software Foundation; either version 2 of the License, or        |
// | (at your option) any later version.                                      |
// |                                                                          |
// | TBDevYSE is distributed in the hope that it will be useful,              |
// | but WITHOUT ANY WARRANTY; without even the implied warranty of           |
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            |
// | GNU General Public License for more details.                             |
// |                                                                          |
// | You should have received a copy of the GNU General Public License        |
// | along with TBDevYSE; if not, write to the Free Software Foundation,      |
// | Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA            |
// +--------------------------------------------------------------------------+
// |                                               Do not remove above lines! |
// +--------------------------------------------------------------------------+
*/

require_once("include/bittorrent.php");

dbconn();

if ($deny_signup && !$allow_invite_signup)
    stderr($tracker_lang['error'], $tracker_lang['signup_disabled']);

if ($CURUSER)
    stderr($tracker_lang['error'], sprintf($tracker_lang['signup_already_registered'], $SITENAME));

$users = get_row_count("users");
if ($users >= $maxusers)
    stderr($tracker_lang['error'], sprintf($tracker_lang['signup_users_limit'], number_format($maxusers)));

if (!mkglobal("wantusername:wantpassword:passagain:email"))
    stderr($tracker_lang['error'], $tracker_lang['dad']);

$inviter = $invitedroot = 0;

if ($deny_signup && $allow_invite_signup) {
    if (empty($_POST["invite"]))
        stderr($tracker_lang['error'], "Äëÿ ðåãèñòðàöèè âàì íóæíî ââåñòè êîä ïðèãëàøåíèÿ!");
    if (strlen($_POST["invite"]) != 32)
        stderr($tracker_lang['error'], "Âû ââåëè íå ïðàâèëüíûé êîä ïðèãëàøåíèÿ");
    // true - to decline bug-abusers: there was a bug, if 32 0-s were sent as invite code - this could cause usage of someones invite.
    // now forcing to escape as string all times.
    list($inviter) = mysql_fetch_row(sql_query("SELECT inviter FROM invites WHERE invite = " . sqlesc($_POST["invite"], true)));
    if (!$inviter)
        stderr($tracker_lang['error'], "Êîä ïðèãëàøåíèÿ ââåäåííûé âàìè íå ðàáî÷èé");
    list($invitedroot) = mysql_fetch_row(sql_query("SELECT invitedroot FROM users WHERE id = $inviter"));
}

function bark($msg) {
    global $tracker_lang;
    stdhead();
    stdmsg($tracker_lang['error'], $msg, 'error');
    stdfoot();
    exit;
}

function validusername($username) {
    // Must rework as regular expressions
    if ($username == "")
        return false;

    // The following characters are allowed in user names
    $allowedchars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_".
                    "àáâãäå¸æçèêëìíîïðñòóôõøùýþÿüúÀÁÂÃÄŨÆÇÈÊËÌÍÎÏÐÑÒÓÔÕØÙÝÞßÜÚ";

    for ($i = 0; $i < strlen($username); ++$i)
        if (strpos($allowedchars, $username[$i]) === false)
            return false;

    return true;
}

$gender = $_POST["gender"];
$website = htmlspecialchars_uni($_POST["website"]);
$country = $_POST["country"];
$year = $_POST["year"];
$month = $_POST["month"];
$day = $_POST["day"];

$icq = unesc($_POST["icq"]);
if (strlen($icq) > 10)
    bark("Æàëü, Íîìåð icq ñëèøêîì äëèííûé (Ìàêñ - 10)");

$msn = unesc($_POST["msn"]);
if (strlen($msn) > 30)
    bark("Æàëü, Âàø msn ñëèøêîì äëèííûé (Ìàêñ - 30)");

$aim = unesc($_POST["aim"]);
if (strlen($aim) > 30)
    bark("Æàëü, Âàø aim ñëèøêîì äëèííûé (Ìàêñ - 30)");

$yahoo = unesc($_POST["yahoo"]);
if (strlen($yahoo) > 30)
    bark("Æàëü, Âàø yahoo ñëèøêîì äëèííûé (Ìàêñ - 30)");

$mirc = unesc($_POST["mirc"]);
if (strlen($mirc) > 30)
    bark("Æàëü, Âàø mirc ñëèøêîì äëèííûé (Ìàêñ - 30)");

$skype = unesc($_POST["skype"]);
if (strlen($skype) > 20)
    bark("Æàëü, Âàø skype ñëèøêîì äëèííûé (Ìàêñ - 20)");

$email = trim(strtolower($email));

if (empty($wantusername) || empty($wantpassword) || empty($email) || empty($gender) || empty($country))
    bark("Âñå ïîëÿ îáÿçàòåëüíû äëÿ çàïîëíåíèÿ.");

if (strlen($wantusername) > 12)
    bark("Èçâèíèòå, èìÿ ïîëüçîâàòåëÿ ñëèøêîì äëèííîå (ìàêñèìóì 12 ñèìâîëîâ)");

if ($wantpassword != $passagain)
    bark("Ïàðîëè íå ñîâïàäàþò! Ïîõîæå âû îøèáëèñü. Ïîïðîáóéòå åùå.");

if (strlen($wantpassword) < 6)
    bark("Èçâèíèòå, ïàðîëü ñëèøêîì êîðîòêè (ìèíèìóì 6 ñèìâîëîâ)");

if (strlen($wantpassword) > 40)
    bark("Èçâèíèòå, ïàðîëü ñëèøêîì äëèííûé (ìàêñèìóì 40 ñèìâîëîâ)");

if ($wantpassword == $wantusername)
    bark("Èçâèíèòå, ïàðîëü íå ìîæåò áûòü òàêîé-æå êàê èìÿ ïîëüçîâàòåëÿ.");

if (!validemail($email))
    bark("Ýòî íå ïîõîæå íà ðåàëüíûé email àäðåñ.");

list(, $domain) = explode('@', $email);
if (!mail_possible($email))
    bark('Ïî÷òû â òàêîì äîìåíå áûòü íå ìîæåò (' . htmlspecialchars_uni($domain) . ')');

if ($check_for_working_mta) {
    // Some pre PHP 5.3 WINDOWS installations...
    if (function_exists('getmxrr')) {
        getmxrr($domain, $mxs);
        foreach ($mxs as $mx) {
            if (check_port($mx, 25, 1, true)) {
                $is_good_smtp = true;
                break;
            }
        }

        if (!$is_good_smtp)
            bark("Íà âàøåé ïî÷òîâîé ñëóæáå íå ðàáîòàåò ïî÷òîâûé ñåðâåð (MTA).");
    }
}

if (!validusername($wantusername))
    bark("Íåâåðíîå èìÿ ïîëüçîâàòåëÿ.");

if ($year == '0000' || $month == '00' || $day == '00')
    stderr($tracker_lang['error'], "Ïîõîæå âû óêàçàëè íåâåðíóþ äàòó ðîæäåíèÿ");
$birthday = date("$year.$month.$day");

// make sure user agrees to everything...
if ($_POST["rulesverify"] != "yes" || $_POST["faqverify"] != "yes" || $_POST["ageverify"] != "yes")
    stderr($tracker_lang['error'], "Èçâèíèòå, âû íå ïîäõîäèòå äëÿ òîãî ÷òî-áû ñòàòü ÷ëåíîì ýòîãî ñàéòà.");

// check if email addy is already in use
/*$a = (@mysql_fetch_row(@sql_query("SELECT COUNT(*) FROM users WHERE email=".sqlesc($email)))) or die(mysql_error());
if ($a[0] != 0)
	bark("E-mail àäðåñ ".htmlspecialchars_uni($email)." óæå çàðåãèñòðèðîâàí â ñèñòåìå.");*/

$a = get_row_count('users', 'WHERE email = ' . sqlesc($email));
if ($a != 0)
    bark("E-mail àäðåñ " . htmlspecialchars_uni($email) . " óæå çàðåãèñòðèðîâàí â ñèñòåìå.");

if ($use_captcha && $users) {
    if (!$_POST['imagestring'])
        bark("Âû äîëæíû ââåñòè êîä ïîäòâåðæäåíèÿ.");
    $b = get_row_count("captcha", "WHERE imagehash = " . sqlesc($_POST["imagehash"], true) . " AND imagestring = " . sqlesc($_POST["imagestring"], true));
    sql_query("DELETE FROM captcha WHERE imagehash = " . sqlesc($_POST["imagehash"], true)) or die(mysql_error());
    if ($b == 0)
        bark("Âû ââåëè íåïðàâèëüíûé êîä ïîäòâåðæäåíèÿ.");
}

$ip = getip();

if (isset($_COOKIE[COOKIE_UID]) && is_numeric($_COOKIE[COOKIE_UID]) && $users && $enable_adv_antidreg) {
    $cid = intval($_COOKIE[COOKIE_UID]);
    $c = sql_query("SELECT enabled FROM users WHERE id = $cid ORDER BY id DESC LIMIT 1");
    $co = mysql_fetch_row($c);
    if ($co[0] == 'no') {
        sql_query("UPDATE users SET ip = '$ip', last_access = NOW() WHERE id = $cid");
        bark("Âàø IP çàáàíåí íà ýòîì òðåêåðå. Ðåãèñòðàöèÿ íåâîçìîæíà.");
    } else
        bark("Ðåãèñòðàöèÿ íåâîçìîæíà!");
} else {
    $b = (mysql_fetch_row(sql_query("SELECT enabled, id FROM users WHERE ip = '$ip' ORDER BY last_access DESC LIMIT 1")));
    if ($b[0] == 'no') {
        $banned_id = $b[1];
        setcookie(COOKIE_UID, $banned_id, "0x7fffffff", "/");
        bark("Âàø IP çàáàíåí íà ýòîì òðåêåðå. Ðåãèñòðàöèÿ íåâîçìîæíà.");
    }
}

$secret = mksecret();
$wantpasshash = md5($secret . $wantpassword . $secret);
$editsecret = (!$users ? "" : mksecret());

if ((!$users) || (!$use_email_act == true))
    $status = 'confirmed'; else
    $status = 'pending';

// This is ugly, we but we have it...
// To-Do rewrite
$ret = sql_query("INSERT INTO users (username, passhash, secret, editsecret, gender, country, icq, msn, aim, yahoo, skype, mirc, website, email, status, " . (!$users ? "class, " : "") . "added, birthday, invitedby, invitedroot, theme) VALUES (" . implode(",", array_map("sqlesc", array($wantusername, $wantpasshash, $secret, $editsecret, $gender, $country, $icq, $msn, $aim, $yahoo, $skype, $mirc, $website, $email, $status))) . ", " . (!$users ? UC_SYSOP . ", " : "") . "'" . get_date_time() . "', '$birthday', '$inviter', '$invitedroot', '" . select_theme() . "')");
// or sqlerr(__FILE__, __LINE__);

if (!$ret) {
    if (mysql_errno() == 1062)
        bark("Ïîëüçîâàòåëü $wantusername óæå çàðåãèñòðèðîâàí!");
    bark("Íåèçâåñòíàÿ îøèáêà. Îòâåò îò ñåðâåðà mySQL: " . htmlspecialchars_uni(mysql_error()));
}

$id = mysql_insert_id();

sql_query("DELETE FROM invites WHERE invite = " . sqlesc($_POST["invite"]));

write_log("Çàðåãèñòðèðîâàí íîâûé ïîëüçîâàòåëü $wantusername", "FFFFFF", "tracker");

$psecret = md5($editsecret);

$body = <<<EOD
Âû çàðåãèñòðèðîâàëèñü íà $SITENAME è óêàçàëè ýòîò àäðåñ êàê îáðàòíûé ($email).

Åñëè ýòî áûëè íå âû, ïîæàëóéñòà ïðîèãíîðèðóéòå ýòî ïèñüìî. Ïåðñîíà êîòîðàÿ ââåëà âàø E-Mail àäðåññ èìååò IP àäðåñ {$_SERVER["REMOTE_ADDR"]}. Ïîæàëóéñòà, íå îòâå÷àéòå.

Äëÿ ïîäòâåðæäåíèÿ âàøåé ðåãèñòðàöèè, âàì íóæíî ïðîéòè ïî ñëåäóþùåé ññûëêå:

$DEFAULTBASEURL/confirm.php?id=$id&secret=$psecret

Ïîñëå òîãî êàê âû ýòî ñäåëàåòå, âû ñìîæåòå èñïîëüçîâàòü âàø àêêàóíò. Åñëè âû ýòîãî íå ñäåëàåòå,
 âàø íîâûé àêêàóíò áóäåò óäàëåí ÷åðåç ïàðó äíåé. Ìû ðåêîìåíäóåì âàì ïðî÷èòàòü ïðàâèëà
è ×àÂî ïðåæäå ÷åì âû íà÷íåòå èñïîëüçîâàòü $SITENAME.
EOD;

if ($use_email_act && $users) {
    if (!sent_mail($email, $SITENAME, $SITEEMAIL, "Ïîäòâåðæäåíèå ðåãèñòðàöèè íà $SITENAME", $body, false)) {
        //stderr($tracker_lang['error'], "Íåâîçìîæíî îòïðàâèòü E-Mail. Ïîïðîáóéòå ïîçæå");
        write_log("Ïðîáëåìà ñ îòïðàâêîé ïèñüìà äëÿ àêòèâàöèè íà àäðåñ $email", "FF0000", "errors");
        logincookie($id, $wantpasshash);
        sql_query('UPDATE users SET status = "confirmed" WHERE id = ' . $id) or sqlerr(__FILE__, __LINE__);
        header("Location: ok.php?type=confirm");
        die;
    }
} else {
    logincookie($id, $wantpasshash);
}

header("Refresh: 0; url=ok.php?type=" . (!$users ? "sysop" : ("signup&email=" . urlencode($email))));

?>