rri/create.php at master · fsi-tue/rri · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
<?php
    require_once('core/Main.php');

    $status = NULL;
    $username = NULL;
    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        $username = filter_input(INPUT_POST, 'username', FILTER_SANITIZE_ENCODED);
        $username = strtolower($username);
        $password = filter_input(INPUT_POST, 'password', FILTER_SANITIZE_ENCODED);
        $passwordRepeated = filter_input(INPUT_POST, 'password_repeated', FILTER_SANITIZE_ENCODED);
        $passwordHash = $hashUtil->hashPasswordWithSaltIncluded($password);

        $status = 'CREATE_USER';

        $pattern = '/zx[a-z][a-z][a-z]\d\d$/';
        if (!preg_match($pattern, $username)) {
            $status = 'USERNAME_FORMAT_DOES_NOT_MATCH';
            $log->info('create.php', 'User did not enter valid zx-short: ' . $username);
        } else if ($password != $passwordRepeated) {
            $status = 'PASSWORDS_DO_NOT_MATCH';
            $log->info('create.php', 'Passwords do not match: ' . $username);
        } else if ($password == NULL || $password == '') {
            $status = 'PASSWORDS_ARE_EMPTY';
            $log->info('create.php', 'Password was empty: ' . $username);
        } else if ($userSystem->usernameExists($username)) {
            $status = 'USERNAME_ALREADY_EXISTS';
            $log->info('create.php', 'Username already exists in the system: ' . $username);
            $userSystem->resendActivationMail($username, $passwordHash);
        }

        // if the user input is correct, put the user in the database
        // send a mail to him and redirect to the activation page where information on how to activate will be shown
        if ($status == 'CREATE_USER') {
            $user = $userSystem->createUserAndSendMail($username, $passwordHash);
            if ($user != NULL) {
                $log->setUsername($username);
                $log->info('create.php', 'User creation successful');
                $redirect->redirectTo('activate.php');
            } else {
                $log->setUsername($username);
                $log->error('create.php', 'User creation unsuccessful');
            }
        }
    }

    echo $header->getHeader($i18n->get('title'), $i18n->get('createAccount'), array('login.css'));

    function getCreateField($message, $username, $i18n) {
        return '<div id="loginField">
                <br>
                <img src="static/img/rriLogo.png' . $GLOBALS['VERSION_STRING'] . '" id="rriLogo" alt="rri logo">
                <br>
                <br>
                <div id="infoText">' . $message . '</div>
                <br>
                <form method="POST" action="">
                    <input type="text" id="username" name="username" placeholder="' . $i18n->get('userZxShort') . '" value="' . $username . '" maxlength="7" required>
                    <input type="password" id="password" name="password" placeholder="' . $i18n->get('password') . '" required>
                    <input type="password" id="password_repeated" name="password_repeated" placeholder="' . $i18n->get('repeatPassword') . '" required>
                    <input type="submit" id="login" value="' . $i18n->get('createAccount') . '">
                </form>
                <br>
                <div id="leftRightLink">
                    <a href="login.php" id="leftLink">' . $i18n->get('backToLogin') . '</a>
                    <a href="recovery.php" id="rightLink">' . $i18n->get('forgotPassword') . '</a>
                </div>
                <br>
            </div>';
    }

    if ($status == NULL) {
        echo getCreateField($i18n->get('createAccountMessage'), '', $i18n);
    } else if ($status == 'USERNAME_FORMAT_DOES_NOT_MATCH') {
        echo getCreateField($i18n->get('createAccountUsernameFormatDoesNotMatchMessage'), '', $i18n);
    } else if ($status == 'USERNAME_ALREADY_EXISTS') {
        echo getCreateField($i18n->get('createAccountUsernameAlreadyExistsMessage'), '', $i18n);
    } else if ($status == 'PASSWORDS_DO_NOT_MATCH') {
        echo getCreateField($i18n->get('createAccountPasswordsDoNotMatchMessage'), $username, $i18n);
    } else if ($status == 'PASSWORDS_ARE_EMPTY') {
        echo getCreateField($i18n->get('createAccountPasswordsAreEmpty'), $username, $i18n);
    }

    echo $footer->getFooter();
?>