gnu-social/actions/register.php

<?php
/*
 * Laconica - a distributed open-source microblogging tool
 * Copyright (C) 2008, Controlez-Vous, Inc.
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

if (!defined('LACONICA')) { exit(1); }

class RegisterAction extends Action
{
    function handle($args)
    {
        parent::handle($args);

        if (common_config('site', 'closed')) {
            $this->clientError(_('Registration not allowed.'));
        } else if (common_logged_in()) {
            $this->clientError(_('Already logged in.'));
        } else if ($_SERVER['REQUEST_METHOD'] == 'POST') {
            $this->try_register();
        } else {
            $this->show_form();
        }
    }

    function try_register()
    {
        $token = $this->trimmed('token');
        if (!$token || $token != common_session_token()) {
            $this->show_form(_('There was a problem with your session token. Try again, please.'));
            return;
        }

        $nickname = $this->trimmed('nickname');
        $email = $this->trimmed('email');
        $fullname = $this->trimmed('fullname');
        $homepage = $this->trimmed('homepage');
        $bio = $this->trimmed('bio');
        $location = $this->trimmed('location');

        # We don't trim these... whitespace is OK in a password!

        $password = $this->arg('password');
        $confirm = $this->arg('confirm');

        # invitation code, if any

        $code = $this->trimmed('code');

        if ($code) {
            $invite = Invitation::staticGet($code);
        }

        if (common_config('site', 'inviteonly') && !($code && $invite)) {
            $this->clientError(_('Sorry, only invited people can register.'));
            return;
        }

        # Input scrubbing

        $nickname = common_canonical_nickname($nickname);
        $email = common_canonical_email($email);

        if (!$this->boolean('license')) {
            $this->show_form(_('You can\'t register if you don\'t agree to the license.'));
        } else if ($email && !Validate::email($email, true)) {
            $this->show_form(_('Not a valid email address.'));
        } else if (!Validate::string($nickname, array('min_length' => 1,
                                                      'max_length' => 64,
                                                      'format' => VALIDATE_NUM . VALIDATE_ALPHA_LOWER))) {
            $this->show_form(_('Nickname must have only lowercase letters and numbers and no spaces.'));
        } else if ($this->nickname_exists($nickname)) {
            $this->show_form(_('Nickname already in use. Try another one.'));
        } else if (!User::allowed_nickname($nickname)) {
            $this->show_form(_('Not a valid nickname.'));
        } else if ($this->email_exists($email)) {
            $this->show_form(_('Email address already exists.'));
        } else if (!is_null($homepage) && (strlen($homepage) > 0) &&
                   !Validate::uri($homepage, array('allowed_schemes' => array('http', 'https')))) {
            $this->show_form(_('Homepage is not a valid URL.'));
            return;
        } else if (!is_null($fullname) && strlen($fullname) > 255) {
            $this->show_form(_('Full name is too long (max 255 chars).'));
            return;
        } else if (!is_null($bio) && strlen($bio) > 140) {
            $this->show_form(_('Bio is too long (max 140 chars).'));
            return;
        } else if (!is_null($location) && strlen($location) > 255) {
            $this->show_form(_('Location is too long (max 255 chars).'));
            return;
        } else if (strlen($password) < 6) {
            $this->show_form(_('Password must be 6 or more characters.'));
            return;
        } else if ($password != $confirm) {
            $this->show_form(_('Passwords don\'t match.'));
        } else if ($user = User::register(array('nickname' => $nickname, 'password' => $password, 'email' => $email,
                                                'fullname' => $fullname, 'homepage' => $homepage, 'bio' => $bio,
                                                'location' => $location, 'code' => $code))) {
            if (!$user) {
                $this->show_form(_('Invalid username or password.'));
                return;
            }
            # success!
            if (!common_set_user($user)) {
                $this->serverError(_('Error setting user.'));
                return;
            }
            # this is a real login
            common_real_login(true);
            if ($this->boolean('rememberme')) {
                common_debug('Adding rememberme cookie for ' . $nickname);
                common_rememberme($user);
            }
            # Re-init language env in case it changed (not yet, but soon)
            common_init_language();
            $this->show_success();
        } else {
            $this->show_form(_('Invalid username or password.'));
        }
    }

    # checks if *CANONICAL* nickname exists

    function nickname_exists($nickname)
    {
        $user = User::staticGet('nickname', $nickname);
        return ($user !== false);
    }

    # checks if *CANONICAL* email exists

    function email_exists($email)
    {
        $email = common_canonical_email($email);
        if (!$email || strlen($email) == 0) {
            return false;
        }
        $user = User::staticGet('email', $email);
        return ($user !== false);
    }

    function show_top($error=null)
    {
        if ($error) {
            $this->element('p', 'error', $error);
        } else {
            $instr = common_markup_to_html(_('With this form you can create a new account. ' .
                                             'You can then post notices and link up to friends and colleagues. '.
                                             '(Have an [OpenID](http://openid.net/)? ' .
                                             'Try our [OpenID registration](%%action.openidlogin%%)!)'));

            $this->elementStart('div', 'instructions');
            $this->raw($instr);
            $this->elementEnd('div');
        }
    }

    function show_form($error=null)
    {
        global $config;

        $code = $this->trimmed('code');

        if ($code) {
            $invite = Invitation::staticGet($code);
        }

        if (common_config('site', 'inviteonly') && !($code && $invite)) {
            $this->clientError(_('Sorry, only invited people can register.'));
            return;
        }

        common_show_header(_('Register'), null, $error, array($this, 'show_top'));
        $this->elementStart('form', array('method' => 'post',
                                           'id' => 'login',
                                           'action' => common_local_url('register')));

        $this->hidden('token', common_session_token());

        if ($code) {
            $this->hidden('code', $code);
        }

        $this->input('nickname', _('Nickname'), $this->trimmed('nickname'),
                     _('1-64 lowercase letters or numbers, no punctuation or spaces. Required.'));
        $this->password('password', _('Password'),
                        _('6 or more characters. Required.'));
        $this->password('confirm', _('Confirm'),
                        _('Same as password above. Required.'));
        if ($invite && $invite->address_type == 'email') {
            $this->input('email', _('Email'), $invite->address,
                     _('Used only for updates, announcements, and password recovery'));
        } else {
            $this->input('email', _('Email'), $this->trimmed('email'),
                         _('Used only for updates, announcements, and password recovery'));
        }
        $this->input('fullname', _('Full name'),
                     $this->trimmed('fullname'),
                      _('Longer name, preferably your "real" name'));
        $this->input('homepage', _('Homepage'),
                     $this->trimmed('homepage'),
                     _('URL of your homepage, blog, or profile on another site'));
        $this->textarea('bio', _('Bio'),
                        $this->trimmed('bio'),
                         _('Describe yourself and your interests in 140 chars'));
        $this->input('location', _('Location'),
                     $this->trimmed('location'),
                     _('Where you are, like "City, State (or Region), Country"'));
        $this->checkbox('rememberme', _('Remember me'),
                        $this->boolean('rememberme'),
                        _('Automatically login in the future; not for shared computers!'));
        $this->elementStart('p');
        $attrs = array('type' => 'checkbox',
                       'id' => 'license',
                       'name' => 'license',
                       'value' => 'true');
        if ($this->boolean('license')) {
            $attrs['checked'] = 'checked';
        }
        $this->element('input', $attrs);
        $this->text(_('My text and files are available under '));
        $this->element('a', array('href' => $config['license']['url']),
                       $config['license']['title']);
        $this->text(_(' except this private data: password, email address, IM address, phone number.'));
        $this->elementEnd('p');
        $this->submit('submit', _('Register'));
        $this->elementEnd('form');
        common_show_footer();
    }

    function show_success()
    {
        $nickname = $this->arg('nickname');
        common_show_header(_('Registration successful'));
        $this->elementStart('div', 'success');
        $instr = sprintf(_('Congratulations, %s! And welcome to %%%%site.name%%%%. From here, you may want to...'. "\n\n" .
                           '* Go to [your profile](%s) and post your first message.' .  "\n" .
                           '* Add a [Jabber/GTalk address](%%%%action.imsettings%%%%) so you can send notices through instant messages.' . "\n" .
                           '* [Search for people](%%%%action.peoplesearch%%%%) that you may know or that share your interests. ' . "\n" .
                           '* Update your [profile settings](%%%%action.profilesettings%%%%) to tell others more about you. ' . "\n" .
                           '* Read over the [online docs](%%%%doc.help%%%%) for features you may have missed. ' . "\n\n" .
                           'Thanks for signing up and we hope you enjoy using this service.'),
                         $nickname, common_local_url('showstream', array('nickname' => $nickname)));
        $this->raw(common_markup_to_html($instr));
        $have_email = $this->trimmed('email');
        if ($have_email) {
            $emailinstr = _('(You should receive a message by email momentarily, with ' .
                            'instructions on how to confirm your email address.)');
            $this->raw(common_markup_to_html($emailinstr));
        }
        $this->elementEnd('div');
        common_show_footer();
    }

}