814 lines
29 KiB
PHP
814 lines
29 KiB
PHP
<?php
|
|
|
|
class ValidationException extends Exception {}
|
|
|
|
class InsideDatabaseException extends Exception {}
|
|
|
|
/* Username based on firstname and lastname, max 12 chars */
|
|
function generate_username($data) {
|
|
$firstname = preg_replace('/[^\w]/', '', $data['firstname']);
|
|
$firstname = substr(strtolower($firstname), 0, 5);
|
|
|
|
$lastname = preg_replace('/[^\w]/', '', $data['lastname']);
|
|
$lastname = substr(strtolower($lastname), 0, 2);
|
|
$rand = substr(uniqid("", true), -5);
|
|
|
|
return $firstname.$lastname.$rand;
|
|
}
|
|
if( !function_exists('hash_ldap_password') ) {
|
|
function hash_ldap_password($raw_password) {
|
|
$salt = openssl_random_pseudo_bytes(4);
|
|
return '{SSHA}' . base64_encode(sha1( $raw_password.$salt, TRUE ). $salt);
|
|
}
|
|
}
|
|
function update_card_with_user($phone, $activation_code, $user_id) {
|
|
global $conn;
|
|
|
|
$sql = "UPDATE din_card SET user_id=$user_id,owner_phone_number=NULL WHERE owner_phone_number='$phone' AND card_number='$activation_code'";
|
|
$res = $conn->query($sql);
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
}
|
|
|
|
function add_user($data, $source) {
|
|
global $conn;
|
|
|
|
/* User table */
|
|
$phone = $data['phone']; // used later
|
|
unset($data['phone']);
|
|
$activation_code = isset($data['activation_code']) ? $data['activation_code'] : null;
|
|
unset($data['activation_code']);
|
|
unset($data['user_id']);
|
|
|
|
/* Add our own initial values */
|
|
$data['username'] = generate_username($data);
|
|
$data['source'] = $source;
|
|
$data['registration_status'] = "partial";
|
|
|
|
/* Membership expiry */
|
|
/* One year from today (default) */
|
|
if( !isset($data['purchased']) ) {
|
|
$data['purchased'] = date_create();
|
|
}
|
|
/* ...or one year from specified date */
|
|
$data['expires'] = date_format(date_modify($data['purchased'], "+1 year"), "Y-m-d");
|
|
unset($data['purchased']); // dont save purchase date
|
|
|
|
/* Trial membership (special case, ignored if not in autumn) */
|
|
$in_autumn = intval(date("n")) >= 8 && intval(date("n")) <= 12;
|
|
if( isset($data['membership_trial']) && $in_autumn) {
|
|
$data['expires'] = date_format(date_create("first day of january next year"), "Y-m-d");
|
|
}
|
|
|
|
$cols = array_keys($data);
|
|
$values = array_values($data);
|
|
|
|
// FIXME: Decode UTF-8 values... why?
|
|
$values = array_map("utf8_decode", $values);
|
|
|
|
$sth = $conn->autoPrepare("din_user", $cols, DB_AUTOQUERY_INSERT);
|
|
$res = $conn->execute($sth, $values);
|
|
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
|
|
$user_id = get_user_id_by_username($data['username']);
|
|
|
|
/* Phonenumber table */
|
|
$validated_sources = array('snapporder', 'sms');
|
|
$phone_number_validated = in_array($source, $validated_sources) ? 1 : 0;
|
|
$cols = array('user_id', 'number', 'validated');
|
|
$values = array($user_id, $phone, $phone_number_validated);
|
|
|
|
$sth = $conn->autoPrepare("din_userphonenumber", $cols, DB_AUTOQUERY_INSERT);
|
|
$res = $conn->execute($sth, $values);
|
|
|
|
/* Card table */
|
|
if($source == 'card') {
|
|
update_card_with_user($phone, $activation_code, $user_id);
|
|
log_userupdate($user_id, "Kortnummer $activation_code knyttet til bruker.");
|
|
}
|
|
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
|
|
log_userupdate($user_id, "User registered."); // for legacy
|
|
if( isset($data['membership_trial']) && $in_autumn) {
|
|
log_userupdate($user_id, "Medlemskap registrert via $source. Gratis medlemskap (".$data['membership_trial'].").");
|
|
} else {
|
|
log_userupdate($user_id, "Medlemskap registrert via $source.");
|
|
}
|
|
|
|
return $user_id;
|
|
}
|
|
|
|
function __get_cards($value) {
|
|
if($value === "") {
|
|
return array();
|
|
}
|
|
$u_cs = array();
|
|
$u_cards = explode(",", $value);
|
|
foreach ($u_cards as $c) {
|
|
list($card_number, $card_is_active) = explode(";", $c);
|
|
$u_cs[] = array(
|
|
'card_number' => $card_number,
|
|
'is_active' => $card_is_active
|
|
);
|
|
}
|
|
return $u_cs;
|
|
}
|
|
|
|
/* Get user object with group ids and membership status */
|
|
function get_user($user_id) {
|
|
global $conn;
|
|
|
|
/* Note: Field 'expires' can have the following meanings:
|
|
* - 0000-00-00 (default): No membership (never has)
|
|
* - a date < NOW(): Expired membership
|
|
* - a date >= NOW(): Valid membership
|
|
* - NULL: Lifelong membership
|
|
*/
|
|
$cols = array('users.id', 'firstname', 'lastname', 'email', 'expires', 'registration_status', 'birthdate', 'membership_trial', 'up.number');
|
|
$sql_cards = "GROUP_CONCAT(DISTINCT c.card_number,';',c.is_active SEPARATOR ',') AS cards";
|
|
$sql_group_ids = "GROUP_CONCAT(group_id) AS group_ids";
|
|
$sql_is_member = "expires > NOW() OR expires IS NULL AS is_member";
|
|
$sql = "SELECT ".implode($cols, ",").",$sql_group_ids,$sql_is_member,$sql_cards FROM din_user AS users
|
|
LEFT JOIN din_usergrouprelationship AS ug ON users.id=ug.user_id
|
|
LEFT JOIN din_card AS c ON c.user_id=users.id
|
|
LEFT JOIN din_userphonenumber AS up ON up.user_id=users.id
|
|
WHERE users.id=$user_id GROUP BY users.id";
|
|
$res = $conn->query($sql);
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
if($res->numRows() === 0) {
|
|
return false;
|
|
}
|
|
$res->fetchInto($user);
|
|
|
|
/* Membership status according to spec.
|
|
* Status codes:
|
|
* 0 - Registered
|
|
* 1 - Member
|
|
* 2 - Active member
|
|
*/
|
|
$groups = explode(",", $user['group_ids']);
|
|
$user['membership_status'] = 0;
|
|
|
|
if($user['is_member'] !== "0") {
|
|
// Group id mappings 1:dns-alle, 2: dns-aktiv, 3:administrator, 4+:orgunits/special groups
|
|
if(in_array("2", $groups)) {
|
|
$user['membership_status'] = 2;
|
|
} else {
|
|
$user['membership_status'] = 1;
|
|
}
|
|
}
|
|
/* Cards */
|
|
$user['cards'] = __get_cards($user['cards']);
|
|
|
|
|
|
/* Clean up user object */
|
|
unset($user['is_member']);
|
|
unset($user['group_ids']);
|
|
$user['memberid'] = $user['id']; // rename
|
|
unset($user['id']);
|
|
if($user['birthdate'] == "0000-00-00") {
|
|
unset($user['birthdate']);
|
|
}
|
|
if($user['membership_trial'] === "") {
|
|
unset($user['membership_trial']);
|
|
}
|
|
|
|
/* FIXME: Double encode fields as utf-8... why? */
|
|
foreach($user as $key => $value) {
|
|
if(is_string($value)) {
|
|
$user[$key] = utf8_encode($value);
|
|
}
|
|
}
|
|
return $user;
|
|
}
|
|
|
|
function renew_user($data) {
|
|
global $conn;
|
|
|
|
/* Cleanup for user table */
|
|
$phone = $data['phone'];
|
|
unset($data['phone']);
|
|
$user_id = $data['user_id'];
|
|
unset($data['user_id']);
|
|
unset($data['type']);
|
|
|
|
/* Our own values */
|
|
$source = "snapporder";
|
|
if( isset($data['source']) ) {
|
|
$source = $data['source'];
|
|
}
|
|
unset($data['source']);
|
|
|
|
/* Membership expiry */
|
|
/* One year from today (default) */
|
|
if( !isset($data['purchased']) ) {
|
|
$data['purchased'] = date_create();
|
|
}
|
|
/* ...or one year from specified date */
|
|
$data['expires'] = date_format(date_modify($data['purchased'], "+1 year"), "Y-m-d");
|
|
unset($data['purchased']); // dont save purchase date
|
|
|
|
/* Trial membership (special case, ignored if not in autumn) */
|
|
$in_autumn = intval(date("n")) >= 8 && intval(date("n")) <= 12;
|
|
if( isset($data['membership_trial']) && $in_autumn) {
|
|
$data['expires'] = date_format(date_create("first day of january next year"), "Y-m-d");
|
|
}
|
|
|
|
// FIXME: Decode UTF-8 values... why?
|
|
foreach($data as $key=>$value) {
|
|
if(is_string($value)) {
|
|
$data[$key] = utf8_decode($value);
|
|
}
|
|
}
|
|
|
|
$res = $conn->autoExecute("din_user", $data, DB_AUTOQUERY_UPDATE, "id=$user_id");
|
|
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
|
|
/* Phonenumber table, set validated */
|
|
$fields_values = array('validated' => 1);
|
|
if($source === "snapporder") {
|
|
$res = $conn->autoExecute("din_userphonenumber", $fields_values, DB_AUTOQUERY_UPDATE, "user_id=$user_id AND number='$phone'");
|
|
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
}
|
|
|
|
if( isset($data['membership_trial']) && $in_autumn) {
|
|
log_userupdate($user_id, "Medlemskap registrert via $source. Gratis medlemskap (".$data['membership_trial'].").");
|
|
} else {
|
|
log_userupdate($user_id, "Medlemskap fornyet via $source.");
|
|
}
|
|
|
|
return;
|
|
}
|
|
|
|
function get_user_id_by_username($username) {
|
|
global $conn;
|
|
|
|
$sql = "SELECT id FROM din_user WHERE username='$username'";
|
|
$res = $conn->query($sql);
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
if( $res->numRows() === 0 ) {
|
|
return false;
|
|
}
|
|
$res->fetchInto($data);
|
|
return $data['id'];
|
|
}
|
|
function safe_username_exists($username) {
|
|
global $conn;
|
|
|
|
$sql = "SELECT id FROM din_user WHERE username=".$conn->quoteSmart($username)." OR ldap_username=".$conn->quoteSmart($username);
|
|
$res = $conn->query($sql);
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
return $res->numRows() !== 0;
|
|
}
|
|
/* Compare two hashes */
|
|
function hash_compare($a, $b) {
|
|
if (!is_string($a) || !is_string($b)) {
|
|
return false;
|
|
}
|
|
|
|
$len = strlen($a);
|
|
if ($len !== strlen($b)) {
|
|
return false;
|
|
}
|
|
|
|
$status = 0;
|
|
for ($i = 0; $i < $len; $i++) {
|
|
$status |= ord($a[$i]) ^ ord($b[$i]);
|
|
}
|
|
return $status === 0;
|
|
}
|
|
function create_token($user, $secret_key, $timestamp=NULL) {
|
|
// Based on this: https://github.com/django/django/blob/master/django/contrib/auth/tokens.py#L50
|
|
if($timestamp === NULL) {
|
|
$timestamp = date_format(date_create(), "Y-m-d");
|
|
}
|
|
$message = $user['memberid'].$user['registration_status'].$timestamp;
|
|
$user_hash = hash_hmac("sha256", $message, $secret_key);
|
|
|
|
return $timestamp. "," .$user_hash;
|
|
}
|
|
|
|
function check_token($user, $token, $secret_key) {
|
|
/* Check that a password reset token is correct for a given user. */
|
|
|
|
// Parse the token
|
|
list($ts, $hash) = explode(",", $token);
|
|
|
|
// Check that the timestamp/uid has not been tampered with
|
|
if( !hash_compare(create_token($user, $secret_key, $ts), $token) ) {
|
|
return false;
|
|
}
|
|
|
|
// Check the timestamp is within limit
|
|
$n_days_ago = date_modify(date_create(), "-".REGISTRATION_URL_TIMEOUT_DAYS." days");
|
|
if( $n_days_ago > clean_date($ts) ) {
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
function generate_registration_url($user, $secret_key, $server_name=NULL, $scheme=NULL) {
|
|
$token = create_token($user, $secret_key);
|
|
if($server_name == NULL) {
|
|
$server_name = isset($_SERVER['HTTP_X_FORWARDED_SERVER']) ? $_SERVER['HTTP_X_FORWARDED_SERVER'] : $_SERVER['SERVER_NAME'];
|
|
}
|
|
if($scheme == NULL) {
|
|
$scheme = "http" . ((empty($_SERVER['HTTPS']) or $_SERVER['HTTPS'] == 'off') ? '' : 's');
|
|
}
|
|
$url = "$scheme://".$server_name."/snapporder/activate.php?userid=".$user['memberid']."&token=$token";
|
|
|
|
return $url;
|
|
}
|
|
function date_picker($id, $output=true) {
|
|
$html = "";
|
|
// day
|
|
$html .= '<select id="' .$id. '_day" name="day">';
|
|
$html .= '<option value="">Dag</option>';
|
|
for($i=1; $i<=31; $i++) {
|
|
$selected = (isset($_POST['day']) && $_POST['day'] == $i) ? " selected" : "";
|
|
$html .= "<option value=\"$i\"$selected>$i</option>";
|
|
}
|
|
$html .= "</select>";
|
|
|
|
// month
|
|
$html .= '<select id="' .$id. '_month" name="month">';
|
|
$html .= '<option value="">Måned</option>';
|
|
$months = array("januar", "februar", "mars", "april", "mai", "juni", "juli", "august", "september",
|
|
"oktober", "november", "desember");
|
|
$i = 1;
|
|
foreach($months as $month) {
|
|
$selected = (isset($_POST['month']) && $_POST['month'] === "$i") ? " selected" : "";
|
|
$html .= '<option value="' .$i. '"' .$selected. '>' .ucfirst($month). '</option>';
|
|
$i++;
|
|
}
|
|
$html .= "</select>";
|
|
|
|
// year
|
|
$html .= '<select id="' .$id. '_year" name="year">';
|
|
$html .= '<option value="">År</option>';
|
|
for($i=date("Y"); $i >= date("Y")-100; $i--) {
|
|
$selected = (isset($_POST['year']) && $_POST['year'] == $i) ? " selected" : "";
|
|
$html .= "<option value=\"$i\"$selected>$i</option>";
|
|
}
|
|
$html .= "</select>";
|
|
|
|
if($output) {
|
|
echo $html;
|
|
}
|
|
return $html;
|
|
}
|
|
function institutions($output=true) {
|
|
global $conn;
|
|
|
|
$sql = "SELECT * FROM studiesteder";
|
|
$res = $conn->getAll($sql);
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
$institutions = $res;
|
|
|
|
/* Format */
|
|
$html = "";
|
|
$html .= '<select id="id_place_of_study" name="place_of_study">';
|
|
foreach($institutions as $place) {
|
|
// selection
|
|
$selected = "";
|
|
if( isset($_POST['place_of_study']) && $_POST['place_of_study'] == $place['id'] ) {
|
|
$selected = " selected";
|
|
} else if( $place['id'] == 22 && !isset($_POST['place_of_study']) ) {
|
|
$selected =" selected" ;
|
|
}
|
|
|
|
$name = iconv("ISO-8859-1", "UTF-8", $place['navn']); // DB is latin1
|
|
$html .= '<option value="' .$place['id']. '"' .$selected. '>' .$name. '</option>';
|
|
}
|
|
$html .= "</select>";
|
|
|
|
if($output) {
|
|
echo $html;
|
|
}
|
|
|
|
return $html;
|
|
}
|
|
function mailchimp_subscribe($data, $list_id, $api_key) {
|
|
// Ref: http://apidocs.mailchimp.com/api/2.0/lists/subscribe.php
|
|
if(strlen($api_key) == 0) {
|
|
return false;
|
|
}
|
|
|
|
list($not_used, $dc) = explode("-", $api_key);
|
|
$submit_url = "https://$dc.api.mailchimp.com/2.0/lists/subscribe.json";
|
|
|
|
$data = array(
|
|
'apikey' => $api_key,
|
|
'id' => $list_id,
|
|
'email' => array('email' => $data['email']),
|
|
'merge_vars' => array('fname' => $data['firstname'], 'lname' => $data['lastname']),
|
|
'double_optin' => false,
|
|
'update_existing' => true, // if email exists, dont throw an error
|
|
'send_welcome' => false
|
|
);
|
|
$payload = json_encode($data);
|
|
|
|
$ch = curl_init();
|
|
curl_setopt($ch, CURLOPT_URL, $submit_url);
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
|
curl_setopt($ch, CURLOPT_POST, true);
|
|
curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
|
|
|
|
$result = curl_exec($ch);
|
|
$data = (array) json_decode($result);
|
|
if( isset($data['status']) && $data['status'] === "error") {
|
|
$message = "Request: '" .var_export(curl_getinfo($ch), true). "' \nPayload: '" .var_export($payload, true). "' \nResponse: '$result'";
|
|
@mail("kak-edb@studentersamfundet.no", "[Inside] Could not add a user to a mailchimp list.", $message);
|
|
curl_close ($ch);
|
|
return false;
|
|
}
|
|
|
|
curl_close ($ch);
|
|
return true;
|
|
}
|
|
|
|
function update_user($data) {
|
|
global $conn;
|
|
|
|
$birthdate_sql = "";
|
|
if( strlen($data['birthdate']) > 0) {
|
|
$birthdate_sql = "birthdate=" .$conn->quoteSmart($data['birthdate']).",";
|
|
}
|
|
|
|
// user: update existing user, activation_status="full", form data
|
|
$sql = "UPDATE din_user SET ";
|
|
$sql .= "username=" .$conn->quoteSmart($data['username']).",";
|
|
$sql .= "ldap_username=" .$conn->quoteSmart($data['username']).",";
|
|
$sql .= "password=PASSWORD(" .$conn->quoteSmart($data['password'])."),";
|
|
$sql .= "ldap_password=" .$conn->quoteSmart(hash_ldap_password($data['password'])).",";
|
|
$sql .= $birthdate_sql;
|
|
$sql .= "placeOfStudy=" .$conn->quoteSmart($data['place_of_study']).",";
|
|
$sql .= "registration_status='full'";
|
|
$sql .= " WHERE id = " . $conn->quoteSmart($data['userid']);
|
|
$res = $conn->query($sql);
|
|
|
|
if (DB::isError($res)) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
return true;
|
|
}
|
|
function update_user_groups($data) {
|
|
global $conn;
|
|
|
|
// add to dns-alle (1)
|
|
$group = array(
|
|
'user_id' => $data['userid'],
|
|
'group_id' => 1
|
|
);
|
|
$res = $conn->autoExecute('din_usergrouprelationship', $group, DB_AUTOQUERY_INSERT);
|
|
|
|
if (DB::isError($res)) {
|
|
// allready exists is fine
|
|
}
|
|
return true;
|
|
}
|
|
function update_user_address($data) {
|
|
global $conn;
|
|
|
|
$address = array(
|
|
'user_id' => $data['userid'],
|
|
'street' => utf8_decode($data['street']), // FIXME: why latin1?
|
|
'zipcode' => $data['zipcode']
|
|
);
|
|
|
|
$res = $conn->autoExecute('din_useraddressno', $address, DB_AUTOQUERY_INSERT);
|
|
|
|
if (DB::isError($res)) {
|
|
// allready exists is fine
|
|
}
|
|
return true;
|
|
}
|
|
|
|
function valid_date($date) {
|
|
// try parsing
|
|
if(!clean_date($date)) {
|
|
return false;
|
|
}
|
|
return $date;
|
|
}
|
|
function validate_birthdate($data, $optional=true) {
|
|
$keys = array('year', 'month','day');
|
|
$values = array();
|
|
|
|
foreach( $keys as $key) {
|
|
// If started filling out date of birth
|
|
if(strlen($data[$key]) !== 0) {
|
|
$optional = false;
|
|
}
|
|
// year
|
|
$values[] = $data[$key];
|
|
}
|
|
|
|
if($optional) {
|
|
return ""; // skip
|
|
}
|
|
|
|
// try parsing
|
|
$date = implode('-', $values);
|
|
if(!clean_date($date)) {
|
|
return false;
|
|
}
|
|
return $date;
|
|
}
|
|
|
|
function validate_activation_form($data) {
|
|
|
|
// username: length, ascii, exists
|
|
$data['username'] = strtolower(trim($data['username']));
|
|
if( !validate_username_length($data['username']) ) {
|
|
throw new ValidationException("Brukernavet må være mellom 3 og 12 tegn");
|
|
}
|
|
if( !validate_username_chars($data['username']) ) {
|
|
throw new ValidationException("Brukernavnet kan kun inneholde små bokstaver og tall (tall kan ikke være første tegn).");
|
|
}
|
|
if( safe_username_exists($data['username']) ) {
|
|
throw new ValidationException("Brukernavnet er allerede i bruk.");
|
|
}
|
|
|
|
// password: entropy, quotes
|
|
$data['password'] = trim($data['password']);
|
|
if( !validate_password_length($data['password']) ) {
|
|
throw new ValidationException("Passordet må være på minst 8 tegn.");
|
|
}
|
|
if( !validate_password_chars($data['password']) ) {
|
|
throw new ValidationException("Passordet kan ikke inneholde enkel- eller dobbelfnutt eller bakslask.");
|
|
}
|
|
|
|
// birthdate (optional)
|
|
$valid_date = validate_birthdate($data);
|
|
if( $valid_date === false ) {
|
|
throw new ValidationException("Ugyldig fødselsdato");
|
|
}
|
|
$data['birthdate'] = $valid_date; // Note: could be: ""
|
|
|
|
// place of study (optional)
|
|
if( !is_numeric($data['place_of_study']) ) {
|
|
throw new ValidationException("Ugyldig studiested");
|
|
}
|
|
// address
|
|
if( strlen($data['street']) == 0) {
|
|
$data['street'] = '-';
|
|
}
|
|
// zip code (optional)
|
|
if( strlen($data['zipcode']) > 0 && !is_numeric($data['zipcode']) ) {
|
|
throw new ValidationException("Ugyldig postnummer, må være et tall");
|
|
}
|
|
|
|
return $data;
|
|
}
|
|
|
|
function validate_sms_form($data) {
|
|
// phonenumber and user
|
|
$phone = clean_phonenumber($data['phone']);
|
|
if( !valid_phonenumber($phone) ) {
|
|
throw new ValidationException("Ugyldig telefonnummer: ".$data['phone']);
|
|
}
|
|
$is_valid_logged_in_user = isset($data['user_id']) && $data['user_id'] !== "" && is_numeric($data['user_id']);
|
|
$user_id_by_phone = getUseridFromPhone($phone);
|
|
if( $is_valid_logged_in_user ) {
|
|
$_user = get_user($data['user_id']);
|
|
if($_user === false ) {
|
|
throw new ValidationException("Ugyldig bruker angitt: " . $data['user_id']);
|
|
}
|
|
if( $user_id_by_phone !== false && $_user['memberid'] !== $user_id_by_phone ) {
|
|
$login_msg = "Hvis nummeret tilhører deg, <a href=\"https://inside.studentersamfundet.no\">logg inn her</a> først, før du returnerer hit og fullfører skjemaet.";
|
|
throw new ValidationException("Telefonnummeret ".$data['phone']." er allerede registrert i bruk. $login_msg");
|
|
}
|
|
if($_user['membership_status'] !== 0) {
|
|
$see_more_msg = "Du kan <a href=\"https://inside.studentersamfundet.no\">se medlemskapet her</a>.";
|
|
throw new ValidationException("Du har allerede aktivert medlemskapet ditt :-) $see_more_msg");
|
|
}
|
|
} else {
|
|
if( $user_id_by_phone !== false ) {
|
|
$login_msg = "Hvis nummeret tilhører deg, <a href=\"https://inside.studentersamfundet.no\">logg inn her</a> først, før du returnerer hit og fullfører skjemaet.";
|
|
throw new ValidationException("Telefonnummeret ".$data['phone']." er allerede registrert i bruk. $login_msg");
|
|
}
|
|
}
|
|
|
|
$data['phone'] = $phone;
|
|
|
|
// lookup code and phonenumber tuple to validate code and get purchase date
|
|
list($purchased, $source) = get_purchase_date_and_source($data['phone'], $data['activation_code']);
|
|
if( $purchased === false ) {
|
|
throw new ValidationException("Ugyldig kortnummer/kode ".$data['activation_code']." eller kombinasjon med telefonnummer ".$data['phone'].".");
|
|
}
|
|
$data['purchased'] = clean_timestamp($purchased);
|
|
$data['source'] = $source;
|
|
|
|
if($is_valid_logged_in_user) {
|
|
/* Existing user */
|
|
return $data;
|
|
}
|
|
|
|
/* firstname and lastname */
|
|
if( strlen($data['firstname']) < 2 ) {
|
|
throw new ValidationException("Fornavn må være 2 tegn eller lengre: ".$data['firstname']);
|
|
}
|
|
if( strlen($data['lastname']) < 2 ) {
|
|
throw new ValidationException("Etternavn må være 2 tegn eller lengre: ".$data['lastname']);
|
|
}
|
|
// email
|
|
if( !valid_email($data['email']) ) {
|
|
throw new ValidationException("Ugyldig epost: ".$data['email']);
|
|
}
|
|
if( getUseridFromEmail($data['email']) !== false ) {
|
|
throw new ValidationException("Epostadressen ".$data['email']." er allerede registrert i bruk");
|
|
}
|
|
|
|
// remove field for later db insertion
|
|
unset($data['submit']);
|
|
|
|
return $data;
|
|
}
|
|
function save_sms_form($data) {
|
|
$user_id = add_user($data, $data['source']);
|
|
|
|
log_userupdate($user_id, "Membership added to user.");
|
|
return $user_id;
|
|
}
|
|
function save_activation_form($data) {
|
|
update_user($data);
|
|
update_user_groups($data);
|
|
update_user_address($data);
|
|
|
|
log_userupdate($data['userid'], "Membership activated.");
|
|
|
|
// weekly newsletter (mailchimp)
|
|
if(isset($data['newsletter']) && $data['newsletter'] === "1" && MAILCHIMP_API_KEY !== "") {
|
|
if( mailchimp_subscribe($data, MAILCHIMP_LIST_ID, MAILCHIMP_API_KEY) ) {
|
|
log_userupdate($data['userid'], "Lagt til nyhetsbrevet.");
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
function get_purchase_date_card($phone, $activation_code) {
|
|
global $conn;
|
|
|
|
$phone = $conn->quoteSmart($phone);
|
|
$activation_code = $conn->quoteSmart($activation_code);
|
|
|
|
$sql = "SELECT registered,owner_membership_trial FROM din_card WHERE card_number=$activation_code AND owner_phone_number=$phone AND is_active=1";
|
|
$res = $conn->getAll($sql, DB_FETCHMODE_ASSOC);
|
|
|
|
if( DB::isError($res) ) {
|
|
throw new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
if(count($res) !== 1) {
|
|
return false;
|
|
}
|
|
|
|
/* Membership trial (special case) */
|
|
if( $res[0]['owner_membership_trial'] ) {
|
|
// Dummy purchased date (1 year before expiry)
|
|
return date_format(date_modify(date_create("first day of january next year"), '-1 year'), "Y-m-d H:i:s");
|
|
}
|
|
|
|
return $res[0]['registered'];
|
|
}
|
|
|
|
function get_purchase_date_tekstmelding($phone, $activation_code) {
|
|
$url = "https://tekstmelding.neuf.no/inside-code-purchase-date";
|
|
|
|
$params = array(
|
|
'api_key' => TEKSTMELDING_API_KEY,
|
|
'number' => str_replace('+', '', $phone),
|
|
'activation_code' => $activation_code,
|
|
);
|
|
$url .= '?' . http_build_query($params);
|
|
|
|
$ch = curl_init();
|
|
curl_setopt($ch, CURLOPT_URL, $url);
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
|
$result = curl_exec($ch);
|
|
$status_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
|
curl_close($ch);
|
|
|
|
if($status_code !== 200 || $result === '') {
|
|
return false;
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
function get_purchase_date_and_source($phone, $activation_code) {
|
|
/* Try card number lookup */
|
|
$source = 'card';
|
|
$timestamp = get_purchase_date_card($phone, $activation_code);
|
|
|
|
/* Try SMS */
|
|
if ($timestamp === false) {
|
|
$timestamp = get_purchase_date_tekstmelding($phone, $activation_code);
|
|
$source = 'sms';
|
|
}
|
|
|
|
if($timestamp === false) {
|
|
$source = NULL;
|
|
}
|
|
|
|
// Example: array('2015-02-14 13:01:55', 'card');
|
|
return array($timestamp, $source);
|
|
}
|
|
function update_membership_expiry($user_id, $purchased=NULL) {
|
|
global $conn;
|
|
assert($user_id !== NULL);
|
|
|
|
|
|
/* Membership expiry */
|
|
/* One year from today (default) */
|
|
if( $purchased == NULL ) {
|
|
$purchased = date_create();
|
|
}
|
|
/* ...or one year from specified date */
|
|
$expires = date_format(date_modify($purchased, "+1 year"), "Y-m-d");
|
|
|
|
$res = $conn->autoExecute("din_user", array('expires' => $expires), DB_AUTOQUERY_UPDATE, "id=$user_id");
|
|
|
|
if( DB::isError($res) ) {
|
|
new InsideDatabaseException($res->getMessage().". DEBUG: ".$res->getDebugInfo());
|
|
}
|
|
}
|
|
|
|
/* The purpose of this email is:
|
|
* - to store the registration_url in the users inbox
|
|
* - give some sort of positive confirmation :-)
|
|
*/
|
|
function send_activation_email($data, $user) {
|
|
$from_email = "medlemskap@studentersamfundet.no";
|
|
$sendto = $user['email'];
|
|
$subject = "Aktiver medlemskapet ditt - Det Norske Studentersamfund";
|
|
|
|
$headers = "From: $from_email\r\n";
|
|
$headers .= "Reply-To: $from_email\r\n";
|
|
$headers .= "MIME-Version: 1.0\r\n";
|
|
$headers .= "Content-Type: text/html; charset=UTF-8\r\n";
|
|
|
|
$message = '<html><body>';
|
|
$message .= '<h3>Hei '.$user['firstname'].', og velkommen til Det Norske Studentersamfund!</h3>';
|
|
$message .= '<p>For at medlemskapet ditt skal være komplett trenger vi noen flere opplysninger fra deg.</p>';
|
|
$message .= '<p style="margin-bottom: 20px;">Trykk på lenken under for å fortsette.</p>';
|
|
$message .= '<p style="margin-bottom: 20px;"><a href="'.$user['registration_url'].'" style="font-family: Arial,sans-serif; color: white; font-weight: bold; font-size: 20px; padding: 0.8em 1.2em; border: none; text-decoration: none; background-color: #58AA58; display: inline-block; text-align: center; margin: 0;">Aktiver medlemskapet</a></p>';
|
|
$message .= "<p>Med vennlig hilsen<br>Det Norske Studentersamfund</p>";
|
|
$message .= "</body></html>";
|
|
|
|
@mail($sendto, $subject, $message, $headers);
|
|
}
|
|
|
|
/* The purpose of this email is:
|
|
* - to store the users username in the users inbox
|
|
* - give some sort of positive confirmation that everything is as it should be!
|
|
*/
|
|
function send_confirmation_email($data, $user) {
|
|
$from_email = "medlemskap@studentersamfundet.no";
|
|
$sendto = $user['email'];
|
|
$subject = "Medlemskap aktivert - Det Norske Studentersamfund";
|
|
|
|
$headers = "From: $from_email\r\n";
|
|
$headers .= "Reply-To: $from_email\r\n";
|
|
$headers .= "MIME-Version: 1.0\r\n";
|
|
$headers .= "Content-Type: text/html; charset=UTF-8\r\n";
|
|
|
|
$inside_url = "https://inside.studentersamfundet.no/";
|
|
$password_reset_url = "https://brukerinfo.neuf.no/accounts/password/reset";
|
|
|
|
$message = '<html><body>';
|
|
$message .= '<h3>Gratulerer med ditt nye medlemskap i Det Norske Studentersamfund!</h3>';
|
|
$message .= '<p>Brukernavnet ditt er: '.$data['username'].'</p>';
|
|
$message .= '<p>Om du i fremtiden skulle glemme passordet ditt, så kan du <a href="'.$password_reset_url.'">få nytt her</a>.</p>';
|
|
$message .= '<p style="margin-bottom: 20px;">Trykk på lenken under for å logge inn og se medlemskapet ditt.</p>';
|
|
$message .= '<p style="margin-bottom: 20px;"><a href="'.$inside_url.'" style="font-family: Arial,sans-serif; color: white; font-weight: bold; font-size: 20px; padding: 0.8em 1.2em; border: none; text-decoration: none; background-color: #58AA58; display: inline-block; text-align: center; margin: 0;">Logg inn</a></p>';
|
|
$message .= '<p>Medlemskortet ditt, om du ikke har fått det enda, får du i baren på Chateau Neuf.</p>';
|
|
$message .= '<p>Medlemskapsbevis finner du også i appen <a href="http://snappo.com/app">SnappOrder</a> (i <a href="https://itunes.apple.com/no/app/snapporder/id657308079">App Store</a> eller <a href="https://play.google.com/store/apps/details?id=com.snapporder">Google Play</a>) under valget "Chateau Neuf".</p>';
|
|
$message .= "<p>Med vennlig hilsen<br>Det Norske Studentersamfund</p>";
|
|
$message .= "</body></html>";
|
|
|
|
@mail($sendto, $subject, $message, $headers);
|
|
}
|