/phpBB/includes/ucp/ucp_activate.php
PHP | 170 lines | 109 code | 30 blank | 31 comment | 22 complexity | ea1ff74cc1881a7ba535c1eb279b921e MD5 | raw file
Possible License(s): GPL-3.0, AGPL-1.0
- <?php
- /**
- *
- * This file is part of the phpBB Forum Software package.
- *
- * @copyright (c) phpBB Limited <https://www.phpbb.com>
- * @license GNU General Public License, version 2 (GPL-2.0)
- *
- * For full copyright and license information, please see
- * the docs/CREDITS.txt file.
- *
- */
- /**
- * @ignore
- */
- if (!defined('IN_PHPBB'))
- {
- exit;
- }
- /**
- * ucp_activate
- * User activation
- */
- class ucp_activate
- {
- var $u_action;
- function main($id, $mode)
- {
- global $config, $phpbb_root_path, $phpEx, $request;
- global $db, $user, $auth, $phpbb_container, $phpbb_log, $phpbb_dispatcher;
- $user_id = $request->variable('u', 0);
- $key = $request->variable('k', '');
- $sql = 'SELECT user_id, username, user_type, user_email, user_newpasswd, user_lang, user_notify_type, user_actkey, user_inactive_reason
- FROM ' . USERS_TABLE . "
- WHERE user_id = $user_id";
- $result = $db->sql_query($sql);
- $user_row = $db->sql_fetchrow($result);
- $db->sql_freeresult($result);
- if (!$user_row)
- {
- trigger_error('NO_USER');
- }
- if ($user_row['user_type'] <> USER_INACTIVE && !$user_row['user_newpasswd'])
- {
- meta_refresh(3, append_sid("{$phpbb_root_path}index.$phpEx"));
- trigger_error('ALREADY_ACTIVATED');
- }
- if ($user_row['user_inactive_reason'] == INACTIVE_MANUAL || $user_row['user_actkey'] !== $key)
- {
- trigger_error('WRONG_ACTIVATION');
- }
- // Do not allow activating by non administrators when admin activation is on
- // Only activation type the user should be able to do is INACTIVE_REMIND
- // or activate a new password which is not an activation state :@
- if (!$user_row['user_newpasswd'] && $user_row['user_inactive_reason'] != INACTIVE_REMIND && $config['require_activation'] == USER_ACTIVATION_ADMIN && !$auth->acl_get('a_user'))
- {
- if (!$user->data['is_registered'])
- {
- login_box('', $user->lang['NO_AUTH_OPERATION']);
- }
- send_status_line(403, 'Forbidden');
- trigger_error('NO_AUTH_OPERATION');
- }
- $update_password = ($user_row['user_newpasswd']) ? true : false;
- if ($update_password)
- {
- $sql_ary = array(
- 'user_actkey' => '',
- 'user_password' => $user_row['user_newpasswd'],
- 'user_newpasswd' => '',
- 'user_login_attempts' => 0,
- );
- $sql = 'UPDATE ' . USERS_TABLE . '
- SET ' . $db->sql_build_array('UPDATE', $sql_ary) . '
- WHERE user_id = ' . $user_row['user_id'];
- $db->sql_query($sql);
- $user->reset_login_keys($user_row['user_id']);
- $phpbb_log->add('user', $user->data['user_id'], $user->ip, 'LOG_USER_NEW_PASSWORD', false, array(
- 'reportee_id' => $user_row['user_id'],
- $user_row['username']
- ));
- }
- if (!$update_password)
- {
- include_once($phpbb_root_path . 'includes/functions_user.' . $phpEx);
- user_active_flip('activate', $user_row['user_id']);
- $sql = 'UPDATE ' . USERS_TABLE . "
- SET user_actkey = ''
- WHERE user_id = {$user_row['user_id']}";
- $db->sql_query($sql);
- // Create the correct logs
- $phpbb_log->add('user', $user->data['user_id'], $user->ip, 'LOG_USER_ACTIVE_USER', false, array(
- 'reportee_id' => $user_row['user_id']
- ));
- if ($auth->acl_get('a_user'))
- {
- $phpbb_log->add('admin', $user->data['user_id'], $user->ip, 'LOG_USER_ACTIVE', false, array($user_row['username']));
- }
- }
- if ($config['require_activation'] == USER_ACTIVATION_ADMIN && !$update_password)
- {
- /* @var $phpbb_notifications \phpbb\notification\manager */
- $phpbb_notifications = $phpbb_container->get('notification_manager');
- $phpbb_notifications->delete_notifications('notification.type.admin_activate_user', $user_row['user_id']);
- include_once($phpbb_root_path . 'includes/functions_messenger.' . $phpEx);
- $messenger = new messenger(false);
- $messenger->template('admin_welcome_activated', $user_row['user_lang']);
- $messenger->set_addresses($user_row);
- $messenger->anti_abuse_headers($config, $user);
- $messenger->assign_vars(array(
- 'USERNAME' => htmlspecialchars_decode($user_row['username']))
- );
- $messenger->send($user_row['user_notify_type']);
- $message = 'ACCOUNT_ACTIVE_ADMIN';
- }
- else
- {
- if (!$update_password)
- {
- $message = ($user_row['user_inactive_reason'] == INACTIVE_PROFILE) ? 'ACCOUNT_ACTIVE_PROFILE' : 'ACCOUNT_ACTIVE';
- }
- else
- {
- $message = 'PASSWORD_ACTIVATED';
- }
- }
- /**
- * This event can be used to modify data after user account's activation
- *
- * @event core.ucp_activate_after
- * @var array user_row Array with some user data
- * @var string message Language string of the message that will be displayed to the user
- * @since 3.1.6-RC1
- */
- $vars = array('user_row', 'message');
- extract($phpbb_dispatcher->trigger_event('core.ucp_activate_after', compact($vars)));
- meta_refresh(3, append_sid("{$phpbb_root_path}index.$phpEx"));
- trigger_error($user->lang[$message]);
- }
- }