PageRenderTime 24ms CodeModel.GetById 18ms RepoModel.GetById 1ms app.codeStats 0ms

/wp-signup.php

https://bitbucket.org/crypticrod/sr_wp_code
PHP | 455 lines | 372 code | 71 blank | 12 comment | 81 complexity | d0b5ff36d791c1e7ae0e1dbd52e88681 MD5 | raw file
Possible License(s): AGPL-1.0, GPL-2.0, LGPL-2.1, GPL-3.0, LGPL-2.0, AGPL-3.0
  1. <?php
  2. /** Sets up the WordPress Environment. */
  3. require( dirname(__FILE__) . '/wp-load.php' );
  4. add_action( 'wp_head', 'signuppageheaders' ) ;
  5. require( './wp-blog-header.php' );
  6. if ( is_array( get_site_option( 'illegal_names' )) && isset( $_GET[ 'new' ] ) && in_array( $_GET[ 'new' ], get_site_option( 'illegal_names' ) ) == true ) {
  7. wp_redirect( network_home_url() );
  8. die();
  9. }
  10. function do_signup_header() {
  11. do_action( 'signup_header' );
  12. }
  13. add_action( 'wp_head', 'do_signup_header' );
  14. function signuppageheaders() {
  15. echo "<meta name='robots' content='noindex,nofollow' />\n";
  16. }
  17. if ( !is_multisite() ) {
  18. wp_redirect( site_url('wp-login.php?action=register') );
  19. die();
  20. }
  21. if ( !is_main_site() ) {
  22. wp_redirect( network_home_url( 'wp-signup.php' ) );
  23. die();
  24. }
  25. // Fix for page title
  26. $wp_query->is_404 = false;
  27. function wpmu_signup_stylesheet() {
  28. ?>
  29. <style type="text/css">
  30. .mu_register { width: 90%; margin:0 auto; }
  31. .mu_register form { margin-top: 2em; }
  32. .mu_register .error { font-weight:700; padding:10px; color:#333333; background:#FFEBE8; border:1px solid #CC0000; }
  33. .mu_register input[type="submit"],
  34. .mu_register #blog_title,
  35. .mu_register #user_email,
  36. .mu_register #blogname,
  37. .mu_register #user_name { width:100%; font-size: 24px; margin:5px 0; }
  38. .mu_register .prefix_address,
  39. .mu_register .suffix_address {font-size: 18px;display:inline; }
  40. .mu_register label { font-weight:700; font-size:15px; display:block; margin:10px 0; }
  41. .mu_register label.checkbox { display:inline; }
  42. .mu_register .mu_alert { font-weight:700; padding:10px; color:#333333; background:#ffffe0; border:1px solid #e6db55; }
  43. </style>
  44. <?php
  45. }
  46. add_action( 'wp_head', 'wpmu_signup_stylesheet' );
  47. get_header();
  48. do_action( 'before_signup_form' );
  49. ?>
  50. <div id="content" class="widecolumn">
  51. <div class="mu_register">
  52. <?php
  53. function show_blog_form($blogname = '', $blog_title = '', $errors = '') {
  54. global $current_site;
  55. // Blog name
  56. if ( !is_subdomain_install() )
  57. echo '<label for="blogname">' . __('Site Name:') . '</label>';
  58. else
  59. echo '<label for="blogname">' . __('Site Domain:') . '</label>';
  60. if ( $errmsg = $errors->get_error_message('blogname') ) { ?>
  61. <p class="error"><?php echo $errmsg ?></p>
  62. <?php }
  63. if ( !is_subdomain_install() )
  64. echo '<span class="prefix_address">' . $current_site->domain . $current_site->path . '</span><input name="blogname" type="text" id="blogname" value="'. esc_attr($blogname) .'" maxlength="60" /><br />';
  65. else
  66. echo '<input name="blogname" type="text" id="blogname" value="'.esc_attr($blogname).'" maxlength="60" /><span class="suffix_address">.' . ( $site_domain = preg_replace( '|^www\.|', '', $current_site->domain ) ) . '</span><br />';
  67. if ( !is_user_logged_in() ) {
  68. if ( !is_subdomain_install() )
  69. $site = $current_site->domain . $current_site->path . __( 'sitename' );
  70. else
  71. $site = __( 'domain' ) . '.' . $site_domain . $current_site->path;
  72. echo '<p>(<strong>' . sprintf( __('Your address will be %s.'), $site ) . '</strong>) ' . __( 'Must be at least 4 characters, letters and numbers only. It cannot be changed, so choose carefully!' ) . '</p>';
  73. }
  74. // Blog Title
  75. ?>
  76. <label for="blog_title"><?php _e('Site Title:') ?></label>
  77. <?php if ( $errmsg = $errors->get_error_message('blog_title') ) { ?>
  78. <p class="error"><?php echo $errmsg ?></p>
  79. <?php }
  80. echo '<input name="blog_title" type="text" id="blog_title" value="'.esc_attr($blog_title).'" />';
  81. ?>
  82. <div id="privacy">
  83. <p class="privacy-intro">
  84. <label for="blog_public_on"><?php _e('Privacy:') ?></label>
  85. <?php _e('Allow my site to appear in search engines like Google, Technorati, and in public listings around this network.'); ?>
  86. <br style="clear:both" />
  87. <label class="checkbox" for="blog_public_on">
  88. <input type="radio" id="blog_public_on" name="blog_public" value="1" <?php if ( !isset( $_POST['blog_public'] ) || $_POST['blog_public'] == '1' ) { ?>checked="checked"<?php } ?> />
  89. <strong><?php _e( 'Yes' ); ?></strong>
  90. </label>
  91. <label class="checkbox" for="blog_public_off">
  92. <input type="radio" id="blog_public_off" name="blog_public" value="0" <?php if ( isset( $_POST['blog_public'] ) && $_POST['blog_public'] == '0' ) { ?>checked="checked"<?php } ?> />
  93. <strong><?php _e( 'No' ); ?></strong>
  94. </label>
  95. </p>
  96. </div>
  97. <?php
  98. do_action('signup_blogform', $errors);
  99. }
  100. function validate_blog_form() {
  101. $user = '';
  102. if ( is_user_logged_in() )
  103. $user = wp_get_current_user();
  104. return wpmu_validate_blog_signup($_POST['blogname'], $_POST['blog_title'], $user);
  105. }
  106. function show_user_form($user_name = '', $user_email = '', $errors = '') {
  107. // User name
  108. echo '<label for="user_name">' . __('Username:') . '</label>';
  109. if ( $errmsg = $errors->get_error_message('user_name') ) {
  110. echo '<p class="error">'.$errmsg.'</p>';
  111. }
  112. echo '<input name="user_name" type="text" id="user_name" value="'. esc_attr($user_name) .'" maxlength="60" /><br />';
  113. _e( '(Must be at least 4 characters, letters and numbers only.)' );
  114. ?>
  115. <label for="user_email"><?php _e( 'Email&nbsp;Address:' ) ?></label>
  116. <?php if ( $errmsg = $errors->get_error_message('user_email') ) { ?>
  117. <p class="error"><?php echo $errmsg ?></p>
  118. <?php } ?>
  119. <input name="user_email" type="text" id="user_email" value="<?php echo esc_attr($user_email) ?>" maxlength="200" /><br /><?php _e('We send your registration email to this address. (Double-check your email address before continuing.)') ?>
  120. <?php
  121. if ( $errmsg = $errors->get_error_message('generic') ) {
  122. echo '<p class="error">' . $errmsg . '</p>';
  123. }
  124. do_action( 'signup_extra_fields', $errors );
  125. }
  126. function validate_user_form() {
  127. return wpmu_validate_user_signup($_POST['user_name'], $_POST['user_email']);
  128. }
  129. function signup_another_blog($blogname = '', $blog_title = '', $errors = '') {
  130. global $current_site;
  131. $current_user = wp_get_current_user();
  132. if ( ! is_wp_error($errors) ) {
  133. $errors = new WP_Error();
  134. }
  135. // allow definition of default variables
  136. $filtered_results = apply_filters('signup_another_blog_init', array('blogname' => $blogname, 'blog_title' => $blog_title, 'errors' => $errors ));
  137. $blogname = $filtered_results['blogname'];
  138. $blog_title = $filtered_results['blog_title'];
  139. $errors = $filtered_results['errors'];
  140. echo '<h2>' . sprintf( __( 'Get <em>another</em> %s site in seconds' ), $current_site->site_name ) . '</h2>';
  141. if ( $errors->get_error_code() ) {
  142. echo '<p>' . __( 'There was a problem, please correct the form below and try again.' ) . '</p>';
  143. }
  144. ?>
  145. <p><?php printf( __( 'Welcome back, %s. By filling out the form below, you can <strong>add another site to your account</strong>. There is no limit to the number of sites you can have, so create to your heart&#8217;s content, but write responsibly!' ), $current_user->display_name ) ?></p>
  146. <?php
  147. $blogs = get_blogs_of_user($current_user->ID);
  148. if ( !empty($blogs) ) { ?>
  149. <p><?php _e( 'Sites you are already a member of:' ) ?></p>
  150. <ul>
  151. <?php foreach ( $blogs as $blog ) {
  152. $home_url = get_home_url( $blog->userblog_id );
  153. echo '<li><a href="' . esc_url( $home_url ) . '">' . $home_url . '</a></li>';
  154. } ?>
  155. </ul>
  156. <?php } ?>
  157. <p><?php _e( 'If you&#8217;re not going to use a great site domain, leave it for a new user. Now have at it!' ) ?></p>
  158. <form id="setupform" method="post" action="wp-signup.php">
  159. <input type="hidden" name="stage" value="gimmeanotherblog" />
  160. <?php do_action( 'signup_hidden_fields' ); ?>
  161. <?php show_blog_form($blogname, $blog_title, $errors); ?>
  162. <p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e( 'Create Site' ) ?>" /></p>
  163. </form>
  164. <?php
  165. }
  166. function validate_another_blog_signup() {
  167. global $wpdb, $blogname, $blog_title, $errors, $domain, $path;
  168. $current_user = wp_get_current_user();
  169. if ( !is_user_logged_in() )
  170. die();
  171. $result = validate_blog_form();
  172. extract($result);
  173. if ( $errors->get_error_code() ) {
  174. signup_another_blog($blogname, $blog_title, $errors);
  175. return false;
  176. }
  177. $public = (int) $_POST['blog_public'];
  178. $meta = apply_filters( 'signup_create_blog_meta', array( 'lang_id' => 1, 'public' => $public ) ); // deprecated
  179. $meta = apply_filters( 'add_signup_meta', $meta );
  180. wpmu_create_blog( $domain, $path, $blog_title, $current_user->id, $meta, $wpdb->siteid );
  181. confirm_another_blog_signup($domain, $path, $blog_title, $current_user->user_login, $current_user->user_email, $meta);
  182. return true;
  183. }
  184. function confirm_another_blog_signup($domain, $path, $blog_title, $user_name, $user_email = '', $meta = '') {
  185. ?>
  186. <h2><?php printf( __( 'The site %s is yours.' ), "<a href='http://{$domain}{$path}'>{$blog_title}</a>" ) ?></h2>
  187. <p>
  188. <?php printf( __( '<a href="http://%1$s">http://%2$s</a> is your new site. <a href="%3$s">Log in</a> as &#8220;%4$s&#8221; using your existing password.' ), $domain.$path, $domain.$path, "http://" . $domain.$path . "wp-login.php", $user_name ) ?>
  189. </p>
  190. <?php
  191. do_action( 'signup_finished' );
  192. }
  193. function signup_user($user_name = '', $user_email = '', $errors = '') {
  194. global $current_site, $active_signup;
  195. if ( !is_wp_error($errors) )
  196. $errors = new WP_Error();
  197. if ( isset( $_POST[ 'signup_for' ] ) )
  198. $signup[ esc_html( $_POST[ 'signup_for' ] ) ] = 'checked="checked"';
  199. else
  200. $signup[ 'blog' ] = 'checked="checked"';
  201. //TODO - This doesn't seem to do anything do we really need it?
  202. $signup['user'] = isset( $signup['user'] ) ? $signup['user'] : '';
  203. // allow definition of default variables
  204. $filtered_results = apply_filters('signup_user_init', array('user_name' => $user_name, 'user_email' => $user_email, 'errors' => $errors ));
  205. $user_name = $filtered_results['user_name'];
  206. $user_email = $filtered_results['user_email'];
  207. $errors = $filtered_results['errors'];
  208. ?>
  209. <h2><?php printf( __( 'Get your own %s account in seconds' ), $current_site->site_name ) ?></h2>
  210. <form id="setupform" method="post" action="wp-signup.php">
  211. <input type="hidden" name="stage" value="validate-user-signup" />
  212. <?php do_action( 'signup_hidden_fields' ); ?>
  213. <?php show_user_form($user_name, $user_email, $errors); ?>
  214. <p>
  215. <?php if ( $active_signup == 'blog' ) { ?>
  216. <input id="signupblog" type="hidden" name="signup_for" value="blog" />
  217. <?php } elseif ( $active_signup == 'user' ) { ?>
  218. <input id="signupblog" type="hidden" name="signup_for" value="user" />
  219. <?php } else { ?>
  220. <input id="signupblog" type="radio" name="signup_for" value="blog" <?php echo $signup['blog'] ?> />
  221. <label class="checkbox" for="signupblog"><?php _e('Gimme a site!') ?></label>
  222. <br />
  223. <input id="signupuser" type="radio" name="signup_for" value="user" <?php echo $signup['user'] ?> />
  224. <label class="checkbox" for="signupuser"><?php _e('Just a username, please.') ?></label>
  225. <?php } ?>
  226. </p>
  227. <p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e('Next') ?>" /></p>
  228. </form>
  229. <?php
  230. }
  231. function validate_user_signup() {
  232. $result = validate_user_form();
  233. extract($result);
  234. if ( $errors->get_error_code() ) {
  235. signup_user($user_name, $user_email, $errors);
  236. return false;
  237. }
  238. if ( 'blog' == $_POST['signup_for'] ) {
  239. signup_blog($user_name, $user_email);
  240. return false;
  241. }
  242. wpmu_signup_user($user_name, $user_email, apply_filters( 'add_signup_meta', array() ) );
  243. confirm_user_signup($user_name, $user_email);
  244. return true;
  245. }
  246. function confirm_user_signup($user_name, $user_email) {
  247. ?>
  248. <h2><?php printf( __( '%s is your new username' ), $user_name) ?></h2>
  249. <p><?php _e( 'But, before you can start using your new username, <strong>you must activate it</strong>.' ) ?></p>
  250. <p><?php printf(__( 'Check your inbox at <strong>%1$s</strong> and click the link given.' ), $user_email) ?></p>
  251. <p><?php _e( 'If you do not activate your username within two days, you will have to sign up again.' ); ?></p>
  252. <?php
  253. do_action( 'signup_finished' );
  254. }
  255. function signup_blog($user_name = '', $user_email = '', $blogname = '', $blog_title = '', $errors = '') {
  256. if ( !is_wp_error($errors) )
  257. $errors = new WP_Error();
  258. // allow definition of default variables
  259. $filtered_results = apply_filters('signup_blog_init', array('user_name' => $user_name, 'user_email' => $user_email, 'blogname' => $blogname, 'blog_title' => $blog_title, 'errors' => $errors ));
  260. $user_name = $filtered_results['user_name'];
  261. $user_email = $filtered_results['user_email'];
  262. $blogname = $filtered_results['blogname'];
  263. $blog_title = $filtered_results['blog_title'];
  264. $errors = $filtered_results['errors'];
  265. if ( empty($blogname) )
  266. $blogname = $user_name;
  267. ?>
  268. <form id="setupform" method="post" action="wp-signup.php">
  269. <input type="hidden" name="stage" value="validate-blog-signup" />
  270. <input type="hidden" name="user_name" value="<?php echo esc_attr($user_name) ?>" />
  271. <input type="hidden" name="user_email" value="<?php echo esc_attr($user_email) ?>" />
  272. <?php do_action( 'signup_hidden_fields' ); ?>
  273. <?php show_blog_form($blogname, $blog_title, $errors); ?>
  274. <p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e('Signup') ?>" /></p>
  275. </form>
  276. <?php
  277. }
  278. function validate_blog_signup() {
  279. // Re-validate user info.
  280. $result = wpmu_validate_user_signup($_POST['user_name'], $_POST['user_email']);
  281. extract($result);
  282. if ( $errors->get_error_code() ) {
  283. signup_user($user_name, $user_email, $errors);
  284. return false;
  285. }
  286. $result = wpmu_validate_blog_signup($_POST['blogname'], $_POST['blog_title']);
  287. extract($result);
  288. if ( $errors->get_error_code() ) {
  289. signup_blog($user_name, $user_email, $blogname, $blog_title, $errors);
  290. return false;
  291. }
  292. $public = (int) $_POST['blog_public'];
  293. $meta = array ('lang_id' => 1, 'public' => $public);
  294. $meta = apply_filters( 'add_signup_meta', $meta );
  295. wpmu_signup_blog($domain, $path, $blog_title, $user_name, $user_email, $meta);
  296. confirm_blog_signup($domain, $path, $blog_title, $user_name, $user_email, $meta);
  297. return true;
  298. }
  299. function confirm_blog_signup($domain, $path, $blog_title, $user_name = '', $user_email = '', $meta) {
  300. ?>
  301. <h2><?php printf( __( 'Congratulations! Your new site, %s, is almost ready.' ), "<a href='http://{$domain}{$path}'>{$blog_title}</a>" ) ?></h2>
  302. <p><?php _e( 'But, before you can start using your site, <strong>you must activate it</strong>.' ) ?></p>
  303. <p><?php printf( __( 'Check your inbox at <strong>%s</strong> and click the link given.' ), $user_email) ?></p>
  304. <p><?php _e( 'If you do not activate your site within two days, you will have to sign up again.' ); ?></p>
  305. <h2><?php _e( 'Still waiting for your email?' ); ?></h2>
  306. <p>
  307. <?php _e( 'If you haven&#8217;t received your email yet, there are a number of things you can do:' ) ?>
  308. <ul id="noemail-tips">
  309. <li><p><strong><?php _e( 'Wait a little longer. Sometimes delivery of email can be delayed by processes outside of our control.' ) ?></strong></p></li>
  310. <li><p><?php _e( 'Check the junk or spam folder of your email client. Sometime emails wind up there by mistake.' ) ?></p></li>
  311. <li><?php printf( __( 'Have you entered your email correctly? You have entered %s, if it&#8217;s incorrect, you will not receive your email.' ), $user_email ) ?></li>
  312. </ul>
  313. </p>
  314. <?php
  315. do_action( 'signup_finished' );
  316. }
  317. // Main
  318. $active_signup = get_site_option( 'registration' );
  319. if ( !$active_signup )
  320. $active_signup = 'all';
  321. $active_signup = apply_filters( 'wpmu_active_signup', $active_signup ); // return "all", "none", "blog" or "user"
  322. // Make the signup type translatable.
  323. $i18n_signup['all'] = _x('all', 'Multisite active signup type');
  324. $i18n_signup['none'] = _x('none', 'Multisite active signup type');
  325. $i18n_signup['blog'] = _x('blog', 'Multisite active signup type');
  326. $i18n_signup['user'] = _x('user', 'Multisite active signup type');
  327. if ( is_super_admin() )
  328. echo '<div class="mu_alert">' . sprintf( __( 'Greetings Site Administrator! You are currently allowing &#8220;%s&#8221; registrations. To change or disable registration go to your <a href="%s">Options page</a>.' ), $i18n_signup[$active_signup], esc_url( network_admin_url( 'settings.php' ) ) ) . '</div>';
  329. $newblogname = isset($_GET['new']) ? strtolower(preg_replace('/^-|-$|[^-a-zA-Z0-9]/', '', $_GET['new'])) : null;
  330. $current_user = wp_get_current_user();
  331. if ( $active_signup == 'none' ) {
  332. _e( 'Registration has been disabled.' );
  333. } elseif ( $active_signup == 'blog' && !is_user_logged_in() ) {
  334. if ( is_ssl() )
  335. $proto = 'https://';
  336. else
  337. $proto = 'http://';
  338. $login_url = site_url( 'wp-login.php?redirect_to=' . urlencode($proto . $_SERVER['HTTP_HOST'] . '/wp-signup.php' ));
  339. echo sprintf( __( 'You must first <a href="%s">log in</a>, and then you can create a new site.' ), $login_url );
  340. } else {
  341. $stage = isset( $_POST['stage'] ) ? $_POST['stage'] : 'default';
  342. switch ( $stage ) {
  343. case 'validate-user-signup' :
  344. if ( $active_signup == 'all' || $_POST[ 'signup_for' ] == 'blog' && $active_signup == 'blog' || $_POST[ 'signup_for' ] == 'user' && $active_signup == 'user' )
  345. validate_user_signup();
  346. else
  347. _e( 'User registration has been disabled.' );
  348. break;
  349. case 'validate-blog-signup':
  350. if ( $active_signup == 'all' || $active_signup == 'blog' )
  351. validate_blog_signup();
  352. else
  353. _e( 'Site registration has been disabled.' );
  354. break;
  355. case 'gimmeanotherblog':
  356. validate_another_blog_signup();
  357. break;
  358. case 'default':
  359. default :
  360. $user_email = isset( $_POST[ 'user_email' ] ) ? $_POST[ 'user_email' ] : '';
  361. do_action( 'preprocess_signup_form' ); // populate the form from invites, elsewhere?
  362. if ( is_user_logged_in() && ( $active_signup == 'all' || $active_signup == 'blog' ) )
  363. signup_another_blog($newblogname);
  364. elseif ( is_user_logged_in() == false && ( $active_signup == 'all' || $active_signup == 'user' ) )
  365. signup_user( $newblogname, $user_email );
  366. elseif ( is_user_logged_in() == false && ( $active_signup == 'blog' ) )
  367. _e( 'Sorry, new registrations are not allowed at this time.' );
  368. else
  369. _e( 'You are logged in already. No need to register again!' );
  370. if ( $newblogname ) {
  371. $newblog = get_blogaddress_by_name( $newblogname );
  372. if ( $active_signup == 'blog' || $active_signup == 'all' )
  373. printf( __( '<p><em>The site you were looking for, <strong>%s</strong> does not exist, but you can create it now!</em></p>' ), $newblog );
  374. else
  375. printf( __( '<p><em>The site you were looking for, <strong>%s</strong>, does not exist.</em></p>' ), $newblog );
  376. }
  377. break;
  378. }
  379. }
  380. ?>
  381. </div>
  382. </div>
  383. <?php do_action( 'after_signup_form' ); ?>
  384. <?php get_footer(); ?>