reg_new.php
13.3 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
<?php
/**
* @version $Id: reg_new.php 1 8:38 2010年7月9日Z tianya $
* @package DedeCMS.Member
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once(dirname(__FILE__)."/config.php");
require_once DEDEINC.'/membermodel.cls.php';
if($cfg_mb_allowreg=='N')
{
ShowMsg('系统关闭了新用户注册！', 'index.php');
exit();
}
if(!isset($dopost)) $dopost = '';
$step = empty($step)? 1 : intval(preg_replace("/[^\d]/", '', $step));
if($step == 1)
{
if($cfg_ml->IsLogin())
{
if($cfg_mb_reginfo == 'Y')
{
//如果启用注册详细信息
if($cfg_ml->fields['spacesta'] == 0 || $cfg_ml->fields['spacesta'] == 1)
{
ShowMsg("尚未完成详细资料，请完善...", "index_do.php?fmdo=user&dopost=regnew&step=2", 0, 1000);
exit;
}
}
ShowMsg('你已经登陆系统，无需重新注册！', 'index.php');
exit();
}
if($dopost=='regbase')
{
$svali = GetCkVdValue();
if(preg_match("/1/", $safe_gdopen)){
if(strtolower($vdcode)!=$svali || $svali=='')
{
ResetVdValue();
ShowMsg('验证码错误！', '-1');
exit();
}
}
$faqkey = isset($faqkey) && is_numeric($faqkey) ? $faqkey : 0;
if($safe_faq_reg == '1')
{
if($safefaqs[$faqkey]['answer'] != $rsafeanswer || $rsafeanswer=='')
{
ShowMsg('验证问题答案错误', '-1');
exit();
}
}
$userid = trim($userid);
$pwd = trim($userpwd);
$pwdc = trim($userpwdok);
$rs = CheckUserID($userid, '用户名');
if($rs != 'ok')
{
ShowMsg($rs, '-1');
exit();
}
if(strlen($userid) > 20 || strlen($uname) > 36)
{
ShowMsg('你的用户名或用户笔名过长，不允许注册！', '-1');
exit();
}
if(strlen($userid) < $cfg_mb_idmin || strlen($pwd) < $cfg_mb_pwdmin)
{
ShowMsg("你的用户名或密码过短，不允许注册！","-1");
exit();
}
if($pwdc != $pwd)
{
ShowMsg('你两次输入的密码不一致！', '-1');
exit();
}
$uname = HtmlReplace($uname, 1);
//用户笔名重复检测
if($cfg_mb_wnameone=='N')
{
$row = $dsql->GetOne("SELECT * FROM `#@__member` WHERE uname LIKE '$uname' ");
if(is_array($row))
{
ShowMsg('用户笔名或公司名称不能重复！', '-1');
exit();
}
}
if(!CheckEmail($email))
{
ShowMsg('Email格式不正确！', '-1');
exit();
}
#api{{
if(defined('UC_API') && @include_once DEDEROOT.'/uc_client/client.php')
{
$uid = uc_user_register($userid, $pwd, $email);
if($uid <= 0)
{
if($uid == -1)
{
ShowMsg("用户名不合法！","-1");
exit();
}
elseif($uid == -2)
{
ShowMsg("包含要允许注册的词语！","-1");
exit();
}
elseif($uid == -3)
{
ShowMsg("你指定的用户名 {$userid} 已存在，请使用别的用户名！","-1");
exit();
}
elseif($uid == -5)
{
ShowMsg("你使用的Email 不允许注册！","-1");
exit();
}
elseif($uid == -6)
{
ShowMsg("你使用的Email已经被另一帐号注册，请使其它帐号","-1");
exit();
}
else
{
ShowMsg("注删失改！","-1");
exit();
}
}
else
{
$ucsynlogin = uc_user_synlogin($uid);
}
}
#/aip}}
if($cfg_md_mailtest=='Y')
{
$row = $dsql->GetOne("SELECT mid FROM `#@__member` WHERE email LIKE '$email' ");
if(is_array($row))
{
ShowMsg('你使用的Email已经被另一帐号注册，请使其它帐号！', '-1');
exit();
}
}
//检测用户名是否存在
$row = $dsql->GetOne("SELECT mid FROM `#@__member` WHERE userid LIKE '$userid' ");
if(is_array($row))
{
ShowMsg("你指定的用户名 {$userid} 已存在，请使用别的用户名！", "-1");
exit();
}
if($safequestion==0)
{
$safeanswer = '';
}
else
{
if(strlen($safeanswer)>30)
{
ShowMsg('你的新安全问题的答案太长了，请控制在30字节以内！', '-1');
exit();
}
}
//会员的默认金币
$dfscores = 0;
$dfmoney = 0;
$dfrank = $dsql->GetOne("SELECT money,scores FROM `#@__arcrank` WHERE rank='10' ");
if(is_array($dfrank))
{
$dfmoney = $dfrank['money'];
$dfscores = $dfrank['scores'];
}
$jointime = time();
$logintime = time();
$joinip = GetIP();
$loginip = GetIP();
$pwd = md5($userpwd);
$mtype = RemoveXSS(HtmlReplace($mtype,1));
$safeanswer = HtmlReplace($safeanswer);
$safequestion = HtmlReplace($safequestion);
$spaceSta = ($cfg_mb_spacesta < 0 ? $cfg_mb_spacesta : 0);
$inQuery = "INSERT INTO `#@__member` (`mtype` ,`userid` ,`pwd` ,`uname` ,`sex` ,`rank` ,`money` ,`email` ,`scores` ,
`matt`, `spacesta` ,`face`,`safequestion`,`safeanswer` ,`jointime` ,`joinip` ,`logintime` ,`loginip` )
VALUES ('$mtype','$userid','$pwd','$uname','$sex','10','$dfmoney','$email','$dfscores',
'0','$spaceSta','','$safequestion','$safeanswer','$jointime','$joinip','$logintime','$loginip'); ";
if($dsql->ExecuteNoneQuery($inQuery))
{
$mid = $dsql->GetLastID();
//写入默认会员详细资料
if($mtype=='个人'){
$space='person';
}else if($mtype=='企业'){
$space='company';
}else{
$space='person';
}
//写入默认统计数据
$membertjquery = "INSERT INTO `#@__member_tj` (`mid`,`article`,`album`,`archives`,`homecount`,`pagecount`,`feedback`,`friend`,`stow`)
VALUES ('$mid','0','0','0','0','0','0','0','0'); ";
$dsql->ExecuteNoneQuery($membertjquery);
//写入默认空间配置数据
$spacequery = "INSERT INTO `#@__member_space`(`mid` ,`pagesize` ,`matt` ,`spacename` ,`spacelogo` ,`spacestyle`, `sign` ,`spacenews`)
VALUES('{$mid}','10','0','{$uname}的空间','','$space','',''); ";
$dsql->ExecuteNoneQuery($spacequery);
//写入其它默认数据
$dsql->ExecuteNoneQuery("INSERT INTO `#@__member_flink`(mid,title,url) VALUES('$mid','织梦内容管理系统','http://www.dedecms.com'); ");
$membermodel = new membermodel($mtype);
$modid=$membermodel->modid;
$modid = empty($modid)? 0 : intval(preg_replace("/[^\d]/",'', $modid));
$modelform = $dsql->getOne("SELECT * FROM #@__member_model WHERE id='$modid' ");
if(!is_array($modelform))
{
showmsg('模型表单不存在', '-1');
exit();
}else{
$dsql->ExecuteNoneQuery("INSERT INTO `{$membermodel->table}` (`mid`) VALUES ('{$mid}');");
}
//----------------------------------------------
//模拟登录
//---------------------------
$cfg_ml = new MemberLogin(7*3600);
$rs = $cfg_ml->CheckUser($userid, $userpwd);
//邮件验证
if($cfg_mb_spacesta==-10)
{
$userhash = md5($cfg_cookie_encode.'--'.$mid.'--'.$email);
$url = $cfg_basehost.(empty($cfg_cmspath) ? '/' : $cfg_cmspath)."/member/index_do.php?fmdo=checkMail&mid={$mid}&userhash={$userhash}&do=1";
$url = preg_replace("#http:\/\/#i", '', $url);
$url = 'http://'.preg_replace("#\/\/#", '/', $url);
$mailtitle = "{$cfg_webname}--会员邮件验证通知";
$mailbody = '';
$mailbody .= "尊敬的用户[{$uname}]，您好：\r\n";
$mailbody .= "欢迎注册成为[{$cfg_webname}]的会员。\r\n";
$mailbody .= "要通过注册，还必须进行最后一步操作，请点击或复制下面链接到地址栏访问这地址：\r\n\r\n";
$mailbody .= "{$url}\r\n\r\n";
$mailbody .= "Power by http://www.dedecms.com 织梦内容管理系统！\r\n";
$headers = "From: ".$cfg_adminemail."\r\nReply-To: ".$cfg_adminemail;
if($cfg_sendmail_bysmtp == 'Y' && !empty($cfg_smtp_server))
{
$mailtype = 'TXT';
require_once(DEDEINC.'/mail.class.php');
$smtp = new smtp($cfg_smtp_server,$cfg_smtp_port,true,$cfg_smtp_usermail,$cfg_smtp_password);
$smtp->debug = false;
$smtp->sendmail($email,$cfg_webname,$cfg_smtp_usermail, $mailtitle, $mailbody, $mailtype);
}
else
{
@mail($email, $mailtitle, $mailbody, $headers);
}
}//End 邮件验证
if($cfg_mb_reginfo == 'Y' && $spaceSta >=0)
{
ShowMsg("完成基本信息的注册，接下来完善详细资料...","index_do.php?fmdo=user&dopost=regnew&step=2",0,1000);
exit();
} else {
require_once(DEDEMEMBER."/templets/reg-new3.htm");
exit;
}
} else {
ShowMsg("注册失败，请检查资料是否有误或与管理员联系！", "-1");
exit();
}
}
require_once(DEDEMEMBER."/templets/reg-new.htm");
} else {
if(!$cfg_ml->IsLogin())
{
ShowMsg("尚未完成基本信息的注册,请返回重新填写！", "index_do.php?fmdo=user&dopost=regnew");
exit;
} else {
if($cfg_ml->fields['spacesta'] == 2)
{
ShowMsg('你已经登陆系统，无需重新注册！', 'index.php');
exit;
}
}
$membermodel = new membermodel($cfg_ml->M_MbType);
$postform = $membermodel->getForm(true);
if($dopost == 'reginfo')
{
//这里完成详细内容填写
$dede_fields = empty($dede_fields) ? '' : trim($dede_fields);
$dede_fieldshash = empty($dede_fieldshash) ? '' : trim($dede_fieldshash);
$modid = empty($modid)? 0 : intval(preg_replace("/[^\d]/",'', $modid));
if(!empty($dede_fields))
{
if($dede_fieldshash != md5($dede_fields.$cfg_cookie_encode))
{
showMsg('数据校验不对，程序返回', '-1');
exit();
}
}
$modelform = $dsql->GetOne("SELECT * FROM #@__member_model WHERE id='$modid' ");
if(!is_array($modelform))
{
showmsg('模型表单不存在', '-1');
exit();
}
$inadd_f = '';
if(!empty($dede_fields))
{
$fieldarr = explode(';', $dede_fields);
if(is_array($fieldarr))
{
foreach($fieldarr as $field)
{
if($field == '') continue;
$fieldinfo = explode(',', $field);
if($fieldinfo[1] == 'textdata')
{
${$fieldinfo[0]} = FilterSearch(stripslashes(${$fieldinfo[0]}));
${$fieldinfo[0]} = addslashes(${$fieldinfo[0]});
}
else
{
if(empty(${$fieldinfo[0]})) ${$fieldinfo[0]} = '';
${$fieldinfo[0]} = GetFieldValue(${$fieldinfo[0]}, $fieldinfo[1],0,'add','','diy', $fieldinfo[0]);
}
if($fieldinfo[0]=="birthday") ${$fieldinfo[0]}=GetDateMk(${$fieldinfo[0]});
$inadd_f .= ','.$fieldinfo[0]." ='".${$fieldinfo[0]}."' ";
}
}
}
$query = "UPDATE `{$membermodel->table}` SET `mid`='{$cfg_ml->M_ID}' $inadd_f WHERE `mid`='{$cfg_ml->M_ID}'; ";
if($dsql->executenonequery($query))
{
$dsql->ExecuteNoneQuery("UPDATE `#@__member` SET `spacesta`='2' WHERE `mid`='{$cfg_ml->M_ID}'");
// 清除缓存
$cfg_ml->DelCache($cfg_ml->M_ID);
require_once(DEDEMEMBER."/templets/reg-new3.htm");
exit;
}
}
require_once(DEDEMEMBER."/templets/reg-new2.htm");
}