in-portal
No OneTemporary
Actions

Subscribers

None

File Metadata

Created: Mon, Aug 25, 11:43 AM

in-portal
View Options

	Index: branches/unlabeled/unlabeled-1.68.2/core/units/users/users_event_handler.php
	===================================================================
	--- branches/unlabeled/unlabeled-1.68.2/core/units/users/users_event_handler.php (revision 7525)
	+++ branches/unlabeled/unlabeled-1.68.2/core/units/users/users_event_handler.php (revision 7526)
	@@ -1,1124 +1,1126 @@
	<?php

	class UsersEventHandler extends kDBEventHandler
	{
	/**
	* Allows to override standart permission mapping
	*
	*/
	function mapPermissions()
	{
	parent::mapPermissions();
	$permissions = Array(
	// admin
	'OnSetPersistantVariable' => Array('self' => 'view'), // because setting to logged in user only
	'OnUpdateRootPassword' => Array('self' => true), // because setting to logged in user only

	// front
	'OnRefreshForm' => Array('self' => true),

	'OnForgotPassword' => Array('self' => true),
	'OnResetPassword' => Array('self' => true),
	'OnResetPasswordConfirmed' => Array('self' => true),

	'OnSubscribeQuery' => Array('self' => true),
	'OnSubscribeUser' => Array('self' => true),

	'OnRecommend' => Array('self' => true),
	);
	$this->permMapping = array_merge($this->permMapping, $permissions);
	}

	/**
	* Shows only admins when required
	*
	* @param kEvent $event
	*/
	function SetCustomQuery(&$event)
	{
	$object =& $event->getObject();
	/* @var $object kDBList */

	if ($event->Special == 'admins') {
	$object->addFilter('primary_filter', 'ug.GroupId = 11');
	}

	if ($event->Special == 'regular') {
	$object->addFilter('primary_filter', 'ug.GroupId <> 11');
	}
	}


	/**
	* Checks permissions of user
	*
	* @param kEvent $event
	*/
	function CheckPermission(&$event)
	{
	if ($event->Name == 'OnLogin' \|\| $event->Name == 'OnLogout') {
	// permission is checked in OnLogin event directly
	return true;
	}

	if (!$this->Application->IsAdmin()) {
	$user_id = $this->Application->RecallVar('user_id');
	$items_info = $this->Application->GetVar($event->getPrefixSpecial(true));

	if ($event->Name == 'OnCreate' && $user_id == -2) {
	// "Guest" can create new users
	return true;
	}

	if ($event->Name == 'OnUpdate' && $user_id > 0) {
	$user_dummy =& $this->Application->recallObject($event->Prefix.'.-item', null, Array('skip_autoload' => true));
	foreach ($items_info as $id => $field_values) {
	if ($id != $user_id) {
	// registered users can update their record only
	return false;
	}

	$user_dummy->Load($id);
	$status_field = array_shift($this->Application->getUnitOption($event->Prefix, 'StatusField'));

	if ($user_dummy->GetDBField($status_field) != STATUS_ACTIVE) {
	// not active user is not allowed to update his record (he could not activate himself manually)
	return false;
	}

	if (isset($field_values[$status_field]) && $user_dummy->GetDBField($status_field) != $field_values[$status_field]) {
	// user can't change status by himself
	return false;
	}
	}
	return true;
	}

	if ($event->Name == 'OnUpdate' && $user_id <= 0) {
	// guests are not allowed to update their record, because they don't have it :)
	return false;
	}
	}

	return parent::CheckPermission($event);
	}

	function OnSessionExpire()
	{
	if( $this->Application->IsAdmin() ) {
	$this->Application->Redirect('index', Array('expired' => 1), '', 'index.php');
	}
	else {
	$http_query =& $this->Application->recallObject('HTTPQuery');
	$get = $http_query->getRedirectParams();

	$t = $this->Application->GetVar('t');
	$get['js_redirect'] = $this->Application->ConfigValue('UseJSRedirect');
	$this->Application->Redirect($t ? $t : 'index', $get);
	}
	}

	/**
	* Checks user data and logs it in if allowed
	*
	* @param kEvent $event
	*/
	function OnLogin(&$event)
	{
	// persistent session data after login is not refreshed, because redirect will follow in any case
	$prefix_special = $this->Application->IsAdmin() ? 'u.current' : 'u'; // "u" used on front not to change theme
	$object =& $this->Application->recallObject($prefix_special, null, Array('skip_autoload' => true));
	$password = $this->Application->GetVar('password');

	$invalid_pseudo = $this->Application->IsAdmin() ? 'la_invalid_password' : 'lu_invalid_password';

	if(!$password)
	{
	$object->SetError('ValidateLogin', 'invalid_password', $invalid_pseudo);
	$event->status = erFAIL;
	return false;
	}

	$email_as_login = $this->Application->ConfigValue('Email_As_Login');
	list($login_field, $submit_field) = $email_as_login && !$this->Application->IsAdmin() ? Array('Email', 'email') : Array('Login', 'login');
	$login_value = $this->Application->GetVar($submit_field);

	// process "Save Username" checkbox
	- $save_username = $this->Application->GetVar('cb_save_username') ? $login_value : '';
	- $this->Application->Session->SetCookie('save_username', $save_username, adodb_mktime() + 31104000); // 1 year expiration
	- $this->Application->SetVar('save_username', $save_username); // cookie will be set on next refresh, but refresh won't occur if login error present, so duplicate cookie in HTTPQuery
	+ if ($this->Application->IsAdmin()) {
	+ $save_username = $this->Application->GetVar('cb_save_username') ? $login_value : '';
	+ $this->Application->Session->SetCookie('save_username', $save_username, adodb_mktime() + 31104000); // 1 year expiration
	+ $this->Application->SetVar('save_username', $save_username); // cookie will be set on next refresh, but refresh won't occur if login error present, so duplicate cookie in HTTPQuery
	+ }

	if ($this->Application->IsAdmin() && ($login_value == 'root')) {
	// logging in "root" (admin only)
	$root_password = $this->Application->ConfigValue('RootPass');
	$password_formatter =& $this->Application->recallObject('kPasswordFormatter');
	$test = $password_formatter->EncryptPassword($password, 'b38');
	if ($root_password != $test) {
	$object->SetError('ValidateLogin', 'invalid_password', $invalid_pseudo);
	$event->status = erFAIL;
	return false;
	}
	elseif ($this->checkLoginPermission($login_value)) {
	$user_id = -1;
	$object->Load($user_id);
	$object->SetDBField('Login', $login_value);

	$session =& $this->Application->recallObject('Session');
	$session->SetField('PortalUserId', $user_id);
	// $session->SetField('GroupList', implode(',', $groups) );
	$this->Application->SetVar('u.current_id', $user_id);
	$this->Application->StoreVar('user_id', $user_id);

	$this->processLoginRedirect($event, $password);
	return true;
	}
	else {
	$object->SetError('ValidateLogin', 'invalid_license', 'la_invalid_license');
	$event->status = erFAIL;
	return false;
	}
	}

	/*$sql = 'SELECT PortalUserId FROM '.$object->TableName.' WHERE (%s = %s) AND (Password = MD5(%s))';
	$user_id = $this->Conn->GetOne( sprintf($sql, $login_field, $this->Conn->qstr($login_value), $this->Conn->qstr($password) ) );*/

	$sql = 'SELECT PortalUserId FROM '.$object->TableName.' WHERE (Email = %1$s OR Login = %1$s) AND (Password = MD5(%2$s))';
	$user_id = $this->Conn->GetOne( sprintf($sql, $this->Conn->qstr($login_value), $this->Conn->qstr($password) ) );

	if ($user_id) {
	$object->Load($user_id);
	if ($object->GetDBField('Status') == STATUS_ACTIVE) {
	$groups = $object->getMembershipGroups(true);
	if(!$groups) $groups = Array();
	array_push($groups, $this->Application->ConfigValue('User_LoggedInGroup') );
	$this->Application->StoreVar( 'UserGroups', implode(',', $groups) );

	if ($this->checkLoginPermission($login_value)) {
	$session =& $this->Application->recallObject('Session');
	$session->SetField('PortalUserId', $user_id);
	$session->SetField('GroupList', implode(',', $groups) );
	$this->Application->SetVar('u.current_id', $user_id);
	$this->Application->StoreVar('user_id', $user_id);

	$this_login = (int)$object->getPersistantVar('ThisLogin');
	$object->setPersistantVar('LastLogin', $this_login);
	$object->setPersistantVar('ThisLogin', adodb_mktime());
	}
	else {
	$object->Load(-2);
	$object->SetError('ValidateLogin', 'no_permission', 'lu_no_permissions');
	$event->status = erFAIL;
	}

	$this->processLoginRedirect($event, $password);
	}
	else {
	$event->redirect = $this->Application->GetVar('pending_disabled_template');
	}
	}
	else
	{
	$object->SetID(-2);
	$object->SetError('ValidateLogin', 'invalid_password', $invalid_pseudo);
	$event->status = erFAIL;
	}

	$event->SetRedirectParam('pass', 'm');
	}

	/**
	* Enter description here...
	*
	* @param string $user_name
	* @return bool
	*/
	function checkLoginPermission($user_name)
	{
	$ret = true;
	if ($this->Application->IsAdmin()) {
	$modules_helper =& $this->Application->recallObject('ModulesHelper');
	if ($user_name != 'root') {
	// root is virtual user, so allow him to login to admin in any case
	$ret = $this->Application->CheckPermission('ADMIN', 1);
	}
	$ret = $ret && $modules_helper->checkLogin();
	}
	else {
	$ret = $this->Application->CheckPermission('LOGIN', 1);
	}
	return $ret;
	}

	/**
	* Process all required data and redirect logged-in user
	*
	* @param kEvent $event
	*/
	function processLoginRedirect(&$event, $password)
	{
	$prefix_special = $this->Application->IsAdmin() ? 'u.current' : 'u'; // "u" used on front not to change theme
	$object =& $this->Application->recallObject($prefix_special, null, Array('skip_autoload' => true));

	$next_template = $this->Application->GetVar('next_template');
	if ($next_template == '_ses_redirect') {
	$location = $this->Application->BaseURL().$this->Application->RecallVar($next_template);
	if( $this->Application->isDebugMode() && constOn('DBG_REDIRECT') )
	{
	$this->Application->Debugger->appendTrace();
	echo "<b>Debug output above!!!</b> Proceed to redirect: <a href=\"$location\">$location</a><br>";
	}
	else {
	header('Location: '.$location);
	}

	$session =& $this->Application->recallObject('Session');
	$session->SaveData();
	exit;
	}

	if ($next_template) {
	$event->redirect = $next_template;
	}

	if ($this->Application->ConfigValue('UseJSRedirect')) {
	$event->SetRedirectParam('js_redirect', 1);
	}

	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LoginUser', $object->GetDBField('Login'), $password);
	}

	/**
	* Called when user logs in using old in-portal
	*
	* @param kEvent $event
	*/
	function OnInpLogin(&$event)
	{
	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LoginUser', $event->getEventParam('user'), $event->getEventParam('pass') );

	if ($event->redirect && is_string($event->redirect)) {
	// some real template specified instead of true
	$this->Application->Redirect($event->redirect, $event->redirect_params);
	}
	}

	/**
	* Called when user logs in using old in-portal
	*
	* @param kEvent $event
	*/
	function OnInpLogout(&$event)
	{
	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LogoutUser');
	}

	function OnLogout(&$event)
	{
	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LogoutUser');

	$session =& $this->Application->recallObject('Session');
	$session->SetField('PortalUserId', -2);
	$this->Application->SetVar('u.current_id', -2);
	$this->Application->StoreVar('user_id', -2);
	$object =& $this->Application->recallObject('u.current', null, Array('skip_autoload' => true));
	$object->Load(-2);

	$this->Application->DestroySession();

	$group_list = $this->Application->ConfigValue('User_GuestGroup').','.$this->Application->ConfigValue('User_LoggedInGroup');
	$session->SetField('GroupList', $group_list);
	$this->Application->StoreVar('UserGroups', $group_list);

	if ($this->Application->ConfigValue('UseJSRedirect')) {
	$event->SetRedirectParam('js_redirect', 1);
	}

	$event->SetRedirectParam('pass', 'm');
	}

	/**
	* Prefill states dropdown with correct values
	*
	* @param kEvent $event
	* @access public
	*/
	function OnPrepareStates(&$event)
	{
	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	$cs_helper->PopulateStates($event, 'State', 'Country');

	$object =& $event->getObject();

	if( $object->isRequired('Country') && $cs_helper->CountryHasStates( $object->GetDBField('Country') ) ) $object->setRequired('State', true);
	$object->setLogin();
	}

	/**
	* Redirects user after succesfull registration to confirmation template (on Front only)
	*
	* @param kEvent $event
	*/
	function OnAfterItemCreate(&$event)
	{
	$is_subscriber = $this->Application->GetVar('IsSubscriber');
	if(!$is_subscriber)
	{
	$object =& $event->getObject();

	$ug_table = TABLE_PREFIX.'UserGroup';
	if ($object->mode == 't') {
	$ug_table = $this->Application->GetTempName($ug_table, 'prefix:'.$event->Prefix);
	}

	$sql = 'UPDATE '.$ug_table.'
	SET PrimaryGroup = 0
	WHERE PortalUserId = '.$object->GetDBField('PortalUserId');
	$this->Conn->Query($sql);

	// set primary group to user
	if ($this->Application->IsAdmin() && $this->Application->GetVar('user_group')) {
	// while in admin you can set any group for new users
	$group_id = $this->Application->GetVar('user_group');
	}
	else {
	$group_id = $this->Application->ConfigValue('User_NewGroup');
	}

	$sql = 'REPLACE INTO '.$ug_table.'(PortalUserId,GroupId,PrimaryGroup) VALUES (%s,%s,1)';
	$this->Conn->Query( sprintf($sql, $object->GetID(), $group_id) );
	}
	}

	/**
	* Login user if possible, if not then redirect to corresponding template
	*
	* @param kEvent $event
	*/
	function autoLoginUser(&$event)
	{
	$object =& $event->getObject();
	$this->Application->SetVar('u.current_id', $object->GetID() );

	if($object->GetDBField('Status') == STATUS_ACTIVE && !$this->Application->ConfigValue('User_Password_Auto'))
	{
	$email_as_login = $this->Application->ConfigValue('Email_As_Login');
	list($login_field, $submit_field) = $email_as_login ? Array('Email', 'email') : Array('Login', 'login');

	$this->Application->SetVar($submit_field, $object->GetDBField($login_field) );
	$this->Application->SetVar('password', $object->GetDBField('Password_plain') );

	$event->CallSubEvent('OnLogin');
	}
	}


	/**
	* When creating user & user with such email exists then force to use OnUpdate insted of ?
	*
	* @param kEvent $event
	*/
	function OnSubstituteSubscriber(&$event)
	{
	$ret = false;
	$object =& $event->getObject( Array('skip_autoload' => true) );
	$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
	if($items_info)
	{
	list($id, $field_values) = each($items_info);
	$user_email = isset($field_values['Email']) ? $field_values['Email'] : false;
	if($user_email)
	{
	// check if is subscriber
	$verify_user =& $this->Application->recallObject('u.verify', null, Array('skup_autoload' => true) );
	$verify_user->Load($user_email, 'Email');
	if( $verify_user->isLoaded() && $verify_user->isSubscriberOnly() )
	{
	$items_info = Array( $verify_user->GetDBField('PortalUserId') => $field_values );
	$this->Application->SetVar($event->getPrefixSpecial(true), $items_info);
	$ret = true;
	}
	}
	}

	if( isset($event->MasterEvent) )
	{
	$event->MasterEvent->setEventParam('is_subscriber_only', $ret);
	}
	else
	{
	$event->setEventParam('is_subscriber_only', $ret);
	}
	}


	/**
	* Enter description here...
	*
	* @param kEvent $event
	* @return bool
	*/
	function isSubscriberOnly(&$event)
	{
	$event->CallSubEvent('OnSubstituteSubscriber');
	$is_subscriber = false;
	if( $event->getEventParam('is_subscriber_only') )
	{
	$is_subscriber = true;
	$object =& $event->getObject( Array('skip_autoload' => true) );
	$this->OnUpdate($event);
	if($event->status == erSUCCESS)
	{
	$this->OnAfterItemCreate($event);
	$object->SendEmailEvents();
	if( !$this->Application->IsAdmin() && ($event->status == erSUCCESS) && $event->redirect) $this->autoLoginUser($event);
	}
	}
	return $is_subscriber;
	}

	/**
	* Creates new user
	*
	* @param kEvent $event
	*/
	function OnCreate(&$event)
	{
	if( !$this->Application->IsAdmin() ) $this->setUserStatus($event);

	if( !$this->isSubscriberOnly($event) )
	{
	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	$cs_helper->CheckStateField($event, 'State', 'Country');

	$object =& $event->getObject( Array('skip_autoload' => true) );
	if ($this->Application->ConfigValue('User_Password_Auto')) {
	$pass = makepassword4(rand(5,8));
	$object->SetField('Password', $pass);
	$object->SetField('VerifyPassword', $pass);
	$this->Application->SetVar('user_password',$pass);
	}
	parent::OnCreate($event);


	$this->Application->SetVar('u.current_id', $object->getID() ); // for affil:OnRegisterAffiliate after hook

	$this->setNextTemplate($event);

	if( !$this->Application->IsAdmin() && ($event->status == erSUCCESS) && $event->redirect)
	{
	$object->SendEmailEvents();
	$this->autoLoginUser($event);
	}
	}
	}

	/**
	* Set's new user status based on config options
	*
	* @param kEvent $event
	*/
	function setUserStatus(&$event)
	{
	$object =& $event->getObject( Array('skip_autoload' => true) );

	$new_users_allowed = $this->Application->ConfigValue('User_Allow_New');
	// 1 - Instant, 2 - Not Allowed, 3 - Pending

	switch ($new_users_allowed)
	{
	case 1: // Instant
	$object->SetDBField('Status', 1);
	$next_template = $this->Application->GetVar('registration_confirm_template');
	if($next_template) $event->redirect = $next_template;
	break;

	case 3: // Pending
	$next_template = $this->Application->GetVar('registration_confirm_pending_template');
	if($next_template) $event->redirect = $next_template;
	$object->SetDBField('Status', 2);
	break;

	case 2: // Not Allowed
	$object->SetDBField('Status', 0);
	break;
	}

	/*if ($object->GetDBField('PaidMember') == 1) {
	$this->Application->HandleEvent($add_to_cart, 'ord:OnAddToCart');
	$event->redirect = 'in-commerce/checkout/shop_cart';
	} */

	}




	/**
	* Set's new unique resource id to user
	*
	* @param kEvent $event
	*/
	function OnBeforeItemCreate(&$event)
	{
	$email_as_login = $this->Application->ConfigValue('Email_As_Login');
	$object =& $event->getObject();
	if ($email_as_login) {
	$object->Fields['Email']['error_msgs']['unique'] = $this->Application->Phrase('lu_user_and_email_already_exist');
	}

	}

	/**
	* Set's new unique resource id to user
	*
	* @param kEvent $event
	*/
	function OnAfterItemValidate(&$event)
	{
	$object =& $event->getObject();
	$resource_id = $object->GetDBField('ResourceId');
	if (!$resource_id)
	{
	$object->SetDBField('ResourceId', $this->Application->NextResourceId() );
	}
	}


	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function OnRecommend(&$event){

	$friend_email = $this->Application->GetVar('friend_email');
	$friend_name = $this->Application->GetVar('friend_email');

	// used for error reporting only -> rewrite code + theme (by Alex)
	$object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too

	if (preg_match("/^[_a-zA-Z0-9-\.]+@[a-zA-Z0-9-\.]+\.[a-z]{2,4}$/", $friend_email))
	{
	$send_params = array();
	$send_params['to_email']=$friend_email;
	$send_params['to_name']=$friend_name;

	$user_id = $this->Application->RecallVar('user_id');
	$email_event = &$this->Application->EmailEventUser('SITE.SUGGEST', $user_id, $send_params);

	if ($email_event->status == erSUCCESS){
	$event->redirect_params = array('opener' => 's', 'pass' => 'all');
	$event->redirect = $this->Application->GetVar('template_success');
	}
	else {
	// $event->redirect_params = array('opener' => 's', 'pass' => 'all');
	// $event->redirect = $this->Application->GetVar('template_fail');

	$object->ErrorMsgs['send_error'] = $this->Application->Phrase('lu_email_send_error');
	$object->FieldErrors['Email']['pseudo'] = 'send_error';
	$event->status = erFAIL;
	}
	}
	else {
	$object->ErrorMsgs['invalid_email'] = $this->Application->Phrase('lu_InvalidEmail');
	$object->FieldErrors['Email']['pseudo'] = 'invalid_email';
	$event->status = erFAIL;
	}
	}

	/**
	* Saves address changes and mades no redirect
	*
	* @param kEvent $event
	*/
	function OnUpdateAddress(&$event)
	{
	$object =& $event->getObject( Array('skip_autoload' => true) );

	$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
	if($items_info)
	{
	list($id,$field_values) = each($items_info);
	if($id > 0) $object->Load($id);
	$object->SetFieldsFromHash($field_values);
	$object->setID($id);
	$object->Validate();
	}

	$event->redirect = false;
	}

	function OnSubscribeQuery(&$event)
	{
	$user_email = $this->Application->GetVar('subscriber_email');
	if ( preg_match("/^[_a-zA-Z0-9-\.]+@[a-zA-Z0-9-\.]+\.[a-z]{2,4}$/", $user_email) ){

	$object = &$this->Application->recallObject($this->Prefix.'.subscriber', null, Array('skip_autoload' => true));

	$this->Application->StoreVar('SubscriberEmail', $user_email);

	if( $object->Load(array('Email'=>$user_email)) ){
	$group_info = $this->GetGroupInfo($object->GetID());
	$event->redirect = $this->Application->GetVar($group_info ? 'unsubscribe_template' : 'subscribe_template');
	}
	else {
	$event->redirect = $this->Application->GetVar('subscribe_template');
	$this->Application->StoreVar('SubscriberEmail', $user_email);
	}
	}
	else {
	// used for error reporting only -> rewrite code + theme (by Alex)
	$object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too
	$object->ErrorMsgs['invalid_email'] = $this->Application->Phrase('lu_InvalidEmail');
	$object->FieldErrors['SubscribeEmail']['pseudo'] = 'invalid_email';
	$event->status = erFAIL;
	}
	//subscribe_query_ok_template
	}

	function OnSubscribeUser(&$event){

	$object = &$this->Application->recallObject($this->Prefix.'.subscriber', null, Array('skip_autoload' => true));

	$user_email = $this->Application->RecallVar('SubscriberEmail');

	if (preg_match("/^[_a-zA-Z0-9-\.]+@[a-zA-Z0-9-\.]+\.[a-z]{2,4}$/", $user_email)){

	if($object->Load(array('Email'=>$user_email))){

	$group_info = $this->GetGroupInfo($object->GetID());

	if ($group_info){
	if ($event->getEventParam('no_unsubscribe')) return;

	if ($group_info['PrimaryGroup']){
	// delete user
	$object->Delete();
	}
	else {
	$this->RemoveSubscriberGroup($object->GetID());
	}

	$event->redirect = $this->Application->GetVar('unsubscribe_ok_template');

	}
	else {
	$this->AddSubscriberGroup($object->GetID(), 0);
	$event->redirect = $this->Application->GetVar('subscribe_ok_template');
	}


	}
	else {

	$object->SetField('Email', $user_email);
	$object->SetField('Login', $user_email);
	$object->SetDBField('dob', 1);
	$object->SetDBField('dob_date', 1);
	$object->SetDBField('dob_time', 1);
	$ip = getenv('HTTP_X_FORWARDED_FOR')?getenv('HTTP_X_FORWARDED_FOR'):getenv('REMOTE_ADDR');
	$object->SetDBField('ip', $ip);

	$this->Application->SetVar('IsSubscriber', 1);

	if ($object->Create()) {

	$this->AddSubscriberGroup($object->GetID(), 1);
	$event->redirect = $this->Application->GetVar('subscribe_ok_template');
	}

	$this->Application->SetVar('IsSubscriber', 0);
	}
	}
	else {
	// error handling here
	$event->redirect = $this->Application->GetVar('subscribe_fail_template');
	}


	}

	function AddSubscriberGroup($user_id, $is_primary){

	$group_id = $this->Application->ConfigValue('User_SubscriberGroup');
	$sql = 'INSERT INTO '.TABLE_PREFIX.'UserGroup(PortalUserId,GroupId,PrimaryGroup) VALUES (%s,%s,'.$is_primary.')';
	$this->Conn->Query( sprintf($sql, $user_id, $group_id) );
	$this->Application->EmailEventAdmin('USER.SUBSCRIBE', $user_id);
	$this->Application->EmailEventUser('USER.SUBSCRIBE', $user_id);

	}

	function RemoveSubscriberGroup($user_id){

	$group_id = $this->Application->ConfigValue('User_SubscriberGroup');
	$sql = 'DELETE FROM '.TABLE_PREFIX.'UserGroup WHERE PortalUserId='.$user_id.' AND GroupId='.$this->Application->ConfigValue('User_SubscriberGroup');
	$this->Conn->Query($sql);
	$this->Application->EmailEventAdmin('USER.UNSUBSCRIBE', $user_id);
	$this->Application->EmailEventUser('USER.UNSUBSCRIBE', $user_id);

	}

	function GetGroupInfo($user_id){

	$group_info = $this->Conn->GetRow('SELECT * FROM '.TABLE_PREFIX.'UserGroup
	WHERE PortalUserId='.$user_id.'
	AND GroupId='.$this->Application->ConfigValue('User_SubscriberGroup'));
	return $group_info;

	}

	function OnForgotPassword(&$event)
	{
	$user_object = &$this->Application->recallObject('u.forgot', null, Array('skip_autoload' => true));

	// used for error reporting only -> rewrite code + theme (by Alex)
	$user_current_object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too

	$username = $this->Application->GetVar('username');
	$email = $this->Application->GetVar('email');
	$found = false;
	$allow_reset = true;

	if( strlen($username) )
	{
	if( $user_object->Load(array('Login'=>$username)) )
	$found = ($user_object->GetDBField("Login")==$username && $user_object->GetDBField("Status")==1) && strlen($user_object->GetDBField("Password"));
	}
	else if( strlen($email) )
	{
	if( $user_object->Load(array('Email'=>$email)) )
	$found = ($user_object->GetDBField("Email")==$email && $user_object->GetDBField("Status")==1) && strlen($user_object->GetDBField("Password"));
	}

	if( $user_object->isLoaded() )
	{
	$PwResetConfirm = $user_object->GetDBField('PwResetConfirm');
	$PwRequestTime = $user_object->GetDBField('PwRequestTime');
	$PassResetTime = $user_object->GetDBField('PassResetTime');
	//$MinPwResetDelay = $user_object->GetDBField('MinPwResetDelay');
	$MinPwResetDelay = $this->Application->ConfigValue('Users_AllowReset');

	$allow_reset = (strlen($PwResetConfirm) ?
	adodb_mktime() > $PwRequestTime + $MinPwResetDelay :
	adodb_mktime() > $PassResetTime + $MinPwResetDelay);
	}

	if($found && $allow_reset)
	{
	$this->Application->StoreVar('tmp_user_id', $user_object->GetDBField("PortalUserId"));
	$this->Application->StoreVar('tmp_email', $user_object->GetDBField("Email"));
	$this->Application->EmailEventUser('INCOMMERCEUSER.PSWDC', $user_object->GetDBField("PortalUserId"));

	$event->redirect = $this->Application->GetVar('template_success');
	}
	else
	{
	if(!strlen($username) && !strlen($email))
	{
	$user_current_object->ErrorMsgs['forgotpw_nodata'] = $this->Application->Phrase('lu_ferror_forgotpw_nodata');
	$user_current_object->FieldErrors['Login']['pseudo'] = 'forgotpw_nodata';
	$user_current_object->FieldErrors['Email']['pseudo'] = 'forgotpw_nodata';
	}
	else
	{
	if($allow_reset)
	{
	if( strlen($username) ){
	$user_current_object->ErrorMsgs['unknown_username'] = $this->Application->Phrase('lu_ferror_unknown_username');
	$user_current_object->FieldErrors['Login']['pseudo']='unknown_username';
	}
	if( strlen($email) ){
	$user_current_object->ErrorMsgs['unknown_email'] = $this->Application->Phrase('lu_ferror_unknown_email');
	$user_current_object->FieldErrors['Email']['pseudo']='unknown_email';
	}
	}
	else
	{
	$user_current_object->ErrorMsgs['reset_denied'] = $this->Application->Phrase('lu_ferror_reset_denied');
	if( strlen($username) ){
	$user_current_object->FieldErrors['Login']['pseudo']='reset_denied';
	}
	if( strlen($email) ){
	$user_current_object->FieldErrors['Email']['pseudo']='reset_denied';
	}
	}
	}

	if($user_current_object->FieldErrors){
	$event->redirect = false;
	}
	}

	}

	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function OnResetPassword(&$event){

	$user_object = &$this->Application->recallObject('u.forgot');

	if($user_object->Load($this->Application->RecallVar('tmp_user_id'))){

	$this->Application->EmailEventUser('INCOMMERCEUSER.PSWDC', $user_object->GetDBField("PortalUserId"));
	$event->redirect = $this->Application->GetVar('template_success');

	$mod_object =& $this->Application->recallObject('mod.'.'In-Commerce');
	$m_cat_id = $mod_object->GetDBField('RootCat');
	$event->SetRedirectParam('pass', 'm');
	//$event->SetRedirectParam('m_cat_id', $m_cat_id);
	$this->Application->SetVar('m_cat_id', $m_cat_id);


	}

	}

	function OnResetPasswordConfirmed(&$event)
	{
	$passed_key = $this->Application->GetVar('user_key');

	$user_object = &$this->Application->recallObject('u.forgot');

	// used for error reporting only -> rewrite code + theme (by Alex)
	$user_current_object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true));// TODO: change theme too

	if (strlen(trim($passed_key)) == 0) {
	$event->redirect_params = array('opener' => 's', 'pass' => 'all');
	$event->redirect = false;

	$user_current_object->ErrorMsgs['code_is_not_valid'] = $this->Application->Phrase('lu_code_is_not_valid');
	$user_current_object->FieldErrors['PwResetConfirm']['pseudo'] = 'code_is_not_valid';
	}


	if($user_object->Load(array('PwResetConfirm'=>$passed_key)))
	{
	$exp_time = $user_object->GetDBField('PwRequestTime') + 3600;
	$user_object->SetDBField("PwResetConfirm", '');
	$user_object->SetDBField("PwRequestTime", 0);
	if ( $exp_time > adodb_mktime() )
	{
	//$m_var_list_update['codevalidationresult'] = 'lu_resetpw_confirm_text';
	$newpw = makepassword4();

	$this->Application->StoreVar('password', $newpw);

	$user_object->SetDBField("Password",$newpw);
	$user_object->SetDBField("PassResetTime", adodb_mktime());
	$user_object->SetDBField("PwResetConfirm", '');
	$user_object->SetDBField("PwRequestTime", 0);
	$user_object->Update();

	$this->Application->SetVar('ForgottenPassword', $newpw);

	$email_event_user = &$this->Application->EmailEventUser('INCOMMERCEUSER.PSWD', $user_object->GetDBField('PortalUserId'));
	$email_event_admin = &$this->Application->EmailEventAdmin('INCOMMERCEUSER.PSWD');

	$this->Application->DeleteVar('ForgottenPassword');

	if ($email_event_user->status == erSUCCESS){
	$event->redirect_params = array('opener' => 's', 'pass' => 'all');
	$event->redirect = $this->Application->GetVar('template_success');
	}

	$user_object->SetDBField("Password",md5($newpw));
	$user_object->Update();

	} else {
	$user_current_object->ErrorMsgs['code_expired'] = $this->Application->Phrase('lu_code_expired');
	$user_current_object->FieldErrors['PwResetConfirm']['pseudo'] = 'code_expired';
	$event->redirect = false;

	}
	} else {
	$user_current_object->ErrorMsgs['code_is_not_valid'] = $this->Application->Phrase('lu_code_is_not_valid');
	$user_current_object->FieldErrors['PwResetConfirm']['pseudo'] = 'code_is_not_valid';
	$event->redirect = false;

	}
	}

	function OnUpdate(&$event)
	{
	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	$cs_helper->CheckStateField($event, 'State', 'Country');

	parent::OnUpdate($event);

	$this->setNextTemplate($event);
	}

	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function setNextTemplate(&$event)
	{
	if( !$this->Application->IsAdmin() )
	{
	$event->redirect_params['opener'] = 's';
	$object =& $event->getObject();
	if($object->GetDBField('Status') == STATUS_ACTIVE)
	{
	$next_template = $this->Application->GetVar('next_template');
	if($next_template) $event->redirect = $next_template;
	}
	}
	}



	/**
	* Delete users from groups if their membership is expired
	*
	* @param kEvent $event
	*/
	function OnCheckExpiredMembership(&$event)
	{
	// send pre-expiration reminders: begin
	$pre_expiration = adodb_mktime() + $this->Application->ConfigValue('User_MembershipExpirationReminder') * 3600 * 24;
	$sql = 'SELECT PortalUserId, GroupId
	FROM '.TABLE_PREFIX.'UserGroup
	WHERE (MembershipExpires IS NOT NULL) AND (ExpirationReminderSent = 0) AND (MembershipExpires < '.$pre_expiration.')';

	$skip_clause = $event->getEventParam('skip_clause');
	if ($skip_clause) {
	$sql .= ' AND !('.implode(') AND !(', $skip_clause).')';
	}

	$records = $this->Conn->Query($sql);
	if ($records) {
	$conditions = Array();
	foreach ($records as $record) {
	$email_event_user =& $this->Application->EmailEventUser('USER.MEMBERSHIP.EXPIRATION.NOTICE', $record['PortalUserId']);
	$email_event_admin =& $this->Application->EmailEventAdmin('USER.MEMBERSHIP.EXPIRATION.NOTICE');
	$conditions[] = '(PortalUserId = '.$record['PortalUserId'].' AND GroupId = '.$record['GroupId'].')';
	}
	$sql = 'UPDATE '.TABLE_PREFIX.'UserGroup
	SET ExpirationReminderSent = 1
	WHERE '.implode(' OR ', $conditions);
	$this->Conn->Query($sql);
	}
	// send pre-expiration reminders: end

	// remove users from groups with expired membership: begin
	$sql = 'SELECT PortalUserId
	FROM '.TABLE_PREFIX.'UserGroup
	WHERE (MembershipExpires IS NOT NULL) AND (MembershipExpires < '.adodb_mktime().')';
	$user_ids = $this->Conn->GetCol($sql);
	if ($user_ids) {
	foreach ($user_ids as $id) {
	$email_event_user =& $this->Application->EmailEventUser('USER.MEMBERSHIP.EXPIRED', $id);
	$email_event_admin =& $this->Application->EmailEventAdmin('USER.MEMBERSHIP.EXPIRED');
	}
	}
	$sql = 'DELETE FROM '.TABLE_PREFIX.'UserGroup
	WHERE (MembershipExpires IS NOT NULL) AND (MembershipExpires < '.adodb_mktime().')';
	$this->Conn->Query($sql);
	// remove users from groups with expired membership: end
	}

	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function OnRefreshForm(&$event)
	{
	$event->redirect = false;
	$item_info = $this->Application->GetVar($event->Prefix_Special);
	list($id, $fields) = each($item_info);

	$object =& $event->getObject( Array('skip_autoload' => true) );
	$object->setID($id);
	$object->IgnoreValidation = true;
	$object->SetFieldsFromHash($fields);
	}

	/**
	* Sets persistant variable
	*
	* @param kEvent $event
	*/
	function OnSetPersistantVariable(&$event)
	{
	$object =& $event->getObject();

	$field = $this->Application->GetVar('field');
	$value = $this->Application->GetVar('value');
	$object->setPersistantVar($field, $value);

	$force_tab = $this->Application->GetVar('SetTab');
	if ($force_tab) {
	$this->Application->StoreVar('force_tab', $force_tab);
	}
	}

	/**
	* Overwritten to return user from order by special .ord
	*
	* @param kEvent $event
	*/
	function getPassedId(&$event)
	{
	if ($event->Special == 'ord') {
	$order =& $this->Application->recallObject('ord');
	return $order->GetDBField('PortalUserId');
	}
	return parent::getPassedID($event);
	}

	/**
	* Allows to change root password
	*
	* @param kEvent $event
	*/
	function OnUpdateRootPassword(&$event)
	{
	$user_id = $this->Application->RecallVar('user_id');
	if ($user_id != -1) {
	// not "root" can't change root's password via this event
	return false;
	}

	// put salt to user's config
	$field_options = $this->Application->getUnitOption($event->Prefix.'.RootPassword', 'Fields');
	$field_options['salt'] = 'b38';
	$this->Application->setUnitOption($event->Prefix.'.RootPassword', 'Fields', $field_options);

	$object =& $event->getObject( Array('skip_autoload' => true) );
	/* @var $object UsersItem */

	$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
	if ($items_info) {
	list ($id, $field_values) = each($items_info);
	$this->RemoveRequiredFields($object);
	$object->SetDBField('RootPassword', $this->Application->ConfigValue('RootPass'));
	$object->SetFieldsFromHash($field_values);
	$status = $object->Validate();
	if ($status) {
	// validation on, password match too
	$fields_hash = Array (
	'VariableValue' => $object->GetDBField('RootPassword')
	);
	$conf_table = $this->Application->getUnitOption('conf', 'TableName');
	$this->Conn->doUpdate($fields_hash, $conf_table, 'VariableName = "RootPass"');
	$event->SetRedirectParam('opener', 'u');
	}
	else {
	$event->status = erFAIL;
	$event->redirect = false;
	}
	}
	}
	}

	?>
	\ No newline at end of file

	Property changes on: branches/unlabeled/unlabeled-1.68.2/core/units/users/users_event_handler.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.68.2.14
	\ No newline at end of property
	+1.68.2.15
	\ No newline at end of property
	Index: branches/unlabeled/unlabeled-1.6.2/core/install.php
	===================================================================
	--- branches/unlabeled/unlabeled-1.6.2/core/install.php (revision 7525)
	+++ branches/unlabeled/unlabeled-1.6.2/core/install.php (revision 7526)
	@@ -1,1078 +1,1091 @@
	<?php
	ini_set('display_errors', 1);
	error_reporting(E_ALL);

	define('IS_INSTALL', 1);
	define('ADMIN', 1);
	define('FULL_PATH', realpath(dirname(__FILE__).'/..') );
	define('REL_PATH', '/core');

	/**
	* Upgrade sqls are located using this mask
	*
	*/
	define('UPGRADES_FILE', FULL_PATH.'/%sinstall/upgrades.sql');

	// print_pre($_POST);

	$install_engine = new kInstallator();
	$install_engine->Init();
	$install_engine->Run();
	$install_engine->Done();

	class kInstallator {

	/**
	* Reference to kApplication class object
	*
	* @var kApplication
	*/
	var $Application = null;

	/**
	* Connection to database
	*
	* @var kDBConnection
	*/
	var $Conn = null;

	/**
	* Path to config.php
	*
	* @var string
	*/
	var $INIFile = '';

	/**
	* XML file containing steps information
	*
	* @var string
	*/
	var $StepDBFile = '';

	/**
	* Parsed data from config.php
	*
	* @var Array
	*/
	var $systemConfig = Array ();
	/**
	* Step name, that currently being processed
	*
	* @var string
	*/
	var $currentStep = '';

	/**
	* Steps list (preset) to use for current installation
	*
	* @var string
	*/
	var $stepsPreset = '';

	/**
	* Installtion steps to be done
	*
	* @var Array
	*/
	var $steps = Array(
	'fresh_install' => Array ('check_paths', 'db_config', 'root_password', 'choose_modules', 'finish'),
	'already_installed' => Array ('install_setup'),

	'upgrade' => Array ('install_setup', 'upgrade_modules', /* ..., */ 'finish'),
	'db_reconfig' => Array ('install_setup',/* ..., */ 'finish'),
	'fix_paths' => Array ('install_setup',/* ..., */ 'finish'),
	);


	/**
	* Steps, that doesn't required admin to be logged-in to proceed
	*
	* @var Array
	*/
	var $skipLoginSteps = Array ('root_password', 'choose_modules', 'finish', -1);

	/**
	* Steps, on which kApplication should not be initialized, because of missing correct db table structure
	*
	* @var Array
	*/
	var $skipApplicationSteps = Array ('check_paths', 'db_config'/, 'install_setup'/); // remove install_setup when application will work separately from install

	/**
	* Folders that should be writeable to continue installation
	*
	* @var Array
	*/
	var $writeableFolders = Array ('/system');

	/**
	* Contains last error message text
	*
	* @var string
	*/
	var $errorMessage = '';

	/**
	* Base path for includes in templates
	*
	* @var string
	*/
	var $baseURL = '';

	function Init()
	{
	$this->INIFile = FULL_PATH.'/config.php';
	$this->StepDBFile = FULL_PATH.'/'.REL_PATH.'/install/steps_db.xml';

	$base_path = rtrim(preg_replace('/'.preg_quote(rtrim(REL_PATH, '/'), '/').'$/', '', str_replace('\\', '/', dirname($_SERVER['PHP_SELF']))), '/');
	$this->baseURL = 'http://'.$_SERVER['HTTP_HOST'].$base_path.'/core/install/';

	set_error_handler( Array(&$this, 'ErrorHandler') );

	if (file_exists($this->INIFile)) {
	// if config.php found, then check his write permission too
	$this->writeableFolders[] = '/config.php';
	}
	else {
	$this->writeableFolders[] = '/';
	}

	$this->systemConfig = $this->ParseConfig(true);
	$this->systemConfig['Misc']['WriteablePath'] = '/system'; // for development purposes

	$this->currentStep = $this->GetVar('step');

	// can't check login on steps where no application present anyways :)
	$this->skipLoginSteps = array_unique(array_merge($this->skipLoginSteps, $this->skipApplicationSteps));

	$this->SelectPreset();

	if (!$this->currentStep) {
	$this->SetFirstStep(); // sets first step of current preset
	}

	$this->InitStep();
	}

	function SetFirstStep()
	{
	reset($this->steps[$this->stepsPreset]);
	$this->currentStep = current($this->steps[$this->stepsPreset]);
	}

	/**
	* Selects preset to proceed based on various criteria
	*
	*/
	function SelectPreset()
	{
	$preset = $this->GetVar('preset');
	if (file_exists($this->INIFile) && $this->systemConfig) {
	// only at installation first step
	$status = $this->CheckDatabase(false);
	if ($status && $this->AlreadyInstalled()) {
	// if already installed, then all future actions need login to work
	$this->skipLoginSteps = Array (-1);
	if (!$preset) {
	$preset = 'already_installed';
	$this->currentStep = '';
	}
	}
	}
	if ($preset === false) {
	$preset = 'fresh_install'; // default preset
	}

	$this->stepsPreset = $preset;
	}

	function GetVar($name)
	{
	return isset($_REQUEST[$name]) ? $_REQUEST[$name] : false;
	}

	/**
	* Performs needed intialization of data, that step requires
	*
	*/
	function InitStep()
	{
	$require_login = !in_array($this->currentStep, $this->skipLoginSteps);
	$this->InitApplication($require_login);

	if ($require_login) {
	// step require login to proceed
	if (!$this->Application->LoggedIn()) {
	$this->stepsPreset = 'already_installed';
	$this->SetFirstStep();
	}
	}

	switch ($this->currentStep) {
	case 'check_paths':
	foreach ($this->writeableFolders as $folder_path) {
	$file_path = FULL_PATH.$folder_path;
	if (!is_writable($file_path)) {
	$this->errorMessage = 'Install cannot write to specified folder in the root directory of your installation';
	break;
	}
	}
	break;

	case 'db_config':
	$section_name = 'Database';
	$fields = Array ('DBType', 'DBHost', 'DBName', 'DBUser', 'DBUserPassword', 'TablePrefix');

	if (!isset($this->systemConfig[$section_name])) {
	$this->systemConfig[$section_name] = Array ();
	}

	// set fields
	foreach ($fields as $field_name) {
	$submit_value = $this->GetVar($field_name);

	if ($submit_value !== false) {
	$this->systemConfig[$section_name][$field_name] = $submit_value;
	}
	elseif (!isset($this->systemConfig[$section_name][$field_name])) {
	$this->systemConfig[$section_name][$field_name] = '';
	}
	}
	break;

	case 'choose_modules':
	// if no modules found, then proceed to next step
	$modules = $this->ScanModules();
	if (!$modules) {
	$this->currentStep = $this->GetNextStep();
	}
	break;

	case 'upgrade_modules':
	// get installed modules from db and compare their versions to upgrade script
	$modules = $this->GetUpgradableModules();
	if (!$modules) {
	$this->currentStep = $this->GetNextStep();
	}
	break;

	case 'install_setup':
	$next_preset = $this->Application->GetVar('next_preset');
	if ($next_preset !== false && $this->Application->GetVar('login') == 'root') {
	// option was choosen, then verify password & login user
	$login_event = new kEvent('u.current:OnLogin');
	$this->Application->HandleEvent($login_event);

	if ($login_event->status == erSUCCESS) {
	// login succeeded

	if (!isset($this->steps[$next_preset])) {
	$this->errorMessage = 'Preset "'.$next_preset.'" not yet implemented';
	}
	else {
	$this->stepsPreset = $next_preset;
	}
	}
	else {
	// login failed
	$user =& $this->Application->recallObject('u.current');
	/* @var $user UsersItem */

	$this->errorMessage = $user->GetErrorMsg('ValidateLogin').'. If you don\'t know your username or password, contact Intechnic Support';
	}
	}
	else {
	// if preset was not choosen, then raise error
	$this->errorMessage = 'Please select action to perform';
	}
	break;
	}

	$this->PerformValidation(); // returns validation status (just in case)
	}

	/**
	* Validates data entered by user
	*
	* @return bool
	*/
	function PerformValidation()
	{
	if ($this->GetVar('step') != $this->currentStep) {
	// just redirect from previous step, don't validate
	return true;
	}

	$status = true;

	switch ($this->currentStep) {
	case 'db_config':
	// 1. check if required fields are filled
	$section_name = 'Database';
	$required_fields = Array ('DBType', 'DBHost', 'DBName', 'DBUser');
	foreach ($required_fields as $required_field) {
	if (!$this->systemConfig[$section_name][$required_field]) {
	$status = false;
	$this->errorMessage = 'Please fill all required fields';
	break;
	}
	}
	if (!$status) break;

	// 2. check permissions, that use have in this database
	$status = $this->CheckDatabase();
	break;

	case 'root_password':
	// check, that password & verify password match
	$password = $this->Application->GetVar('root_password');
	$password_verify = $this->Application->GetVar('root_password_verify');

	if ($password != $password_verify) {
	$this->errorMessage = 'Passwords does not match';
	}
	elseif (strlen($password) < 4) {
	$this->errorMessage = 'Root Password must be at least 4 characters';
	}

	$status = $this->errorMessage == '';
	break;
	}

	return $status;
	}

	/**
	* Perform installation step actions
	*
	*/
	function Run()
	{
	if ($this->errorMessage) {
	// was error during data validation stage
	return ;
	}

	switch ($this->currentStep) {
	case 'db_config':
	// store db configuration
	$this->SaveConfig();

	// import base data into database
	$this->RunSQL('/core/install/install_schema.sql');
	$this->RunSQL('/core/install/install_data.sql');
	break;

	case 'root_password':
	// update root password in database
	$password = md5( md5($this->Application->GetVar('root_password')) . 'b38');
	$this->SetConfigValue('RootPass', $password);

	// set Site_Path (for SSL & old in-portal code)
	$this->SetConfigValue('Site_Path', BASE_PATH.'/');

	// import base language for core (english)
	$this->ImportLanguage('/core/install/english');

	// set imported language as primary
	$lang =& $this->Application->recallObject('lang.-item', null, Array('skip_autoload' => true));
	/* @var $lang LanguagesItem */

	$lang->Load(1); // fresh install => ID=1
	$lang->setPrimary();
	break;

	case 'choose_modules':
	// run module install scripts
	$modules = $this->Application->GetVar('modules');
	if ($modules) {
	foreach ($modules as $module) {
	$install_file = MODULES_PATH.'/'.$module.'/install.php';
	if (file_exists($install_file)) {
	include_once($install_file);
	}
	}
	}
	// scan themes
	$themes_helper =& $this->Application->recallObject('ThemesHelper');
	/* @var $themes_helper kThemesHelper */

	$themes_helper->refreshThemes();

	$this->Conn->Query('UPDATE '.TABLE_PREFIX.'Theme SET Enabled=1, PrimaryTheme =1 LIMIT 1');

	// update categories cache
	$updater =& $this->Application->recallObject('kPermCacheUpdater');
	/* @var $updater kPermCacheUpdater */

	$updater->OneStepRun();
	break;

	case 'upgrade_modules':
	// get installed modules from db and compare their versions to upgrade script
	$modules = $this->Application->GetVar('modules');
	if ($modules) {
	$upgrade_data = $this->GetUpgradableModules();

	foreach ($modules as $module_name) {
	$module_info = $upgrade_data[$module_name];
	$upgrades_file = sprintf(UPGRADES_FILE, $module_info['Path']);

	$sqls = file_get_contents($upgrades_file);
	$version_mark = '# ===== v '.$module_info['FromVersion'].' =====';

	$start_pos = strpos($sqls, $version_mark);
	$sqls = substr($sqls, $start_pos);
	$this->RunSQLText($sqls);

	// after upgrade sqls are executed update version
	$sql = 'UPDATE '.TABLE_PREFIX.'Modules
	SET Version = "'.$module_info['ToVersion'].'"
	WHERE Name = "'.$module_name.'"';
	$this->Conn->Query($sql);
	}
	}
	else {
	$this->errorMessage = 'Please select module(-s) to upgrade';
	}
	break;

	case 'finish':
	// delete cache
	$sql = 'DELETE FROM '.TABLE_PREFIX.'Cache
	WHERE VarName IN ("config_files","configs_parsed","sections_parsed")';
	$this->Conn->Query($sql);

	// set installation finished mark
	if ($this->Application->ConfigValue('InstallFinished') === false) {
	$fields_hash = Array (
	'VariableName' => 'InstallFinished',
	'VariableValue' => 1,
	);
	$this->Conn->doInsert($fields_hash, TABLE_PREFIX.'ConfigurationValues');
	}
	break;
	}

	if ($this->errorMessage) {
	// was error during run stage
	return ;
	}

	$this->currentStep = $this->GetNextStep();
	$this->InitStep(); // init next step (that will be shown now)

	$this->InitApplication();

	if ($this->currentStep == -1) {
	// step after last step -> redirect to admin
	$this->Application->Redirect('index', null, '', 'index.php');
	}
	}

	/**
	* Sets new configuration variable value
	*
	* @param string $name
	* @param mixed $value
	*/
	function SetConfigValue($name, $value)
	{
	$sql = 'UPDATE '.TABLE_PREFIX.'ConfigurationValues
	SET VariableValue = '.$this->Conn->qstr($value).'
	WHERE VariableName = '.$this->Conn->qstr($name);
	$this->Conn->Query($sql);
	}

	/**
	* Initialize kApplication
	*
	* @param bool $force initialize in any case
	*/
	function InitApplication($force = false)
	{
	if (($force \|\| !in_array($this->currentStep, $this->skipApplicationSteps)) && !isset($this->Application)) {
	// step is allowed for application usage & it was not initialized in previous step
	global $start, $debugger, $dbg_options;
	include_once(FULL_PATH.'/core/kernel/startup.php');

	$this->Application =& kApplication::Instance();
	$this->Application->Init();
	$this->Conn =& $this->Application->GetADODBConnection();
	}
	}

	/**
	* Show next step screen
	*
	*/
	function Done($error_message = null)
	{
	if (isset($error_message)) {
	$this->errorMessage = $error_message;
	}

	include_once (FULL_PATH.'/'.REL_PATH.'/install/incs/install.tpl');

	if (isset($this->Application)) {
	$this->Application->Done();

	// echo 'SID: ['.$this->Application->GetSID().']<br />';
	}

	exit;
	}

	function GetModuleVersion($module_name)
	{
	- return '0.1.1';
	+ $upgrades_file = sprintf(UPGRADES_FILE, 'core/');
	+ if (!file_exists($upgrades_file)) {
	+ // no upgrade file
	+ return '4.0.0';
	+ }
	+
	+ $sqls = file_get_contents($upgrades_file);
	+ $versions_found = preg_match_all('/# ===== v ([\d]+\.[\d]+\.[\d]+) =====/s', $sqls, $regs);
	+ if (!$versions_found) {
	+ // upgrades file doesn't contain version definitions
	+ return '4.0.0';
	+ }
	+
	+ return end($regs[1]);
	}

	function ConnectToDatabase()
	{
	include_once FULL_PATH.'/core/kernel/db/db_connection.php';

	if (!isset($this->systemConfig['Database']['DBType']) \|\|
	!isset($this->systemConfig['Database']['DBUser']) \|\|
	!isset($this->systemConfig['Database']['DBName'])
	) {
	return false;
	}


	$this->Conn = new kDBConnection($this->systemConfig['Database']['DBType'], Array(&$this, 'DBErrorHandler'));
	$this->Conn->Connect($this->systemConfig['Database']['DBHost'], $this->systemConfig['Database']['DBUser'], $this->systemConfig['Database']['DBUserPassword'], $this->systemConfig['Database']['DBName']);
	return $this->Conn->errorCode == 0;
	}

	/**
	* Checks if core is already installed
	*
	* @return bool
	*/
	function AlreadyInstalled()
	{
	$table_prefix = $this->systemConfig['Database']['TablePrefix'];
	return $this->TableExists('ConfigurationValues') && $this->Conn->GetOne('SELECT VariableValue FROM '.$table_prefix.'ConfigurationValues WHERE VariableName = \'InstallFinished\'');
	}

	function CheckDatabase($check_installed = true)
	{
	// perform various check type to database specified
	// 1. user is allowed to connect to database
	// 2. user has all types of permissions in database


	if (strlen($this->systemConfig['Database']['TablePrefix']) > 7) {
	$this->errorMessage = 'Table prefix should not be longer than 7 characters';
	return false;
	}

	// connect to database
	$status = $this->ConnectToDatabase();
	if ($status) {
	// if connected, then check if all sql statements work
	$sql_tests[] = 'DROP TABLE IF EXISTS test_table';
	$sql_tests[] = 'CREATE TABLE test_table(test_col mediumint(6))';
	$sql_tests[] = 'LOCK TABLES test_table WRITE';
	$sql_tests[] = 'INSERT INTO test_table(test_col) VALUES (5)';
	$sql_tests[] = 'UPDATE test_table SET test_col = 12';
	$sql_tests[] = 'UNLOCK TABLES';
	$sql_tests[] = 'ALTER TABLE test_table ADD COLUMN new_col varchar(10)';
	$sql_tests[] = 'SELECT * FROM test_table';
	$sql_tests[] = 'DELETE FROM test_table';
	$sql_tests[] = 'DROP TABLE IF EXISTS test_table';

	foreach ($sql_tests as $sql_test) {
	$this->Conn->Query($sql_test);
	if ($this->Conn->getErrorCode() != 0) {
	$status = false;
	break;
	}
	}

	if ($status) {
	// if statements work & connection made, then check table existance
	if ($check_installed && $this->AlreadyInstalled()) {
	$this->errorMessage = 'An In-Portal Database already exists at this location';
	return false;
	}
	}
	else {
	// user has insufficient permissions in database specified
	$db_error = 'Permission Error: ('.$this->Conn->getErrorCode().') '.$this->Conn->getErrorMsg();
	return false;
	}
	}
	else {
	// was error while connecting
	if (!$this->Conn) return false;
	$this->errorMessage = 'Connection Error: ('.$this->Conn->getErrorCode().') '.$this->Conn->getErrorMsg();
	return false;
	}

	return true;
	}

	/**
	* Checks if all passed tables exists
	*
	* @param string $tables comma separated tables list
	* @return bool
	*/
	function TableExists($tables)
	{
	$prefix = $this->systemConfig['Database']['TablePrefix'];

	$all_found = true;
	$tables = explode(',', $tables);
	foreach ($tables as $table_name) {
	$sql = 'SHOW TABLES LIKE "'.$prefix.$table_name.'"';
	if (count($this->Conn->Query($sql)) == 0) {
	$all_found = false;
	break;
	}
	}

	return $all_found;
	}

	/**
	* Runs SQLs from file
	*
	* @param string $filename
	* @param mixed $replace_from
	* @param mixed $replace_to
	*/
	function RunSQL($filename, $replace_from = null, $replace_to = null)
	{
	if (!file_exists(FULL_PATH.$filename)) {
	return ;
	}

	$sqls = file_get_contents(FULL_PATH.$filename);
	$this->RunSQLText($sqls, $replace_from, $replace_to);
	}

	/**
	* Runs SQLs from string
	*
	* @param string $sqls
	* @param mixed $replace_from
	* @param mixed $replace_to
	*/
	function RunSQLText(&$sqls, $replace_from = null, $replace_to = null)
	{
	$table_prefix = $this->systemConfig['Database']['TablePrefix'];

	// add prefix to all tables
	if (strlen($table_prefix) > 0) {
	$replacements = Array ('CREATE TABLE ', 'INSERT INTO ', 'UPDATE ', 'ALTER TABLE ');
	foreach ($replacements as $replacement) {
	$sqls = str_replace($replacement, $replacement.$table_prefix, $sqls);
	}
	$sqls = str_replace('DROP TABLE ', 'DROP TABLE IF EXISTS '.$table_prefix, $sqls);
	}

	if (isset($replace_from) && isset($replace_to)) {
	// replace something additionally, e.g. module root category
	$sqls = str_replace($replace_from, $replace_to, $sqls);
	}

	$sqls = str_replace("\r\n", "\n", $sqls); // convert to linux line endings
	$sqls = preg_replace("/#(.*?)\n/", '', $sqls); // remove all comments
	$sqls = explode(";\n", $sqls);

	foreach ($sqls as $sql) {
	$sql = trim($sql);
	if (!$sql) {
	continue; // usually last line
	}
	$this->Conn->Query($sql);
	if ($this->Conn->getErrorCode() != 0) {
	$this->errorMessage = 'Error: ('.$this->Conn->getErrorCode().') '.$this->Conn->getErrorMsg().'<br /><br />Database Query:<pre>'.htmlspecialchars($sql).'</pre>';
	$this->Done();
	break;
	}
	}
	}

	function ImportLanguage($lang_file)
	{
	$lang_file = FULL_PATH.$lang_file.'.lang';
	if (!file_exists($lang_file)) {
	return ;
	}

	$lang_xml =& $this->Application->recallObjectP('LangXML', null, Array(), false); // false - don't use temp tables
	$lang_xml->Parse($lang_file, '\|0\|1\|2\|', '');
	}

	/**
	* Returns modules list found in modules folder
	*
	* @return Array
	*/
	function ScanModules()
	{
	static $modules = null;

	if (!isset($modules)) {
	$modules = Array();
	$fh = opendir(MODULES_PATH);
	while (($sub_folder = readdir($fh))) {
	$folder_path = MODULES_PATH.'/'.$sub_folder;
	if ($sub_folder != '.' && $sub_folder != '..' && is_dir($folder_path)) {
	if ($sub_folder == 'core') {
	// skip modules here
	continue;
	}
	// this is folder in MODULES_PATH directory
	if (file_exists($folder_path.'/install.php') && file_exists($folder_path.'/install/install_schema.sql')) {
	$modules[] = $sub_folder;
	}
	}
	}
	}

	return $modules;
	}

	/**
	* Converts module version in format X.Y.Z to signle integer
	*
	* @param string $version
	* @return int
	*/
	function ConvertModuleVersion($version)
	{
	$parts = explode('.', $version);

	$bin = '';
	foreach ($parts as $part) {
	$bin .= str_pad(decbin($part), 8, '0', STR_PAD_LEFT);
	}

	return bindec($bin);
	}

	/**
	* Returns list of modules, that can be upgraded
	*
	*/
	function GetUpgradableModules()
	{
	$ret = Array ();

	foreach ($this->Application->ModuleInfo as $module_name => $module_info) {
	$upgrades_file = sprintf(UPGRADES_FILE, $module_info['Path']);
	if (!file_exists($upgrades_file)) {
	// no upgrade file
	continue;
	}

	$sqls = file_get_contents($upgrades_file);
	$versions_found = preg_match_all('/# ===== v ([\d]+\.[\d]+\.[\d]+) =====/s', $sqls, $regs);
	if (!$versions_found) {
	// upgrades file doesn't contain version definitions
	continue;
	}

	$to_version = end($regs[1]);
	$this_version = $this->ConvertModuleVersion($module_info['Version']);
	if ($this->ConvertModuleVersion($to_version) > $this_version) {
	// destination version is greather then current
	foreach ($regs[1] as $version) {
	if ($this->ConvertModuleVersion($version) > $this_version) {
	$from_version = $version;
	break;
	}
	}

	$version_info = Array (
	'FromVersion' => $from_version,
	'ToVersion' => $to_version,
	);

	$ret[$module_name] = array_merge_recursive2($module_info, $version_info);
	}
	}

	return $ret;
	}

	/**
	* Returns content to show for current step
	*
	* @return string
	*/
	function GetStepBody()
	{
	$step_template = FULL_PATH.'/core/install/step_templates/'.$this->currentStep.'.tpl';
	if (file_exists($step_template)) {
	ob_start();
	include_once ($step_template);
	return ob_get_clean();
	}

	return '{step template "'.$this->currentStep.'" missing}';
	}

	/**
	* Parses step information file, cache result for current step ONLY & return it
	*
	* @return Array
	*/
	function &_getStepInfo()
	{
	static $info = Array('help_title' => null, 'step_title' => null, 'help_body' => null, 'queried' => false);

	if (!$info['queried']) {
	$fdata = file_get_contents($this->StepDBFile);

	$parser = xml_parser_create();
	xml_parse_into_struct($parser, $fdata, $values, $index);
	xml_parser_free($parser);

	foreach ($index['STEP'] as $section_index) {
	$step_data =& $values[$section_index];

	if ($step_data['attributes']['NAME'] == $this->currentStep) {
	$info['step_title'] = $step_data['attributes']['TITLE'];
	if (isset($step_data['attributes']['HELP_TITLE'])) {
	$info['help_title'] = $step_data['attributes']['HELP_TITLE'];
	}
	else {
	// if help title not set, then use step title
	$info['help_title'] = $step_data['attributes']['TITLE'];
	}
	$info['help_body'] = trim($step_data['value']);
	break;
	}
	}

	$info['queried'] = true;
	}

	return $info;
	}

	/**
	* Returns particular information abou current step
	*
	* @param string $info_type
	* @return string
	*/
	function GetStepInfo($info_type)
	{
	$step_info =& $this->_getStepInfo();

	if (isset($step_info[$info_type])) {
	return $step_info[$info_type];
	}

	return '{step "'.$this->currentStep.'"; param "'.$info_type.'" missing}';
	}

	/**
	* Returns passed steps titles
	*
	* @param Array $steps
	* @return Array
	* @see kInstaller:PrintSteps
	*/
	function _getStepTitles($steps)
	{
	$fdata = file_get_contents($this->StepDBFile);

	$parser = xml_parser_create();
	xml_parse_into_struct($parser, $fdata, $values, $index);
	xml_parser_free($parser);

	$ret = Array ();
	foreach ($index['STEP'] as $section_index) {
	$step_data =& $values[$section_index];
	if (in_array($step_data['attributes']['NAME'], $steps)) {
	$ret[ $step_data['attributes']['NAME'] ] = $step_data['attributes']['TITLE'];
	}
	}

	return $ret;
	}

	/**
	* Returns current step number in active steps_preset.
	* Value can't be cached, because same step can have different number in different presets
	*
	* @return int
	*/
	function GetStepNumber()
	{
	return array_search($this->currentStep, $this->steps[$this->stepsPreset]) + 1;
	}

	/**
	* Returns step name to process next
	*
	* @return string
	*/
	function GetNextStep()
	{
	$next_index = $this->GetStepNumber();
	if ($next_index > count($this->steps[$this->stepsPreset]) - 1) {
	return -1;
	}

	return $this->steps[$this->stepsPreset][$next_index];
	}

	/**
	* Returns step name, that was processed before this step
	*
	* @return string
	*/
	function GetPreviousStep()
	{
	$next_index = $this->GetStepNumber() - 1;
	if ($next_index < 0) {
	$next_index = 0;
	}

	return $this->steps[$this->stepsPreset][$next_index];
	}

	/**
	* Prints all steps from active steps preset and highlights current step
	*
	* @param string $active_tpl
	* @param string $passive_tpl
	* @return string
	*/
	function PrintSteps($active_tpl, $passive_tpl)
	{
	$ret = '';
	$step_titles = $this->_getStepTitles($this->steps[$this->stepsPreset]);

	foreach ($this->steps[$this->stepsPreset] as $step_name) {
	$template = $step_name == $this->currentStep ? $active_tpl : $passive_tpl;
	$ret .= sprintf($template, $step_titles[$step_name]);
	}

	return $ret;
	}

	function ParseConfig($parse_section = false)
	{
	if (!file_exists($this->INIFile)) {
	return Array();
	}

	if( file_exists($this->INIFile) && !is_readable($this->INIFile) ) {
	die('Could Not Open Ini File');
	}

	$contents = file($this->INIFile);

	$retval = Array();
	$section = '';
	$ln = 1;
	$resave = false;
	foreach ($contents as $line) {
	if ($ln == 1 && $line != '<'.'?'.'php die() ?'.">\n") {
	$resave = true;
	}

	$ln++;
	$line = trim($line);
	$line = eregi_replace(';[.]*','',$line);
	if (strlen($line) > 0) {
	//echo $line . " - ";
	if(eregi('^[[a-z]+]$',str_replace(' ', '', $line))) {
	//echo 'section';
	$section = substr($line, 1, (strlen($line) - 2));
	if ($parse_section) {
	$retval[$section] = array();
	}
	continue;
	} elseif (eregi('=',$line)) {
	//echo 'main element';
	list ($key, $val) = explode(' = ', $line);
	if (!$parse_section) {
	$retval[trim($key)] = str_replace('"', '', $val);
	}
	else {
	$retval[$section][trim($key)] = str_replace('"', '', $val);
	}
	}
	}
	}

	if ($resave) {
	$fp = fopen($this->INIFile, 'w');
	reset($contents);
	fwrite($fp,'<'.'?'.'php die() ?'.">\n\n");
	foreach ($contents as $line) {
	fwrite($fp,"$line");
	}
	fclose($fp);
	}

	return $retval;
	}

	function SaveConfig()
	{
	$fp = fopen($this->INIFile, 'w');
	fwrite($fp,'<'.'?'.'php die() ?'.">\n\n");

	foreach ($this->systemConfig as $section_name => $section_data) {
	fwrite($fp, '['.$section_name."]\n");
	foreach ($section_data as $key => $value) {
	fwrite($fp, $key.' = "'.$value.'"'."\n");
	}
	fwrite($fp, "\n");
	}
	fclose($fp);
	}

	/**
	* Installation error handler for sql errors
	*
	* @param int $code
	* @param string $msg
	* @param string $sql
	* @return bool
	* @access private
	*/
	function DBErrorHandler($code, $msg, $sql)
	{
	$this->errorMessage = 'Query: <br />'.htmlspecialchars($sql).'<br />execution result is error:<br />['.$code.'] '.$msg;
	return true;
	}

	/**
	* Installation error handler
	*
	* @param int $errno
	* @param string $errstr
	* @param string $errfile
	* @param int $errline
	* @param Array $errcontext
	*/
	function ErrorHandler($errno, $errstr, $errfile = '', $errline = '', $errcontext = '')
	{
	if ($errno == E_USER_ERROR) {
	// only react on user fatal errors
	$this->Done($errstr);
	}
	}
	}

	/*function print_pre($s)
	{
	echo '<pre>', print_r($s, true). '</pre>';
	}*/


	?>
	\ No newline at end of file

	Property changes on: branches/unlabeled/unlabeled-1.6.2/core/install.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.6.2.10
	\ No newline at end of property
	+1.6.2.11
	\ No newline at end of property

in-portalNo OneTemporaryActions

File Metadata

in-portalView Options

Event Timeline

in-portal
No OneTemporary
Actions

in-portal
View Options