<?php

/**!info**

{

  "Plugin Name"  : "plugin_specialuserfuncs_title",

  "Plugin URI"   : "http://enanocms.org/",

  "Description"  : "plugin_specialuserfuncs_desc",

  "Author"       : "Dan Fuhry",

  "Version"      : "1.1.6",

  "Author URI"   : "http://enanocms.org/"

}

**!*/

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Copyright (C) 2006-2009 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

global $db, $session, $paths, $template, $plugins; // Common objects

// $plugins->attachHook('session_started', 'SpecialUserFuncs_paths_init();');

function SpecialUserFuncs_paths_init()

{

  register_special_page('Login', 'specialpage_log_in');

  register_special_page('Logout', 'specialpage_log_out');

  register_special_page('Register', 'specialpage_register');

  register_special_page('Preferences', 'specialpage_preferences');

  register_special_page('Contributions', 'specialpage_contributions');

  register_special_page('ChangeStyle', 'specialpage_change_theme');

  register_special_page('ActivateAccount', 'specialpage_activate_account');

  register_special_page('Captcha', 'specialpage_captcha');

  register_special_page('PasswordReset', 'specialpage_password_reset');

  register_special_page('Memberlist', 'specialpage_member_list');

  register_special_page('LangExportJSON', 'specialpage_language_export', false);

  register_special_page('Avatar', 'specialpage_avatar', false);

}

// function names are IMPORTANT!!! The name pattern is: page_<namespace ID>_<page URLname, without namespace>

$__login_status = '';

function page_Special_Login()

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  $level = ( isset($_GET['level']) && in_array($_GET['level'], array('0', '1', '2', '3', '4', '5', '6', '7', '8', '9') ) ) ? intval($_GET['level']) : USER_LEVEL_MEMBER;

  if ( isset($_POST['login']) )

  {

    {

    }

  }

  if ( $level > USER_LEVEL_MEMBER && !$session->user_logged_in )

  {

    $level = USER_LEVEL_MEMBER;

  }

  if ( $level <= USER_LEVEL_MEMBER && $session->user_logged_in )

  {

    if ( $target = $paths->getAllParams() )

    {

      redirect(makeUrl($target), '', '', 0);

    }

    $paths->main_page();

  }

  if ( $p = $paths->getAllParams() )

  {

  }

  else if ( isset($_POST['login']) && isset($_POST['return_to']) )

  {

  }

  ?>

    <div class="tblholder">

      <table border="0" style="width: 100%;" cellspacing="1" cellpadding="4">

        <tr>

        </tr>

        <tr>

          <td colspan="3" class="row1">

            <?php

            if ( $level <= USER_LEVEL_MEMBER )

              echo '<p>' . $lang->get('user_login_body', array('reg_link' => makeUrlNS('Special', 'Register'))) . '</p>';

            else

              echo '<p>' . $lang->get('user_login_body_elev') . '</p>';

            ?>

          </td>

        </tr>

        <tr>

          <td class="row2">

            <?php echo $lang->get('user_login_field_username'); ?>:

          </td>

          <td class="row1">

          </td>

            <small><?php echo $lang->get('user_login_forgotpass_blurb', array('forgotpass_link' => makeUrlNS('Special', 'PasswordReset'))); ?><br />

            <?php echo $lang->get('user_login_createaccount_blurb', array('reg_link' => makeUrlNS('Special', 'Register'))); ?></small>

          </td>

        </tr>

        <tr>

          <td class="row2">

            <?php echo $lang->get('user_login_field_password'); ?>:

         </tr>

         <?php

         {

           ?>

           <tr>

           </tr>

           <tr>

             <td class="row3">

             </td>

           </tr>

           <?php

         }

         $code = $plugins->setHook('login_form_html');

         foreach ( $code as $cmd )

         {

           eval($cmd);

         }

         if ( $level <= USER_LEVEL_MEMBER )

         {

           ?>

           <tr>

             <td class="row2">

               <?php echo $lang->get('user_login_field_remember'); ?>

             </td>

             <td class="row1" colspan="2">

               <label>

                 <input type="checkbox" name="remember" tabindex="3" />

                 <?php echo $text_remember; ?>

               </label>

             </td>

           </tr>

           <?php

         }

         {

           echo '<tr>

             <td class="row3" colspan="3">';

           $returnpage_link = ( $return = $paths->getAllParams() ) ? '/' . $return : '';

           $nocrypt_link = makeUrlNS('Special', "Login$returnpage_link", "level=$level&use_crypt=0", true);

           echo '<p><b>' . $lang->get('user_login_nocrypt_title') . '</b> ' . $lang->get('user_login_nocrypt_body', array('nocrypt_link' => $nocrypt_link)) . '</p>';

           echo '<p>' . $lang->get('user_login_nocrypt_countrylist') . '</p>';

           echo '  </td>

           </tr>';

         }

         {

           echo '<tr>

             <td class="row3" colspan="3">';

           $returnpage_link = ( $return = $paths->getAllParams() ) ? '/' . $return : '';

           $usecrypt_link = makeUrlNS('Special', "Login$returnpage_link", "level=$level&use_crypt=1", true);

           echo '<p><b>' . $lang->get('user_login_usecrypt_title') . '</b> ' . $lang->get('user_login_usecrypt_body', array('usecrypt_link' => $usecrypt_link)) . '</p>';

           echo '<p>' . $lang->get('user_login_usecrypt_countrylist') . '</p>';

           echo '  </td>

           </tr>';

         }

         {

           echo '<tr>';

           echo '<td class="row3" colspan="3">';

           echo '<p>' . $lang->get('user_login_dh_notice') . '</p>';

           echo '</td>';

           echo '</tr>';

         }

         ?>

         <tr>

           <th colspan="3" style="text-align: center" class="subhead">

             <input type="hidden" name="login" value="true" />

           </th>

         </tr>

      </table>

    </div>

      <?php if ( $level <= USER_LEVEL_MEMBER ): ?>

      <script type="text/javascript">

        document.forms.loginform.username.focus();

      </script>

      <?php else: ?>

      <script type="text/javascript">

        document.forms.loginform.pass.focus();

      </script>

      <?php endif; ?>

      <?php

      echo $session->generate_aes_form();

      // Any additional parameters that need to be passed back?

      if ( $p = $paths->getAllParams() )

      {

        // ... only if we have a return_to destination.

        $get_fwd = $_GET;

        unset($get_fwd['do']);

        if ( isset($get_fwd['target_do']) )

        {

          $get_fwd['do'] = $get_fwd['target_do'];

          unset($get_fwd['target_do']);

        }

        if ( isset($get_fwd['level']) )

          unset($get_fwd['level']);

        if ( isset($get_fwd['title']) )

          unset($get_fwd['title']);

        if ( !empty($get_fwd) )

        {

          $get_string = htmlspecialchars(enano_json_encode($get_fwd));

          echo '<input type="hidden" name="get_fwd" value="' . $get_string . '" />';

        }

      }

      else if ( isset($_POST['get_fwd']) )

      {

        echo '<input type="hidden" name="get_fwd" value="' . htmlspecialchars($_POST['get_fwd']) . '" />';

      }

      ?>

    </form>

    <?php

    ?>

  <?php

}

function page_Special_Login_preloader() // adding _preloader to the end of the function name calls the function before $session and $paths setup routines are called

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  global $lang;

  $paths->fullpage = $GLOBALS['urlname'];

  if ( $paths->getParam(0) === 'action.json' )

  {

    if ( !isset($_POST['r']) )

      die('No request.');

    $request = $_POST['r'];

    try

    {

      $request = enano_json_decode($request);

    }

    catch ( Exception $e )

    {

      die(enano_json_encode(array(

          'mode' => 'error',

          'error' => 'ERR_JSON_PARSE_FAILED'

        )));

    }

    echo enano_json_encode($session->process_login_request($request));

    $db->close();

    exit;

  }

  {

    {

      $session->start();

      $get_add = false;

      if ( isset($_POST['get_fwd']) )

      {

        try

        {

          $get_fwd = enano_json_decode($_POST['get_fwd']);

          $get_add = '';

          foreach ( $get_fwd as $key => $value )

          {

            $get_add .= "&{$key}=" . urlencode($value);

          }

          $get_add = ltrim($get_add, '&');

        }

        catch ( Exception $e )

        {

        }

      }

      {

        $name = get_page_title($_POST['return_to']);

        $subst = array(

            'username' => $session->username,

            'redir_target' => $name

          );

        redirect( makeUrl($_POST['return_to'], $get_add), $lang->get('user_login_success_title'), $lang->get('user_login_success_body', $subst) );

      }

      else

      {

        $subst = array(

            'username' => $session->username,

            'redir_target' => $lang->get('user_login_success_body_mainpage')

          );

        redirect( makeUrl(get_main_page(), $get_add), $lang->get('user_login_success_title'), $lang->get('user_login_success_body', $subst) );

      }

    }

    {

    }

  }

}

{