/**
 * Activate a signup.
 *
 *
 * @param string $activation_key The activation key provided to the user.
 * @return array An array containing information about the activated user and/or blog
 */
function qum_manual_activate_signup($activation_key)
{
    global $wpdb;
    if (is_multisite()) {
        $signup = $wpdb->get_row($wpdb->prepare("SELECT * FROM {$wpdb->signups} WHERE activation_key = %s", $activation_key));
    } else {
        $signup = $wpdb->get_row($wpdb->prepare("SELECT * FROM " . $wpdb->prefix . "signups WHERE activation_key = %s", $activation_key));
    }
    if (!empty($signup) && !$signup->active) {
        $meta = unserialize($signup->meta);
        $user_login = esc_sql($signup->user_login);
        $user_email = esc_sql($signup->user_email);
        /* the password is in hashed form in the signup table and we will copy it later to the user */
        $password = NULL;
        $user_id = username_exists($user_login);
        if (!$user_id) {
            $user_id = qum_create_user($user_login, $password, $user_email);
        } else {
            $user_already_exists = true;
        }
        if (!$user_id) {
            return __('Could not create user!', 'quickusermanager');
        } elseif (isset($user_already_exists) && $user_already_exists == true) {
            return __('That username is already activated!', 'quickusermanager');
        } else {
            $now = current_time('mysql', true);
            $retVal = is_multisite() ? $wpdb->update($wpdb->signups, array('active' => 1, 'activated' => $now), array('activation_key' => $activation_key)) : $wpdb->update($wpdb->base_prefix . 'signups', array('active' => 1, 'activated' => $now), array('activation_key' => $activation_key));
            qum_add_meta_to_user_on_activation($user_id, '', $meta);
            // if admin approval is activated, then block the user untill he gets approved
            $qum_general_settings = get_option('qum_general_settings');
            if (isset($qum_general_settings['adminApproval']) && $qum_general_settings['adminApproval'] == 'yes') {
                wp_set_object_terms($user_id, array('unapproved'), 'user_status', false);
                clean_object_term_cache($user_id, 'user_status');
            }
            /* copy the hashed password from signup meta to wp user table */
            if (!empty($meta['user_pass'])) {
                /* we might still have the base64 encoded password in signups and not the hash */
                if (base64_encode(base64_decode($meta['user_pass'], true)) === $meta['user_pass']) {
                    $meta['user_pass'] = wp_hash_password($meta['user_pass']);
                }
                $wpdb->update($wpdb->users, array('user_pass' => $meta['user_pass']), array('ID' => $user_id));
            }
            qum_notify_user_registration_email(get_bloginfo('name'), $user_login, $user_email, 'sending', $password, isset($qum_general_settings['adminApproval']) ? $qum_general_settings['adminApproval'] : 'no');
            do_action('qum_activate_user', $user_id, $password, $meta);
            return $retVal ? 'ok' : __('There was an error while trying to activate the user', 'quickusermanager');
        }
    }
}
 function qum_save_form_values($global_request)
 {
     $user_id = $this->qum_get_desired_user_id();
     $userdata = apply_filters('qum_build_userdata', array(), $global_request);
     $new_user_signup = false;
     $qum_general_settings = get_option('qum_general_settings');
     if (isset($qum_general_settings['loginWith']) && $qum_general_settings['loginWith'] == 'email') {
         $userdata['user_login'] = apply_filters('qum_generated_random_username', Wordpress_Creation_Kit_QUM::wck_generate_slug(trim($userdata['user_email'])), $userdata['user_email']);
     }
     if ($this->args['form_type'] == 'register') {
         if (!is_multisite()) {
             if (isset($qum_general_settings['emailConfirmation']) && $qum_general_settings['emailConfirmation'] == 'yes') {
                 $new_user_signup = true;
                 $multisite_message = true;
                 $userdata = $this->qum_add_custom_field_values($global_request, $userdata, $this->args['form_fields']);
                 if (!isset($userdata['role'])) {
                     $userdata['role'] = $this->args['role'];
                 }
                 $userdata['user_pass'] = wp_hash_password($userdata['user_pass']);
                 qum_signup_user($userdata['user_login'], $userdata['user_email'], $userdata);
             } else {
                 if (!isset($userdata['role'])) {
                     $userdata['role'] = $this->args['role'];
                 }
                 $userdata = wp_unslash($userdata);
                 $user_id = wp_insert_user($userdata);
             }
         } else {
             $new_user_signup = true;
             $multisite_message = true;
             $userdata = $this->qum_add_custom_field_values($global_request, $userdata, $this->args['form_fields']);
             if (!isset($userdata['role'])) {
                 $userdata['role'] = $this->args['role'];
             }
             $userdata['user_pass'] = wp_hash_password($userdata['user_pass']);
             /* since version 2.0.7 add this meta so we know on what blog the user registered */
             $userdata['registered_for_blog_id'] = get_current_blog_id();
             $userdata = wp_unslash($userdata);
             qum_signup_user($userdata['user_login'], $userdata['user_email'], $userdata);
         }
     } elseif ($this->args['form_type'] == 'edit_profile') {
         $userdata['ID'] = $this->qum_get_desired_user_id();
         $userdata = wp_unslash($userdata);
         /* if the user changes his password then we can't send it to the wp_update_user() function or
            the user will be logged out and won't be logged in again because we call wp_update_user() after
            the headers were sent( in the content as a shortcode ) */
         if (isset($userdata['user_pass']) && !empty($userdata['user_pass'])) {
             unset($userdata['user_pass']);
         }
         wp_update_user($userdata);
     }
     if (!empty($this->args['form_fields']) && !$new_user_signup) {
         foreach ($this->args['form_fields'] as $field) {
             do_action('qum_save_form_field', $field, $user_id, $global_request, $this->args['form_type']);
         }
         if ($this->args['form_type'] == 'register') {
             if (!is_wp_error($user_id)) {
                 $qum_general_settings = get_option('qum_general_settings');
                 if (isset($global_request['send_credentials_via_email']) && $global_request['send_credentials_via_email'] == 'sending') {
                     $send_credentials_via_email = 'sending';
                 } else {
                     $send_credentials_via_email = '';
                 }
                 qum_notify_user_registration_email(get_bloginfo('name'), isset($userdata['user_login']) ? trim($userdata['user_login']) : trim($userdata['user_email']), trim($userdata['user_email']), $send_credentials_via_email, trim($userdata['user_pass']), isset($qum_general_settings['adminApproval']) ? $qum_general_settings['adminApproval'] : 'no');
             }
         }
     }
     return $user_id;
 }
Beispiel #3
0
/**
 * Activate a signup.
 *
 *
 * @param string $key The activation key provided to the user.
 * @return array An array containing information about the activated user and/or blog
 */
function qum_activate_signup($key)
{
    global $wpdb;
    $bloginfo = get_bloginfo('name');
    $qum_general_settings = get_option('qum_general_settings');
    $signup = is_multisite() ? $wpdb->get_row($wpdb->prepare("SELECT * FROM {$wpdb->signups} WHERE activation_key = %s", $key)) : $wpdb->get_row($wpdb->prepare("SELECT * FROM " . $wpdb->base_prefix . "signups WHERE activation_key = %s", $key));
    if (empty($signup)) {
        return apply_filters('qum_register_activate_user_error_message1', '<p class="error">' . __('Invalid activation key!', 'quickusermanager') . '</p>');
    }
    if ($signup->active) {
        if (empty($signup->domain)) {
            return apply_filters('qum_register_activate_user_error_message2', '<p class="error">' . __('This username is now active!', 'quickusermanager') . '</p>');
        }
    }
    $meta = unserialize($signup->meta);
    $user_login = isset($qum_general_settings['loginWith']) && $qum_general_settings['loginWith'] == 'email' ? trim($signup->user_email) : trim($signup->user_login);
    $user_email = esc_sql($signup->user_email);
    /* the password is in hashed form in the signup table so we will add it later */
    $password = NULL;
    $user_id = username_exists($user_login);
    if (!$user_id) {
        $user_id = qum_create_user($user_login, $password, $user_email);
    } else {
        $user_already_exists = true;
    }
    if (!$user_id) {
        return apply_filters('qum_register_activate_user_error_message4', '<p class="error">' . __('Could not create user!', 'quickusermanager') . '</p>');
    } elseif (isset($user_already_exists) && $user_already_exists == true) {
        return apply_filters('qum_register_activate_user_error_message5', '<p class="error">' . __('This username is already activated!', 'quickusermanager') . '</p>');
    } else {
        $inserted_user = is_multisite() ? $wpdb->update($wpdb->signups, array('active' => 1, 'activated' => current_time('mysql', true)), array('activation_key' => $key)) : $wpdb->update($wpdb->base_prefix . 'signups', array('active' => 1, 'activated' => current_time('mysql', true)), array('activation_key' => $key));
        qum_add_meta_to_user_on_activation($user_id, '', $meta);
        // if admin approval is activated, then block the user untill he gets approved
        $qum_generalSettings = get_option('qum_general_settings');
        if (isset($qum_generalSettings['adminApproval']) && $qum_generalSettings['adminApproval'] == 'yes') {
            wp_set_object_terms($user_id, array('unapproved'), 'user_status', false);
            clean_object_term_cache($user_id, 'user_status');
        }
        if (!isset($qum_generalSettings['adminApproval'])) {
            $qum_generalSettings['adminApproval'] = 'no';
        }
        /* copy the hashed password from signup meta to wp user table */
        if (!empty($meta['user_pass'])) {
            /* we might still have the base64 encoded password in signups and not the hash */
            if (base64_encode(base64_decode($meta['user_pass'], true)) === $meta['user_pass']) {
                $meta['user_pass'] = wp_hash_password($meta['user_pass']);
            }
            $wpdb->update($wpdb->users, array('user_pass' => $meta['user_pass']), array('ID' => $user_id));
        }
        qum_notify_user_registration_email($bloginfo, $user_login, $user_email, 'sending', $password, $qum_generalSettings['adminApproval']);
        do_action('qum_activate_user', $user_id, $password, $meta);
        if ($inserted_user) {
            $success_message = apply_filters('qum_success_email_confirmation', '<p class="qum-success">' . __('Your email was successfully confirmed.', 'quickusermanager') . '</p><!-- .success -->');
            $admin_approval_message = apply_filters('qum_email_confirmation_with_admin_approval', '<p class="alert">' . __('Before you can access your account, an administrator needs to approve it. You will be notified via email.', 'quickusermanager') . '</p>');
            $qum_general_settings = get_option('qum_general_settings', 'false');
            if (!empty($qum_general_settings['adminApproval']) && $qum_general_settings['adminApproval'] == 'yes') {
                return $success_message . $admin_approval_message;
            } else {
                return $success_message;
            }
        } else {
            return apply_filters('qum_register_failed_user_activation', '<p class="error">' . __('There was an error while trying to activate the user.', 'quickusermanager') . '</p><!-- .error -->');
        }
    }
}