Code Coverage |
||||||||||
Classes and Traits |
Functions and Methods |
Lines |
||||||||
| Total | |
0.00% |
0 / 1 |
|
0.00% |
0 / 1 |
CRAP | |
0.00% |
0 / 110 |
| ucp_activate | |
0.00% |
0 / 1 |
|
0.00% |
0 / 1 |
380.00 | |
0.00% |
0 / 106 |
| main | |
0.00% |
0 / 1 |
380.00 | |
0.00% |
0 / 106 |
|||
| <?php | |
| /** | |
| * | |
| * This file is part of the phpBB Forum Software package. | |
| * | |
| * @copyright (c) phpBB Limited <https://www.phpbb.com> | |
| * @license GNU General Public License, version 2 (GPL-2.0) | |
| * | |
| * For full copyright and license information, please see | |
| * the docs/CREDITS.txt file. | |
| * | |
| */ | |
| /** | |
| * @ignore | |
| */ | |
| if (!defined('IN_PHPBB')) | |
| { | |
| exit; | |
| } | |
| /** | |
| * ucp_activate | |
| * User activation | |
| */ | |
| class ucp_activate | |
| { | |
| var $u_action; | |
| function main($id, $mode) | |
| { | |
| global $config, $phpbb_root_path, $phpEx, $request; | |
| global $db, $user, $auth, $phpbb_container, $phpbb_log, $phpbb_dispatcher; | |
| $user_id = $request->variable('u', 0); | |
| $key = $request->variable('k', ''); | |
| $sql = 'SELECT user_id, username, user_type, user_email, user_newpasswd, user_lang, user_notify_type, user_actkey, user_inactive_reason | |
| FROM ' . USERS_TABLE . " | |
| WHERE user_id = $user_id"; | |
| $result = $db->sql_query($sql); | |
| $user_row = $db->sql_fetchrow($result); | |
| $db->sql_freeresult($result); | |
| if (!$user_row) | |
| { | |
| trigger_error('NO_USER'); | |
| } | |
| if ($user_row['user_type'] <> USER_INACTIVE && !$user_row['user_newpasswd']) | |
| { | |
| meta_refresh(3, append_sid("{$phpbb_root_path}index.$phpEx")); | |
| trigger_error('ALREADY_ACTIVATED'); | |
| } | |
| if ($user_row['user_inactive_reason'] == INACTIVE_MANUAL || $user_row['user_actkey'] !== $key) | |
| { | |
| trigger_error('WRONG_ACTIVATION'); | |
| } | |
| // Do not allow activating by non administrators when admin activation is on | |
| // Only activation type the user should be able to do is INACTIVE_REMIND | |
| // or activate a new password which is not an activation state :@ | |
| if (!$user_row['user_newpasswd'] && $user_row['user_inactive_reason'] != INACTIVE_REMIND && $config['require_activation'] == USER_ACTIVATION_ADMIN && !$auth->acl_get('a_user')) | |
| { | |
| if (!$user->data['is_registered']) | |
| { | |
| login_box('', $user->lang['NO_AUTH_OPERATION']); | |
| } | |
| send_status_line(403, 'Forbidden'); | |
| trigger_error('NO_AUTH_OPERATION'); | |
| } | |
| $update_password = ($user_row['user_newpasswd']) ? true : false; | |
| if ($update_password) | |
| { | |
| $sql_ary = array( | |
| 'user_actkey' => '', | |
| 'user_password' => $user_row['user_newpasswd'], | |
| 'user_newpasswd' => '', | |
| 'user_login_attempts' => 0, | |
| 'reset_token' => '', | |
| 'reset_token_expiration' => 0, | |
| ); | |
| $sql = 'UPDATE ' . USERS_TABLE . ' | |
| SET ' . $db->sql_build_array('UPDATE', $sql_ary) . ' | |
| WHERE user_id = ' . $user_row['user_id']; | |
| $db->sql_query($sql); | |
| $user->reset_login_keys($user_row['user_id']); | |
| $phpbb_log->add('user', $user->data['user_id'], $user->ip, 'LOG_USER_NEW_PASSWORD', false, array( | |
| 'reportee_id' => $user_row['user_id'], | |
| $user_row['username'] | |
| )); | |
| } | |
| if (!$update_password) | |
| { | |
| include_once($phpbb_root_path . 'includes/functions_user.' . $phpEx); | |
| user_active_flip('activate', $user_row['user_id']); | |
| $sql_ary = [ | |
| 'user_actkey' => '', | |
| 'reset_token' => '', | |
| 'reset_token_expiration' => 0, | |
| ]; | |
| $sql = 'UPDATE ' . USERS_TABLE . ' | |
| SET ' . $db->sql_build_array('UPDATE', $sql_ary) . " | |
| WHERE user_id = {$user_row['user_id']}"; | |
| $db->sql_query($sql); | |
| // Create the correct logs | |
| $phpbb_log->add('user', $user->data['user_id'], $user->ip, 'LOG_USER_ACTIVE_USER', false, array( | |
| 'reportee_id' => $user_row['user_id'] | |
| )); | |
| if ($auth->acl_get('a_user')) | |
| { | |
| $phpbb_log->add('admin', $user->data['user_id'], $user->ip, 'LOG_USER_ACTIVE', false, array($user_row['username'])); | |
| } | |
| } | |
| if ($config['require_activation'] == USER_ACTIVATION_ADMIN && !$update_password) | |
| { | |
| /* @var $phpbb_notifications \phpbb\notification\manager */ | |
| $phpbb_notifications = $phpbb_container->get('notification_manager'); | |
| $phpbb_notifications->delete_notifications('notification.type.admin_activate_user', $user_row['user_id']); | |
| include_once($phpbb_root_path . 'includes/functions_messenger.' . $phpEx); | |
| $messenger = new messenger(false); | |
| $messenger->template('admin_welcome_activated', $user_row['user_lang']); | |
| $messenger->set_addresses($user_row); | |
| $messenger->anti_abuse_headers($config, $user); | |
| $messenger->assign_vars(array( | |
| 'USERNAME' => html_entity_decode($user_row['username'], ENT_COMPAT)) | |
| ); | |
| $messenger->send($user_row['user_notify_type']); | |
| $message = 'ACCOUNT_ACTIVE_ADMIN'; | |
| } | |
| else | |
| { | |
| if (!$update_password) | |
| { | |
| $message = ($user_row['user_inactive_reason'] == INACTIVE_PROFILE) ? 'ACCOUNT_ACTIVE_PROFILE' : 'ACCOUNT_ACTIVE'; | |
| } | |
| else | |
| { | |
| $message = 'PASSWORD_ACTIVATED'; | |
| } | |
| } | |
| /** | |
| * This event can be used to modify data after user account's activation | |
| * | |
| * @event core.ucp_activate_after | |
| * @var array user_row Array with some user data | |
| * @var string message Language string of the message that will be displayed to the user | |
| * @since 3.1.6-RC1 | |
| */ | |
| $vars = array('user_row', 'message'); | |
| extract($phpbb_dispatcher->trigger_event('core.ucp_activate_after', compact($vars))); | |
| meta_refresh(3, append_sid("{$phpbb_root_path}index.$phpEx")); | |
| trigger_error($user->lang[$message]); | |
| } | |
| } |