From c7aad627ac83d5b57a1b3b53c84fa92a305c7367 Mon Sep 17 00:00:00 2001 From: Skylar Ittner Date: Mon, 31 Dec 2018 13:48:12 -0700 Subject: [PATCH] Add user self-registration option --- langs/en/signup.json | 13 ++++ settings.template.php | 2 + signup/index.php | 159 ++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 174 insertions(+) create mode 100644 langs/en/signup.json create mode 100644 signup/index.php diff --git a/langs/en/signup.json b/langs/en/signup.json new file mode 100644 index 0000000..bef509b --- /dev/null +++ b/langs/en/signup.json @@ -0,0 +1,13 @@ +{ + "Create Account": "Create Account", + "Account Created": "Account Created", + "Choose a username.": "Choose a username.", + "Choose a password.": "Choose a password.", + "Enter your name.": "Enter your name.", + "Username already taken, pick another.": "Username already taken, pick another.", + "Your password must be at least {n} characters long.": "Your password must be at least {n} characters long.", + "That email address doesn't look right.": "That email address doesn't look right.", + "Please enter your username (4-100 characters, alphanumeric).": "Please enter your username (4-100 characters, alphanumeric).", + "That password is one of the most popular and insecure ever, make a better one.": "That password is one of the most popular and insecure ever, make a better one.", + "Account creation not allowed. Contact the site administrator for an account.": "Account creation not allowed. Contact the site administrator for an account." +} diff --git a/settings.template.php b/settings.template.php index 6a3a2c1..9f26295 100644 --- a/settings.template.php +++ b/settings.template.php @@ -31,6 +31,8 @@ $SETTINGS = [ "system_name" => "Netsyms AccountHub", // Allow login from the Netsyms mobile app "mobile_enabled" => true, + // Allow users to signup for new accounts + "signups_enabled" => false, // For supported values, see http://php.net/manual/en/timezones.php "timezone" => "America/Denver", // List of external apps connected to this system. diff --git a/signup/index.php b/signup/index.php new file mode 100644 index 0000000..87c5c5f --- /dev/null +++ b/signup/index.php @@ -0,0 +1,159 @@ +setID("signupform"); + + $form->addInput("username", "", "text", true, null, null, "Username", "fas fa-id-card", 6, 4, 100, "[a-zA-Z0-9]+", $Strings->get("Please enter your username (4-100 characters, alphanumeric).", false)); + $form->addInput("password", "", "password", true, null, null, "Password", "fas fa-lock", 6, $SETTINGS['min_password_length'], 255, "", $Strings->build("Your password must be at least {n} characters long.", ["n" => $SETTINGS['min_password_length']], false)); + $form->addInput("email", "", "email", false, null, null, "Email", "fas fa-envelope", 6, 5, 255, "", $Strings->get("That email address doesn't look right.", false)); + $form->addInput("name", "", "text", true, null, null, "Name", "fas fa-user", 6, 2, 200, "", $Strings->get("Enter your name.", false)); + + $form->addHiddenInput("submit", "1"); + + $form->addButton("Create Account", "fas fa-save", null, "submit", "savebtn"); + ?> + + + + + + <?php echo $SETTINGS['site_title']; ?> + + + + + + + + +
+
+
+ +
+ +
+

get("Create Account"); + } else { + echo $title; + } + ?>

+
+ +
+
+ +
+ +
+ generate(); + } else { + echo $noformcontent; + } + ?> +
+
+
+
+ + + + + get("Choose a username.", false)); +} +$_POST['username'] = strtolower($_POST['username']); +if (!preg_match("/^[a-z0-9]+$/", $_POST['username'])) { + showHTML($Strings->get("Please enter your username (4-100 characters, alphanumeric).", false)); +} +if (User::byUsername($_POST['username'])->exists()) { + showHTML($Strings->get("Username already taken, pick another.", false)); +} +if (empty($_POST['password'])) { + showHTML($Strings->get("Choose a password.", false)); +} +if (strlen($_POST['password']) < $SETTINGS['min_password_length']) { + showHTML($Strings->build("Your password must be at least {n} characters long.", ["n" => $SETTINGS[min_password_length]], false)); +} +require_once __DIR__ . "/../lib/worst_passwords.php"; +$passrank = checkWorst500List($new); +if ($passrank !== FALSE) { + showHTML($Strings->get("That password is one of the most popular and insecure ever, make a better one.", false)); +} +if (!empty($_POST['email']) && !filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)) { + showHTML($Strings->get("That email address doesn't look right.", false)); +} +if (empty($_POST['name'])) { + showHTML($Strings->get("Enter your name.", false)); +} + +// Create account + +$userid = User::add($_POST['username'], $_POST['password'], $_POST['name'], (filter_var($_POST['email'], FILTER_VALIDATE_EMAIL) ? $_POST['email'] : null)); +$signinstr = $Strings->get("sign in", false); +showHTML(null, false, << +
+ $signinstr +
+ +END + , $Strings->get("Account Created", false));