usersc-folder

[Kighlander]

Hi again...

Something other now happens:

Until yet I didn't change anything since my last post here.
When I click on "register" (In my menu it calls "Neu Anmelden") I was redirected to login.php and in the browser's adress-line shows something like this:

Code:

http://mydomain.com//users/login.php?dest=usersc/join.php

...and if I now sign in THERE, after entered my login-data and click on "login" I was redirected to the "join.php" in my usersc-folder...

here my "join.php" in the usersc-folder:

<pre>

Code:

<?php
/*
UserSpice 4
An Open Source PHP User Management System
by the UserSpice Team at http://UserSpice.com

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/
// error_reporting(E_ALL);
// ini_set('display_errors', 1);
ini_set("allow_url_fopen", 1);
?>
<?php require_once '../users/init.php'; ?>
<?php require_once $abs_us_root.$us_url_root.'users/includes/header.php'; ?>
<?php require_once $abs_us_root.$us_url_root.'users/includes/navigation.php'; ?>
<?php if (!securePage($_SERVER['PHP_SELF'])){die();} ?>
<?php
$settingsQ = $db->query("SELECT * FROM settings");
$settings = $settingsQ->first();
if($settings->recaptcha == 1){
    require_once("../users/includes/recaptcha.config.php");
}
//There is a lot of commented out code for a future release of sign ups with payments
$form_method = 'POST';
$form_action = 'join.php';
$vericode = rand(100000,999999);

$form_valid=FALSE;

//Decide whether or not to use email activation
$query = $db->query("SELECT * FROM email");
$results = $query->first();
$act = $results->email_act;

//Opposite Day for Pre-Activation - Basically if you say in email
//settings that you do NOT want email activation, this lists new
//users as active in the database, otherwise they will become
//active after verifying their email.
if($act==1){
    $pre = 0;
} else {
    $pre = 1;
}

$token = Input::get('csrf');
if(Input::exists()){
    if(!Token::check($token)){
        die('Token doesn\'t match!');
    }
}

$reCaptchaValid=FALSE;

if(Input::exists()){

    $username = Input::get('username');
    $fname = Input::get('fname');
    $lname = Input::get('lname');
    $email = Input::get('email');
    $agreement_checkbox = Input::get('agreement_checkbox');

    if ($agreement_checkbox=='on'){
        $agreement_checkbox=TRUE;
    }else{
        $agreement_checkbox=FALSE;
    }

    $db = DB::getInstance();
    $settingsQ = $db->query("SELECT * FROM settings");
    $settings = $settingsQ->first();
    $validation = new Validate();
    $validation->check($_POST,array(
      'username' => array(
        'display' => 'Username',
        'required' => true,
        'min' => $settings->min_un,
        'max' => $settings->max_un,
        'unique' => 'users',
      ),
      'fname' => array(
        'display' => 'First Name',
        'required' => true,
        'min' => 2,
        'max' => 35,
      ),
      'lname' => array(
        'display' => 'Last Name',
        'required' => true,
        'min' => 2,
        'max' => 35,
      ),
      'email' => array(
        'display' => 'Email',
        'required' => true,
        'valid_email' => true,
        'unique' => 'users',
      ),

      'password' => array(
        'display' => 'Password',
        'required' => true,
        'min' => $settings->min_pw,
        'max' => $settings->max_pw,
      ),
      'confirm' => array(
        'display' => 'Confirm Password',
        'required' => true,
        'matches' => 'password',
      ),
    ));

    //if the agreement_checkbox is not checked, add error
    if (!$agreement_checkbox){
        $validation->addError(["Please read and accept terms and conditions"]);
    }

    if($validation->passed() && $agreement_checkbox){
        //Logic if ReCAPTCHA is turned ON
        if($settings->recaptcha == 1){
            require_once("includes/recaptcha.config.php");
            //reCAPTCHA 2.0 check
            $response = null;

            // check secret key
            $reCaptcha = new ReCaptcha($privatekey);

            // if submitted check response
            if ($_POST["g-recaptcha-response"]) {
                $response = $reCaptcha->verifyResponse(
                    $_SERVER["REMOTE_ADDR"],
                    $_POST["g-recaptcha-response"]);
            }
            if ($response != null && $response->success) {
                // account creation code goes here
                $reCaptchaValid=TRUE;
                $form_valid=TRUE;
            }else{
                $reCaptchaValid=FALSE;
                $form_valid=FALSE;
                $validation->addError(["Please check the reCaptcha box."]);
            }

        } //else for recaptcha

        if($reCaptchaValid || $settings->recaptcha == 0){

            //add user to the database
            $user = new User();
            $join_date = date("Y-m-d H:i:s");
            $params = array(
                'fname' => Input::get('fname'),
                'email' => $email,
                'vericode' => $vericode,
            );

            if($act == 1) {
                //Verify email address settings
                $to = rawurlencode($email);
                $subject = $settings->site_name;
                $body = email_body('_email_template_verify.php',$params);
                email($to,$subject,$body);
            }
            try {
                // echo "Trying to create user";
                $user->create(array(
                    'username' => Input::get('username'),
                    'fname' => Input::get('fname'),
                    'lname' => Input::get('lname'),
                    'email' => Input::get('email'),
                    'password' =>
                    password_hash(Input::get('password'), PASSWORD_BCRYPT, array('cost' => 12)),
                    'permissions' => 1,
                    'account_owner' => 1,
                    'stripe_cust_id' => '',
                    'join_date' => $join_date,
                    'company' => Input::get('company'),
                    'email_verified' => $pre,
                    'active' => 1,
                    'vericode' => $vericode,
                ));
            } catch (Exception $e) {
                die($e->getMessage());
            }
            Redirect::to($us_url_root.'users/joinThankYou.php');
        }

    } //Validation and agreement checbox
} //Input exists

?>
<?php header('X-Frame-Options: DENY'); ?>
<div id="page-wrapper">
<div class="container">
<?php

require 'views/_join.php';
?>

</div>
</div>

<!-- footers -->
<?php require_once $abs_us_root.$us_url_root.'users/includes/page_footer.php'; // the final html footer copyright row + the external js calls ?>

<?php     if($settings->recaptcha == 1){ ?>
<script src="https://www.google.com/recaptcha/api.js" async defer></script>
<?php } ?>
<?php require_once $abs_us_root.$us_url_root.'users/includes/html_footer.php'; // currently just the closing /body and /html ?>

</pre>


Note: I copied the "join.php" from the usersc-folder of the 4.2.1g into the new installation and I didn't change anything in the code...