Hi again...
Something other now happens:
Until yet I didn't change anything since my last post here.
When I click on "register" (In my menu it calls "Neu Anmelden") I was redirected to login.php and in the browser's adress-line shows something like this:
Code:
http://mydomain.com//users/login.php?dest=usersc/join.php
...and if I now sign in THERE, after entered my login-data and click on "login" I was redirected to the "join.php" in my usersc-folder...
here my "join.php" in the usersc-folder:
<pre>
Code:
<?php
/*
UserSpice 4
An Open Source PHP User Management System
by the UserSpice Team at http://UserSpice.com
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
// error_reporting(E_ALL);
// ini_set('display_errors', 1);
ini_set("allow_url_fopen", 1);
?>
<?php require_once '../users/init.php'; ?>
<?php require_once $abs_us_root.$us_url_root.'users/includes/header.php'; ?>
<?php require_once $abs_us_root.$us_url_root.'users/includes/navigation.php'; ?>
<?php if (!securePage($_SERVER['PHP_SELF'])){die();} ?>
<?php
$settingsQ = $db->query("SELECT * FROM settings");
$settings = $settingsQ->first();
if($settings->recaptcha == 1){
require_once("../users/includes/recaptcha.config.php");
}
//There is a lot of commented out code for a future release of sign ups with payments
$form_method = 'POST';
$form_action = 'join.php';
$vericode = rand(100000,999999);
$form_valid=FALSE;
//Decide whether or not to use email activation
$query = $db->query("SELECT * FROM email");
$results = $query->first();
$act = $results->email_act;
//Opposite Day for Pre-Activation - Basically if you say in email
//settings that you do NOT want email activation, this lists new
//users as active in the database, otherwise they will become
//active after verifying their email.
if($act==1){
$pre = 0;
} else {
$pre = 1;
}
$token = Input::get('csrf');
if(Input::exists()){
if(!Token::check($token)){
die('Token doesn\'t match!');
}
}
$reCaptchaValid=FALSE;
if(Input::exists()){
$username = Input::get('username');
$fname = Input::get('fname');
$lname = Input::get('lname');
$email = Input::get('email');
$agreement_checkbox = Input::get('agreement_checkbox');
if ($agreement_checkbox=='on'){
$agreement_checkbox=TRUE;
}else{
$agreement_checkbox=FALSE;
}
$db = DB::getInstance();
$settingsQ = $db->query("SELECT * FROM settings");
$settings = $settingsQ->first();
$validation = new Validate();
$validation->check($_POST,array(
'username' => array(
'display' => 'Username',
'required' => true,
'min' => $settings->min_un,
'max' => $settings->max_un,
'unique' => 'users',
),
'fname' => array(
'display' => 'First Name',
'required' => true,
'min' => 2,
'max' => 35,
),
'lname' => array(
'display' => 'Last Name',
'required' => true,
'min' => 2,
'max' => 35,
),
'email' => array(
'display' => 'Email',
'required' => true,
'valid_email' => true,
'unique' => 'users',
),
'password' => array(
'display' => 'Password',
'required' => true,
'min' => $settings->min_pw,
'max' => $settings->max_pw,
),
'confirm' => array(
'display' => 'Confirm Password',
'required' => true,
'matches' => 'password',
),
));
//if the agreement_checkbox is not checked, add error
if (!$agreement_checkbox){
$validation->addError(["Please read and accept terms and conditions"]);
}
if($validation->passed() && $agreement_checkbox){
//Logic if ReCAPTCHA is turned ON
if($settings->recaptcha == 1){
require_once("includes/recaptcha.config.php");
//reCAPTCHA 2.0 check
$response = null;
// check secret key
$reCaptcha = new ReCaptcha($privatekey);
// if submitted check response
if ($_POST["g-recaptcha-response"]) {
$response = $reCaptcha->verifyResponse(
$_SERVER["REMOTE_ADDR"],
$_POST["g-recaptcha-response"]);
}
if ($response != null && $response->success) {
// account creation code goes here
$reCaptchaValid=TRUE;
$form_valid=TRUE;
}else{
$reCaptchaValid=FALSE;
$form_valid=FALSE;
$validation->addError(["Please check the reCaptcha box."]);
}
} //else for recaptcha
if($reCaptchaValid || $settings->recaptcha == 0){
//add user to the database
$user = new User();
$join_date = date("Y-m-d H:i:s");
$params = array(
'fname' => Input::get('fname'),
'email' => $email,
'vericode' => $vericode,
);
if($act == 1) {
//Verify email address settings
$to = rawurlencode($email);
$subject = $settings->site_name;
$body = email_body('_email_template_verify.php',$params);
email($to,$subject,$body);
}
try {
// echo "Trying to create user";
$user->create(array(
'username' => Input::get('username'),
'fname' => Input::get('fname'),
'lname' => Input::get('lname'),
'email' => Input::get('email'),
'password' =>
password_hash(Input::get('password'), PASSWORD_BCRYPT, array('cost' => 12)),
'permissions' => 1,
'account_owner' => 1,
'stripe_cust_id' => '',
'join_date' => $join_date,
'company' => Input::get('company'),
'email_verified' => $pre,
'active' => 1,
'vericode' => $vericode,
));
} catch (Exception $e) {
die($e->getMessage());
}
Redirect::to($us_url_root.'users/joinThankYou.php');
}
} //Validation and agreement checbox
} //Input exists
?>
<?php header('X-Frame-Options: DENY'); ?>
<div id="page-wrapper">
<div class="container">
<?php
require 'views/_join.php';
?>
</div>
</div>
<!-- footers -->
<?php require_once $abs_us_root.$us_url_root.'users/includes/page_footer.php'; // the final html footer copyright row + the external js calls ?>
<?php if($settings->recaptcha == 1){ ?>
<script src="https://www.google.com/recaptcha/api.js" async defer></script>
<?php } ?>
<?php require_once $abs_us_root.$us_url_root.'users/includes/html_footer.php'; // currently just the closing /body and /html ?>
</pre>
Note: I copied the "join.php" from the usersc-folder of the 4.2.1g into the new installation and I didn't change anything in the code...
) for using US.
