Blame Identity/Webenv/Mantis/1.1.2-1.fc9/manage_user_create.php

ef5584
ef5584
# Mantis - a php based bugtracking system
ef5584
ef5584
# Copyright (C) 2000 - 2002  Kenzaburo Ito - kenito@300baud.org
ef5584
# Copyright (C) 2002 - 2007  Mantis Team   - mantisbt-dev@lists.sourceforge.net
ef5584
ef5584
# Mantis is free software: you can redistribute it and/or modify
ef5584
# it under the terms of the GNU General Public License as published by
ef5584
# the Free Software Foundation, either version 2 of the License, or
ef5584
# (at your option) any later version.
ef5584
#
ef5584
# Mantis is distributed in the hope that it will be useful,
ef5584
# but WITHOUT ANY WARRANTY; without even the implied warranty of
ef5584
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
ef5584
# GNU General Public License for more details.
ef5584
#
ef5584
# You should have received a copy of the GNU General Public License
ef5584
# along with Mantis.  If not, see <http://www.gnu.org/licenses/>.
ef5584
ef5584
	#------------------------------
ef5584
	#   $Revision: 2643 $
ef5584
	#     $Author: al $    
ef5584
	#       $Date: 2009-06-18 19:06:27 -0400 (Thu, 18 Jun 2009) $  
ef5584
	#------------------------------
ef5584
ef5584
	require_once( 'core.php' );
ef5584
ef5584
	$t_core_path = config_get( 'core_path' );
ef5584
ef5584
	require_once( $t_core_path.'email_api.php' );
ef5584
ef5584
	auth_reauthenticate();
ef5584
	access_ensure_global_level( config_get( 'manage_user_threshold' ) );
ef5584
ef5584
	$f_username			= gpc_get_string( 'username' );
ef5584
	$f_realname			= gpc_get_string( 'realname' );
ef5584
	$f_password			= gpc_get_string( 'password', '' );
ef5584
	$f_password_verify	= gpc_get_string( 'password_verify', '' );
ef5584
	$f_email			= gpc_get_string( 'email' );
ef5584
	$f_access_level		= gpc_get_string( 'access_level' );
ef5584
	$f_protected		= gpc_get_bool( 'protected' );
ef5584
	$f_enabled			= gpc_get_bool( 'enabled' );
ef5584
ef5584
	# check for empty username
ef5584
	$f_username = trim( $f_username );
ef5584
	if ( is_blank( $f_username ) ) {
ef5584
		trigger_error( ERROR_EMPTY_FIELD, ERROR );
ef5584
	}
ef5584
ef5584
	# Check the name for validity here so we do it before promting to use a
ef5584
	#  blank password (don't want to prompt the user if the process will fail
ef5584
	#  anyway)
ef5584
	user_ensure_name_valid( $f_username );
ef5584
	user_ensure_realname_valid( $f_realname );
ef5584
ef5584
	if ( $f_password != $f_password_verify ) {
ef5584
		trigger_error( ERROR_USER_CREATE_PASSWORD_MISMATCH, ERROR );
ef5584
	}
ef5584
ef5584
	$f_email = email_append_domain( $f_email );
ef5584
	email_ensure_not_disposable( $f_email );
ef5584
ef5584
	if ( ( ON == config_get( 'send_reset_password' ) ) && ( ON == config_get( 'enable_email_notification' ) ) ) {
ef5584
		# Check code will be sent to the user directly via email. Dummy password set to random
ef5584
		# Create random password
ef5584
		$t_seed = $f_email . $f_username;
ef5584
		$f_password	= auth_generate_random_password( $t_seed );
ef5584
	}
ef5584
	else {
ef5584
		# Password won't to be sent by email. It entered by the admin
ef5584
		# Now, if the password is empty, confirm that that is what we wanted
ef5584
		if ( is_blank( $f_password ) ) {
ef5584
			helper_ensure_confirmed( lang_get( 'empty_password_sure_msg' ),
ef5584
					 lang_get( 'empty_password_button' ) );
ef5584
		}
ef5584
	}
ef5584
ef5584
	form_security_validate( 'manage_user_create' );
ef5584
ef5584
	$t_cookie = user_create( $f_username, $f_password, $f_email, $f_access_level, $f_protected, $f_enabled, $f_realname );
ef5584
ef5584
	if ( $t_cookie === false ) {
ef5584
		$t_redirect_url = 'manage_user_page.php';
ef5584
	} else {
ef5584
		# ok, we created the user, get the row again
ef5584
		$t_user_id = user_get_id_by_name( $f_username );
ef5584
		$t_redirect_url = 'manage_user_edit_page.php?user_id=' . $t_user_id;
ef5584
	}
ef5584
ef5584
	html_page_top1();
ef5584
	html_meta_redirect( $t_redirect_url );
ef5584
	html_page_top2();
ef5584
?>
ef5584
ef5584
ef5584
ef5584
	$t_access_level = get_enum_element( 'access_levels', $f_access_level );
ef5584
	echo '

' . lang_get( 'created_user_part1' ) . ' ' . $f_username . ' ' . lang_get( 'created_user_part2' ) . ' ' . $t_access_level . '

';
ef5584
ef5584
	print_bracket_link( $t_redirect_url, lang_get( 'proceed' ) );
ef5584
?>
ef5584
ef5584
ef5584