do_user_aed.php

<?php /* $Id$ $URL$ */
require_once 'base.php';
if (!defined('W2P_BASE_DIR')) {
	die('You should not access this file directly');
}

require_once W2P_BASE_DIR . '/includes/config.php';
require_once W2P_BASE_DIR . '/includes/main_functions.php';
require_once W2P_BASE_DIR . '/includes/db_adodb.php';
require_once $AppUI->getLibraryClass('captcha/Functions');

$defaultTZ = w2PgetConfig('system_timezone', 'Europe/London');
$defaultTZ = ('' == $defaultTZ) ? 'Europe/London' : $defaultTZ;
date_default_timezone_set($defaultTZ);

/*
CAPTCHA control condition...
*/
if (strlen($_POST['spam_check']) > 0) {
	$cid = md5_decrypt($_POST['cid']);
	if ($cid == strtoupper($_POST['spam_check'])) {
		$passed = true;
	} else {
		$passed = false;
		echo "<script language='javascript'>
            alert('Error: You didn\'t provide the correct Anti Spam Security ID or all required data. Please try again.');
            history.go(-1);
	        </script>";
		exit;
	}
} else {
	$passed = false;
	echo "
          <script language='javascript'>
                alert('Error: You didn\'t provide the Anti Spam Security ID. Please try again.');
                history.go(-1);
          </script>
         ";
	exit;
}

if (!isset($GLOBALS['OS_WIN'])) {
	$GLOBALS['OS_WIN'] = (stristr(PHP_OS, 'WIN') !== false);
}


$AppUI = new CAppUI();

if (w2PgetConfig('activate_external_user_creation') != 'true') {
	die('You should not access this file directly');
}

$username = w2PgetParam($_POST, 'user_username', 0);
$contactListByUsername = CContact::getContactByUsername($username);

if ($contactListByUsername != 'User Not Found') {
	error_reporting(0);
	echo "<script language='javascript'>
          alert('The username you selected already exists, please select another or if that user name is yours request the password recovery through the dedicated link.');
          history.go(-2);
        </script>";
	die();
}

$email = w2PgetParam($_POST, 'contact_email', 0);
$contactListByEmail = CContact::getContactByEmail($email);

if ($contactListByEmail != 'User Not Found') {
	error_reporting(0);
	echo "<script language='javascript'>
          alert('The email you selected already exists, please select another or if that email is yours request the password recovery through the dedicated link.');
          history.go(-2);
        </script>";
	die();
}

$user = new CUser();
if (!$user->bind($_POST)) {
	$AppUI->setMsg($user->getError(), UI_MSG_ERROR);
	$AppUI->redirect();
}

$contact = new CContact();
if (!$contact->bind($_POST)) {
	$AppUI->setMsg($contact->getError(), UI_MSG_ERROR);
	$AppUI->redirect();
}

// prepare (and translate) the module name ready for the suffix
$AppUI->setMsg('User');

$isNewUser = !(w2PgetParam($_REQUEST, 'user_id', 0));

if ($isNewUser) {
	// check if a user with the param Username already exists
	if( is_array($contactListByUsername)) {
		$AppUI->setMsg('This username is not available, please try another.', UI_MSG_ERROR, true);
		$AppUI->redirect();		
	} else {
		$contact->contact_owner = $AppUI->user_id;
	}
}

$result = $contact->store($AppUI);
if ($result) {
    $user->user_contact = $contact->contact_id;
    if (($msg = $user->store())) {
        $AppUI->setMsg($msg, UI_MSG_ERROR);
    } else {
        if ($isNewUser) {
            notifyNewExternalUser($contact->contact_email, $contact->contact_first_name, $user->user_username, $_POST['user_password']);
        }
        notifyHR(w2PgetConfig('admin_email', 'admin@web2project.net'), 'w2P System Human Resources', 
            $contact->contact_email, $contact->contact_first_name, $user->user_username,
            $_POST['user_password'], $user->user_id);

        $q = new w2p_Database_Query;
        $q->addTable('users', 'u');
        $q->addQuery('contact_email');
        $q->leftJoin('contacts', 'c', 'c.contact_id = u.user_contact');
        $q->addWhere('u.user_username = \'admin\'');
        $admin_user = $q->loadList();
    }
} else {
    $AppUI->setMsg($msg, UI_MSG_ERROR);
}

echo "<script language='javascript'>
	      alert('The User Administrator has been notified to grant you access to the system and an email message was sent to you with your login info. Thank you very much.');
	      history.go(-2);
      </script>";