Ваш код активации : ".$rcode."
"; $body .= "Для продолжения регистрации вам необходимо указать код регистрации на странице регистрации
"; $from= 'siterobot@'.$_SERVER['SERVER_NAME']; $subject = 'Регистрация на сайте '.$_SERVER['SERVER_NAME']; $head = "Content-type: text/html; charset=utf-8;\n"; $head .= "From: ".$from."\n"; $head.= "Mime-version: 1.0\n"; $head.= "Subject: ".$subject."\n"; if(@mail($mail, $subject, $body, $head)) { return array('sent' => 1, 'error' => 0); } else { return array('sent' => 0, 'error' => 2); } } function receive_registration_code($params){ $code = mysql_real_escape_string($params['s1_code']); $users = SQLSelect("SELECT `User_ID`,`Email` FROM `User` WHERE `RegistrationCode` = '".$code."'; "); if (count($users) != 1) { return array ('activated' => 0, 'error' => 1); } $user_id = $users[0]['User_ID']; $email = $users[0]['Email']; $query = "UPDATE `User` SET `Confirmed` = 1 WHERE `User_ID` = '".$user_id."';"; SQLExec($query); $_SESSION['user']['code_activated']=1; $_SESSION['user']['Email']=$email; return array ('activated' => 1, 'error' => 0, 'email'); } function registration($params){ $tmp = array('registered' => 0, 'error' => ''); $pass = $params['Password']; if ($params['Password'] != $params['PasswordAgain']) $tmp['error']=' 1'; if (!isset($params['Password']) || !isset($params['PasswordAgain'])) $tmp['error'] .= ' 2'; if ($_SESSION['user']['Email']){ if ($params['Email'] != $_SESSION['user']['Email'] ) $tmp['error']=' 3'; $email = mysql_real_escape_string($_SESSION['user']['Email']); } else { $email = mysql_real_escape_string($params['Email']); } if (!$email) { $tmp['error']=4; return $tmp; } $mode='update'; $query = "SELECT `User_ID` as `id` FROM `User` WHERE `Email` = '".$email."' AND `RegistrationCode` <> '' AND `Checked` = 0;"; $user = SQLSelectOne($query); if (!$user['id']) { $query = "SELECT `User_ID`,`Checked` as `id` FROM `User` WHERE `Email` = '".$email."';"; $user = SQLSelectOne($query); if ($user['id']) { $tmp['error']=5; return $tmp; } $mode='insert'; } if ($tmp['error']) return $tmp; if ($mode == 'update') { unset($params['PasswordAgain']); unset($params['Email']); $params['Checked']=1; $params['Password']=md5($params['Password']); $params['RegistrationCode']=''; $updated = $this->myUpdate('User', $params, " `Email` = '".mysql_real_escape_string($email)."' "); if (!$updated) { $tmp['error'] = 4; //$tmp['query'] = $params; return $tmp; } } else { $user_struct = getObjectStruct(0,3); $data = set_fields_to_property_set($params,0,2,$user_struct); if (!$data) { $tmp['error']=7; return $tmp; } $data['Password']=md5(trim($params['Password'])); $data['Checked']=1; $data['Created']=date('Y-m-d H:i:s'); $r = SQLInsert('User',$data); if (!$r) { $tmp['error']=9; return $tmp; } } $auth = auth($email,$pass); if (!$auth) {$tmp['error']=6; return $tmp;} $_SESSION['user']['logged']=1; $tmp['registered']=1; return $tmp; } function registration_fast($params){ $tmp = array('registered' => 0, 'error' => ''); if (!isset($params['ur'])) {$tmp['error']=1; return $tmp;} $_SESSION['cart_contact']=$params; $_SESSION['fast_registration']=1; $tmp['registered']=1; return $tmp; } function ajax_login($params){ $tmp = array('logged' => 0, 'error' => 0); //DebugBreak(); $email = $params['Email']; $pass = $params['Pass']; if (!$email || !$pass) {$tmp['error']=1; return $tmp;} if (is_logged()) {$tmp['error']=2; return $tmp;} $r = auth($email,$pass); if (!$r) {$tmp['error']=3; return $tmp;} $tmp['logged']=1; return $tmp; } function logout($params) { unauth(); unset($_SESSION['cart_contact']); return array('unlogged'=>1); } function change_password($params,$ajax=true,$old_password=false){ global $CMS_AUTHORIZE_FIELD; $tmp=array('changed' => 0, 'error' => 0); if (!is_logged()) { $tmp['error']=1; return $tmp;} $user_id = (int)$_SESSION['user']['User_ID']; if ($old_password) { $old_password=trim(mysql_real_escape_string($params['OldPassword'])); if (!$old_password) {$tmp['error']=6; return $tmp;} } $password=trim(mysql_real_escape_string($params['Password'])); $passwordAgain=trim(mysql_real_escape_string($params['PasswordAgain'])); if ($password != $passwordAgain || (strlen($password) <5 )) {$tmp['error']=2; return $tmp;} $login =$_SESSION['user'][$CMS_AUTHORIZE_FIELD]; $u = SQLSelectOne("SELECT User_ID FROM User WHERE `$CMS_AUTHORIZE_FIELD` ='".$login."' ".($old_password ? " AND Password=MD5('".$old_password."')" : "" )." AND Checked=1"); $password=md5($password); if (!$u) {$tmp['error']=3; return $tmp;} SQLExec("UPDATE `User` SET `Password` = '".$password."' WHERE `User_ID` = '".$user_id."';"); $auth = auth($login,$passwordAgain,false); if (!$auth) {$tmp['error']=4; return $tmp;} $tmp['changed']=1; return $tmp; } function forgot_password($params){ global $MODULE_VARS; $tmp=array('passed' => 0, 'error' => 0); $email = trim(mysql_real_escape_string($params['Email'])); if (!$email) { $tmp['error']=1; return $tmp;} $user = SQLSelectOne("SELECT `User_ID`, `Name` FROM `User` WHERE `Email` = '".$email."'; "); if (!($user_id = (int)$user['User_ID'])) { $tmp['error']=2; return $tmp; } $newpass = substr(md5(time()),0,6); connect_feature('mail'); $mailer = new Mailer(); $body ="Здавствуйте, уважаемый(ая) ".$user['Name']."!"; $body .="Ваш новый пароль на сайте ".$_SERVER['HTTP_HOST']." - ".$newpass.".
"; ($MODULE_VARS['user']['FEEDBACK_EMAIL_NAME']) ? $from_name = $MODULE_VARS['user']['FEEDBACK_EMAIL_NAME'] : $from_name = "Издательство гревцова"; $mailer->setMailer($from_name,"admin@".$_SERVER['HTTP_HOST'],$email,"Восстановление пароля",$body); if (!$mailer->send()) {$tmp['error']=5; return $tmp;} SQLExec("UPDATE `User` SET `newPassword` = '".md5($newpass)."' WHERE `User_ID` = '".$user_id."';"); $tmp['passed']=1; return $tmp; } } class C_users_admin extends C_users { } if ($as_admin) { $C_users_admin = new C_users_admin(); } else { $C_users = new C_users(); } ?> index.php 0000666 00000004470 15047261057 0006404 0 ustar 00 Вернуться"; eval("echo \"$template_footer\";"); } exit; } if ($Action) { $res = mysql_query("SELECT User_ID FROM User WHERE $CMS_AUTHORIZE_FIELD ='$AUTH_USER' AND Password=MD5('$AUTH_PW') AND Checked=1",$LinkID); $IsAuthorized = mysql_num_rows($res); mysql_free_result($res); } if (!$Action || !$IsAuthorized) { eval("echo \"$template_header\";"); ShowLoginForm(); eval("echo \"$template_footer\";"); } else { if ($IsAuthorized) Authorize(); /* if ($REQUESTED_BY=='GET') $redirect = "http://".$HTTP_HOST.$REQUESTED_FROM; else $redirect = "http://".$HTTP_HOST."/"; */ $redirect = "http://".$HTTP_HOST; $ProjectDomain = GetAllProjectDomains(); $res = mysql_query("SELECT MD5('${AUTH_PW}')",$LinkID); list($Password) = mysql_fetch_row($res); mysql_free_result($res); for ($i=0;$iЗаполните одно из полей
"; } elseif ($Login && !$Email) { $res = mysql_query("SELECT User_ID,$EmailField FROM $USER_TABLE_NAME WHERE $CMS_AUTHORIZE_FIELD ='$Login'",$LinkID); if (!mysql_num_rows($res)) $err = "Пользователь не найден"; else list($UserID,$UserEmail) = mysql_fetch_row($res); mysql_free_result($res); } elseif (!$Login && $Email) { $res = mysql_query("SELECT User_ID,$EmailField FROM $USER_TABLE_NAME WHERE $EmailField='$Email'",$LinkID); if (!mysql_num_rows($res)) $err = "Пользователь не найден
"; else list($UserID,$UserEmail) = mysql_fetch_row($res); mysql_free_result($res); } else { $err = "Заполните одно из полей
"; } } if (!$post || $err) { echo ShowRecoveryForm($err); } else { $NewPassword = GeneratePassword($MODULE_VARS['users']['USER_GENERATED_PASSWORD_LENGTH']); $res = mysql_query("UPDATE User SET Password=MD5('".$NewPassword."') WHERE User_ID=".$UserID, $LinkID); if (as_mail($UserEmail,"Новый пароль","Новый пароль: ".$NewPassword." Сайт: $DOMAIN_NAME ", $fromname, $fromemail)) { echo "Новый пароль выслан на Ваш емейл
"; } else { echo "Внутренняя ошибка сайта. Свяжитесь с администратором сайта
"; } } eval("echo \"$template_footer\";"); ?>