process.php

   1 <?
   2 /**
   3  * Process.php
   4  */
   5 include("include/session.php");
   6
   7 class Process
   8 {
   9    /* Class constructor */
  10    function Process(){
  11       global $session;
  12       /* User submitted login form */
  13       if(isset($_POST['sublogin'])){
  14          $this->procLogin();
  15       }
  16       /* User submitted registration form */
  17       else if(isset($_POST['subjoin'])){
  18          $this->procRegister();
  19       }
  20       /* User submitted forgot password form */
  21       else if(isset($_POST['subforgot'])){
  22          $this->procForgotPass();
  23       }
  24       /* User submitted edit account form */
  25       else if(isset($_POST['subedit'])){
  26          $this->procEditAccount();
  27       }
  28       /**
  29        * The only other reason user should be directed here
  30        * is if he wants to logout, which means user is
  31        * logged in currently.
  32        */
  33       else if($session->logged_in){
  34          $this->procLogout();
  35       }
  36       /**
  37        * Should not get here, which means user is viewing this page
  38        * by mistake and therefore is redirected.
  39        */
  40        else{
  41          header("Location: ".$session->referrer);
  42        }
  43    }
  44
  45    /**
  46     * procLogin - Processes the user submitted login form, if errors
  47     * are found, the user is redirected to correct the information,
  48     * if not, the user is effectively logged in to the system.
  49     */
  50    function procLogin(){
  51       global $session, $form;
  52       /* Login attempt */
  53       $retval = $session->login($_POST['user'], $_POST['pass'], isset($_POST['remember']));
  54
  55       /* Login successful */
  56       if($retval){
  57         $_SESSION['regsuccess'] = true;
  58         unset($_SESSION['regfail']);
  59       }
  60       /* Login failed */
  61       else{
  62          $_SESSION['regsuccess'] = false;
  63          $_SESSION['regfail'] = true;
  64          $_SESSION['value_array'] = $_POST;
  65          $_SESSION['error_array'] = $form->getErrorArray();
  66       }
  67       header("Location:./?x=ingresar");
  68    }
  69
  70    /**
  71     * procLogout - Simply attempts to log the user out of the system
  72     * given that there is no logout form to process.
  73     */
  74    function procLogout(){
  75       global $session;
  76       $retval = $session->logout();
  77         header("Location: ".$session->referrer);
  78    }
  79
  80    /**
  81     * procRegister - Processes the user submitted registration form,
  82     * if errors are found, the user is redirected to correct the
  83     * information, if not, the user is effectively registered with
  84     * the system and an email is (optionally) sent to the newly
  85     * created user.
  86     */
  87    function procRegister(){
  88       global $session, $form;
  89       /* Convert username to all lowercase (by option) */
  90       if(ALL_LOWERCASE){
  91          $_POST['user'] = strtolower($_POST['user']);
  92       }
  93       /* Registration attempt */
  94       $retval = $session->register($_POST['user'], $_POST['pass'], $_POST['email'],$_POST['nombre'], $_POST['encargado'], $_POST['catedratico'], $_POST['tipo'], $_POST['departamento']);
  95
  96       /* Registration Successful */
  97       if($retval == 0){
  98          $_SESSION['regsuccess'] = true;
  99          $_SESSION['reguname'] = $_POST['user'];
 100       }
 101       /* Error found with form */
 102       else if($retval == 1){
 103          $_SESSION['value_array'] = $_POST;
 104          $_SESSION['error_array'] = $form->getErrorArray();
 105       }
 106       /* Registration attempt failed */
 107       else if($retval == 2){
 108          $_SESSION['reguname'] = $_POST['user'];
 109          $_SESSION['regsuccess'] = false;
 110
 111       }
 112         header("Location: ./?x=registro");
 113 }
 114
 115    /**
 116     * procForgotPass - Validates the given username then if
 117     * everything is fine, a new password is generated and
 118     * emailed to the address the user gave on sign up.
 119     */
 120    function procForgotPass(){
 121       global $database, $session, $mailer, $form;
 122       /* Username error checking */
 123       $subuser = $_POST['user'];
 124       $field = "user";  //Use field name for username
 125       if(!$subuser || strlen($subuser = trim($subuser)) == 0){
 126          $form->setError($field, "* Username not entered<br>");
 127       }
 128       else{
 129          /* Make sure username is in database */
 130          $subuser = stripslashes($subuser);
 131          if(strlen($subuser) < 5 || strlen($subuser) > 30 ||
 132             !eregi("^([0-9a-z])+$", $subuser) ||
 133             (!$database->usernameTaken($subuser))){
 134             $form->setError($field, "* Username does not exist<br>");
 135          }
 136       }
 137
 138       /* Errors exist, have user correct them */
 139       if($form->num_errors > 0){
 140          $_SESSION['value_array'] = $_POST;
 141          $_SESSION['error_array'] = $form->getErrorArray();
 142       }
 143       /* Generate new password and email it to user */
 144       else{
 145          /* Generate new password */
 146          $newpass = $session->generateRandStr(8);
 147
 148          /* Get email of user */
 149          $usrinf = $database->getUserInfo($subuser);
 150          $email  = $usrinf['email'];
 151
 152          /* Attempt to send the email with new password */
 153          if($mailer->sendNewPass($subuser,$email,$newpass)){
 154             /* Email sent, update database */
 155             $database->updateUserField($subuser, "password", md5($newpass));
 156             $_SESSION['forgotpass'] = true;
 157          }
 158          /* Email failure, do not change password */
 159          else{
 160             $_SESSION['forgotpass'] = false;
 161          }
 162       }
 163
 164       header("Location: ".$session->referrer);
 165    }
 166
 167    /**
 168     * procEditAccount - Attempts to edit the user's account
 169     * information, including the password, which must be verified
 170     * before a change is made.
 171     */
 172    function procEditAccount(){
 173       global $session, $form;
 174       /* Account edit attempt */
 175       $retval = $session->editAccount($_POST['curpass'], $_POST['newpass'], $_POST['email']);
 176
 177       /* Account edit successful */
 178       if($retval){
 179          $_SESSION['useredit'] = true;
 180          header("Location: ".$session->referrer);
 181       }
 182       /* Error found with form */
 183       else{
 184          $_SESSION['value_array'] = $_POST;
 185          $_SESSION['error_array'] = $form->getErrorArray();
 186          header("Location: ".$session->referrer);
 187       }
 188    }
 189 };
 190
 191 /* Initialize process */
 192 $process = new Process;
 193
 194 ?>