mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-03-28 17:42:57 +01:00
c86ae74710
bug 933 fixed : quick fix to prevent html injection git-svn-id: http://piwigo.org/svn/branches/2.0@3214 68402e56-0260-453c-a942-63ccdbb3a9ee
92 lines
3.5 KiB
PHP
92 lines
3.5 KiB
PHP
<?php
|
|
// +-----------------------------------------------------------------------+
|
|
// | Piwigo - a PHP based picture gallery |
|
|
// +-----------------------------------------------------------------------+
|
|
// | Copyright(C) 2008-2009 Piwigo Team http://piwigo.org |
|
|
// | Copyright(C) 2003-2008 PhpWebGallery Team http://phpwebgallery.net |
|
|
// | Copyright(C) 2002-2003 Pierrick LE GALL http://le-gall.net/pierrick |
|
|
// +-----------------------------------------------------------------------+
|
|
// | This program is free software; you can redistribute it and/or modify |
|
|
// | it under the terms of the GNU General Public License as published by |
|
|
// | the Free Software Foundation |
|
|
// | |
|
|
// | This program is distributed in the hope that it will be useful, but |
|
|
// | WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
|
|
// | General Public License for more details. |
|
|
// | |
|
|
// | You should have received a copy of the GNU General Public License |
|
|
// | along with this program; if not, write to the Free Software |
|
|
// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
|
|
// | USA. |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
//----------------------------------------------------------- include
|
|
define('PHPWG_ROOT_PATH','./');
|
|
include_once( PHPWG_ROOT_PATH.'include/common.inc.php' );
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | Check Access and exit when user status is not ok |
|
|
// +-----------------------------------------------------------------------+
|
|
check_status(ACCESS_FREE);
|
|
|
|
//----------------------------------------------------------- user registration
|
|
|
|
if (!$conf['allow_user_registration'])
|
|
{
|
|
page_forbidden('User registration closed');
|
|
}
|
|
|
|
$errors = array();
|
|
if (isset($_POST['submit']))
|
|
{
|
|
if ($_POST['password'] != $_POST['password_conf'])
|
|
{
|
|
array_push($errors, l10n('reg_err_pass'));
|
|
}
|
|
|
|
$errors =
|
|
register_user(htmlspecialchars($_POST['login'],ENT_COMPAT,'utf-8'),
|
|
$_POST['password'],
|
|
$_POST['mail_address'],
|
|
true,
|
|
$errors);
|
|
|
|
if (count($errors) == 0)
|
|
{
|
|
$user_id = get_userid($_POST['login']);
|
|
log_user($user_id, false);
|
|
redirect(make_index_url());
|
|
}
|
|
}
|
|
|
|
$login = !empty($_POST['login'])?$_POST['login']:'';
|
|
$email = !empty($_POST['mail_address'])?$_POST['mail_address']:'';
|
|
|
|
//----------------------------------------------------- template initialization
|
|
//
|
|
// Start output of page
|
|
//
|
|
$title= l10n('Registration');
|
|
$page['body_id'] = 'theRegisterPage';
|
|
include(PHPWG_ROOT_PATH.'include/page_header.php');
|
|
|
|
$template->set_filenames( array('register'=>'register.tpl') );
|
|
$template->assign(array(
|
|
'U_HOME' => make_index_url(),
|
|
|
|
'F_ACTION' => 'register.php',
|
|
'F_LOGIN' => $login,
|
|
'F_EMAIL' => $email
|
|
));
|
|
|
|
//-------------------------------------------------------------- errors display
|
|
if (count($errors) != 0)
|
|
{
|
|
$template->assign('errors', $errors);
|
|
}
|
|
|
|
$template->parse('register');
|
|
include(PHPWG_ROOT_PATH.'include/page_tail.php');
|
|
?>
|