Admidio/admidio

<?php
/**
 ***********************************************************************************************
 * Search for existing usernames and show contacts with similar names
 *
 * @copyright The Admidio Team
 * @see https://www.admidio.org/
 * @license https://www.gnu.org/licenses/gpl-2.0.html GNU General Public License v2.0 only
 ***********************************************************************************************
 */
use Admidio\Exception;

try {
    require_once(__DIR__ . '/../../system/common.php');
    require(__DIR__ . '/../../system/login_valid.php');

    $postLastname = admFuncVariableIsValid($_POST, 'lastname', 'string');
    $postFirstname = admFuncVariableIsValid($_POST, 'firstname', 'string');

    // only legitimate users are allowed to call the user management
    if (!$gCurrentUser->editUsers()) {
        throw new Exception('SYS_NO_RIGHTS');
    }

    // check form field input and sanitized it from malicious content
    $contactsNewForm = $gCurrentSession->getFormObject($_POST['admidio-csrf-token']);
    $formValues = $contactsNewForm->validate($_POST);

    // create html page object
    $page = new ModuleContacts('admidio-registration-assign', $gL10n->get('SYS_ASSIGN_REGISTRATION'));
    $newUser = new User($gDb, $gProfileFields);
    $newUser->setValue('LAST_NAME', $postLastname);
    $newUser->setValue('FIRST_NAME', $postFirstname);
    $page->createContentAssignUser($newUser);
    echo $page->getPageContent();
} catch (Exception $e) {
    if ($e->getMessage() === 'No similar users found.') {
        echo json_encode(array(
            'status' => 'success',
            'message' => $gL10n->get('SYS_USER_COULD_BE_CREATED'),
            'url' => ADMIDIO_URL . FOLDER_MODULES . '/profile/profile_new.php?lastname=' . $postLastname . '&firstname=' . $postFirstname)
        );
        exit();
    } else {
        echo json_encode(array('status' => 'error', 'message' => $e->getMessage()));
    }
}