Admidio/admidio

<?php
/**
 ***********************************************************************************************
 * Approve new registrations - functions
 *
 * @copyright The Admidio Team
 * @see https://www.admidio.org/
 * @license https://www.gnu.org/licenses/gpl-2.0.html GNU General Public License v2.0 only
 *
 * Parameters:
 *
 * mode: assign_member - Assign registration to a user who is already a member of the organization
 *       assign_user   - Assign registration to a user who is NOT yet a member of the organization
 *       delete_user   - Delete user account
 *       create_user   - Create new user and assign roles automatically without dialog
 *       send_login    - Registration does not need to be assigned, simply send login data
 * new_user_uuid: UUID of the new registered user to be processed
 * user_uuid:     UUID of the user to whom the new login should be assigned
 *****************************************************************************/
use Admidio\Exception;

try {
    require_once(__DIR__ . '/../../system/common.php');
    require(__DIR__ . '/../../system/login_valid.php');

    // Initialize and check the parameters
    $getMode        = admFuncVariableIsValid($_GET, 'mode', 'string', array('requireValue' => true, 'validValues' => array('assign_member', 'assign_user', 'delete_user', 'create_user', 'send_login')));
    $getNewUserUuid = admFuncVariableIsValid($_GET, 'new_user_uuid', 'uuid', array('requireValue' => true));
    $getUserUuid    = admFuncVariableIsValid($_GET, 'user_uuid', 'uuid');

    // only administrators could approve new users
    if (!$gCurrentUser->approveUsers()) {
        throw new Exception('SYS_NO_RIGHTS');
    }

    // module must be enabled in the settings
    if (!$gSettingsManager->getBool('registration_enable_module')) {
        throw new Exception('SYS_MODULE_DISABLED');
    }

    // create user objects
    $registrationUser = new UserRegistration($gDb, $gProfileFields);
    $registrationUser->readDataByUuid($getNewUserUuid);

    if (in_array($getMode, array('assign_member', 'assign_user'))) {
        try {
            $user = new User($gDb, $gProfileFields);
            $user->readDataByUuid($getUserUuid);
            $gDb->startTransaction();

            // adopt the data of the registration user to the existing user account
            $registrationUser->adoptUser($user);

            // first delete the new user set, then update the old one to avoid a
            // duplicate key because of the login name
            $registrationUser->notSendEmail();
            $registrationUser->delete();
            $user->save();

            // every new user to the organization will get the default roles for registration
            if ($getMode === 'assign_user') {
                $user->assignDefaultRoles();
            }
            $gDb->endTransaction();

            if ($gSettingsManager->getBool('system_notifications_enabled')) {
                // Send mail to the user to confirm the registration or the assignment to the new organization
                $systemMail = new SystemMail($gDb);
                $systemMail->addRecipientsByUser($getUserUuid);
                $systemMail->sendSystemMail('SYSMAIL_REGISTRATION_APPROVED', $user);
                $message = $gL10n->get('SYS_ASSIGN_LOGIN_EMAIL', array($user->getValue('EMAIL')));
            } else {
                $message = $gL10n->get('SYS_ASSIGN_LOGIN_SUCCESSFUL');
            }

            // if current user has the right to assign roles then show roles dialog
            // otherwise go to previous url (default roles are assigned automatically)
            if ($gCurrentUser->manageRoles()) {
                // User already exists, but is not yet a member of the current organization, so first assign roles and then send mail later
                admRedirect(SecurityUtils::encodeUrl(ADMIDIO_URL . FOLDER_MODULES.'/profile/roles.php', array('user_uuid' => $getUserUuid, 'accept_registration' => true)));
                // => EXIT
            } else {
                $gMessage->setForwardUrl(ADMIDIO_URL.FOLDER_MODULES.'/registration/registration.php');
                $gMessage->show($message);
                // => EXIT
            }
        } catch (Exception $e) {
            // exception is thrown when email couldn't be sent
            // so save user data and then show error
            $user->save();
            $gDb->endTransaction();

            $gMessage->setForwardUrl($gNavigation->getPreviousUrl());
            $gMessage->show($e->getMessage());
            // => EXIT
        }
    } elseif ($getMode === 'delete_user') {
        // check the CSRF token of the form against the session token
        SecurityUtils::validateCsrfToken($_POST['admidio-csrf-token']);

        // delete registration
        $registrationUser->delete();
        echo json_encode(array('status' => 'success'));
        exit();
    } elseif ($getMode === 'create_user') {
        // accept a registration, assign necessary roles and send a notification email
        $registrationUser->acceptRegistration();

        // if current user has the right to assign roles then show roles dialog
        // otherwise go to previous url (default roles are assigned automatically)
        if ($gCurrentUser->manageRoles()) {
            admRedirect(SecurityUtils::encodeUrl(ADMIDIO_URL . FOLDER_MODULES.'/profile/roles.php', array('accept_registration' => true, 'user_uuid' => $getNewUserUuid)));
        // => EXIT
        } else {
            $gMessage->setForwardUrl($gNavigation->getPreviousUrl());
            $gMessage->show($gL10n->get('SYS_ASSIGN_REGISTRATION_SUCCESSFUL'));
            // => EXIT
        }
    } elseif ($getMode === 'send_login') {
        // User already exists and has a login than sent access data with a new password
        $user = new User($gDb, $gProfileFields);
        $user->readDataByUuid($getUserUuid);
        $user->sendNewPassword();

        // delete the registration because it isn't needed anymore
        $registrationUser->notSendEmail();
        $registrationUser->delete();
        admRedirect(ADMIDIO_URL.FOLDER_MODULES.'/registration/registration.php');
        // => EXIT
    }
} catch (Exception | Exception $e) {
    if ($getMode === 'delete_user') {
        echo json_encode(array('status' => 'error', 'message' => $e->getMessage()));
    } else {
        $gMessage->show($e->getMessage());
    }
}