<?php

require_once(dirname(__DIR__) . '/global.php');

require_once(__DIR__ . '/Account.php');

require_once(__DIR__ . '/Badge.php');

require_once(__DIR__ . '/CookieStorage.php');

require_once(__DIR__ . '/CampaignTracker.php');

require_once(__DIR__ . '/Invitation.php');

require_once(dirname(__DIR__) . '/swiftmailer/lib/swift_required.php');

/**

* This class represents a registerd user in the system

*

* Usage:

* <code>

* // Getting currently logged in user

* // Returns User object, same as User::require_login()

* $user = StartupAPI::requireLogin();

* echo 'Welcome, ' . $user->getName() . '!';

* </code>

*

* Note that unless you are absolutely sure that data in your application is only

* specific to one individual, you might want to use Accounts to connect your data

* instead of Users - this way you will be able to add multi-user accounts in the

* future when you're ready.

*

* <code>

* // Getting currently selected account

* $account = $user->getCurrentAccount();

* </code>

*

* Each user gets a personal account created for them out of the box to make it

* easier for you to transition to accounts in the future.

*

* @see Account

*

* @package StartupAPI

*/

class User {

/**

* Checks if user is logged in and returns use object or redirects to login page

*

* This is the easiest way to protect a page from public viewing

*

* Usage:

* <code>

* // Getting currently logged in user

* $user = StartupAPI::requireLogin();

* </code>

*

* Although preferred method is to call a method on StartupAPI object

* <code>

* $user = StartupAPI::requireLogin();

* </code>

*

* @param boolean $allow_impersonation Set to false if you do not want to allow impersonation

*

* @return User Current user

*/

public static function require_login($allow_impersonation = true) {

$user = self::get($allow_impersonation);

if (!is_null($user)) {

return $user;

} else {

self::redirectToLogin();

}

}

/**

* Checks if user is logged in and returns use object or null if user is not logged in

* Disabled users are not allowed to login unless they are being impersonated.

*

* Usage:

* <code>

* // Getting currently logged in user

* $user = User::get();

*

* if (!is_null($user)) {

* echo 'Welcome, ' . $user->getName() . '!';

* }

* </code>

*

* Although preferred method is to call a method on StartupAPI object

* <code>

* $user = StartupAPI::getUser();

* </code>

*

* @param boolean $allow_impersonation Set to false if you do not want to allow impersonation

*

* @return User|null Current user or null if user is not logged in

*/

public static function get($allow_impersonation = true) {

$storage = new MrClay_CookieStorage(array(

'secret' => UserConfig::$SESSION_SECRET,

'mode' => MrClay_CookieStorage::MODE_ENCRYPT,

'path' => UserConfig::$SITEROOTURL,

'httponly' => true

));

$userid = $storage->fetch(UserConfig::$session_userid_key);

if (is_numeric($userid)) {

$user = self::getUser($userid);

if (is_null($user)) {

return null;

}

// if email verification is required, force users to verify it

if (!$user->is_email_verified && UserConfig::$requireVerifiedEmail && !UserConfig::$IGNORE_REQUIRED_EMAIL_VERIFICATION) {

self::redirectToEmailVerification();

}

// only forsing password reset on non-impersonated users

if ($user->requiresPasswordReset() &&

!UsernamePasswordAuthenticationModule::$IGNORE_PASSWORD_RESET) {

self::redirectToPasswordReset();

}

// don't even try impersonating if not admin

if (!$allow_impersonation || !$user->isAdmin()) {

if ($user->isDisabled()) {

return null;

}

return $user;

}

// now, let's check impersonation

$impersonated_userid = $storage->fetch(UserConfig::$impersonation_userid_key);

$impersonated_user = self::getUser($impersonated_userid);

// do not impersonate unknown user or the same user

if (is_null($impersonated_user) || $user->isTheSameAs($impersonated_user)) {

if ($user->isDisabled()) {

return null;

}

return $user;

}

$impersonated_user->impersonator = $user;

return $impersonated_user;

} else {

return null;

}

}

/**

* Updates user activity when user returns to the site more then a day after last access

*

* @throws StartupAPIException

*

* @internal

*/

public static function updateReturnActivity() {

$storage = new MrClay_CookieStorage(array(

'secret' => UserConfig::$SESSION_SECRET,

'mode' => MrClay_CookieStorage::MODE_ENCRYPT,

'path' => UserConfig::$SITEROOTURL,

'httponly' => true

));

$last = $storage->fetch(UserConfig::$last_login_key);

if (!$storage->store(UserConfig::$last_login_key, time())) {

throw new StartupAPIException(implode('; ', $storage->errors));

}

$user = self::get();

if (!is_null($user) && $last > 0

&& $last < time() - UserConfig::$last_login_session_length * 60) {

if ($last > time() - 86400) {

$user->recordActivity(USERBASE_ACTIVITY_RETURN_DAILY);

} else if ($last > time() - 7 * 86400) {

$user->recordActivity(USERBASE_ACTIVITY_RETURN_WEEKLY);

} else if ($last > time() - 30 * 86400) {

$user->recordActivity(USERBASE_ACTIVITY_RETURN_MONTHLY);

}

}

}

/**

* Sets user's referrer based on CampaignTracker's information

*

* @throws DBException

*

* @internal Should not be used other then by login methods

*/

private function setReferer() {

$referer = CampaignTracker::getReferer();

if (is_null($referer)) {

return;

}

$db = UserConfig::getDB();

if ($stmt = $db->prepare('UPDATE u_users SET referer = ? WHERE id = ?')) {

if (!$stmt->bind_param('si', $referer, $this->userid)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

}

/**

* Return the URL this user came from when registered on the site.

*

* @return string Referer URL

*

* @throws DBException

*/

public function getReferer() {

$db = UserConfig::getDB();

$referer = null;

if ($stmt = $db->prepare('SELECT referer FROM u_users WHERE id = ?')) {

if (!$stmt->bind_param('i', $this->userid)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->bind_result($referer)) {

throw new DBBindResultException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

$stmt->fetch();

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

return $referer;

}

/**

* Returns a list of users by referrer

*

* @param int $days Number of days to look back for

*

* @return array Array with URLs as keys and values are arrays of users

*

* @throws DBException

*/

public static function getReferers($days = 30) {

$db = UserConfig::getDB();

$sources = array();

if ($stmt = $db->prepare('SELECT referer, id, status, name, username, email, requirespassreset, fb_id, fb_link, UNIX_TIMESTAMP(regtime), points, email_verified FROM u_users WHERE referer IS NOT NULL AND regtime > DATE_SUB(NOW(), INTERVAL ? DAY) ORDER BY regtime DESC')) {

if (!$stmt->bind_param('i', $days)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

if (!$stmt->bind_result($referer, $userid, $status, $name, $username, $email, $requirespassreset, $fb_id, $fb_link, $regtime, $points, $is_email_verified)) {

throw new DBBindResultException($db, $stmt);

}

while ($stmt->fetch() === TRUE) {

$sources[$referer][] = new self($userid, $status, $name, $username, $email, $requirespassreset, $fb_id, $fb_link, $regtime, $points, $is_email_verified);

}

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

return $sources;

}

/**

* Sets user's campaign they came from

*

* @throws DBException

*

* @internal Used by login/registration scripts to record user's campaign

*/

private function setRegCampaign() {

$campaign = CampaignTracker::getCampaign();

if (is_null($campaign) || !$campaign) {

return;

}

$db = UserConfig::getDB();

$cmp_source_id = null;

if (array_key_exists('cmp_source', $campaign)) {

$cmp_source_id = CampaignTracker::getCampaignSourceID($campaign['cmp_source']);

}

$cmp_medium_id = null;

if (array_key_exists('cmp_medium', $campaign)) {

$cmp_medium_id = CampaignTracker::getCampaignMediumID($campaign['cmp_medium']);

}

$cmp_keywords_id = null;

if (array_key_exists('cmp_keywords', $campaign)) {

$cmp_keywords_id = CampaignTracker::getCampaignKeywordsID($campaign['cmp_keywords']);

}

$cmp_content_id = null;

if (array_key_exists('cmp_content', $campaign)) {

$cmp_content_id = CampaignTracker::getCampaignContentID($campaign['cmp_content']);

;

}

$cmp_name_id = null;

if (array_key_exists('cmp_name', $campaign)) {

$cmp_name_id = CampaignTracker::getCampaignNameID($campaign['cmp_name']);

}

// update user record with compaign IDs

if ($stmt = $db->prepare('UPDATE u_users SET

reg_cmp_source_id = ?,

reg_cmp_medium_id = ?,

reg_cmp_keywords_id = ?,

reg_cmp_content_id = ?,

reg_cmp_name_id = ?

WHERE id = ?')) {

if (!$stmt->bind_param('sssssi', $cmp_source_id, $cmp_medium_id, $cmp_keywords_id, $cmp_content_id, $cmp_name_id, $this->userid)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

}

/**

* Returns campaign they came from when registerd

*

* @return array Array of campaign parameters

*

* @throws DBException

*/

public function getCampaign() {

$db = UserConfig::getDB();

$campaign = array();

if ($stmt = $db->prepare('SELECT cmp.name, cmp_content.content, cmp_keywords.keywords, cmp_medium.medium, cmp_source.source

FROM u_users AS users

LEFT JOIN u_cmp AS cmp ON users.reg_cmp_name_id = cmp.id

LEFT JOIN u_cmp_content AS cmp_content ON users.reg_cmp_content_id = cmp_content.id

LEFT JOIN u_cmp_keywords AS cmp_keywords ON users.reg_cmp_keywords_id = cmp_keywords.id

LEFT JOIN u_cmp_medium AS cmp_medium ON users.reg_cmp_medium_id = cmp_medium.id

LEFT JOIN u_cmp_source AS cmp_source ON users.reg_cmp_source_id = cmp_source.id

WHERE users.id = ?')) {

if (!$stmt->bind_param('i', $this->userid)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

if (!$stmt->bind_result($cmp_name, $cmp_content, $cmp_keywords, $cmp_medium, $cmp_source)) {

throw new DBBindResultException($db, $stmt);

}

if ($stmt->fetch() === TRUE) {

$campaign['cmp_name'] = $cmp_name;

$campaign['cmp_content'] = $cmp_content;

$campaign['cmp_keywords'] = $cmp_keywords;

$campaign['cmp_medium'] = $cmp_medium;

$campaign['cmp_source'] = $cmp_source;

}

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

return $campaign;

}

/**

* Returns 2-dimensional array with first keys for each campaign param and second keys for each value of that parameter, values of the array are arrays of users.

*

* @param int $days A number of days to look back for

*

* @return array Array of campaign users data

*

* @throws DBException

*/

public static function getCampaigns($days = 30) {

$db = UserConfig::getDB();

$campaigns = array();

if ($stmt = $db->prepare('SELECT cmp.name, cmp_content.content, cmp_keywords.keywords, cmp_medium.medium, cmp_source.source,

users.id, status, users.name, username, email, requirespassreset, fb_id, fb_link, UNIX_TIMESTAMP(regtime), points, email_verified

FROM u_users AS users

LEFT JOIN u_cmp AS cmp ON users.reg_cmp_name_id = cmp.id

LEFT JOIN u_cmp_content AS cmp_content ON users.reg_cmp_content_id = cmp_content.id

LEFT JOIN u_cmp_keywords AS cmp_keywords ON users.reg_cmp_keywords_id = cmp_keywords.id

LEFT JOIN u_cmp_medium AS cmp_medium ON users.reg_cmp_medium_id = cmp_medium.id

LEFT JOIN u_cmp_source AS cmp_source ON users.reg_cmp_source_id = cmp_source.id

WHERE regtime > DATE_SUB(NOW(), INTERVAL ? DAY)

AND (reg_cmp_name_id IS NOT NULL

OR reg_cmp_content_id IS NOT NULL

OR reg_cmp_keywords_id IS NOT NULL

OR reg_cmp_medium_id IS NOT NULL

OR reg_cmp_source_id IS NOT NULL

)

ORDER BY regtime DESC')) {

if (!$stmt->bind_param('i', $days)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

if (!$stmt->bind_result($cmp_name, $cmp_content, $cmp_keywords, $cmp_medium, $cmp_source, $userid, $status, $name, $username, $email, $requirespassreset, $fb_id, $fb_link, $regtime, $points, $is_email_verified)) {

throw new DBBindResultException($db, $stmt);

}

while ($stmt->fetch() === TRUE) {

$user = new self($userid, $status, $name, $username, $email, $requirespassreset, $fb_id, $fb_link, $regtime, $points, $is_email_verified);

if (!is_null($cmp_name)) {

$campaigns['cmp_name'][$cmp_name][] = $user;

}

if (!is_null($cmp_content)) {

$campaigns['cmp_content'][$cmp_content][] = $user;

}

if (!is_null($cmp_keywords)) {

$campaigns['cmp_keywords'][$cmp_keywords][] = $user;

}

if (!is_null($cmp_medium)) {

$campaigns['cmp_medium'][$cmp_medium][] = $user;

}

if (!is_null($cmp_source)) {

$campaigns['cmp_source'][$cmp_source][] = $user;

}

}

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

return $campaigns;

}

/**

* Creates a personal account for the user meking them an admin

*

* @param bool $set_as_current To set as current account (default) or not

*

* @return Account

*/

public function createPersonalAccount($set_as_current = true) {

$personal = Account::createPersonalAccount($this);

if ($set_as_current) {

$personal->setAsCurrent($this);

}

return $personal;

}

/**

* Returns invitation that was used to invite this user

*

* @return Invitation

*

* @throws DBException

*/

public function getInvitation() {

return Invitation::getUserInvitation($this);

}

/**

* This method is called when new user is created

*

* @throws DBException

*/

private function init() {

$invitation_code = null;

if (array_key_exists(UserConfig::$invitation_code_key, $_SESSION)) {

$invitation_code = $_SESSION[UserConfig::$invitation_code_key];

unset($_SESSION[UserConfig::$invitation_code_key]);

}

$invitation = null;

if (!is_null($invitation_code)) {

$invitation = Invitation::getByCode($invitation_code);

}

if (!is_null($invitation)) {

$invitation->setUser($this);

$invitation->save();

}

$db = UserConfig::getDB();

$userid = $this->getID();

if ($stmt = $db->prepare('INSERT INTO u_user_preferences (user_id) VALUES (?)')) {

if (!$stmt->bind_param('i', $userid)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt, "Can't initialize user preferences");

}

$stmt->close();

} else {

throw new DBPrepareStmtException($db, "Can't prepare DB statement to initialize user preferences");

}

$invitation_account = null;

$plan = null;

if (!is_null($invitation)) {

$invitation_account = $invitation->getAccount();

// only add to account if invited by the admin of a non-individual account

if ($invitation_account !== NULL &&

!$invitation_account->isIndividual() &&

$invitation_account->getUserRole($invitation->getIssuer()) === Account::ROLE_ADMIN

) {

$invitation_account->addUser($this);

}

$plan = $invitation->getPlan();

}

$new_user_account = null;

if (is_null($invitation_account) || UserConfig::$createPersonalAccountsIfInvitedToGroupAccount) {

if ($plan) {

$new_user_account = Account::createAccount($this->name, $plan->getSlug(), null, $this, Account::ROLE_ADMIN);

} else {

$new_user_account = $this->createPersonalAccount(false);

}

}

$current_account = is_null($invitation_account) ? $new_user_account : $invitation_account;

$current_account->setAsCurrent($this);

if (!is_null(UserConfig::$onCreate)) {

call_user_func_array(UserConfig::$onCreate, array($this));

}

if (!is_null(UserConfig::$email_module)) {

UserConfig::$email_module->registerSubscriber($this);

}

}

/**

* Verifies email link code and marks user's email as verified.

*

* If optional User object is passed, will only verify code for this user,

* otherwise will search among all users in the system.

*

* Will also reset the code if successful

*

* @param string $code Code to verify

* @param User $user Optional user object if user is logged in

*

* @return boolean Is code associated with a user or not

*

* @throws DBException

*/

public static function verifyEmailLinkCode($code, User $user = null) {

$db = UserConfig::getDB();

$verified = false;

$code = trim($code);

/*

* If code is empty, fail silently

*/

if (strlen($code) == 0) {

return false;

}

if (is_null($user)) {

$query = 'UPDATE u_users

SET email_verified = 1,

email_verification_code = null,

email_verification_code_time = null

WHERE email_verification_code = ?

AND email_verification_code_time > DATE_SUB(NOW(), INTERVAL ? DAY)';

} else {

$query = 'UPDATE u_users

SET email_verified = 1,

email_verification_code = null,

email_verification_code_time = null

WHERE id = ?

AND email_verification_code = ?

AND email_verification_code_time > DATE_SUB(NOW(), INTERVAL ? DAY)';

}

if ($stmt = $db->prepare($query)) {

if (is_null($user)) {

if (!$stmt->bind_param('si', $code, UserConfig::$emailVerificationCodeExpiresInDays)) {

throw new DBBindParamException($db, $stmt);

}

} else {

$user_id = $user->getID();

if (!$stmt->bind_param('isi', $user_id, $code, UserConfig::$emailVerificationCodeExpiresInDays)) {

throw new DBBindParamException($db, $stmt);

}

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

$verified = ($db->affected_rows == 1);

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

return $verified;

}

public function getEmailVerificationCode() {

$db = UserConfig::getDB();

$code = substr(base64_encode(UserTools::randomBytes(50)), 0, 10);

if ($stmt = $db->prepare('UPDATE u_users SET

email_verification_code = ?,

email_verification_code_time = now()

WHERE id = ?')

) {

if (!$stmt->bind_param('si', $code, $this->userid)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

return $code;

}

/**

* Sends email verification emai to user's email address

*

* Generates a new verification code and sends it to the user's email address

*

* @throws DBException

*/

public function sendEmailVerificationCode() {

$email = $this->getEmail();

$name = $this->getName();

// Silently fail to avoid email discovery

if (is_null($email)) {

return;

}

$code = $this->getEmailVerificationCode();

$verification_link = UserConfig::$USERSROOTFULLURL . '/verify_email.php?code=' . urlencode($code);

$message_body = call_user_func_array(UserConfig::$onRenderVerificationCodeEmail, array($verification_link, $code));

$subject = UserConfig::$emailVerificationSubject;

$message = new Swift_Message($subject, $message_body);

$message->setFrom(array(UserConfig::$supportEmailFromEmail => UserConfig::$supportEmailFromName));

$message->setTo(array($email => $name));

$message->setReplyTo(array(UserConfig::$supportEmailReplyTo));

$headers = $message->getHeaders();

$headers->addTextHeader('X-Mailer', UserConfig::$supportEmailXMailer);

try {

$result = UserConfig::getMailer()->send($message);

} catch (Exception $e) {

UserTools::debug($e->getMessage());

}

}

/**

* Sends email message inviting another person to join the system

*

* @param string $name Name of the receipient

* @param string $email Email of reciepient

* @param string $note (optional) Invitation message

* @param Account $account (optional) Account object if user is invited to join an account

*/

public function sendInvitation($name, $email, $account = null) {

Invitation::sendUserInvitation($this, $name, $email, $account);

}

/**

* Returns invitations initiated by a user

*

* @return Invitation[] Invitations sent, but not accepted yet

*/

public function getSentInvitations() {

return Invitation::getSent(false, $this);

}

/**

* Returns an array of invitations that were accepted

*

* @return Invitation[] Accepted invitations

*/

public function getAcceptedInvitations() {

return Invitation::getAccepted(false, $this);

}

/**

* Create new user based on facebook info

*

* Used by FacebookAuthenticationModule

*

* @param string $name User's display name

* @param int $fb_id Facebook user ID

* @param array $me Extra user info key/value pairs from /me Graph API call

*

* @return User Newly created user object

*

* @throws DBException

*/

public static function createNewFacebookUser($name, $fb_id, $fb_link = null, $me = null) {

$name = mb_convert_encoding($name, 'UTF-8');

$db = UserConfig::getDB();

$email = null;

if (array_key_exists('email', $me)) {

$email = $me['email'];

}

$existing_users = User::getUsersByEmailOrUsername($email);

if (count($existing_users) > 0) {

throw new ExistingUserException($existing_users[0]);

}

$user = null;

if ($stmt = $db->prepare("INSERT INTO u_users (name, regmodule, tos_version, email, fb_id, fb_link) VALUES (?, 'facebook', ?, ?, ?, ?)")) {

if (!$stmt->bind_param('sisis', $name, UserConfig::$currentTOSVersion, $email, $fb_id, $fb_link)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

$id = $stmt->insert_id;

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

$user = self::getUser($id);

$user->setReferer();

$user->setRegCampaign();

$user->init();

$user->sendEmailVerificationCode();

return $user;

}

/*

*/

/**

* Create new user without credentials

*

* Used primarily by modules that will store credentials separately from user table

* Can also be used directly to create "shallow" accounts

*

* @param StartupAPIModule $module Registratin module used when registering the user

* @param string $name User's display name

* @param string $email User's emaol or null if no email is known

* @param boolean $send_verification_code Whatever to send verification email or not

*

* @return User Newly created user object

*

* @throws DBException

*/

public static function createNewWithoutCredentials(StartupAPIModule $module, $name, $email = null, $send_verification_code = TRUE) {

$module_id = $module->getID();

$name = mb_convert_encoding($name, 'UTF-8');

$db = UserConfig::getDB();

$user = null;

$email = filter_var($email, FILTER_VALIDATE_EMAIL);

if ($email === FALSE) {

$email = null;

}

if ($email) {

$existing_users = User::getUsersByEmailOrUsername($email);

if (count($existing_users) > 0) {

throw new ExistingUserException($existing_users[0]);

}

}

if ($stmt = $db->prepare('INSERT INTO u_users (name, email, regmodule, tos_version) VALUES (?, ?, ?, ?)')) {

if (!$stmt->bind_param('sssi', $name, $email, $module_id, UserConfig::$currentTOSVersion)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

$id = $stmt->insert_id;

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

$user = self::getUser($id);

$user->setReferer();

$user->setRegCampaign();

$user->init();

if ($send_verification_code) {

$user->sendEmailVerificationCode();

}

return $user;

}

/**

* Create new user with username and password

*

* Used by UsernamePasswordAuthenticationModule

*

* @param string $name User's display name

* @param string $username User's login name/username

* @param string $email User's email

* @param string $password User's password

*

* @return User Newly created user object

*

* @throws DBException

*/

public static function createNew($name, $username, $email, $password) {

$name = mb_convert_encoding($name, 'UTF-8');

$username = mb_convert_encoding($username, 'UTF-8');

$db = UserConfig::getDB();

$user = null;

$salt = substr(base64_encode(UserTools::randomBytes(50)), 0, 13);

$pass = sha1($salt . $password);

if ($stmt = $db->prepare("INSERT INTO u_users (regmodule, tos_version, name, username, email, pass, salt) VALUES ('userpass', ?, ?, ?, ?, ?, ?)")) {

if (!$stmt->bind_param('isssss', UserConfig::$currentTOSVersion, $name, $username, $email, $pass, $salt)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

$id = $stmt->insert_id;

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

$user = self::getUser($id);

$user->setReferer();

$user->setRegCampaign();

$user->init();

$user->sendEmailVerificationCode();

return $user;

}

/**

* Deletes user from the system

*

* @throws DBException

*/

public function delete() {

$username = mb_convert_encoding($this->username, 'UTF-8');

$db = UserConfig::getDB();

if ($stmt = $db->prepare('DELETE FROM u_users WHERE username = ?')) {

if (!$stmt->bind_param('s', $username)) {

throw new DBBindParamException($db, $stmt);

}

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

}

/**

* Returns total number of users in the system

*

* @return int Total number of users (including disabled users)

*

* @throws DBException

*/

public static function getTotalUsers() {

$db = UserConfig::getDB();

$total = 0;

if ($stmt = $db->prepare('SELECT COUNT(*) FROM u_users')) {

if (!$stmt->execute()) {

throw new DBExecuteStmtException($db, $stmt);

}

if (!$stmt->bind_result($total)) {

throw new DBBindResultException($db, $stmt);

}

$stmt->fetch();

$stmt->close();

} else {

throw new DBPrepareStmtException($db);

}

return $total;

}

/**

* Returns a number of active users (with activity after one day from registration)

*

* If date is passed, will calculate active users as of particular day (used for charts).

* Relatively data-intensive task, try to cache this data when produced (it would not change for the past dates)

*

* @param string $date MySQL-formatted date to get the statistics for

*

* @return int Number of active users

*

* @throws DBException

*/

public static function getActiveUsers($date = null) {

$db = UserConfig::getDB();

$total = 0;

if (UserConfig::$adminActiveOnlyWithPoints) {

$activities_with_points = array();

foreach (UserConfig::$activities as $id => $activity) {

if ($activity[1] > 0) {

$activities_with_points[] = $id;

}

}

// if there are no activities that can earn points, no users are active

if (count($activities_with_points) == 0) {

return 0;

}

$in = implode(', ', $activities_with_points);

$query = 'SELECT count(*) AS total FROM (

SELECT user_id, count(*)

FROM u_activity a

INNER JOIN u_users u

ON a.user_id = u.id

WHERE a.time > DATE_ADD(u.regtime, INTERVAL 1 DAY)

AND a.time > DATE_SUB(' .

(is_null($date) ? 'NOW()' : '?') .

', INTERVAL 30 DAY)' .

(is_null($date) ? '' : ' AND a.time < ?') . '

AND a.activity_id IN (' . $in . ')

GROUP BY user_id

) AS active';

} else {

$query = 'SELECT count(*) AS total FROM (

SELECT user_id, count(*)

FROM u_activity a

INNER JOIN u_users u