auto_registration.php
3.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
<?
// Ïîäêëþ÷åíèå
include_once($_SERVER['DOCUMENT_ROOT']."/config/config.php");
include_once($_SERVER['DOCUMENT_ROOT']."/account/func/func.php");
include_once($_SERVER['DOCUMENT_ROOT']."/account/func/func.eMailing.php");
include_once($_SERVER['DOCUMENT_ROOT']."/libs/Tools.class.php");
// ==============================
// ======== Îáðàáîòêà ===========
// ==============================
global $_SESSION;
$_POST['form']['interest'] = '';
if (isset ($_POST['form']['mailing']))
{
$_POST['form']['interest'] = '44:45';
}
// ñîçäàåì ìåéë ïî óìîë÷àíèþ äëÿ óïðàâëåíèÿ çàêàçîâ
if (isset ($_POST['form']['no_account']))
{
$_POST['order_email'] = date ('d/m/y/H.i.s') . '@user.com';
$_POST['form']['email'] = $_POST['order_email'];
$_POST['form']['interest'] = '';
}
if (strpos ($_POST['form']['email'], "@user.com"))
{
$_POST['form']['group'] = 1;
}
else
{
$_POST['form']['group'] = 2;
}
// Ïðîâåðÿåì ñóùåñòâîâàíèå ïîëüçîâàòåëÿ
$sql0 = "
SELECT * FROM zlo_users
WHERE email='".htmlspecialchars($_POST['order_email'],ENT_QUOTES)."'
";
$result0 = mysql_query($sql0) or die(mysql_error());
if (mysql_affected_rows()==0)
{
// Äîáàâëÿåì ïîëüçîâàòåëÿ
$pass = generate_password(6);
$sql = sprintf("
INSERT INTO zlo_users
(username, pass, send, email, city, address, tel, interest, hash, registered, `group`)
VALUES
(%s, %s,%s,%s, %s, %s, %s, %s, %s, NOW(), %s)",
GetSQLValueString($_POST['order_name'], "text"),
GetSQLValueString($pass, "text"),
GetSQLValueString('1', "text"),
GetSQLValueString($_POST['order_email'], "text"),
GetSQLValueString($_POST['order_city'], "text"),
GetSQLValueString($_POST['order_adress'], "text"),
GetSQLValueString($_POST['order_phone'], "text"),
GetSQLValueString($_POST['form']['interest'], "text"),
GetSQLValueString(md5($_POST['order_email'] . "_extremstyle.ua"), "text"),
GetSQLValueString($_POST['form']['group'], "text")
);
$result = mysql_query($sql) or die(mysql_error());
// ñîçäàåì êóïîí
Tools::addUserCoupon (mysql_insert_id());
// Óçíàåì ID
$sql = "
SELECT id
FROM zlo_users
WHERE email='" . htmlspecialchars ($_POST['order_email'], ENT_QUOTES) . "'
AND `pass`='" . $pass . "'
LIMIT 1
";
$result = mysql_query ($sql) or die (mysql_error ());
if (mysql_affected_rows () != 0)
{
$user = mysql_fetch_assoc ($result);
$_SESSION['user']['order_account'] = $user['id'];
}
}
else
{
$user = mysql_fetch_assoc ($result0);
$_SESSION['user']['order_account'] = $user['id'];
if (! isset ($alert_not))
{
echo ("<script language=\"JavaScript\">alert('Âû ìîæåòå âîñïîëüçîâàòüñÿ óñëóãîé ëè÷íîãî êàáèíåòà. Íàïîìèíàíèå ëîãèíà è ïàðîëÿ áûëè âûñëàíû íà Âàø email. ')</script>");
}
// Øëåì ïèñüìà
eMailing ('remind', $user['id']);
}
?>