Error!CuteNews detected that you do not have users in your users.db.php file and wants to run the install module.
However, the install module (./inc/install.mdu) can not be located, please reupload this file and make sure you set the proper permissions so the installation can continue.');
}
msg('info', 'CuteNews Not Installed', 'CuteNews is not properly installed (users missing) go to index.php');
}
$register_level = $config_registration_level;
if($action == 'doregister'){
$utf8_error = false;
if($config_allow_registration != 'yes'){ msg('error', $say['error'], $say['register_disabled']); }
if(!$regusername){ msg('error',$say['error'], $say['blank_user']); }
if(!$regpassword){ msg('error',$say['error'], $say['blank_pw']); }
if(!$regemail){ msg('error',$say['error'], $say['blank_email']); }
$regusername = trim(preg_replace(array("'\n'", "'\r'"), '', $regusername));
$regnickname = utf8_htmlentities(trim(preg_replace(array("'\n'", "'\r'"), '', $regnickname)));
$regnickname = str_replace('|', '|', $regnickname);
$regemail = trim(preg_replace(array("'\n'", "'\r'"), '', $regemail));
$regpassword = trim(preg_replace(array("'\n'", "'\r'"), '', $regpassword));
if(!preg_match("/^[\.A-z0-9_-]{1,15}$/i", $regusername)){ msg('error',$say['error'], $say['invalid_name']); }
if(!preg_match("/^[\.A-z0-9_-]+[@][A-z0-9_\-]+([.][A-z0-9_\-]+)+[A-z]{1,4}$/", $regemail)){ msg('error',$say['error'], $say['invalid_mail']); }
if(!preg_match("/^[\.A-z0-9_-]{1,15}$/i", $regpassword)){ msg('error',$say['error'], $say['invalid_pass']); }
if($utf8_error){ msg('error', $say['error'], $say['utf8']); }
$all_users = file('./data/users.db.php');
foreach($all_users as $user_line){
$user_arr = explode('|', $user_line);
if(strtolower($user_arr[2]) == strtolower($regusername)){
msg('error', $say['error'], $say['name_taken']);
}
}
$add_time = time() + ($config_date_adjust*60);
$regpassword = md5($regpassword);
$old_users_file = file('./data/users.db.php');
$new_users_file = fopen('./data/users.db.php', 'a');
fwrite($new_users_file, "$add_time|$register_level|$regusername|$regpassword|$regnickname|$regemail|0|1||||\n");
fclose($new_users_file);
if($config_notify_registration == 'yes' and $config_notify_status == 'active'){
send_mail($config_notify_email, 'CuteNews - New User Registered', "New user ($regusername) has just registered:
Username: $regusername
Nickname: $regnickname
Email: $regemail
");
}
msg('user', $say['user_added'], str_replace('{x}', 'here', $say['register_done']));
}
elseif($action == 'lostpass'){
echoheader('user', $say['lost_title']);
echo '';
echofooter();
}
elseif($action == 'validate'){
if(!isset($user) or !$user or $user == '' or !isset($email) or !$email or $email == ''){ msg('error', $say['error'], $say['all_fields']); }
$found = FALSE;
$all_users = file('./data/users.db.php');
foreach($all_users as $user_line){
$user_arr = explode('|', $user_line);
if(strtolower($user_arr[2]) == strtolower($user) and strtolower($user_arr[5]) == strtolower($email)){
$sstring = md5($user_arr[0].$user_arr[3].$user_arr[9]); $found = TRUE; break;
}
}
if(!$found){ msg('error', $say['error'], $say['unmatch']); }
else{
$confirm_url = $config_http_script_dir.'/register.php?a=dsp&s='.$sstring;
$message = "Hi,\n Someone requested your password to be changed, if this is the desired action and you want to change your password please follow this link: $confirm_url .";
mail($email, "Confirmation ( New Password for CuteNews )", $message,
"From: no-reply@$SERVER_NAME\r\n"
."X-Mailer: PHP/" . phpversion()) or die("Error: Cannot send mail");
msg('info', $say['conf_sent'], $say['conf_info']);
}
//Do Send Password
}
elseif($a == 'dsp'){
if(trim($s) == '' or !$s){ msg('error', $say['error'], $say['all_fields']); }
$found = FALSE;
$all_users = file('./data/users.db.php');
foreach($all_users as $user_line){
$user_arr = explode('|', $user_line);
if($s == md5($user_arr[0].$user_arr[3].$user_arr[9])){ $found = TRUE; break;}
}
if(!$found){ msg('error', $say['error'], $say['invalid_str']); }
else{
$salt = 'abcdefghjkmnpqrstuvwxyz0123456789';
srand((double)microtime()*1000000);
for($i = 0; $i < 9; $i++){
$new_pass .= $salt{rand(0,33)};
}
$md5_pass = md5($new_pass);
$old_db = file('./data/users.db.php');
$new_db = fopen('./data/users.db.php', 'w');
foreach($old_db as $old_db_line){
$old_db_arr = explode('|', $old_db_line);
if($s != md5($old_db_arr[0].$old_db_arr[3].$old_db_arr[9])){
fwrite($new_db,"$old_db_line");
}
else{
fwrite($new_db,"$old_db_arr[0]|$old_db_arr[1]|$old_db_arr[2]|$md5_pass|$old_db_arr[4]|$old_db_arr[5]|$old_db_arr[6]|$old_db_arr[7]||$old_db_arr[9]|\n");
}
}
fclose($new_db);
$message = "Hi $user_arr[2],\n Your new password for CuteNews is $new_pass, please after you login change this password.";
mail("$user_arr[5]", "Your New Password for CuteNews", $message,
"From: no-reply@$SERVER_NAME\r\n"
."X-Mailer: PHP/" . phpversion()) or die("can not send mail");
msg("info", $say['pass_sent_title'], str_replace('{x}', $user_arr[2], $say['pass_sent']));
}
}
else{
if($config_allow_registration != 'yes'){ msg('error', $say['error'], $say['register_disabled']); }
echoheader('user', $say['register_title']);
$result = htmlentities($result);
echo<<
HTML;
echofooter();
}
?>