wp-signup.php 29.4 KB
Newer Older
godog's avatar
godog committed
1 2 3 4 5
<?php

/** Sets up the WordPress Environment. */
require( dirname(__FILE__) . '/wp-load.php' );

root's avatar
root committed
6
add_action( 'wp_head', 'wp_no_robots' );
godog's avatar
godog committed
7

lucha's avatar
lucha committed
8
require( dirname( __FILE__ ) . '/wp-blog-header.php' );
godog's avatar
godog committed
9

kiki's avatar
kiki committed
10 11
nocache_headers();

lechuck's avatar
lechuck committed
12
if ( is_array( get_site_option( 'illegal_names' )) && isset( $_GET[ 'new' ] ) && in_array( $_GET[ 'new' ], get_site_option( 'illegal_names' ) ) ) {
godog's avatar
godog committed
13 14 15 16
	wp_redirect( network_home_url() );
	die();
}

lechuck's avatar
lechuck committed
17 18 19
/**
 * Prints signup_header via wp_head
 *
lucha's avatar
lucha committed
20
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
21
 */
godog's avatar
godog committed
22
function do_signup_header() {
lucha's avatar
lucha committed
23
	/**
lechuck's avatar
lechuck committed
24
	 * Fires within the head section of the site sign-up screen.
lucha's avatar
lucha committed
25 26 27
	 *
	 * @since 3.0.0
	 */
shammash's avatar
shammash committed
28
	do_action( 'signup_header' );
godog's avatar
godog committed
29 30 31 32
}
add_action( 'wp_head', 'do_signup_header' );

if ( !is_multisite() ) {
lechuck's avatar
lechuck committed
33
	wp_redirect( wp_registration_url() );
godog's avatar
godog committed
34 35 36 37
	die();
}

if ( !is_main_site() ) {
lechuck's avatar
lechuck committed
38
	wp_redirect( network_site_url( 'wp-signup.php' ) );
godog's avatar
godog committed
39 40 41 42 43 44
	die();
}

// Fix for page title
$wp_query->is_404 = false;

lechuck's avatar
lechuck committed
45 46 47 48 49 50 51
/**
 * Fires before the Site Signup page is loaded.
 *
 * @since 4.4.0
 */
do_action( 'before_signup_header' );

lechuck's avatar
lechuck committed
52 53 54
/**
 * Prints styles for front-end Multisite signup pages
 *
lucha's avatar
lucha committed
55
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
56
 */
godog's avatar
godog committed
57 58 59 60 61 62 63 64 65 66 67
function wpmu_signup_stylesheet() {
	?>
	<style type="text/css">
		.mu_register { width: 90%; margin:0 auto; }
		.mu_register form { margin-top: 2em; }
		.mu_register .error { font-weight:700; padding:10px; color:#333333; background:#FFEBE8; border:1px solid #CC0000; }
		.mu_register input[type="submit"],
			.mu_register #blog_title,
			.mu_register #user_email,
			.mu_register #blogname,
			.mu_register #user_name { width:100%; font-size: 24px; margin:5px 0; }
lechuck's avatar
lechuck committed
68
		.mu_register #site-language { display: block; }
godog's avatar
godog committed
69 70 71 72 73 74 75 76 77 78
		.mu_register .prefix_address,
			.mu_register .suffix_address {font-size: 18px;display:inline; }
		.mu_register label { font-weight:700; font-size:15px; display:block; margin:10px 0; }
		.mu_register label.checkbox { display:inline; }
		.mu_register .mu_alert { font-weight:700; padding:10px; color:#333333; background:#ffffe0; border:1px solid #e6db55; }
	</style>
	<?php
}

add_action( 'wp_head', 'wpmu_signup_stylesheet' );
lechuck's avatar
lechuck committed
79
get_header( 'wp-signup' );
godog's avatar
godog committed
80

lucha's avatar
lucha committed
81 82 83 84 85
/**
 * Fires before the site sign-up form.
 *
 * @since 3.0.0
 */
godog's avatar
godog committed
86 87
do_action( 'before_signup_form' );
?>
lechuck's avatar
lechuck committed
88 89
<div id="signup-content" class="widecolumn">
<div class="mu_register wp-signup-container">
godog's avatar
godog committed
90
<?php
lechuck's avatar
lechuck committed
91 92 93
/**
 * Generates and displays the Signup and Create Site forms
 *
lucha's avatar
lucha committed
94
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
95
 *
lucha's avatar
lucha committed
96 97 98
 * @param string          $blogname   The new site name.
 * @param string          $blog_title The new site title.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
99
 */
lucha's avatar
lucha committed
100
function show_blog_form( $blogname = '', $blog_title = '', $errors = '' ) {
lucha's avatar
lucha committed
101 102 103 104
	if ( ! is_wp_error( $errors ) ) {
		$errors = new WP_Error();
	}

lucha's avatar
lucha committed
105
	$current_network = get_network();
godog's avatar
godog committed
106 107 108 109 110 111 112 113 114 115 116
	// Blog name
	if ( !is_subdomain_install() )
		echo '<label for="blogname">' . __('Site Name:') . '</label>';
	else
		echo '<label for="blogname">' . __('Site Domain:') . '</label>';

	if ( $errmsg = $errors->get_error_message('blogname') ) { ?>
		<p class="error"><?php echo $errmsg ?></p>
	<?php }

	if ( !is_subdomain_install() )
lucha's avatar
lucha committed
117
		echo '<span class="prefix_address">' . $current_network->domain . $current_network->path . '</span><input name="blogname" type="text" id="blogname" value="'. esc_attr($blogname) .'" maxlength="60" /><br />';
godog's avatar
godog committed
118
	else
lucha's avatar
lucha committed
119
		echo '<input name="blogname" type="text" id="blogname" value="'.esc_attr($blogname).'" maxlength="60" /><span class="suffix_address">.' . ( $site_domain = preg_replace( '|^www\.|', '', $current_network->domain ) ) . '</span><br />';
godog's avatar
godog committed
120

lucha's avatar
lucha committed
121 122
	if ( ! is_user_logged_in() ) {
		if ( ! is_subdomain_install() ) {
lucha's avatar
lucha committed
123
			$site = $current_network->domain . $current_network->path . __( 'sitename' );
lucha's avatar
lucha committed
124
		} else {
lucha's avatar
lucha committed
125
			$site = __( 'domain' ) . '.' . $site_domain . $current_network->path;
lucha's avatar
lucha committed
126 127 128 129
		}

		/* translators: %s: site address */
		echo '<p>(<strong>' . sprintf( __( 'Your address will be %s.' ), $site ) . '</strong>) ' . __( 'Must be at least 4 characters, letters and numbers only. It cannot be changed, so choose carefully!' ) . '</p>';
godog's avatar
godog committed
130 131 132 133 134 135 136 137 138 139 140
	}

	// Blog Title
	?>
	<label for="blog_title"><?php _e('Site Title:') ?></label>
	<?php if ( $errmsg = $errors->get_error_message('blog_title') ) { ?>
		<p class="error"><?php echo $errmsg ?></p>
	<?php }
	echo '<input name="blog_title" type="text" id="blog_title" value="'.esc_attr($blog_title).'" />';
	?>

lechuck's avatar
lechuck committed
141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172
	<?php
	// Site Language.
	$languages = signup_get_available_languages();

	if ( ! empty( $languages ) ) :
		?>
		<p>
			<label for="site-language"><?php _e( 'Site Language:' ); ?></label>
			<?php
			// Network default.
			$lang = get_site_option( 'WPLANG' );

			if ( isset( $_POST['WPLANG'] ) ) {
				$lang = $_POST['WPLANG'];
			}

			// Use US English if the default isn't available.
			if ( ! in_array( $lang, $languages ) ) {
				$lang = '';
			}

			wp_dropdown_languages( array(
				'name'                        => 'WPLANG',
				'id'                          => 'site-language',
				'selected'                    => $lang,
				'languages'                   => $languages,
				'show_available_translations' => false,
			) );
			?>
		</p>
	<?php endif; // Languages. ?>

godog's avatar
godog committed
173 174 175
	<div id="privacy">
        <p class="privacy-intro">
            <label for="blog_public_on"><?php _e('Privacy:') ?></label>
lechuck's avatar
lechuck committed
176
            <?php _e( 'Allow search engines to index this site.' ); ?>
godog's avatar
godog committed
177 178 179 180 181 182 183 184 185 186 187 188 189
            <br style="clear:both" />
            <label class="checkbox" for="blog_public_on">
                <input type="radio" id="blog_public_on" name="blog_public" value="1" <?php if ( !isset( $_POST['blog_public'] ) || $_POST['blog_public'] == '1' ) { ?>checked="checked"<?php } ?> />
                <strong><?php _e( 'Yes' ); ?></strong>
            </label>
            <label class="checkbox" for="blog_public_off">
                <input type="radio" id="blog_public_off" name="blog_public" value="0" <?php if ( isset( $_POST['blog_public'] ) && $_POST['blog_public'] == '0' ) { ?>checked="checked"<?php } ?> />
                <strong><?php _e( 'No' ); ?></strong>
            </label>
        </p>
	</div>

	<?php
lucha's avatar
lucha committed
190 191 192 193 194
	/**
	 * Fires after the site sign-up form.
	 *
	 * @since 3.0.0
	 *
lucha's avatar
lucha committed
195
	 * @param WP_Error $errors A WP_Error object possibly containing 'blogname' or 'blog_title' errors.
lucha's avatar
lucha committed
196 197
	 */
	do_action( 'signup_blogform', $errors );
godog's avatar
godog committed
198 199
}

lechuck's avatar
lechuck committed
200 201 202
/**
 * Validate the new site signup
 *
lucha's avatar
lucha committed
203
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
204 205 206
 *
 * @return array Contains the new site data and error messages.
 */
godog's avatar
godog committed
207 208 209 210 211 212 213 214
function validate_blog_form() {
	$user = '';
	if ( is_user_logged_in() )
		$user = wp_get_current_user();

	return wpmu_validate_blog_signup($_POST['blogname'], $_POST['blog_title'], $user);
}

lechuck's avatar
lechuck committed
215 216 217
/**
 * Display user registration form
 *
lucha's avatar
lucha committed
218
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
219
 *
lucha's avatar
lucha committed
220 221 222
 * @param string          $user_name  The entered username.
 * @param string          $user_email The entered email address.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
223
 */
godog's avatar
godog committed
224
function show_user_form($user_name = '', $user_email = '', $errors = '') {
lucha's avatar
lucha committed
225 226 227 228
	if ( ! is_wp_error( $errors ) ) {
		$errors = new WP_Error();
	}

godog's avatar
godog committed
229 230 231 232 233
	// User name
	echo '<label for="user_name">' . __('Username:') . '</label>';
	if ( $errmsg = $errors->get_error_message('user_name') ) {
		echo '<p class="error">'.$errmsg.'</p>';
	}
lucha's avatar
lucha committed
234
	echo '<input name="user_name" type="text" id="user_name" value="'. esc_attr( $user_name ) .'" autocapitalize="none" autocorrect="off" maxlength="60" /><br />';
godog's avatar
godog committed
235 236 237 238 239 240 241
	_e( '(Must be at least 4 characters, letters and numbers only.)' );
	?>

	<label for="user_email"><?php _e( 'Email&nbsp;Address:' ) ?></label>
	<?php if ( $errmsg = $errors->get_error_message('user_email') ) { ?>
		<p class="error"><?php echo $errmsg ?></p>
	<?php } ?>
lucha's avatar
lucha committed
242
	<input name="user_email" type="email" id="user_email" value="<?php  echo esc_attr($user_email) ?>" maxlength="200" /><br /><?php _e('We send your registration email to this address. (Double-check your email address before continuing.)') ?>
godog's avatar
godog committed
243 244 245 246
	<?php
	if ( $errmsg = $errors->get_error_message('generic') ) {
		echo '<p class="error">' . $errmsg . '</p>';
	}
lucha's avatar
lucha committed
247 248 249 250 251
	/**
	 * Fires at the end of the user registration form on the site sign-up form.
	 *
	 * @since 3.0.0
	 *
lucha's avatar
lucha committed
252
	 * @param WP_Error $errors A WP_Error object containing 'user_name' or 'user_email' errors.
lucha's avatar
lucha committed
253
	 */
godog's avatar
godog committed
254 255 256
	do_action( 'signup_extra_fields', $errors );
}

lechuck's avatar
lechuck committed
257 258 259
/**
 * Validate user signup name and email
 *
lucha's avatar
lucha committed
260
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
261 262 263
 *
 * @return array Contains username, email, and error messages.
 */
godog's avatar
godog committed
264 265 266 267
function validate_user_form() {
	return wpmu_validate_user_signup($_POST['user_name'], $_POST['user_email']);
}

lechuck's avatar
lechuck committed
268 269 270
/**
 * Allow returning users to sign up for another site
 *
lucha's avatar
lucha committed
271
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
272
 *
lucha's avatar
lucha committed
273 274 275
 * @param string          $blogname   The new site name
 * @param string          $blog_title The new site title.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
276
 */
lucha's avatar
lucha committed
277
function signup_another_blog( $blogname = '', $blog_title = '', $errors = '' ) {
godog's avatar
godog committed
278 279 280 281 282 283
	$current_user = wp_get_current_user();

	if ( ! is_wp_error($errors) ) {
		$errors = new WP_Error();
	}

lucha's avatar
lucha committed
284 285 286 287 288 289 290
	$signup_defaults = array(
		'blogname'   => $blogname,
		'blog_title' => $blog_title,
		'errors'     => $errors
	);

	/**
lucha's avatar
lucha committed
291
	 * Filters the default site sign-up variables.
lucha's avatar
lucha committed
292 293 294 295 296 297
	 *
	 * @since 3.0.0
	 *
	 * @param array $signup_defaults {
	 *     An array of default site sign-up variables.
	 *
lucha's avatar
lucha committed
298 299 300
	 *     @type string   $blogname   The site blogname.
	 *     @type string   $blog_title The site title.
	 *     @type WP_Error $errors     A WP_Error object possibly containing 'blogname' or 'blog_title' errors.
lucha's avatar
lucha committed
301 302 303 304
	 * }
	 */
	$filtered_results = apply_filters( 'signup_another_blog_init', $signup_defaults );

godog's avatar
godog committed
305 306 307 308
	$blogname = $filtered_results['blogname'];
	$blog_title = $filtered_results['blog_title'];
	$errors = $filtered_results['errors'];

lucha's avatar
lucha committed
309
	echo '<h2>' . sprintf( __( 'Get <em>another</em> %s site in seconds' ), get_network()->site_name ) . '</h2>';
godog's avatar
godog committed
310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332

	if ( $errors->get_error_code() ) {
		echo '<p>' . __( 'There was a problem, please correct the form below and try again.' ) . '</p>';
	}
	?>
	<p><?php printf( __( 'Welcome back, %s. By filling out the form below, you can <strong>add another site to your account</strong>. There is no limit to the number of sites you can have, so create to your heart&#8217;s content, but write responsibly!' ), $current_user->display_name ) ?></p>

	<?php
	$blogs = get_blogs_of_user($current_user->ID);
	if ( !empty($blogs) ) { ?>

			<p><?php _e( 'Sites you are already a member of:' ) ?></p>
			<ul>
				<?php foreach ( $blogs as $blog ) {
					$home_url = get_home_url( $blog->userblog_id );
					echo '<li><a href="' . esc_url( $home_url ) . '">' . $home_url . '</a></li>';
				} ?>
			</ul>
	<?php } ?>

	<p><?php _e( 'If you&#8217;re not going to use a great site domain, leave it for a new user. Now have at it!' ) ?></p>
	<form id="setupform" method="post" action="wp-signup.php">
		<input type="hidden" name="stage" value="gimmeanotherblog" />
lucha's avatar
lucha committed
333 334 335 336
		<?php
		/**
		 * Hidden sign-up form fields output when creating another site or user.
		 *
lucha's avatar
lucha committed
337
		 * @since MU (3.0.0)
lucha's avatar
lucha committed
338 339 340 341 342 343
		 *
		 * @param string $context A string describing the steps of the sign-up process. The value can be
		 *                        'create-another-site', 'validate-user', or 'validate-site'.
		 */
		do_action( 'signup_hidden_fields', 'create-another-site' );
		?>
godog's avatar
godog committed
344 345 346 347 348 349
		<?php show_blog_form($blogname, $blog_title, $errors); ?>
		<p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e( 'Create Site' ) ?>" /></p>
	</form>
	<?php
}

lechuck's avatar
lechuck committed
350
/**
lechuck's avatar
lechuck committed
351
 * Validate a new site signup.
lechuck's avatar
lechuck committed
352
 *
lucha's avatar
lucha committed
353
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
354
 *
lechuck's avatar
lechuck committed
355
 * @return null|bool True if site signup was validated, false if error.
lechuck's avatar
lechuck committed
356
 *                   The function halts all execution if the user is not logged in.
lechuck's avatar
lechuck committed
357
 */
godog's avatar
godog committed
358
function validate_another_blog_signup() {
lucha's avatar
lucha committed
359
	global $blogname, $blog_title, $errors, $domain, $path;
godog's avatar
godog committed
360
	$current_user = wp_get_current_user();
lechuck's avatar
lechuck committed
361
	if ( ! is_user_logged_in() ) {
godog's avatar
godog committed
362
		die();
lechuck's avatar
lechuck committed
363
	}
godog's avatar
godog committed
364 365

	$result = validate_blog_form();
lucha's avatar
lucha committed
366 367 368 369 370 371 372

	// Extracted values set/overwrite globals.
	$domain = $result['domain'];
	$path = $result['path'];
	$blogname = $result['blogname'];
	$blog_title = $result['blog_title'];
	$errors = $result['errors'];
godog's avatar
godog committed
373 374 375 376 377 378 379

	if ( $errors->get_error_code() ) {
		signup_another_blog($blogname, $blog_title, $errors);
		return false;
	}

	$public = (int) $_POST['blog_public'];
lucha's avatar
lucha committed
380 381 382 383 384 385

	$blog_meta_defaults = array(
		'lang_id' => 1,
		'public'  => $public
	);

lechuck's avatar
lechuck committed
386 387 388 389 390 391 392 393 394 395 396 397 398 399 400
	// Handle the language setting for the new site.
	if ( ! empty( $_POST['WPLANG'] ) ) {

		$languages = signup_get_available_languages();

		if ( in_array( $_POST['WPLANG'], $languages ) ) {
			$language = wp_unslash( sanitize_text_field( $_POST['WPLANG'] ) );

			if ( $language ) {
				$blog_meta_defaults['WPLANG'] = $language;
			}
		}

	}

lucha's avatar
lucha committed
401
	/**
lucha's avatar
lucha committed
402 403 404
	 * Filters the new site meta variables.
	 *
	 * Use the {@see 'add_signup_meta'} filter instead.
lucha's avatar
lucha committed
405
	 *
lucha's avatar
lucha committed
406
	 * @since MU (3.0.0)
lucha's avatar
lucha committed
407
	 * @deprecated 3.0.0 Use the {@see 'add_signup_meta'} filter instead.
lucha's avatar
lucha committed
408 409 410
	 *
	 * @param array $blog_meta_defaults An array of default blog meta variables.
	 */
lucha's avatar
lucha committed
411
	$meta_defaults = apply_filters( 'signup_create_blog_meta', $blog_meta_defaults );
lechuck's avatar
lechuck committed
412

lucha's avatar
lucha committed
413
	/**
lucha's avatar
lucha committed
414
	 * Filters the new default site meta variables.
lucha's avatar
lucha committed
415 416 417 418 419 420 421 422 423 424
	 *
	 * @since 3.0.0
	 *
	 * @param array $meta {
	 *     An array of default site meta variables.
	 *
	 *     @type int $lang_id     The language ID.
	 *     @type int $blog_public Whether search engines should be discouraged from indexing the site. 1 for true, 0 for false.
	 * }
	 */
lucha's avatar
lucha committed
425
	$meta = apply_filters( 'add_signup_meta', $meta_defaults );
godog's avatar
godog committed
426

lucha's avatar
lucha committed
427
	$blog_id = wpmu_create_blog( $domain, $path, $blog_title, $current_user->ID, $meta, get_current_network_id() );
lechuck's avatar
lechuck committed
428 429 430 431 432 433

	if ( is_wp_error( $blog_id ) ) {
		return false;
	}

	confirm_another_blog_signup( $domain, $path, $blog_title, $current_user->user_login, $current_user->user_email, $meta, $blog_id );
godog's avatar
godog committed
434 435 436
	return true;
}

lechuck's avatar
lechuck committed
437
/**
lechuck's avatar
lechuck committed
438
 * Confirm a new site signup.
lechuck's avatar
lechuck committed
439
 *
lucha's avatar
lucha committed
440
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
441 442 443 444 445 446 447
 * @since 4.4.0 Added the `$blog_id` parameter.
 *
 * @param string $domain     The domain URL.
 * @param string $path       The site root path.
 * @param string $blog_title The site title.
 * @param string $user_name  The username.
 * @param string $user_email The user's email address.
lucha's avatar
lucha committed
448
 * @param array  $meta       Any additional meta from the {@see 'add_signup_meta'} filter in validate_blog_signup().
lechuck's avatar
lechuck committed
449
 * @param int    $blog_id    The site ID.
lechuck's avatar
lechuck committed
450
 */
lechuck's avatar
lechuck committed
451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467
function confirm_another_blog_signup( $domain, $path, $blog_title, $user_name, $user_email = '', $meta = array(), $blog_id = 0 ) {

	if ( $blog_id ) {
		switch_to_blog( $blog_id );
		$home_url  = home_url( '/' );
		$login_url = wp_login_url();
		restore_current_blog();
	} else {
		$home_url  = 'http://' . $domain . $path;
		$login_url = 'http://' . $domain . $path . 'wp-login.php';
	}

	$site = sprintf( '<a href="%1$s">%2$s</a>',
		esc_url( $home_url ),
		$blog_title
	);

godog's avatar
godog committed
468
	?>
lucha's avatar
lucha committed
469 470 471 472
	<h2><?php
		/* translators: %s: site name */
		printf( __( 'The site %s is yours.' ), $site );
	?></h2>
godog's avatar
godog committed
473
	<p>
lechuck's avatar
lechuck committed
474
		<?php printf(
lucha's avatar
lucha committed
475 476 477 478 479 480 481
			/* translators: 1: link to new site, 2: login URL, 3: username */
			__( '%1$s is your new site. <a href="%2$s">Log in</a> as &#8220;%3$s&#8221; using your existing password.' ),
			sprintf(
				'<a href="%s">%s</a>',
				esc_url( $home_url ),
				untrailingslashit( $domain . $path )
			),
lechuck's avatar
lechuck committed
482 483 484
			esc_url( $login_url ),
			$user_name
		); ?>
godog's avatar
godog committed
485 486
	</p>
	<?php
lucha's avatar
lucha committed
487 488 489 490 491
	/**
	 * Fires when the site or user sign-up process is complete.
	 *
	 * @since 3.0.0
	 */
godog's avatar
godog committed
492 493 494
	do_action( 'signup_finished' );
}

lechuck's avatar
lechuck committed
495 496 497
/**
 * Setup the new user signup process
 *
lucha's avatar
lucha committed
498
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
499
 *
lucha's avatar
lucha committed
500 501 502
 * @param string          $user_name  The username.
 * @param string          $user_email The user's email.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
503
 */
lucha's avatar
lucha committed
504 505
function signup_user( $user_name = '', $user_email = '', $errors = '' ) {
	global $active_signup;
godog's avatar
godog committed
506 507 508 509

	if ( !is_wp_error($errors) )
		$errors = new WP_Error();

lechuck's avatar
lechuck committed
510
	$signup_for = isset( $_POST[ 'signup_for' ] ) ? esc_html( $_POST[ 'signup_for' ] ) : 'blog';
godog's avatar
godog committed
511

lucha's avatar
lucha committed
512 513 514 515 516 517 518
	$signup_user_defaults = array(
		'user_name'  => $user_name,
		'user_email' => $user_email,
		'errors'     => $errors,
	);

	/**
lucha's avatar
lucha committed
519
	 * Filters the default user variables used on the user sign-up form.
lucha's avatar
lucha committed
520 521 522 523 524 525
	 *
	 * @since 3.0.0
	 *
	 * @param array $signup_user_defaults {
	 *     An array of default user variables.
	 *
lucha's avatar
lucha committed
526 527 528
	 *     @type string   $user_name  The user username.
	 *     @type string   $user_email The user email address.
	 *     @type WP_Error $errors     A WP_Error object with possible errors relevant to the sign-up user.
lucha's avatar
lucha committed
529 530 531
	 * }
	 */
	$filtered_results = apply_filters( 'signup_user_init', $signup_user_defaults );
godog's avatar
godog committed
532 533 534 535 536 537
	$user_name = $filtered_results['user_name'];
	$user_email = $filtered_results['user_email'];
	$errors = $filtered_results['errors'];

	?>

lucha's avatar
lucha committed
538 539
	<h2><?php
		/* translators: %s: name of the network */
lucha's avatar
lucha committed
540
		printf( __( 'Get your own %s account in seconds' ), get_network()->site_name );
lucha's avatar
lucha committed
541
	?></h2>
lucha's avatar
lucha committed
542
	<form id="setupform" method="post" action="wp-signup.php" novalidate="novalidate">
godog's avatar
godog committed
543
		<input type="hidden" name="stage" value="validate-user-signup" />
lucha's avatar
lucha committed
544 545 546 547
		<?php
		/** This action is documented in wp-signup.php */
		do_action( 'signup_hidden_fields', 'validate-user' );
		?>
godog's avatar
godog committed
548 549 550 551 552 553 554 555
		<?php show_user_form($user_name, $user_email, $errors); ?>

		<p>
		<?php if ( $active_signup == 'blog' ) { ?>
			<input id="signupblog" type="hidden" name="signup_for" value="blog" />
		<?php } elseif ( $active_signup == 'user' ) { ?>
			<input id="signupblog" type="hidden" name="signup_for" value="user" />
		<?php } else { ?>
lechuck's avatar
lechuck committed
556
			<input id="signupblog" type="radio" name="signup_for" value="blog" <?php checked( $signup_for, 'blog' ); ?> />
godog's avatar
godog committed
557 558
			<label class="checkbox" for="signupblog"><?php _e('Gimme a site!') ?></label>
			<br />
lechuck's avatar
lechuck committed
559
			<input id="signupuser" type="radio" name="signup_for" value="user" <?php checked( $signup_for, 'user' ); ?> />
godog's avatar
godog committed
560 561 562 563 564 565 566 567 568
			<label class="checkbox" for="signupuser"><?php _e('Just a username, please.') ?></label>
		<?php } ?>
		</p>

		<p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e('Next') ?>" /></p>
	</form>
	<?php
}

lechuck's avatar
lechuck committed
569 570 571
/**
 * Validate the new user signup
 *
lucha's avatar
lucha committed
572
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
573 574 575
 *
 * @return bool True if new user signup was validated, false if error
 */
godog's avatar
godog committed
576 577
function validate_user_signup() {
	$result = validate_user_form();
lucha's avatar
lucha committed
578 579 580
	$user_name = $result['user_name'];
	$user_email = $result['user_email'];
	$errors = $result['errors'];
godog's avatar
godog committed
581 582 583 584 585 586 587 588 589 590 591

	if ( $errors->get_error_code() ) {
		signup_user($user_name, $user_email, $errors);
		return false;
	}

	if ( 'blog' == $_POST['signup_for'] ) {
		signup_blog($user_name, $user_email);
		return false;
	}

lucha's avatar
lucha committed
592 593
	/** This filter is documented in wp-signup.php */
	wpmu_signup_user( $user_name, $user_email, apply_filters( 'add_signup_meta', array() ) );
godog's avatar
godog committed
594 595 596 597 598

	confirm_user_signup($user_name, $user_email);
	return true;
}

lechuck's avatar
lechuck committed
599 600 601
/**
 * New user signup confirmation
 *
lucha's avatar
lucha committed
602
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
603 604 605 606
 *
 * @param string $user_name The username
 * @param string $user_email The user's email address
 */
godog's avatar
godog committed
607 608
function confirm_user_signup($user_name, $user_email) {
	?>
lechuck's avatar
lechuck committed
609 610
	<h2><?php /* translators: %s: username */
	printf( __( '%s is your new username' ), $user_name) ?></h2>
godog's avatar
godog committed
611
	<p><?php _e( 'But, before you can start using your new username, <strong>you must activate it</strong>.' ) ?></p>
lechuck's avatar
lechuck committed
612 613
	<p><?php /* translators: %s: email address */
	printf( __( 'Check your inbox at %s and click the link given.' ), '<strong>' . $user_email . '</strong>' ); ?></p>
godog's avatar
godog committed
614 615
	<p><?php _e( 'If you do not activate your username within two days, you will have to sign up again.' ); ?></p>
	<?php
lucha's avatar
lucha committed
616
	/** This action is documented in wp-signup.php */
godog's avatar
godog committed
617 618 619
	do_action( 'signup_finished' );
}

lechuck's avatar
lechuck committed
620 621 622
/**
 * Setup the new site signup
 *
lucha's avatar
lucha committed
623
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
624
 *
lucha's avatar
lucha committed
625 626 627 628 629
 * @param string          $user_name  The username.
 * @param string          $user_email The user's email address.
 * @param string          $blogname   The site name.
 * @param string          $blog_title The site title.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
630
 */
godog's avatar
godog committed
631 632 633 634
function signup_blog($user_name = '', $user_email = '', $blogname = '', $blog_title = '', $errors = '') {
	if ( !is_wp_error($errors) )
		$errors = new WP_Error();

lucha's avatar
lucha committed
635 636 637 638 639 640 641 642 643
	$signup_blog_defaults = array(
		'user_name'  => $user_name,
		'user_email' => $user_email,
		'blogname'   => $blogname,
		'blog_title' => $blog_title,
		'errors'     => $errors
	);

	/**
lucha's avatar
lucha committed
644
	 * Filters the default site creation variables for the site sign-up form.
lucha's avatar
lucha committed
645 646 647 648 649 650
	 *
	 * @since 3.0.0
	 *
	 * @param array $signup_blog_defaults {
	 *     An array of default site creation variables.
	 *
lucha's avatar
lucha committed
651 652 653 654 655
	 *     @type string   $user_name  The user username.
	 *     @type string   $user_email The user email address.
	 *     @type string   $blogname   The blogname.
	 *     @type string   $blog_title The title of the site.
	 *     @type WP_Error $errors     A WP_Error object with possible errors relevant to new site creation variables.
lucha's avatar
lucha committed
656 657 658 659
	 * }
	 */
	$filtered_results = apply_filters( 'signup_blog_init', $signup_blog_defaults );

godog's avatar
godog committed
660 661 662 663 664 665 666 667 668 669 670 671 672
	$user_name = $filtered_results['user_name'];
	$user_email = $filtered_results['user_email'];
	$blogname = $filtered_results['blogname'];
	$blog_title = $filtered_results['blog_title'];
	$errors = $filtered_results['errors'];

	if ( empty($blogname) )
		$blogname = $user_name;
	?>
	<form id="setupform" method="post" action="wp-signup.php">
		<input type="hidden" name="stage" value="validate-blog-signup" />
		<input type="hidden" name="user_name" value="<?php echo esc_attr($user_name) ?>" />
		<input type="hidden" name="user_email" value="<?php echo esc_attr($user_email) ?>" />
lucha's avatar
lucha committed
673 674 675 676
		<?php
		/** This action is documented in wp-signup.php */
		do_action( 'signup_hidden_fields', 'validate-site' );
		?>
godog's avatar
godog committed
677 678 679 680 681 682
		<?php show_blog_form($blogname, $blog_title, $errors); ?>
		<p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e('Signup') ?>" /></p>
	</form>
	<?php
}

lechuck's avatar
lechuck committed
683 684 685
/**
 * Validate new site signup
 *
lucha's avatar
lucha committed
686
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
687 688 689
 *
 * @return bool True if the site signup was validated, false if error
 */
godog's avatar
godog committed
690 691
function validate_blog_signup() {
	// Re-validate user info.
lucha's avatar
lucha committed
692 693 694 695
	$user_result = wpmu_validate_user_signup( $_POST['user_name'], $_POST['user_email'] );
	$user_name = $user_result['user_name'];
	$user_email = $user_result['user_email'];
	$user_errors = $user_result['errors'];
godog's avatar
godog committed
696

lucha's avatar
lucha committed
697 698
	if ( $user_errors->get_error_code() ) {
		signup_user( $user_name, $user_email, $user_errors );
godog's avatar
godog committed
699 700 701
		return false;
	}

lucha's avatar
lucha committed
702 703 704 705 706 707
	$result = wpmu_validate_blog_signup( $_POST['blogname'], $_POST['blog_title'] );
	$domain = $result['domain'];
	$path = $result['path'];
	$blogname = $result['blogname'];
	$blog_title = $result['blog_title'];
	$errors = $result['errors'];
godog's avatar
godog committed
708 709 710 711 712 713 714

	if ( $errors->get_error_code() ) {
		signup_blog($user_name, $user_email, $blogname, $blog_title, $errors);
		return false;
	}

	$public = (int) $_POST['blog_public'];
lucha's avatar
lucha committed
715
	$signup_meta = array ('lang_id' => 1, 'public' => $public);
lucha's avatar
lucha committed
716

lechuck's avatar
lechuck committed
717 718 719 720 721 722 723 724 725 726 727 728 729 730 731
	// Handle the language setting for the new site.
	if ( ! empty( $_POST['WPLANG'] ) ) {

		$languages = signup_get_available_languages();

		if ( in_array( $_POST['WPLANG'], $languages ) ) {
			$language = wp_unslash( sanitize_text_field( $_POST['WPLANG'] ) );

			if ( $language ) {
				$signup_meta['WPLANG'] = $language;
			}
		}

	}

lucha's avatar
lucha committed
732
	/** This filter is documented in wp-signup.php */
lucha's avatar
lucha committed
733
	$meta = apply_filters( 'add_signup_meta', $signup_meta );
godog's avatar
godog committed
734 735 736 737 738 739

	wpmu_signup_blog($domain, $path, $blog_title, $user_name, $user_email, $meta);
	confirm_blog_signup($domain, $path, $blog_title, $user_name, $user_email, $meta);
	return true;
}

lechuck's avatar
lechuck committed
740 741 742
/**
 * New site signup confirmation
 *
lucha's avatar
lucha committed
743
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
744 745 746 747 748 749
 *
 * @param string $domain The domain URL
 * @param string $path The site root path
 * @param string $blog_title The new site title
 * @param string $user_name The user's username
 * @param string $user_email The user's email address
lucha's avatar
lucha committed
750
 * @param array $meta Any additional meta from the {@see 'add_signup_meta'} filter in validate_blog_signup()
lechuck's avatar
lechuck committed
751 752
 */
function confirm_blog_signup( $domain, $path, $blog_title, $user_name = '', $user_email = '', $meta = array() ) {
godog's avatar
godog committed
753
	?>
lechuck's avatar
lechuck committed
754 755
	<h2><?php /* translators: %s: site address */
	printf( __( 'Congratulations! Your new site, %s, is almost ready.' ), "<a href='http://{$domain}{$path}'>{$blog_title}</a>" ) ?></h2>
godog's avatar
godog committed
756 757

	<p><?php _e( 'But, before you can start using your site, <strong>you must activate it</strong>.' ) ?></p>
lechuck's avatar
lechuck committed
758 759
	<p><?php /* translators: %s: email address */
	printf( __( 'Check your inbox at %s and click the link given.' ), '<strong>' . $user_email . '</strong>' ); ?></p>
godog's avatar
godog committed
760 761 762 763 764 765 766
	<p><?php _e( 'If you do not activate your site within two days, you will have to sign up again.' ); ?></p>
	<h2><?php _e( 'Still waiting for your email?' ); ?></h2>
	<p>
		<?php _e( 'If you haven&#8217;t received your email yet, there are a number of things you can do:' ) ?>
		<ul id="noemail-tips">
			<li><p><strong><?php _e( 'Wait a little longer. Sometimes delivery of email can be delayed by processes outside of our control.' ) ?></strong></p></li>
			<li><p><?php _e( 'Check the junk or spam folder of your email client. Sometime emails wind up there by mistake.' ) ?></p></li>
lucha's avatar
lucha committed
767 768 769 770
			<li><?php
				/* translators: %s: email address */
				printf( __( 'Have you entered your email correctly? You have entered %s, if it&#8217;s incorrect, you will not receive your email.' ), $user_email );
			?></li>
godog's avatar
godog committed
771 772 773
		</ul>
	</p>
	<?php
lucha's avatar
lucha committed
774
	/** This action is documented in wp-signup.php */
godog's avatar
godog committed
775 776 777
	do_action( 'signup_finished' );
}

lechuck's avatar
lechuck committed
778 779 780 781 782 783 784 785 786 787 788
/**
 * Retrieves languages available during the site/user signup process.
 *
 * @since 4.4.0
 *
 * @see get_available_languages()
 *
 * @return array List of available languages.
 */
function signup_get_available_languages() {
	/**
lucha's avatar
lucha committed
789
	 * Filters the list of available languages for front-end site signups.
lechuck's avatar
lechuck committed
790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810
	 *
	 * Passing an empty array to this hook will disable output of the setting on the
	 * signup form, and the default language will be used when creating the site.
	 *
	 * Languages not already installed will be stripped.
	 *
	 * @since 4.4.0
	 *
	 * @param array $available_languages Available languages.
	 */
	$languages = (array) apply_filters( 'signup_get_available_languages', get_available_languages() );

	/*
	 * Strip any non-installed languages and return.
	 *
	 * Re-call get_available_languages() here in case a language pack was installed
	 * in a callback hooked to the 'signup_get_available_languages' filter before this point.
	 */
	return array_intersect_assoc( $languages, get_available_languages() );
}

godog's avatar
godog committed
811
// Main
lucha's avatar
lucha committed
812
$active_signup = get_site_option( 'registration', 'none' );
lucha's avatar
lucha committed
813

lucha's avatar
lucha committed
814
/**
lucha's avatar
lucha committed
815
 * Filters the type of site sign-up.
lucha's avatar
lucha committed
816 817 818 819 820 821 822
 *
 * @since 3.0.0
 *
 * @param string $active_signup String that returns registration type. The value can be
 *                              'all', 'none', 'blog', or 'user'.
 */
$active_signup = apply_filters( 'wpmu_active_signup', $active_signup );
godog's avatar
godog committed
823

lucha's avatar
lucha committed
824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848
if ( current_user_can( 'manage_network' ) ) {
	echo '<div class="mu_alert">';
	_e( 'Greetings Network Administrator!' );
	echo ' ';

	switch ( $active_signup ) {
		case 'none':
			_e( 'The network currently disallows registrations.' );
			break;
		case 'blog':
			_e( 'The network currently allows site registrations.' );
			break;
		case 'user':
			_e( 'The network currently allows user registrations.' );
			break;
		default:
			_e( 'The network currently allows both site and user registrations.' );
			break;
	}

	echo ' ';

	/* translators: %s: network settings URL */
	printf( __( 'To change or disable registration go to your <a href="%s">Options page</a>.' ), esc_url( network_admin_url( 'settings.php' ) ) );
	echo '</div>';
lucha's avatar
lucha committed
849
}
godog's avatar
godog committed
850 851 852 853

$newblogname = isset($_GET['new']) ? strtolower(preg_replace('/^-|-$|[^-a-zA-Z0-9]/', '', $_GET['new'])) : null;

$current_user = wp_get_current_user();
shammash's avatar
shammash committed
854
if ( $active_signup == 'none' ) {
godog's avatar
godog committed
855 856
	_e( 'Registration has been disabled.' );
} elseif ( $active_signup == 'blog' && !is_user_logged_in() ) {
lechuck's avatar
lechuck committed
857
	$login_url = wp_login_url( network_site_url( 'wp-signup.php' ) );
lucha's avatar
lucha committed
858 859
	/* translators: %s: login URL */
	printf( __( 'You must first <a href="%s">log in</a>, and then you can create a new site.' ), $login_url );
godog's avatar
godog committed
860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880
} else {
	$stage = isset( $_POST['stage'] ) ?  $_POST['stage'] : 'default';
	switch ( $stage ) {
		case 'validate-user-signup' :
			if ( $active_signup == 'all' || $_POST[ 'signup_for' ] == 'blog' && $active_signup == 'blog' || $_POST[ 'signup_for' ] == 'user' && $active_signup == 'user' )
				validate_user_signup();
			else
				_e( 'User registration has been disabled.' );
		break;
		case 'validate-blog-signup':
			if ( $active_signup == 'all' || $active_signup == 'blog' )
				validate_blog_signup();
			else
				_e( 'Site registration has been disabled.' );
			break;
		case 'gimmeanotherblog':
			validate_another_blog_signup();
			break;
		case 'default':
		default :
			$user_email = isset( $_POST[ 'user_email' ] ) ? $_POST[ 'user_email' ] : '';
lucha's avatar
lucha committed
881 882 883 884 885 886
			/**
			 * Fires when the site sign-up form is sent.
			 *
			 * @since 3.0.0
			 */
			do_action( 'preprocess_signup_form' );
godog's avatar
godog committed
887 888
			if ( is_user_logged_in() && ( $active_signup == 'all' || $active_signup == 'blog' ) )
				signup_another_blog($newblogname);
lechuck's avatar
lechuck committed
889
			elseif ( ! is_user_logged_in() && ( $active_signup == 'all' || $active_signup == 'user' ) )
godog's avatar
godog committed
890
				signup_user( $newblogname, $user_email );
lechuck's avatar
lechuck committed
891
			elseif ( ! is_user_logged_in() && ( $active_signup == 'blog' ) )
godog's avatar
godog committed
892 893 894 895 896 897 898 899
				_e( 'Sorry, new registrations are not allowed at this time.' );
			else
				_e( 'You are logged in already. No need to register again!' );

			if ( $newblogname ) {
				$newblog = get_blogaddress_by_name( $newblogname );

				if ( $active_signup == 'blog' || $active_signup == 'all' )
lechuck's avatar
lechuck committed
900 901 902 903
					/* translators: %s: site address */
					printf( '<p><em>' . __( 'The site you were looking for, %s, does not exist, but you can create it now!' ) . '</em></p>',
						'<strong>' . $newblog . '</strong>'
					);
godog's avatar
godog committed
904
				else
lechuck's avatar
lechuck committed
905 906 907 908
					/* translators: %s: site address */
					printf( '<p><em>' . __( 'The site you were looking for, %s, does not exist.' ) . '</em></p>',
						'<strong>' . $newblog . '</strong>'
					);
godog's avatar
godog committed
909 910 911 912 913 914 915
			}
			break;
	}
}
?>
</div>
</div>
lucha's avatar
lucha committed
916 917 918 919 920 921 922
<?php
/**
 * Fires after the sign-up forms, before wp_footer.
 *
 * @since 3.0.0
 */
do_action( 'after_signup_form' ); ?>
godog's avatar
godog committed
923

lechuck's avatar
lechuck committed
924
<?php get_footer( 'wp-signup' );