wp-signup.php 29.4 KB
Newer Older
godog's avatar
godog committed
1
2
3
4
5
<?php

/** Sets up the WordPress Environment. */
require( dirname(__FILE__) . '/wp-load.php' );

root's avatar
root committed
6
add_action( 'wp_head', 'wp_no_robots' );
godog's avatar
godog committed
7

lucha's avatar
lucha committed
8
require( dirname( __FILE__ ) . '/wp-blog-header.php' );
godog's avatar
godog committed
9

lechuck's avatar
lechuck committed
10
if ( is_array( get_site_option( 'illegal_names' )) && isset( $_GET[ 'new' ] ) && in_array( $_GET[ 'new' ], get_site_option( 'illegal_names' ) ) ) {
godog's avatar
godog committed
11
12
13
14
	wp_redirect( network_home_url() );
	die();
}

lechuck's avatar
lechuck committed
15
16
17
/**
 * Prints signup_header via wp_head
 *
lucha's avatar
lucha committed
18
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
19
 */
godog's avatar
godog committed
20
function do_signup_header() {
lucha's avatar
lucha committed
21
	/**
lechuck's avatar
lechuck committed
22
	 * Fires within the head section of the site sign-up screen.
lucha's avatar
lucha committed
23
24
25
	 *
	 * @since 3.0.0
	 */
shammash's avatar
shammash committed
26
	do_action( 'signup_header' );
godog's avatar
godog committed
27
28
29
30
}
add_action( 'wp_head', 'do_signup_header' );

if ( !is_multisite() ) {
lechuck's avatar
lechuck committed
31
	wp_redirect( wp_registration_url() );
godog's avatar
godog committed
32
33
34
35
	die();
}

if ( !is_main_site() ) {
lechuck's avatar
lechuck committed
36
	wp_redirect( network_site_url( 'wp-signup.php' ) );
godog's avatar
godog committed
37
38
39
40
41
42
	die();
}

// Fix for page title
$wp_query->is_404 = false;

lechuck's avatar
lechuck committed
43
44
45
46
47
48
49
/**
 * Fires before the Site Signup page is loaded.
 *
 * @since 4.4.0
 */
do_action( 'before_signup_header' );

lechuck's avatar
lechuck committed
50
51
52
/**
 * Prints styles for front-end Multisite signup pages
 *
lucha's avatar
lucha committed
53
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
54
 */
godog's avatar
godog committed
55
56
57
58
59
60
61
62
63
64
65
function wpmu_signup_stylesheet() {
	?>
	<style type="text/css">
		.mu_register { width: 90%; margin:0 auto; }
		.mu_register form { margin-top: 2em; }
		.mu_register .error { font-weight:700; padding:10px; color:#333333; background:#FFEBE8; border:1px solid #CC0000; }
		.mu_register input[type="submit"],
			.mu_register #blog_title,
			.mu_register #user_email,
			.mu_register #blogname,
			.mu_register #user_name { width:100%; font-size: 24px; margin:5px 0; }
lechuck's avatar
lechuck committed
66
		.mu_register #site-language { display: block; }
godog's avatar
godog committed
67
68
69
70
71
72
73
74
75
76
		.mu_register .prefix_address,
			.mu_register .suffix_address {font-size: 18px;display:inline; }
		.mu_register label { font-weight:700; font-size:15px; display:block; margin:10px 0; }
		.mu_register label.checkbox { display:inline; }
		.mu_register .mu_alert { font-weight:700; padding:10px; color:#333333; background:#ffffe0; border:1px solid #e6db55; }
	</style>
	<?php
}

add_action( 'wp_head', 'wpmu_signup_stylesheet' );
lechuck's avatar
lechuck committed
77
get_header( 'wp-signup' );
godog's avatar
godog committed
78

lucha's avatar
lucha committed
79
80
81
82
83
/**
 * Fires before the site sign-up form.
 *
 * @since 3.0.0
 */
godog's avatar
godog committed
84
85
do_action( 'before_signup_form' );
?>
lechuck's avatar
lechuck committed
86
87
<div id="signup-content" class="widecolumn">
<div class="mu_register wp-signup-container">
godog's avatar
godog committed
88
<?php
lechuck's avatar
lechuck committed
89
90
91
/**
 * Generates and displays the Signup and Create Site forms
 *
lucha's avatar
lucha committed
92
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
93
 *
lucha's avatar
lucha committed
94
95
96
 * @param string          $blogname   The new site name.
 * @param string          $blog_title The new site title.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
97
 */
lucha's avatar
lucha committed
98
function show_blog_form( $blogname = '', $blog_title = '', $errors = '' ) {
lucha's avatar
lucha committed
99
100
101
102
	if ( ! is_wp_error( $errors ) ) {
		$errors = new WP_Error();
	}

lucha's avatar
lucha committed
103
	$current_network = get_network();
godog's avatar
godog committed
104
105
106
107
108
109
110
111
112
113
114
	// Blog name
	if ( !is_subdomain_install() )
		echo '<label for="blogname">' . __('Site Name:') . '</label>';
	else
		echo '<label for="blogname">' . __('Site Domain:') . '</label>';

	if ( $errmsg = $errors->get_error_message('blogname') ) { ?>
		<p class="error"><?php echo $errmsg ?></p>
	<?php }

	if ( !is_subdomain_install() )
lucha's avatar
lucha committed
115
		echo '<span class="prefix_address">' . $current_network->domain . $current_network->path . '</span><input name="blogname" type="text" id="blogname" value="'. esc_attr($blogname) .'" maxlength="60" /><br />';
godog's avatar
godog committed
116
	else
lucha's avatar
lucha committed
117
		echo '<input name="blogname" type="text" id="blogname" value="'.esc_attr($blogname).'" maxlength="60" /><span class="suffix_address">.' . ( $site_domain = preg_replace( '|^www\.|', '', $current_network->domain ) ) . '</span><br />';
godog's avatar
godog committed
118

lucha's avatar
lucha committed
119
120
	if ( ! is_user_logged_in() ) {
		if ( ! is_subdomain_install() ) {
lucha's avatar
lucha committed
121
			$site = $current_network->domain . $current_network->path . __( 'sitename' );
lucha's avatar
lucha committed
122
		} else {
lucha's avatar
lucha committed
123
			$site = __( 'domain' ) . '.' . $site_domain . $current_network->path;
lucha's avatar
lucha committed
124
125
126
127
		}

		/* translators: %s: site address */
		echo '<p>(<strong>' . sprintf( __( 'Your address will be %s.' ), $site ) . '</strong>) ' . __( 'Must be at least 4 characters, letters and numbers only. It cannot be changed, so choose carefully!' ) . '</p>';
godog's avatar
godog committed
128
129
130
131
132
133
134
135
136
137
138
	}

	// Blog Title
	?>
	<label for="blog_title"><?php _e('Site Title:') ?></label>
	<?php if ( $errmsg = $errors->get_error_message('blog_title') ) { ?>
		<p class="error"><?php echo $errmsg ?></p>
	<?php }
	echo '<input name="blog_title" type="text" id="blog_title" value="'.esc_attr($blog_title).'" />';
	?>

lechuck's avatar
lechuck committed
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
	<?php
	// Site Language.
	$languages = signup_get_available_languages();

	if ( ! empty( $languages ) ) :
		?>
		<p>
			<label for="site-language"><?php _e( 'Site Language:' ); ?></label>
			<?php
			// Network default.
			$lang = get_site_option( 'WPLANG' );

			if ( isset( $_POST['WPLANG'] ) ) {
				$lang = $_POST['WPLANG'];
			}

			// Use US English if the default isn't available.
			if ( ! in_array( $lang, $languages ) ) {
				$lang = '';
			}

			wp_dropdown_languages( array(
				'name'                        => 'WPLANG',
				'id'                          => 'site-language',
				'selected'                    => $lang,
				'languages'                   => $languages,
				'show_available_translations' => false,
			) );
			?>
		</p>
	<?php endif; // Languages. ?>

godog's avatar
godog committed
171
172
173
	<div id="privacy">
        <p class="privacy-intro">
            <label for="blog_public_on"><?php _e('Privacy:') ?></label>
lechuck's avatar
lechuck committed
174
            <?php _e( 'Allow search engines to index this site.' ); ?>
godog's avatar
godog committed
175
176
177
178
179
180
181
182
183
184
185
186
187
            <br style="clear:both" />
            <label class="checkbox" for="blog_public_on">
                <input type="radio" id="blog_public_on" name="blog_public" value="1" <?php if ( !isset( $_POST['blog_public'] ) || $_POST['blog_public'] == '1' ) { ?>checked="checked"<?php } ?> />
                <strong><?php _e( 'Yes' ); ?></strong>
            </label>
            <label class="checkbox" for="blog_public_off">
                <input type="radio" id="blog_public_off" name="blog_public" value="0" <?php if ( isset( $_POST['blog_public'] ) && $_POST['blog_public'] == '0' ) { ?>checked="checked"<?php } ?> />
                <strong><?php _e( 'No' ); ?></strong>
            </label>
        </p>
	</div>

	<?php
lucha's avatar
lucha committed
188
189
190
191
192
	/**
	 * Fires after the site sign-up form.
	 *
	 * @since 3.0.0
	 *
lucha's avatar
lucha committed
193
	 * @param WP_Error $errors A WP_Error object possibly containing 'blogname' or 'blog_title' errors.
lucha's avatar
lucha committed
194
195
	 */
	do_action( 'signup_blogform', $errors );
godog's avatar
godog committed
196
197
}

lechuck's avatar
lechuck committed
198
199
200
/**
 * Validate the new site signup
 *
lucha's avatar
lucha committed
201
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
202
203
204
 *
 * @return array Contains the new site data and error messages.
 */
godog's avatar
godog committed
205
206
207
208
209
210
211
212
function validate_blog_form() {
	$user = '';
	if ( is_user_logged_in() )
		$user = wp_get_current_user();

	return wpmu_validate_blog_signup($_POST['blogname'], $_POST['blog_title'], $user);
}

lechuck's avatar
lechuck committed
213
214
215
/**
 * Display user registration form
 *
lucha's avatar
lucha committed
216
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
217
 *
lucha's avatar
lucha committed
218
219
220
 * @param string          $user_name  The entered username.
 * @param string          $user_email The entered email address.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
221
 */
godog's avatar
godog committed
222
function show_user_form($user_name = '', $user_email = '', $errors = '') {
lucha's avatar
lucha committed
223
224
225
226
	if ( ! is_wp_error( $errors ) ) {
		$errors = new WP_Error();
	}

godog's avatar
godog committed
227
228
229
230
231
	// User name
	echo '<label for="user_name">' . __('Username:') . '</label>';
	if ( $errmsg = $errors->get_error_message('user_name') ) {
		echo '<p class="error">'.$errmsg.'</p>';
	}
lucha's avatar
lucha committed
232
	echo '<input name="user_name" type="text" id="user_name" value="'. esc_attr( $user_name ) .'" autocapitalize="none" autocorrect="off" maxlength="60" /><br />';
godog's avatar
godog committed
233
234
235
236
237
238
239
	_e( '(Must be at least 4 characters, letters and numbers only.)' );
	?>

	<label for="user_email"><?php _e( 'Email&nbsp;Address:' ) ?></label>
	<?php if ( $errmsg = $errors->get_error_message('user_email') ) { ?>
		<p class="error"><?php echo $errmsg ?></p>
	<?php } ?>
lucha's avatar
lucha committed
240
	<input name="user_email" type="email" id="user_email" value="<?php  echo esc_attr($user_email) ?>" maxlength="200" /><br /><?php _e('We send your registration email to this address. (Double-check your email address before continuing.)') ?>
godog's avatar
godog committed
241
242
243
244
	<?php
	if ( $errmsg = $errors->get_error_message('generic') ) {
		echo '<p class="error">' . $errmsg . '</p>';
	}
lucha's avatar
lucha committed
245
246
247
248
249
	/**
	 * Fires at the end of the user registration form on the site sign-up form.
	 *
	 * @since 3.0.0
	 *
lucha's avatar
lucha committed
250
	 * @param WP_Error $errors A WP_Error object containing 'user_name' or 'user_email' errors.
lucha's avatar
lucha committed
251
	 */
godog's avatar
godog committed
252
253
254
	do_action( 'signup_extra_fields', $errors );
}

lechuck's avatar
lechuck committed
255
256
257
/**
 * Validate user signup name and email
 *
lucha's avatar
lucha committed
258
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
259
260
261
 *
 * @return array Contains username, email, and error messages.
 */
godog's avatar
godog committed
262
263
264
265
function validate_user_form() {
	return wpmu_validate_user_signup($_POST['user_name'], $_POST['user_email']);
}

lechuck's avatar
lechuck committed
266
267
268
/**
 * Allow returning users to sign up for another site
 *
lucha's avatar
lucha committed
269
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
270
 *
lucha's avatar
lucha committed
271
272
273
 * @param string          $blogname   The new site name
 * @param string          $blog_title The new site title.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
274
 */
lucha's avatar
lucha committed
275
function signup_another_blog( $blogname = '', $blog_title = '', $errors = '' ) {
godog's avatar
godog committed
276
277
278
279
280
281
	$current_user = wp_get_current_user();

	if ( ! is_wp_error($errors) ) {
		$errors = new WP_Error();
	}

lucha's avatar
lucha committed
282
283
284
285
286
287
288
	$signup_defaults = array(
		'blogname'   => $blogname,
		'blog_title' => $blog_title,
		'errors'     => $errors
	);

	/**
lucha's avatar
lucha committed
289
	 * Filters the default site sign-up variables.
lucha's avatar
lucha committed
290
291
292
293
294
295
	 *
	 * @since 3.0.0
	 *
	 * @param array $signup_defaults {
	 *     An array of default site sign-up variables.
	 *
lucha's avatar
lucha committed
296
297
298
	 *     @type string   $blogname   The site blogname.
	 *     @type string   $blog_title The site title.
	 *     @type WP_Error $errors     A WP_Error object possibly containing 'blogname' or 'blog_title' errors.
lucha's avatar
lucha committed
299
300
301
302
	 * }
	 */
	$filtered_results = apply_filters( 'signup_another_blog_init', $signup_defaults );

godog's avatar
godog committed
303
304
305
306
	$blogname = $filtered_results['blogname'];
	$blog_title = $filtered_results['blog_title'];
	$errors = $filtered_results['errors'];

lucha's avatar
lucha committed
307
	echo '<h2>' . sprintf( __( 'Get <em>another</em> %s site in seconds' ), get_network()->site_name ) . '</h2>';
godog's avatar
godog committed
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330

	if ( $errors->get_error_code() ) {
		echo '<p>' . __( 'There was a problem, please correct the form below and try again.' ) . '</p>';
	}
	?>
	<p><?php printf( __( 'Welcome back, %s. By filling out the form below, you can <strong>add another site to your account</strong>. There is no limit to the number of sites you can have, so create to your heart&#8217;s content, but write responsibly!' ), $current_user->display_name ) ?></p>

	<?php
	$blogs = get_blogs_of_user($current_user->ID);
	if ( !empty($blogs) ) { ?>

			<p><?php _e( 'Sites you are already a member of:' ) ?></p>
			<ul>
				<?php foreach ( $blogs as $blog ) {
					$home_url = get_home_url( $blog->userblog_id );
					echo '<li><a href="' . esc_url( $home_url ) . '">' . $home_url . '</a></li>';
				} ?>
			</ul>
	<?php } ?>

	<p><?php _e( 'If you&#8217;re not going to use a great site domain, leave it for a new user. Now have at it!' ) ?></p>
	<form id="setupform" method="post" action="wp-signup.php">
		<input type="hidden" name="stage" value="gimmeanotherblog" />
lucha's avatar
lucha committed
331
332
333
334
		<?php
		/**
		 * Hidden sign-up form fields output when creating another site or user.
		 *
lucha's avatar
lucha committed
335
		 * @since MU (3.0.0)
lucha's avatar
lucha committed
336
337
338
339
340
341
		 *
		 * @param string $context A string describing the steps of the sign-up process. The value can be
		 *                        'create-another-site', 'validate-user', or 'validate-site'.
		 */
		do_action( 'signup_hidden_fields', 'create-another-site' );
		?>
godog's avatar
godog committed
342
343
344
345
346
347
		<?php show_blog_form($blogname, $blog_title, $errors); ?>
		<p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e( 'Create Site' ) ?>" /></p>
	</form>
	<?php
}

lechuck's avatar
lechuck committed
348
/**
lechuck's avatar
lechuck committed
349
 * Validate a new site signup.
lechuck's avatar
lechuck committed
350
 *
lucha's avatar
lucha committed
351
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
352
 *
lechuck's avatar
lechuck committed
353
 * @return null|bool True if site signup was validated, false if error.
lechuck's avatar
lechuck committed
354
 *                   The function halts all execution if the user is not logged in.
lechuck's avatar
lechuck committed
355
 */
godog's avatar
godog committed
356
function validate_another_blog_signup() {
lucha's avatar
lucha committed
357
	global $blogname, $blog_title, $errors, $domain, $path;
godog's avatar
godog committed
358
	$current_user = wp_get_current_user();
lechuck's avatar
lechuck committed
359
	if ( ! is_user_logged_in() ) {
godog's avatar
godog committed
360
		die();
lechuck's avatar
lechuck committed
361
	}
godog's avatar
godog committed
362
363

	$result = validate_blog_form();
lucha's avatar
lucha committed
364
365
366
367
368
369
370

	// Extracted values set/overwrite globals.
	$domain = $result['domain'];
	$path = $result['path'];
	$blogname = $result['blogname'];
	$blog_title = $result['blog_title'];
	$errors = $result['errors'];
godog's avatar
godog committed
371
372
373
374
375
376
377

	if ( $errors->get_error_code() ) {
		signup_another_blog($blogname, $blog_title, $errors);
		return false;
	}

	$public = (int) $_POST['blog_public'];
lucha's avatar
lucha committed
378
379
380
381
382
383

	$blog_meta_defaults = array(
		'lang_id' => 1,
		'public'  => $public
	);

lechuck's avatar
lechuck committed
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
	// Handle the language setting for the new site.
	if ( ! empty( $_POST['WPLANG'] ) ) {

		$languages = signup_get_available_languages();

		if ( in_array( $_POST['WPLANG'], $languages ) ) {
			$language = wp_unslash( sanitize_text_field( $_POST['WPLANG'] ) );

			if ( $language ) {
				$blog_meta_defaults['WPLANG'] = $language;
			}
		}

	}

lucha's avatar
lucha committed
399
	/**
lucha's avatar
lucha committed
400
401
402
	 * Filters the new site meta variables.
	 *
	 * Use the {@see 'add_signup_meta'} filter instead.
lucha's avatar
lucha committed
403
	 *
lucha's avatar
lucha committed
404
	 * @since MU (3.0.0)
lucha's avatar
lucha committed
405
	 * @deprecated 3.0.0 Use the {@see 'add_signup_meta'} filter instead.
lucha's avatar
lucha committed
406
407
408
	 *
	 * @param array $blog_meta_defaults An array of default blog meta variables.
	 */
lucha's avatar
lucha committed
409
	$meta_defaults = apply_filters( 'signup_create_blog_meta', $blog_meta_defaults );
lechuck's avatar
lechuck committed
410

lucha's avatar
lucha committed
411
	/**
lucha's avatar
lucha committed
412
	 * Filters the new default site meta variables.
lucha's avatar
lucha committed
413
414
415
416
417
418
419
420
421
422
	 *
	 * @since 3.0.0
	 *
	 * @param array $meta {
	 *     An array of default site meta variables.
	 *
	 *     @type int $lang_id     The language ID.
	 *     @type int $blog_public Whether search engines should be discouraged from indexing the site. 1 for true, 0 for false.
	 * }
	 */
lucha's avatar
lucha committed
423
	$meta = apply_filters( 'add_signup_meta', $meta_defaults );
godog's avatar
godog committed
424

lucha's avatar
lucha committed
425
	$blog_id = wpmu_create_blog( $domain, $path, $blog_title, $current_user->ID, $meta, get_current_network_id() );
lechuck's avatar
lechuck committed
426
427
428
429
430
431

	if ( is_wp_error( $blog_id ) ) {
		return false;
	}

	confirm_another_blog_signup( $domain, $path, $blog_title, $current_user->user_login, $current_user->user_email, $meta, $blog_id );
godog's avatar
godog committed
432
433
434
	return true;
}

lechuck's avatar
lechuck committed
435
/**
lechuck's avatar
lechuck committed
436
 * Confirm a new site signup.
lechuck's avatar
lechuck committed
437
 *
lucha's avatar
lucha committed
438
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
439
440
441
442
443
444
445
 * @since 4.4.0 Added the `$blog_id` parameter.
 *
 * @param string $domain     The domain URL.
 * @param string $path       The site root path.
 * @param string $blog_title The site title.
 * @param string $user_name  The username.
 * @param string $user_email The user's email address.
lucha's avatar
lucha committed
446
 * @param array  $meta       Any additional meta from the {@see 'add_signup_meta'} filter in validate_blog_signup().
lechuck's avatar
lechuck committed
447
 * @param int    $blog_id    The site ID.
lechuck's avatar
lechuck committed
448
 */
lechuck's avatar
lechuck committed
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
function confirm_another_blog_signup( $domain, $path, $blog_title, $user_name, $user_email = '', $meta = array(), $blog_id = 0 ) {

	if ( $blog_id ) {
		switch_to_blog( $blog_id );
		$home_url  = home_url( '/' );
		$login_url = wp_login_url();
		restore_current_blog();
	} else {
		$home_url  = 'http://' . $domain . $path;
		$login_url = 'http://' . $domain . $path . 'wp-login.php';
	}

	$site = sprintf( '<a href="%1$s">%2$s</a>',
		esc_url( $home_url ),
		$blog_title
	);

godog's avatar
godog committed
466
	?>
lucha's avatar
lucha committed
467
468
469
470
	<h2><?php
		/* translators: %s: site name */
		printf( __( 'The site %s is yours.' ), $site );
	?></h2>
godog's avatar
godog committed
471
	<p>
lechuck's avatar
lechuck committed
472
		<?php printf(
lucha's avatar
lucha committed
473
474
475
476
477
478
479
			/* translators: 1: link to new site, 2: login URL, 3: username */
			__( '%1$s is your new site. <a href="%2$s">Log in</a> as &#8220;%3$s&#8221; using your existing password.' ),
			sprintf(
				'<a href="%s">%s</a>',
				esc_url( $home_url ),
				untrailingslashit( $domain . $path )
			),
lechuck's avatar
lechuck committed
480
481
482
			esc_url( $login_url ),
			$user_name
		); ?>
godog's avatar
godog committed
483
484
	</p>
	<?php
lucha's avatar
lucha committed
485
486
487
488
489
	/**
	 * Fires when the site or user sign-up process is complete.
	 *
	 * @since 3.0.0
	 */
godog's avatar
godog committed
490
491
492
	do_action( 'signup_finished' );
}

lechuck's avatar
lechuck committed
493
494
495
/**
 * Setup the new user signup process
 *
lucha's avatar
lucha committed
496
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
497
 *
lucha's avatar
lucha committed
498
499
500
 * @param string          $user_name  The username.
 * @param string          $user_email The user's email.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
501
 */
lucha's avatar
lucha committed
502
503
function signup_user( $user_name = '', $user_email = '', $errors = '' ) {
	global $active_signup;
godog's avatar
godog committed
504
505
506
507

	if ( !is_wp_error($errors) )
		$errors = new WP_Error();

lechuck's avatar
lechuck committed
508
	$signup_for = isset( $_POST[ 'signup_for' ] ) ? esc_html( $_POST[ 'signup_for' ] ) : 'blog';
godog's avatar
godog committed
509

lucha's avatar
lucha committed
510
511
512
513
514
515
516
	$signup_user_defaults = array(
		'user_name'  => $user_name,
		'user_email' => $user_email,
		'errors'     => $errors,
	);

	/**
lucha's avatar
lucha committed
517
	 * Filters the default user variables used on the user sign-up form.
lucha's avatar
lucha committed
518
519
520
521
522
523
	 *
	 * @since 3.0.0
	 *
	 * @param array $signup_user_defaults {
	 *     An array of default user variables.
	 *
lucha's avatar
lucha committed
524
525
526
	 *     @type string   $user_name  The user username.
	 *     @type string   $user_email The user email address.
	 *     @type WP_Error $errors     A WP_Error object with possible errors relevant to the sign-up user.
lucha's avatar
lucha committed
527
528
529
	 * }
	 */
	$filtered_results = apply_filters( 'signup_user_init', $signup_user_defaults );
godog's avatar
godog committed
530
531
532
533
534
535
	$user_name = $filtered_results['user_name'];
	$user_email = $filtered_results['user_email'];
	$errors = $filtered_results['errors'];

	?>

lucha's avatar
lucha committed
536
537
	<h2><?php
		/* translators: %s: name of the network */
lucha's avatar
lucha committed
538
		printf( __( 'Get your own %s account in seconds' ), get_network()->site_name );
lucha's avatar
lucha committed
539
	?></h2>
lucha's avatar
lucha committed
540
	<form id="setupform" method="post" action="wp-signup.php" novalidate="novalidate">
godog's avatar
godog committed
541
		<input type="hidden" name="stage" value="validate-user-signup" />
lucha's avatar
lucha committed
542
543
544
545
		<?php
		/** This action is documented in wp-signup.php */
		do_action( 'signup_hidden_fields', 'validate-user' );
		?>
godog's avatar
godog committed
546
547
548
549
550
551
552
553
		<?php show_user_form($user_name, $user_email, $errors); ?>

		<p>
		<?php if ( $active_signup == 'blog' ) { ?>
			<input id="signupblog" type="hidden" name="signup_for" value="blog" />
		<?php } elseif ( $active_signup == 'user' ) { ?>
			<input id="signupblog" type="hidden" name="signup_for" value="user" />
		<?php } else { ?>
lechuck's avatar
lechuck committed
554
			<input id="signupblog" type="radio" name="signup_for" value="blog" <?php checked( $signup_for, 'blog' ); ?> />
godog's avatar
godog committed
555
556
			<label class="checkbox" for="signupblog"><?php _e('Gimme a site!') ?></label>
			<br />
lechuck's avatar
lechuck committed
557
			<input id="signupuser" type="radio" name="signup_for" value="user" <?php checked( $signup_for, 'user' ); ?> />
godog's avatar
godog committed
558
559
560
561
562
563
564
565
566
			<label class="checkbox" for="signupuser"><?php _e('Just a username, please.') ?></label>
		<?php } ?>
		</p>

		<p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e('Next') ?>" /></p>
	</form>
	<?php
}

lechuck's avatar
lechuck committed
567
568
569
/**
 * Validate the new user signup
 *
lucha's avatar
lucha committed
570
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
571
572
573
 *
 * @return bool True if new user signup was validated, false if error
 */
godog's avatar
godog committed
574
575
function validate_user_signup() {
	$result = validate_user_form();
lucha's avatar
lucha committed
576
577
578
	$user_name = $result['user_name'];
	$user_email = $result['user_email'];
	$errors = $result['errors'];
godog's avatar
godog committed
579
580
581
582
583
584
585
586
587
588
589

	if ( $errors->get_error_code() ) {
		signup_user($user_name, $user_email, $errors);
		return false;
	}

	if ( 'blog' == $_POST['signup_for'] ) {
		signup_blog($user_name, $user_email);
		return false;
	}

lucha's avatar
lucha committed
590
591
	/** This filter is documented in wp-signup.php */
	wpmu_signup_user( $user_name, $user_email, apply_filters( 'add_signup_meta', array() ) );
godog's avatar
godog committed
592
593
594
595
596

	confirm_user_signup($user_name, $user_email);
	return true;
}

lechuck's avatar
lechuck committed
597
598
599
/**
 * New user signup confirmation
 *
lucha's avatar
lucha committed
600
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
601
602
603
604
 *
 * @param string $user_name The username
 * @param string $user_email The user's email address
 */
godog's avatar
godog committed
605
606
function confirm_user_signup($user_name, $user_email) {
	?>
lechuck's avatar
lechuck committed
607
608
	<h2><?php /* translators: %s: username */
	printf( __( '%s is your new username' ), $user_name) ?></h2>
godog's avatar
godog committed
609
	<p><?php _e( 'But, before you can start using your new username, <strong>you must activate it</strong>.' ) ?></p>
lechuck's avatar
lechuck committed
610
611
	<p><?php /* translators: %s: email address */
	printf( __( 'Check your inbox at %s and click the link given.' ), '<strong>' . $user_email . '</strong>' ); ?></p>
godog's avatar
godog committed
612
613
	<p><?php _e( 'If you do not activate your username within two days, you will have to sign up again.' ); ?></p>
	<?php
lucha's avatar
lucha committed
614
	/** This action is documented in wp-signup.php */
godog's avatar
godog committed
615
616
617
	do_action( 'signup_finished' );
}

lechuck's avatar
lechuck committed
618
619
620
/**
 * Setup the new site signup
 *
lucha's avatar
lucha committed
621
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
622
 *
lucha's avatar
lucha committed
623
624
625
626
627
 * @param string          $user_name  The username.
 * @param string          $user_email The user's email address.
 * @param string          $blogname   The site name.
 * @param string          $blog_title The site title.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
628
 */
godog's avatar
godog committed
629
630
631
632
function signup_blog($user_name = '', $user_email = '', $blogname = '', $blog_title = '', $errors = '') {
	if ( !is_wp_error($errors) )
		$errors = new WP_Error();

lucha's avatar
lucha committed
633
634
635
636
637
638
639
640
641
	$signup_blog_defaults = array(
		'user_name'  => $user_name,
		'user_email' => $user_email,
		'blogname'   => $blogname,
		'blog_title' => $blog_title,
		'errors'     => $errors
	);

	/**
lucha's avatar
lucha committed
642
	 * Filters the default site creation variables for the site sign-up form.
lucha's avatar
lucha committed
643
644
645
646
647
648
	 *
	 * @since 3.0.0
	 *
	 * @param array $signup_blog_defaults {
	 *     An array of default site creation variables.
	 *
lucha's avatar
lucha committed
649
650
651
652
653
	 *     @type string   $user_name  The user username.
	 *     @type string   $user_email The user email address.
	 *     @type string   $blogname   The blogname.
	 *     @type string   $blog_title The title of the site.
	 *     @type WP_Error $errors     A WP_Error object with possible errors relevant to new site creation variables.
lucha's avatar
lucha committed
654
655
656
657
	 * }
	 */
	$filtered_results = apply_filters( 'signup_blog_init', $signup_blog_defaults );

godog's avatar
godog committed
658
659
660
661
662
663
664
665
666
667
668
669
670
	$user_name = $filtered_results['user_name'];
	$user_email = $filtered_results['user_email'];
	$blogname = $filtered_results['blogname'];
	$blog_title = $filtered_results['blog_title'];
	$errors = $filtered_results['errors'];

	if ( empty($blogname) )
		$blogname = $user_name;
	?>
	<form id="setupform" method="post" action="wp-signup.php">
		<input type="hidden" name="stage" value="validate-blog-signup" />
		<input type="hidden" name="user_name" value="<?php echo esc_attr($user_name) ?>" />
		<input type="hidden" name="user_email" value="<?php echo esc_attr($user_email) ?>" />
lucha's avatar
lucha committed
671
672
673
674
		<?php
		/** This action is documented in wp-signup.php */
		do_action( 'signup_hidden_fields', 'validate-site' );
		?>
godog's avatar
godog committed
675
676
677
678
679
680
		<?php show_blog_form($blogname, $blog_title, $errors); ?>
		<p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e('Signup') ?>" /></p>
	</form>
	<?php
}

lechuck's avatar
lechuck committed
681
682
683
/**
 * Validate new site signup
 *
lucha's avatar
lucha committed
684
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
685
686
687
 *
 * @return bool True if the site signup was validated, false if error
 */
godog's avatar
godog committed
688
689
function validate_blog_signup() {
	// Re-validate user info.
lucha's avatar
lucha committed
690
691
692
693
	$user_result = wpmu_validate_user_signup( $_POST['user_name'], $_POST['user_email'] );
	$user_name = $user_result['user_name'];
	$user_email = $user_result['user_email'];
	$user_errors = $user_result['errors'];
godog's avatar
godog committed
694

lucha's avatar
lucha committed
695
696
	if ( $user_errors->get_error_code() ) {
		signup_user( $user_name, $user_email, $user_errors );
godog's avatar
godog committed
697
698
699
		return false;
	}

lucha's avatar
lucha committed
700
701
702
703
704
705
	$result = wpmu_validate_blog_signup( $_POST['blogname'], $_POST['blog_title'] );
	$domain = $result['domain'];
	$path = $result['path'];
	$blogname = $result['blogname'];
	$blog_title = $result['blog_title'];
	$errors = $result['errors'];
godog's avatar
godog committed
706
707
708
709
710
711
712

	if ( $errors->get_error_code() ) {
		signup_blog($user_name, $user_email, $blogname, $blog_title, $errors);
		return false;
	}

	$public = (int) $_POST['blog_public'];
lucha's avatar
lucha committed
713
	$signup_meta = array ('lang_id' => 1, 'public' => $public);
lucha's avatar
lucha committed
714

lechuck's avatar
lechuck committed
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
	// Handle the language setting for the new site.
	if ( ! empty( $_POST['WPLANG'] ) ) {

		$languages = signup_get_available_languages();

		if ( in_array( $_POST['WPLANG'], $languages ) ) {
			$language = wp_unslash( sanitize_text_field( $_POST['WPLANG'] ) );

			if ( $language ) {
				$signup_meta['WPLANG'] = $language;
			}
		}

	}

lucha's avatar
lucha committed
730
	/** This filter is documented in wp-signup.php */
lucha's avatar
lucha committed
731
	$meta = apply_filters( 'add_signup_meta', $signup_meta );
godog's avatar
godog committed
732
733
734
735
736
737

	wpmu_signup_blog($domain, $path, $blog_title, $user_name, $user_email, $meta);
	confirm_blog_signup($domain, $path, $blog_title, $user_name, $user_email, $meta);
	return true;
}

lechuck's avatar
lechuck committed
738
739
740
/**
 * New site signup confirmation
 *
lucha's avatar
lucha committed
741
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
742
743
744
745
746
747
 *
 * @param string $domain The domain URL
 * @param string $path The site root path
 * @param string $blog_title The new site title
 * @param string $user_name The user's username
 * @param string $user_email The user's email address
lucha's avatar
lucha committed
748
 * @param array $meta Any additional meta from the {@see 'add_signup_meta'} filter in validate_blog_signup()
lechuck's avatar
lechuck committed
749
750
 */
function confirm_blog_signup( $domain, $path, $blog_title, $user_name = '', $user_email = '', $meta = array() ) {
godog's avatar
godog committed
751
	?>
lechuck's avatar
lechuck committed
752
753
	<h2><?php /* translators: %s: site address */
	printf( __( 'Congratulations! Your new site, %s, is almost ready.' ), "<a href='http://{$domain}{$path}'>{$blog_title}</a>" ) ?></h2>
godog's avatar
godog committed
754
755

	<p><?php _e( 'But, before you can start using your site, <strong>you must activate it</strong>.' ) ?></p>
lechuck's avatar
lechuck committed
756
757
	<p><?php /* translators: %s: email address */
	printf( __( 'Check your inbox at %s and click the link given.' ), '<strong>' . $user_email . '</strong>' ); ?></p>
godog's avatar
godog committed
758
759
760
761
762
763
764
	<p><?php _e( 'If you do not activate your site within two days, you will have to sign up again.' ); ?></p>
	<h2><?php _e( 'Still waiting for your email?' ); ?></h2>
	<p>
		<?php _e( 'If you haven&#8217;t received your email yet, there are a number of things you can do:' ) ?>
		<ul id="noemail-tips">
			<li><p><strong><?php _e( 'Wait a little longer. Sometimes delivery of email can be delayed by processes outside of our control.' ) ?></strong></p></li>
			<li><p><?php _e( 'Check the junk or spam folder of your email client. Sometime emails wind up there by mistake.' ) ?></p></li>
lucha's avatar
lucha committed
765
766
767
768
			<li><?php
				/* translators: %s: email address */
				printf( __( 'Have you entered your email correctly? You have entered %s, if it&#8217;s incorrect, you will not receive your email.' ), $user_email );
			?></li>
godog's avatar
godog committed
769
770
771
		</ul>
	</p>
	<?php
lucha's avatar
lucha committed
772
	/** This action is documented in wp-signup.php */
godog's avatar
godog committed
773
774
775
	do_action( 'signup_finished' );
}

lechuck's avatar
lechuck committed
776
777
778
779
780
781
782
783
784
785
786
/**
 * Retrieves languages available during the site/user signup process.
 *
 * @since 4.4.0
 *
 * @see get_available_languages()
 *
 * @return array List of available languages.
 */
function signup_get_available_languages() {
	/**
lucha's avatar
lucha committed
787
	 * Filters the list of available languages for front-end site signups.
lechuck's avatar
lechuck committed
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
	 *
	 * Passing an empty array to this hook will disable output of the setting on the
	 * signup form, and the default language will be used when creating the site.
	 *
	 * Languages not already installed will be stripped.
	 *
	 * @since 4.4.0
	 *
	 * @param array $available_languages Available languages.
	 */
	$languages = (array) apply_filters( 'signup_get_available_languages', get_available_languages() );

	/*
	 * Strip any non-installed languages and return.
	 *
	 * Re-call get_available_languages() here in case a language pack was installed
	 * in a callback hooked to the 'signup_get_available_languages' filter before this point.
	 */
	return array_intersect_assoc( $languages, get_available_languages() );
}

godog's avatar
godog committed
809
// Main
lucha's avatar
lucha committed
810
$active_signup = get_site_option( 'registration', 'none' );
lucha's avatar
lucha committed
811

lucha's avatar
lucha committed
812
/**
lucha's avatar
lucha committed
813
 * Filters the type of site sign-up.
lucha's avatar
lucha committed
814
815
816
817
818
819
820
 *
 * @since 3.0.0
 *
 * @param string $active_signup String that returns registration type. The value can be
 *                              'all', 'none', 'blog', or 'user'.
 */
$active_signup = apply_filters( 'wpmu_active_signup', $active_signup );
godog's avatar
godog committed
821

lucha's avatar
lucha committed
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
if ( current_user_can( 'manage_network' ) ) {
	echo '<div class="mu_alert">';
	_e( 'Greetings Network Administrator!' );
	echo ' ';

	switch ( $active_signup ) {
		case 'none':
			_e( 'The network currently disallows registrations.' );
			break;
		case 'blog':
			_e( 'The network currently allows site registrations.' );
			break;
		case 'user':
			_e( 'The network currently allows user registrations.' );
			break;
		default:
			_e( 'The network currently allows both site and user registrations.' );
			break;
	}

	echo ' ';

	/* translators: %s: network settings URL */
	printf( __( 'To change or disable registration go to your <a href="%s">Options page</a>.' ), esc_url( network_admin_url( 'settings.php' ) ) );
	echo '</div>';
lucha's avatar
lucha committed
847
}
godog's avatar
godog committed
848
849
850
851

$newblogname = isset($_GET['new']) ? strtolower(preg_replace('/^-|-$|[^-a-zA-Z0-9]/', '', $_GET['new'])) : null;

$current_user = wp_get_current_user();
shammash's avatar
shammash committed
852
if ( $active_signup == 'none' ) {
godog's avatar
godog committed
853
854
	_e( 'Registration has been disabled.' );
} elseif ( $active_signup == 'blog' && !is_user_logged_in() ) {
lechuck's avatar
lechuck committed
855
	$login_url = wp_login_url( network_site_url( 'wp-signup.php' ) );
lucha's avatar
lucha committed
856
857
	/* translators: %s: login URL */
	printf( __( 'You must first <a href="%s">log in</a>, and then you can create a new site.' ), $login_url );
godog's avatar
godog committed
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
} else {
	$stage = isset( $_POST['stage'] ) ?  $_POST['stage'] : 'default';
	switch ( $stage ) {
		case 'validate-user-signup' :
			if ( $active_signup == 'all' || $_POST[ 'signup_for' ] == 'blog' && $active_signup == 'blog' || $_POST[ 'signup_for' ] == 'user' && $active_signup == 'user' )
				validate_user_signup();
			else
				_e( 'User registration has been disabled.' );
		break;
		case 'validate-blog-signup':
			if ( $active_signup == 'all' || $active_signup == 'blog' )
				validate_blog_signup();
			else
				_e( 'Site registration has been disabled.' );
			break;
		case 'gimmeanotherblog':
			validate_another_blog_signup();
			break;
		case 'default':
		default :
			$user_email = isset( $_POST[ 'user_email' ] ) ? $_POST[ 'user_email' ] : '';
lucha's avatar
lucha committed
879
880
881
882
883
884
			/**
			 * Fires when the site sign-up form is sent.
			 *
			 * @since 3.0.0
			 */
			do_action( 'preprocess_signup_form' );
godog's avatar
godog committed
885
886
			if ( is_user_logged_in() && ( $active_signup == 'all' || $active_signup == 'blog' ) )
				signup_another_blog($newblogname);
lechuck's avatar
lechuck committed
887
			elseif ( ! is_user_logged_in() && ( $active_signup == 'all' || $active_signup == 'user' ) )
godog's avatar
godog committed
888
				signup_user( $newblogname, $user_email );
lechuck's avatar
lechuck committed
889
			elseif ( ! is_user_logged_in() && ( $active_signup == 'blog' ) )
godog's avatar
godog committed
890
891
892
893
894
895
896
897
				_e( 'Sorry, new registrations are not allowed at this time.' );
			else
				_e( 'You are logged in already. No need to register again!' );

			if ( $newblogname ) {
				$newblog = get_blogaddress_by_name( $newblogname );

				if ( $active_signup == 'blog' || $active_signup == 'all' )
lechuck's avatar
lechuck committed
898
899
900
901
					/* translators: %s: site address */
					printf( '<p><em>' . __( 'The site you were looking for, %s, does not exist, but you can create it now!' ) . '</em></p>',
						'<strong>' . $newblog . '</strong>'
					);
godog's avatar
godog committed
902
				else
lechuck's avatar
lechuck committed
903
904
905
906
					/* translators: %s: site address */
					printf( '<p><em>' . __( 'The site you were looking for, %s, does not exist.' ) . '</em></p>',
						'<strong>' . $newblog . '</strong>'
					);
godog's avatar
godog committed
907
908
909
910
911
912
913
			}
			break;
	}
}
?>
</div>
</div>
lucha's avatar
lucha committed
914
915
916
917
918
919
920
<?php
/**
 * Fires after the sign-up forms, before wp_footer.
 *
 * @since 3.0.0
 */
do_action( 'after_signup_form' ); ?>
godog's avatar
godog committed
921

lechuck's avatar
lechuck committed
922
<?php get_footer( 'wp-signup' );