wp-signup.php 29.4 KB
Newer Older
godog's avatar
godog committed
1 2 3 4 5
<?php

/** Sets up the WordPress Environment. */
require( dirname(__FILE__) . '/wp-load.php' );

root's avatar
root committed
6
add_action( 'wp_head', 'wp_no_robots' );
godog's avatar
godog committed
7

lucha's avatar
lucha committed
8
require( dirname( __FILE__ ) . '/wp-blog-header.php' );
godog's avatar
godog committed
9

lechuck's avatar
lechuck committed
10
if ( is_array( get_site_option( 'illegal_names' )) && isset( $_GET[ 'new' ] ) && in_array( $_GET[ 'new' ], get_site_option( 'illegal_names' ) ) ) {
godog's avatar
godog committed
11 12 13 14
	wp_redirect( network_home_url() );
	die();
}

lechuck's avatar
lechuck committed
15 16 17
/**
 * Prints signup_header via wp_head
 *
lucha's avatar
lucha committed
18
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
19
 */
godog's avatar
godog committed
20
function do_signup_header() {
lucha's avatar
lucha committed
21
	/**
lechuck's avatar
lechuck committed
22
	 * Fires within the head section of the site sign-up screen.
lucha's avatar
lucha committed
23 24 25
	 *
	 * @since 3.0.0
	 */
shammash's avatar
shammash committed
26
	do_action( 'signup_header' );
godog's avatar
godog committed
27 28 29 30
}
add_action( 'wp_head', 'do_signup_header' );

if ( !is_multisite() ) {
lechuck's avatar
lechuck committed
31
	wp_redirect( wp_registration_url() );
godog's avatar
godog committed
32 33 34 35
	die();
}

if ( !is_main_site() ) {
lechuck's avatar
lechuck committed
36
	wp_redirect( network_site_url( 'wp-signup.php' ) );
godog's avatar
godog committed
37 38 39 40 41 42
	die();
}

// Fix for page title
$wp_query->is_404 = false;

lechuck's avatar
lechuck committed
43 44 45 46 47 48 49
/**
 * Fires before the Site Signup page is loaded.
 *
 * @since 4.4.0
 */
do_action( 'before_signup_header' );

lechuck's avatar
lechuck committed
50 51 52
/**
 * Prints styles for front-end Multisite signup pages
 *
lucha's avatar
lucha committed
53
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
54
 */
godog's avatar
godog committed
55 56 57 58 59 60 61 62 63 64 65
function wpmu_signup_stylesheet() {
	?>
	<style type="text/css">
		.mu_register { width: 90%; margin:0 auto; }
		.mu_register form { margin-top: 2em; }
		.mu_register .error { font-weight:700; padding:10px; color:#333333; background:#FFEBE8; border:1px solid #CC0000; }
		.mu_register input[type="submit"],
			.mu_register #blog_title,
			.mu_register #user_email,
			.mu_register #blogname,
			.mu_register #user_name { width:100%; font-size: 24px; margin:5px 0; }
lechuck's avatar
lechuck committed
66
		.mu_register #site-language { display: block; }
godog's avatar
godog committed
67 68 69 70 71 72 73 74 75 76
		.mu_register .prefix_address,
			.mu_register .suffix_address {font-size: 18px;display:inline; }
		.mu_register label { font-weight:700; font-size:15px; display:block; margin:10px 0; }
		.mu_register label.checkbox { display:inline; }
		.mu_register .mu_alert { font-weight:700; padding:10px; color:#333333; background:#ffffe0; border:1px solid #e6db55; }
	</style>
	<?php
}

add_action( 'wp_head', 'wpmu_signup_stylesheet' );
lechuck's avatar
lechuck committed
77
get_header( 'wp-signup' );
godog's avatar
godog committed
78

lucha's avatar
lucha committed
79 80 81 82 83
/**
 * Fires before the site sign-up form.
 *
 * @since 3.0.0
 */
godog's avatar
godog committed
84 85
do_action( 'before_signup_form' );
?>
lechuck's avatar
lechuck committed
86 87
<div id="signup-content" class="widecolumn">
<div class="mu_register wp-signup-container">
godog's avatar
godog committed
88
<?php
lechuck's avatar
lechuck committed
89 90 91
/**
 * Generates and displays the Signup and Create Site forms
 *
lucha's avatar
lucha committed
92
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
93
 *
lucha's avatar
lucha committed
94 95 96
 * @param string          $blogname   The new site name.
 * @param string          $blog_title The new site title.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
97
 */
lucha's avatar
lucha committed
98
function show_blog_form( $blogname = '', $blog_title = '', $errors = '' ) {
lucha's avatar
lucha committed
99 100 101 102
	if ( ! is_wp_error( $errors ) ) {
		$errors = new WP_Error();
	}

lucha's avatar
lucha committed
103
	$current_network = get_network();
godog's avatar
godog committed
104 105 106 107 108 109 110 111 112 113 114
	// Blog name
	if ( !is_subdomain_install() )
		echo '<label for="blogname">' . __('Site Name:') . '</label>';
	else
		echo '<label for="blogname">' . __('Site Domain:') . '</label>';

	if ( $errmsg = $errors->get_error_message('blogname') ) { ?>
		<p class="error"><?php echo $errmsg ?></p>
	<?php }

	if ( !is_subdomain_install() )
lucha's avatar
lucha committed
115
		echo '<span class="prefix_address">' . $current_network->domain . $current_network->path . '</span><input name="blogname" type="text" id="blogname" value="'. esc_attr($blogname) .'" maxlength="60" /><br />';
godog's avatar
godog committed
116
	else
lucha's avatar
lucha committed
117
		echo '<input name="blogname" type="text" id="blogname" value="'.esc_attr($blogname).'" maxlength="60" /><span class="suffix_address">.' . ( $site_domain = preg_replace( '|^www\.|', '', $current_network->domain ) ) . '</span><br />';
godog's avatar
godog committed
118

lucha's avatar
lucha committed
119 120
	if ( ! is_user_logged_in() ) {
		if ( ! is_subdomain_install() ) {
lucha's avatar
lucha committed
121
			$site = $current_network->domain . $current_network->path . __( 'sitename' );
lucha's avatar
lucha committed
122
		} else {
lucha's avatar
lucha committed
123
			$site = __( 'domain' ) . '.' . $site_domain . $current_network->path;
lucha's avatar
lucha committed
124 125 126 127
		}

		/* translators: %s: site address */
		echo '<p>(<strong>' . sprintf( __( 'Your address will be %s.' ), $site ) . '</strong>) ' . __( 'Must be at least 4 characters, letters and numbers only. It cannot be changed, so choose carefully!' ) . '</p>';
godog's avatar
godog committed
128 129 130 131 132 133 134 135 136 137 138
	}

	// Blog Title
	?>
	<label for="blog_title"><?php _e('Site Title:') ?></label>
	<?php if ( $errmsg = $errors->get_error_message('blog_title') ) { ?>
		<p class="error"><?php echo $errmsg ?></p>
	<?php }
	echo '<input name="blog_title" type="text" id="blog_title" value="'.esc_attr($blog_title).'" />';
	?>

lechuck's avatar
lechuck committed
139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170
	<?php
	// Site Language.
	$languages = signup_get_available_languages();

	if ( ! empty( $languages ) ) :
		?>
		<p>
			<label for="site-language"><?php _e( 'Site Language:' ); ?></label>
			<?php
			// Network default.
			$lang = get_site_option( 'WPLANG' );

			if ( isset( $_POST['WPLANG'] ) ) {
				$lang = $_POST['WPLANG'];
			}

			// Use US English if the default isn't available.
			if ( ! in_array( $lang, $languages ) ) {
				$lang = '';
			}

			wp_dropdown_languages( array(
				'name'                        => 'WPLANG',
				'id'                          => 'site-language',
				'selected'                    => $lang,
				'languages'                   => $languages,
				'show_available_translations' => false,
			) );
			?>
		</p>
	<?php endif; // Languages. ?>

godog's avatar
godog committed
171 172 173
	<div id="privacy">
        <p class="privacy-intro">
            <label for="blog_public_on"><?php _e('Privacy:') ?></label>
lechuck's avatar
lechuck committed
174
            <?php _e( 'Allow search engines to index this site.' ); ?>
godog's avatar
godog committed
175 176 177 178 179 180 181 182 183 184 185 186 187
            <br style="clear:both" />
            <label class="checkbox" for="blog_public_on">
                <input type="radio" id="blog_public_on" name="blog_public" value="1" <?php if ( !isset( $_POST['blog_public'] ) || $_POST['blog_public'] == '1' ) { ?>checked="checked"<?php } ?> />
                <strong><?php _e( 'Yes' ); ?></strong>
            </label>
            <label class="checkbox" for="blog_public_off">
                <input type="radio" id="blog_public_off" name="blog_public" value="0" <?php if ( isset( $_POST['blog_public'] ) && $_POST['blog_public'] == '0' ) { ?>checked="checked"<?php } ?> />
                <strong><?php _e( 'No' ); ?></strong>
            </label>
        </p>
	</div>

	<?php
lucha's avatar
lucha committed
188 189 190 191 192
	/**
	 * Fires after the site sign-up form.
	 *
	 * @since 3.0.0
	 *
lucha's avatar
lucha committed
193
	 * @param WP_Error $errors A WP_Error object possibly containing 'blogname' or 'blog_title' errors.
lucha's avatar
lucha committed
194 195
	 */
	do_action( 'signup_blogform', $errors );
godog's avatar
godog committed
196 197
}

lechuck's avatar
lechuck committed
198 199 200
/**
 * Validate the new site signup
 *
lucha's avatar
lucha committed
201
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
202 203 204
 *
 * @return array Contains the new site data and error messages.
 */
godog's avatar
godog committed
205 206 207 208 209 210 211 212
function validate_blog_form() {
	$user = '';
	if ( is_user_logged_in() )
		$user = wp_get_current_user();

	return wpmu_validate_blog_signup($_POST['blogname'], $_POST['blog_title'], $user);
}

lechuck's avatar
lechuck committed
213 214 215
/**
 * Display user registration form
 *
lucha's avatar
lucha committed
216
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
217
 *
lucha's avatar
lucha committed
218 219 220
 * @param string          $user_name  The entered username.
 * @param string          $user_email The entered email address.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
221
 */
godog's avatar
godog committed
222
function show_user_form($user_name = '', $user_email = '', $errors = '') {
lucha's avatar
lucha committed
223 224 225 226
	if ( ! is_wp_error( $errors ) ) {
		$errors = new WP_Error();
	}

godog's avatar
godog committed
227 228 229 230 231
	// User name
	echo '<label for="user_name">' . __('Username:') . '</label>';
	if ( $errmsg = $errors->get_error_message('user_name') ) {
		echo '<p class="error">'.$errmsg.'</p>';
	}
lucha's avatar
lucha committed
232
	echo '<input name="user_name" type="text" id="user_name" value="'. esc_attr( $user_name ) .'" autocapitalize="none" autocorrect="off" maxlength="60" /><br />';
godog's avatar
godog committed
233 234 235 236 237 238 239
	_e( '(Must be at least 4 characters, letters and numbers only.)' );
	?>

	<label for="user_email"><?php _e( 'Email&nbsp;Address:' ) ?></label>
	<?php if ( $errmsg = $errors->get_error_message('user_email') ) { ?>
		<p class="error"><?php echo $errmsg ?></p>
	<?php } ?>
lucha's avatar
lucha committed
240
	<input name="user_email" type="email" id="user_email" value="<?php  echo esc_attr($user_email) ?>" maxlength="200" /><br /><?php _e('We send your registration email to this address. (Double-check your email address before continuing.)') ?>
godog's avatar
godog committed
241 242 243 244
	<?php
	if ( $errmsg = $errors->get_error_message('generic') ) {
		echo '<p class="error">' . $errmsg . '</p>';
	}
lucha's avatar
lucha committed
245 246 247 248 249
	/**
	 * Fires at the end of the user registration form on the site sign-up form.
	 *
	 * @since 3.0.0
	 *
lucha's avatar
lucha committed
250
	 * @param WP_Error $errors A WP_Error object containing 'user_name' or 'user_email' errors.
lucha's avatar
lucha committed
251
	 */
godog's avatar
godog committed
252 253 254
	do_action( 'signup_extra_fields', $errors );
}

lechuck's avatar
lechuck committed
255 256 257
/**
 * Validate user signup name and email
 *
lucha's avatar
lucha committed
258
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
259 260 261
 *
 * @return array Contains username, email, and error messages.
 */
godog's avatar
godog committed
262 263 264 265
function validate_user_form() {
	return wpmu_validate_user_signup($_POST['user_name'], $_POST['user_email']);
}

lechuck's avatar
lechuck committed
266 267 268
/**
 * Allow returning users to sign up for another site
 *
lucha's avatar
lucha committed
269
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
270
 *
lucha's avatar
lucha committed
271 272 273
 * @param string          $blogname   The new site name
 * @param string          $blog_title The new site title.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
274
 */
lucha's avatar
lucha committed
275
function signup_another_blog( $blogname = '', $blog_title = '', $errors = '' ) {
godog's avatar
godog committed
276 277 278 279 280 281
	$current_user = wp_get_current_user();

	if ( ! is_wp_error($errors) ) {
		$errors = new WP_Error();
	}

lucha's avatar
lucha committed
282 283 284 285 286 287 288
	$signup_defaults = array(
		'blogname'   => $blogname,
		'blog_title' => $blog_title,
		'errors'     => $errors
	);

	/**
lucha's avatar
lucha committed
289
	 * Filters the default site sign-up variables.
lucha's avatar
lucha committed
290 291 292 293 294 295
	 *
	 * @since 3.0.0
	 *
	 * @param array $signup_defaults {
	 *     An array of default site sign-up variables.
	 *
lucha's avatar
lucha committed
296 297 298
	 *     @type string   $blogname   The site blogname.
	 *     @type string   $blog_title The site title.
	 *     @type WP_Error $errors     A WP_Error object possibly containing 'blogname' or 'blog_title' errors.
lucha's avatar
lucha committed
299 300 301 302
	 * }
	 */
	$filtered_results = apply_filters( 'signup_another_blog_init', $signup_defaults );

godog's avatar
godog committed
303 304 305 306
	$blogname = $filtered_results['blogname'];
	$blog_title = $filtered_results['blog_title'];
	$errors = $filtered_results['errors'];

lucha's avatar
lucha committed
307
	echo '<h2>' . sprintf( __( 'Get <em>another</em> %s site in seconds' ), get_network()->site_name ) . '</h2>';
godog's avatar
godog committed
308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330

	if ( $errors->get_error_code() ) {
		echo '<p>' . __( 'There was a problem, please correct the form below and try again.' ) . '</p>';
	}
	?>
	<p><?php printf( __( 'Welcome back, %s. By filling out the form below, you can <strong>add another site to your account</strong>. There is no limit to the number of sites you can have, so create to your heart&#8217;s content, but write responsibly!' ), $current_user->display_name ) ?></p>

	<?php
	$blogs = get_blogs_of_user($current_user->ID);
	if ( !empty($blogs) ) { ?>

			<p><?php _e( 'Sites you are already a member of:' ) ?></p>
			<ul>
				<?php foreach ( $blogs as $blog ) {
					$home_url = get_home_url( $blog->userblog_id );
					echo '<li><a href="' . esc_url( $home_url ) . '">' . $home_url . '</a></li>';
				} ?>
			</ul>
	<?php } ?>

	<p><?php _e( 'If you&#8217;re not going to use a great site domain, leave it for a new user. Now have at it!' ) ?></p>
	<form id="setupform" method="post" action="wp-signup.php">
		<input type="hidden" name="stage" value="gimmeanotherblog" />
lucha's avatar
lucha committed
331 332 333 334
		<?php
		/**
		 * Hidden sign-up form fields output when creating another site or user.
		 *
lucha's avatar
lucha committed
335
		 * @since MU (3.0.0)
lucha's avatar
lucha committed
336 337 338 339 340 341
		 *
		 * @param string $context A string describing the steps of the sign-up process. The value can be
		 *                        'create-another-site', 'validate-user', or 'validate-site'.
		 */
		do_action( 'signup_hidden_fields', 'create-another-site' );
		?>
godog's avatar
godog committed
342 343 344 345 346 347
		<?php show_blog_form($blogname, $blog_title, $errors); ?>
		<p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e( 'Create Site' ) ?>" /></p>
	</form>
	<?php
}

lechuck's avatar
lechuck committed
348
/**
lechuck's avatar
lechuck committed
349
 * Validate a new site signup.
lechuck's avatar
lechuck committed
350
 *
lucha's avatar
lucha committed
351
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
352
 *
lechuck's avatar
lechuck committed
353
 * @return null|bool True if site signup was validated, false if error.
lechuck's avatar
lechuck committed
354
 *                   The function halts all execution if the user is not logged in.
lechuck's avatar
lechuck committed
355
 */
godog's avatar
godog committed
356
function validate_another_blog_signup() {
lucha's avatar
lucha committed
357
	global $blogname, $blog_title, $errors, $domain, $path;
godog's avatar
godog committed
358
	$current_user = wp_get_current_user();
lechuck's avatar
lechuck committed
359
	if ( ! is_user_logged_in() ) {
godog's avatar
godog committed
360
		die();
lechuck's avatar
lechuck committed
361
	}
godog's avatar
godog committed
362 363

	$result = validate_blog_form();
lucha's avatar
lucha committed
364 365 366 367 368 369 370

	// Extracted values set/overwrite globals.
	$domain = $result['domain'];
	$path = $result['path'];
	$blogname = $result['blogname'];
	$blog_title = $result['blog_title'];
	$errors = $result['errors'];
godog's avatar
godog committed
371 372 373 374 375 376 377

	if ( $errors->get_error_code() ) {
		signup_another_blog($blogname, $blog_title, $errors);
		return false;
	}

	$public = (int) $_POST['blog_public'];
lucha's avatar
lucha committed
378 379 380 381 382 383

	$blog_meta_defaults = array(
		'lang_id' => 1,
		'public'  => $public
	);

lechuck's avatar
lechuck committed
384 385 386 387 388 389 390 391 392 393 394 395 396 397 398
	// Handle the language setting for the new site.
	if ( ! empty( $_POST['WPLANG'] ) ) {

		$languages = signup_get_available_languages();

		if ( in_array( $_POST['WPLANG'], $languages ) ) {
			$language = wp_unslash( sanitize_text_field( $_POST['WPLANG'] ) );

			if ( $language ) {
				$blog_meta_defaults['WPLANG'] = $language;
			}
		}

	}

lucha's avatar
lucha committed
399
	/**
lucha's avatar
lucha committed
400 401 402
	 * Filters the new site meta variables.
	 *
	 * Use the {@see 'add_signup_meta'} filter instead.
lucha's avatar
lucha committed
403
	 *
lucha's avatar
lucha committed
404
	 * @since MU (3.0.0)
lucha's avatar
lucha committed
405
	 * @deprecated 3.0.0 Use the {@see 'add_signup_meta'} filter instead.
lucha's avatar
lucha committed
406 407 408
	 *
	 * @param array $blog_meta_defaults An array of default blog meta variables.
	 */
lucha's avatar
lucha committed
409
	$meta_defaults = apply_filters( 'signup_create_blog_meta', $blog_meta_defaults );
lechuck's avatar
lechuck committed
410

lucha's avatar
lucha committed
411
	/**
lucha's avatar
lucha committed
412
	 * Filters the new default site meta variables.
lucha's avatar
lucha committed
413 414 415 416 417 418 419 420 421 422
	 *
	 * @since 3.0.0
	 *
	 * @param array $meta {
	 *     An array of default site meta variables.
	 *
	 *     @type int $lang_id     The language ID.
	 *     @type int $blog_public Whether search engines should be discouraged from indexing the site. 1 for true, 0 for false.
	 * }
	 */
lucha's avatar
lucha committed
423
	$meta = apply_filters( 'add_signup_meta', $meta_defaults );
godog's avatar
godog committed
424

lucha's avatar
lucha committed
425
	$blog_id = wpmu_create_blog( $domain, $path, $blog_title, $current_user->ID, $meta, get_current_network_id() );
lechuck's avatar
lechuck committed
426 427 428 429 430 431

	if ( is_wp_error( $blog_id ) ) {
		return false;
	}

	confirm_another_blog_signup( $domain, $path, $blog_title, $current_user->user_login, $current_user->user_email, $meta, $blog_id );
godog's avatar
godog committed
432 433 434
	return true;
}

lechuck's avatar
lechuck committed
435
/**
lechuck's avatar
lechuck committed
436
 * Confirm a new site signup.
lechuck's avatar
lechuck committed
437
 *
lucha's avatar
lucha committed
438
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
439 440 441 442 443 444 445
 * @since 4.4.0 Added the `$blog_id` parameter.
 *
 * @param string $domain     The domain URL.
 * @param string $path       The site root path.
 * @param string $blog_title The site title.
 * @param string $user_name  The username.
 * @param string $user_email The user's email address.
lucha's avatar
lucha committed
446
 * @param array  $meta       Any additional meta from the {@see 'add_signup_meta'} filter in validate_blog_signup().
lechuck's avatar
lechuck committed
447
 * @param int    $blog_id    The site ID.
lechuck's avatar
lechuck committed
448
 */
lechuck's avatar
lechuck committed
449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465
function confirm_another_blog_signup( $domain, $path, $blog_title, $user_name, $user_email = '', $meta = array(), $blog_id = 0 ) {

	if ( $blog_id ) {
		switch_to_blog( $blog_id );
		$home_url  = home_url( '/' );
		$login_url = wp_login_url();
		restore_current_blog();
	} else {
		$home_url  = 'http://' . $domain . $path;
		$login_url = 'http://' . $domain . $path . 'wp-login.php';
	}

	$site = sprintf( '<a href="%1$s">%2$s</a>',
		esc_url( $home_url ),
		$blog_title
	);

godog's avatar
godog committed
466
	?>
lucha's avatar
lucha committed
467 468 469 470
	<h2><?php
		/* translators: %s: site name */
		printf( __( 'The site %s is yours.' ), $site );
	?></h2>
godog's avatar
godog committed
471
	<p>
lechuck's avatar
lechuck committed
472
		<?php printf(
lucha's avatar
lucha committed
473 474 475 476 477 478 479
			/* translators: 1: link to new site, 2: login URL, 3: username */
			__( '%1$s is your new site. <a href="%2$s">Log in</a> as &#8220;%3$s&#8221; using your existing password.' ),
			sprintf(
				'<a href="%s">%s</a>',
				esc_url( $home_url ),
				untrailingslashit( $domain . $path )
			),
lechuck's avatar
lechuck committed
480 481 482
			esc_url( $login_url ),
			$user_name
		); ?>
godog's avatar
godog committed
483 484
	</p>
	<?php
lucha's avatar
lucha committed
485 486 487 488 489
	/**
	 * Fires when the site or user sign-up process is complete.
	 *
	 * @since 3.0.0
	 */
godog's avatar
godog committed
490 491 492
	do_action( 'signup_finished' );
}

lechuck's avatar
lechuck committed
493 494 495
/**
 * Setup the new user signup process
 *
lucha's avatar
lucha committed
496
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
497
 *
lucha's avatar
lucha committed
498 499 500
 * @param string          $user_name  The username.
 * @param string          $user_email The user's email.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
501
 */
lucha's avatar
lucha committed
502 503
function signup_user( $user_name = '', $user_email = '', $errors = '' ) {
	global $active_signup;
godog's avatar
godog committed
504 505 506 507

	if ( !is_wp_error($errors) )
		$errors = new WP_Error();

lechuck's avatar
lechuck committed
508
	$signup_for = isset( $_POST[ 'signup_for' ] ) ? esc_html( $_POST[ 'signup_for' ] ) : 'blog';
godog's avatar
godog committed
509

lucha's avatar
lucha committed
510 511 512 513 514 515 516
	$signup_user_defaults = array(
		'user_name'  => $user_name,
		'user_email' => $user_email,
		'errors'     => $errors,
	);

	/**
lucha's avatar
lucha committed
517
	 * Filters the default user variables used on the user sign-up form.
lucha's avatar
lucha committed
518 519 520 521 522 523
	 *
	 * @since 3.0.0
	 *
	 * @param array $signup_user_defaults {
	 *     An array of default user variables.
	 *
lucha's avatar
lucha committed
524 525 526
	 *     @type string   $user_name  The user username.
	 *     @type string   $user_email The user email address.
	 *     @type WP_Error $errors     A WP_Error object with possible errors relevant to the sign-up user.
lucha's avatar
lucha committed
527 528 529
	 * }
	 */
	$filtered_results = apply_filters( 'signup_user_init', $signup_user_defaults );
godog's avatar
godog committed
530 531 532 533 534 535
	$user_name = $filtered_results['user_name'];
	$user_email = $filtered_results['user_email'];
	$errors = $filtered_results['errors'];

	?>

lucha's avatar
lucha committed
536 537
	<h2><?php
		/* translators: %s: name of the network */
lucha's avatar
lucha committed
538
		printf( __( 'Get your own %s account in seconds' ), get_network()->site_name );
lucha's avatar
lucha committed
539
	?></h2>
lucha's avatar
lucha committed
540
	<form id="setupform" method="post" action="wp-signup.php" novalidate="novalidate">
godog's avatar
godog committed
541
		<input type="hidden" name="stage" value="validate-user-signup" />
lucha's avatar
lucha committed
542 543 544 545
		<?php
		/** This action is documented in wp-signup.php */
		do_action( 'signup_hidden_fields', 'validate-user' );
		?>
godog's avatar
godog committed
546 547 548 549 550 551 552 553
		<?php show_user_form($user_name, $user_email, $errors); ?>

		<p>
		<?php if ( $active_signup == 'blog' ) { ?>
			<input id="signupblog" type="hidden" name="signup_for" value="blog" />
		<?php } elseif ( $active_signup == 'user' ) { ?>
			<input id="signupblog" type="hidden" name="signup_for" value="user" />
		<?php } else { ?>
lechuck's avatar
lechuck committed
554
			<input id="signupblog" type="radio" name="signup_for" value="blog" <?php checked( $signup_for, 'blog' ); ?> />
godog's avatar
godog committed
555 556
			<label class="checkbox" for="signupblog"><?php _e('Gimme a site!') ?></label>
			<br />
lechuck's avatar
lechuck committed
557
			<input id="signupuser" type="radio" name="signup_for" value="user" <?php checked( $signup_for, 'user' ); ?> />
godog's avatar
godog committed
558 559 560 561 562 563 564 565 566
			<label class="checkbox" for="signupuser"><?php _e('Just a username, please.') ?></label>
		<?php } ?>
		</p>

		<p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e('Next') ?>" /></p>
	</form>
	<?php
}

lechuck's avatar
lechuck committed
567 568 569
/**
 * Validate the new user signup
 *
lucha's avatar
lucha committed
570
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
571 572 573
 *
 * @return bool True if new user signup was validated, false if error
 */
godog's avatar
godog committed
574 575
function validate_user_signup() {
	$result = validate_user_form();
lucha's avatar
lucha committed
576 577 578
	$user_name = $result['user_name'];
	$user_email = $result['user_email'];
	$errors = $result['errors'];
godog's avatar
godog committed
579 580 581 582 583 584 585 586 587 588 589

	if ( $errors->get_error_code() ) {
		signup_user($user_name, $user_email, $errors);
		return false;
	}

	if ( 'blog' == $_POST['signup_for'] ) {
		signup_blog($user_name, $user_email);
		return false;
	}

lucha's avatar
lucha committed
590 591
	/** This filter is documented in wp-signup.php */
	wpmu_signup_user( $user_name, $user_email, apply_filters( 'add_signup_meta', array() ) );
godog's avatar
godog committed
592 593 594 595 596

	confirm_user_signup($user_name, $user_email);
	return true;
}

lechuck's avatar
lechuck committed
597 598 599
/**
 * New user signup confirmation
 *
lucha's avatar
lucha committed
600
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
601 602 603 604
 *
 * @param string $user_name The username
 * @param string $user_email The user's email address
 */
godog's avatar
godog committed
605 606
function confirm_user_signup($user_name, $user_email) {
	?>
lechuck's avatar
lechuck committed
607 608
	<h2><?php /* translators: %s: username */
	printf( __( '%s is your new username' ), $user_name) ?></h2>
godog's avatar
godog committed
609
	<p><?php _e( 'But, before you can start using your new username, <strong>you must activate it</strong>.' ) ?></p>
lechuck's avatar
lechuck committed
610 611
	<p><?php /* translators: %s: email address */
	printf( __( 'Check your inbox at %s and click the link given.' ), '<strong>' . $user_email . '</strong>' ); ?></p>
godog's avatar
godog committed
612 613
	<p><?php _e( 'If you do not activate your username within two days, you will have to sign up again.' ); ?></p>
	<?php
lucha's avatar
lucha committed
614
	/** This action is documented in wp-signup.php */
godog's avatar
godog committed
615 616 617
	do_action( 'signup_finished' );
}

lechuck's avatar
lechuck committed
618 619 620
/**
 * Setup the new site signup
 *
lucha's avatar
lucha committed
621
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
622
 *
lucha's avatar
lucha committed
623 624 625 626 627
 * @param string          $user_name  The username.
 * @param string          $user_email The user's email address.
 * @param string          $blogname   The site name.
 * @param string          $blog_title The site title.
 * @param WP_Error|string $errors     A WP_Error object containing existing errors. Defaults to empty string.
lechuck's avatar
lechuck committed
628
 */
godog's avatar
godog committed
629 630 631 632
function signup_blog($user_name = '', $user_email = '', $blogname = '', $blog_title = '', $errors = '') {
	if ( !is_wp_error($errors) )
		$errors = new WP_Error();

lucha's avatar
lucha committed
633 634 635 636 637 638 639 640 641
	$signup_blog_defaults = array(
		'user_name'  => $user_name,
		'user_email' => $user_email,
		'blogname'   => $blogname,
		'blog_title' => $blog_title,
		'errors'     => $errors
	);

	/**
lucha's avatar
lucha committed
642
	 * Filters the default site creation variables for the site sign-up form.
lucha's avatar
lucha committed
643 644 645 646 647 648
	 *
	 * @since 3.0.0
	 *
	 * @param array $signup_blog_defaults {
	 *     An array of default site creation variables.
	 *
lucha's avatar
lucha committed
649 650 651 652 653
	 *     @type string   $user_name  The user username.
	 *     @type string   $user_email The user email address.
	 *     @type string   $blogname   The blogname.
	 *     @type string   $blog_title The title of the site.
	 *     @type WP_Error $errors     A WP_Error object with possible errors relevant to new site creation variables.
lucha's avatar
lucha committed
654 655 656 657
	 * }
	 */
	$filtered_results = apply_filters( 'signup_blog_init', $signup_blog_defaults );

godog's avatar
godog committed
658 659 660 661 662 663 664 665 666 667 668 669 670
	$user_name = $filtered_results['user_name'];
	$user_email = $filtered_results['user_email'];
	$blogname = $filtered_results['blogname'];
	$blog_title = $filtered_results['blog_title'];
	$errors = $filtered_results['errors'];

	if ( empty($blogname) )
		$blogname = $user_name;
	?>
	<form id="setupform" method="post" action="wp-signup.php">
		<input type="hidden" name="stage" value="validate-blog-signup" />
		<input type="hidden" name="user_name" value="<?php echo esc_attr($user_name) ?>" />
		<input type="hidden" name="user_email" value="<?php echo esc_attr($user_email) ?>" />
lucha's avatar
lucha committed
671 672 673 674
		<?php
		/** This action is documented in wp-signup.php */
		do_action( 'signup_hidden_fields', 'validate-site' );
		?>
godog's avatar
godog committed
675 676 677 678 679 680
		<?php show_blog_form($blogname, $blog_title, $errors); ?>
		<p class="submit"><input type="submit" name="submit" class="submit" value="<?php esc_attr_e('Signup') ?>" /></p>
	</form>
	<?php
}

lechuck's avatar
lechuck committed
681 682 683
/**
 * Validate new site signup
 *
lucha's avatar
lucha committed
684
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
685 686 687
 *
 * @return bool True if the site signup was validated, false if error
 */
godog's avatar
godog committed
688 689
function validate_blog_signup() {
	// Re-validate user info.
lucha's avatar
lucha committed
690 691 692 693
	$user_result = wpmu_validate_user_signup( $_POST['user_name'], $_POST['user_email'] );
	$user_name = $user_result['user_name'];
	$user_email = $user_result['user_email'];
	$user_errors = $user_result['errors'];
godog's avatar
godog committed
694

lucha's avatar
lucha committed
695 696
	if ( $user_errors->get_error_code() ) {
		signup_user( $user_name, $user_email, $user_errors );
godog's avatar
godog committed
697 698 699
		return false;
	}

lucha's avatar
lucha committed
700 701 702 703 704 705
	$result = wpmu_validate_blog_signup( $_POST['blogname'], $_POST['blog_title'] );
	$domain = $result['domain'];
	$path = $result['path'];
	$blogname = $result['blogname'];
	$blog_title = $result['blog_title'];
	$errors = $result['errors'];
godog's avatar
godog committed
706 707 708 709 710 711 712

	if ( $errors->get_error_code() ) {
		signup_blog($user_name, $user_email, $blogname, $blog_title, $errors);
		return false;
	}

	$public = (int) $_POST['blog_public'];
lucha's avatar
lucha committed
713
	$signup_meta = array ('lang_id' => 1, 'public' => $public);
lucha's avatar
lucha committed
714

lechuck's avatar
lechuck committed
715 716 717 718 719 720 721 722 723 724 725 726 727 728 729
	// Handle the language setting for the new site.
	if ( ! empty( $_POST['WPLANG'] ) ) {

		$languages = signup_get_available_languages();

		if ( in_array( $_POST['WPLANG'], $languages ) ) {
			$language = wp_unslash( sanitize_text_field( $_POST['WPLANG'] ) );

			if ( $language ) {
				$signup_meta['WPLANG'] = $language;
			}
		}

	}

lucha's avatar
lucha committed
730
	/** This filter is documented in wp-signup.php */
lucha's avatar
lucha committed
731
	$meta = apply_filters( 'add_signup_meta', $signup_meta );
godog's avatar
godog committed
732 733 734 735 736 737

	wpmu_signup_blog($domain, $path, $blog_title, $user_name, $user_email, $meta);
	confirm_blog_signup($domain, $path, $blog_title, $user_name, $user_email, $meta);
	return true;
}

lechuck's avatar
lechuck committed
738 739 740
/**
 * New site signup confirmation
 *
lucha's avatar
lucha committed
741
 * @since MU (3.0.0)
lechuck's avatar
lechuck committed
742 743 744 745 746 747
 *
 * @param string $domain The domain URL
 * @param string $path The site root path
 * @param string $blog_title The new site title
 * @param string $user_name The user's username
 * @param string $user_email The user's email address
lucha's avatar
lucha committed
748
 * @param array $meta Any additional meta from the {@see 'add_signup_meta'} filter in validate_blog_signup()
lechuck's avatar
lechuck committed
749 750
 */
function confirm_blog_signup( $domain, $path, $blog_title, $user_name = '', $user_email = '', $meta = array() ) {
godog's avatar
godog committed
751
	?>
lechuck's avatar
lechuck committed
752 753
	<h2><?php /* translators: %s: site address */
	printf( __( 'Congratulations! Your new site, %s, is almost ready.' ), "<a href='http://{$domain}{$path}'>{$blog_title}</a>" ) ?></h2>
godog's avatar
godog committed
754 755

	<p><?php _e( 'But, before you can start using your site, <strong>you must activate it</strong>.' ) ?></p>
lechuck's avatar
lechuck committed
756 757
	<p><?php /* translators: %s: email address */
	printf( __( 'Check your inbox at %s and click the link given.' ), '<strong>' . $user_email . '</strong>' ); ?></p>
godog's avatar
godog committed
758 759 760 761 762 763 764
	<p><?php _e( 'If you do not activate your site within two days, you will have to sign up again.' ); ?></p>
	<h2><?php _e( 'Still waiting for your email?' ); ?></h2>
	<p>
		<?php _e( 'If you haven&#8217;t received your email yet, there are a number of things you can do:' ) ?>
		<ul id="noemail-tips">
			<li><p><strong><?php _e( 'Wait a little longer. Sometimes delivery of email can be delayed by processes outside of our control.' ) ?></strong></p></li>
			<li><p><?php _e( 'Check the junk or spam folder of your email client. Sometime emails wind up there by mistake.' ) ?></p></li>
lucha's avatar
lucha committed
765 766 767 768
			<li><?php
				/* translators: %s: email address */
				printf( __( 'Have you entered your email correctly? You have entered %s, if it&#8217;s incorrect, you will not receive your email.' ), $user_email );
			?></li>
godog's avatar
godog committed
769 770 771
		</ul>
	</p>
	<?php
lucha's avatar
lucha committed
772
	/** This action is documented in wp-signup.php */
godog's avatar
godog committed
773 774 775
	do_action( 'signup_finished' );
}

lechuck's avatar
lechuck committed
776 777 778 779 780 781 782 783 784 785 786
/**
 * Retrieves languages available during the site/user signup process.
 *
 * @since 4.4.0
 *
 * @see get_available_languages()
 *
 * @return array List of available languages.
 */
function signup_get_available_languages() {
	/**
lucha's avatar
lucha committed
787
	 * Filters the list of available languages for front-end site signups.
lechuck's avatar
lechuck committed
788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808
	 *
	 * Passing an empty array to this hook will disable output of the setting on the
	 * signup form, and the default language will be used when creating the site.
	 *
	 * Languages not already installed will be stripped.
	 *
	 * @since 4.4.0
	 *
	 * @param array $available_languages Available languages.
	 */
	$languages = (array) apply_filters( 'signup_get_available_languages', get_available_languages() );

	/*
	 * Strip any non-installed languages and return.
	 *
	 * Re-call get_available_languages() here in case a language pack was installed
	 * in a callback hooked to the 'signup_get_available_languages' filter before this point.
	 */
	return array_intersect_assoc( $languages, get_available_languages() );
}

godog's avatar
godog committed
809
// Main
lucha's avatar
lucha committed
810
$active_signup = get_site_option( 'registration', 'none' );
lucha's avatar
lucha committed
811

lucha's avatar
lucha committed
812
/**
lucha's avatar
lucha committed
813
 * Filters the type of site sign-up.
lucha's avatar
lucha committed
814 815 816 817 818 819 820
 *
 * @since 3.0.0
 *
 * @param string $active_signup String that returns registration type. The value can be
 *                              'all', 'none', 'blog', or 'user'.
 */
$active_signup = apply_filters( 'wpmu_active_signup', $active_signup );
godog's avatar
godog committed
821

lucha's avatar
lucha committed
822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846
if ( current_user_can( 'manage_network' ) ) {
	echo '<div class="mu_alert">';
	_e( 'Greetings Network Administrator!' );
	echo ' ';

	switch ( $active_signup ) {
		case 'none':
			_e( 'The network currently disallows registrations.' );
			break;
		case 'blog':
			_e( 'The network currently allows site registrations.' );
			break;
		case 'user':
			_e( 'The network currently allows user registrations.' );
			break;
		default:
			_e( 'The network currently allows both site and user registrations.' );
			break;
	}

	echo ' ';

	/* translators: %s: network settings URL */
	printf( __( 'To change or disable registration go to your <a href="%s">Options page</a>.' ), esc_url( network_admin_url( 'settings.php' ) ) );
	echo '</div>';
lucha's avatar
lucha committed
847
}
godog's avatar
godog committed
848 849 850 851

$newblogname = isset($_GET['new']) ? strtolower(preg_replace('/^-|-$|[^-a-zA-Z0-9]/', '', $_GET['new'])) : null;

$current_user = wp_get_current_user();
shammash's avatar
shammash committed
852
if ( $active_signup == 'none' ) {
godog's avatar
godog committed
853 854
	_e( 'Registration has been disabled.' );
} elseif ( $active_signup == 'blog' && !is_user_logged_in() ) {
lechuck's avatar
lechuck committed
855
	$login_url = wp_login_url( network_site_url( 'wp-signup.php' ) );
lucha's avatar
lucha committed
856 857
	/* translators: %s: login URL */
	printf( __( 'You must first <a href="%s">log in</a>, and then you can create a new site.' ), $login_url );
godog's avatar
godog committed
858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878
} else {
	$stage = isset( $_POST['stage'] ) ?  $_POST['stage'] : 'default';
	switch ( $stage ) {
		case 'validate-user-signup' :
			if ( $active_signup == 'all' || $_POST[ 'signup_for' ] == 'blog' && $active_signup == 'blog' || $_POST[ 'signup_for' ] == 'user' && $active_signup == 'user' )
				validate_user_signup();
			else
				_e( 'User registration has been disabled.' );
		break;
		case 'validate-blog-signup':
			if ( $active_signup == 'all' || $active_signup == 'blog' )
				validate_blog_signup();
			else
				_e( 'Site registration has been disabled.' );
			break;
		case 'gimmeanotherblog':
			validate_another_blog_signup();
			break;
		case 'default':
		default :
			$user_email = isset( $_POST[ 'user_email' ] ) ? $_POST[ 'user_email' ] : '';
lucha's avatar
lucha committed
879 880 881 882 883 884
			/**
			 * Fires when the site sign-up form is sent.
			 *
			 * @since 3.0.0
			 */
			do_action( 'preprocess_signup_form' );
godog's avatar
godog committed
885 886
			if ( is_user_logged_in() && ( $active_signup == 'all' || $active_signup == 'blog' ) )
				signup_another_blog($newblogname);
lechuck's avatar
lechuck committed
887
			elseif ( ! is_user_logged_in() && ( $active_signup == 'all' || $active_signup == 'user' ) )
godog's avatar
godog committed
888
				signup_user( $newblogname, $user_email );
lechuck's avatar
lechuck committed
889
			elseif ( ! is_user_logged_in() && ( $active_signup == 'blog' ) )
godog's avatar
godog committed
890 891 892 893 894 895 896 897
				_e( 'Sorry, new registrations are not allowed at this time.' );
			else
				_e( 'You are logged in already. No need to register again!' );

			if ( $newblogname ) {
				$newblog = get_blogaddress_by_name( $newblogname );

				if ( $active_signup == 'blog' || $active_signup == 'all' )
lechuck's avatar
lechuck committed
898 899 900 901
					/* translators: %s: site address */
					printf( '<p><em>' . __( 'The site you were looking for, %s, does not exist, but you can create it now!' ) . '</em></p>',
						'<strong>' . $newblog . '</strong>'
					);
godog's avatar
godog committed
902
				else
lechuck's avatar
lechuck committed
903 904 905 906
					/* translators: %s: site address */
					printf( '<p><em>' . __( 'The site you were looking for, %s, does not exist.' ) . '</em></p>',
						'<strong>' . $newblog . '</strong>'
					);
godog's avatar
godog committed
907 908 909 910 911 912 913
			}
			break;
	}
}
?>
</div>
</div>
lucha's avatar
lucha committed
914 915 916 917 918 919 920
<?php
/**
 * Fires after the sign-up forms, before wp_footer.
 *
 * @since 3.0.0
 */
do_action( 'after_signup_form' ); ?>
godog's avatar
godog committed
921

lechuck's avatar
lechuck committed
922
<?php get_footer( 'wp-signup' );