antville/code/MemberMgr/objectFunctions.js

/**
 * check if a login attempt is ok
 */

function evalLogin() {
   // check if login is successful
   if (user.login(req.data.name, req.data.password)) {
      if (user.isBlocked()) {
         res.message = "Sorry, your account was disabled!";
         user.logout();
         res.redirect(parent.href());
      }
      // login successful
      user.lastVisit = new Date();
      if (req.data.remember) {
         // user allowed us to set permanent cookies for auto-login
         res.setCookie("avUsr",user.name,365);
         res.setCookie("avPw",calcMD5(user.password),365);
      }
      res.message = "Welcome to Antville, " + user.name + "! Have fun!";
      if (!user.cache.referer) {
         var redirectTo = root.href();
      } else {
         var redirectTo = user.cache.referer;
         user.cache.referer = null;
      }
      res.redirect(redirectTo);
   } else
      res.message = "Login failed! Maybe a typo?";
}

/**
 * check if a registration attempt is ok
 */

function evalRegistration() {
   var reg = this.checkReg();
   if (!reg.error) {
		var newUser = user.register(reg.name, reg.password1);
 		if (newUser) {
         newUser.name = reg.name;
			newUser.email = reg.email;
         newUser.url = reg.url;
         newUser.description = reg.description;
         newUser.registered = new Date();
         newUser.blocked = 0;
			user.login(reg.name, reg.password1);
         user.sendConfirmationMail();
			res.message = "Welcome " + user.name + ". Have fun!<br>";
			if (user.cache.referer) {
			   var redirectTo = user.cache.referer;
			   user.cache.referer = null;
			} else
			   var redirectTo = root.href();
			res.redirect(redirectTo);
		} else
 			res.message = "Sorry, we already have a member with that name.";
	}
	return (reg);
}


/**
 * check if all values necessary to register
 * are given and return them as properties of a
 * temporary Object
 */

function checkReg() {
   var reg = new Object();
	if (!res.message) res.message = "Please fill out the form completely and then click the button to register.";
   if (req.data.name)
      reg.name = req.data.name;
   else
      reg.error = true;
   // check if username contains any special characters
   if (!isClean(reg.name)) {
      res.message = "Please don't use any special characters in your username!";
      reg.error = true;
   }
   // check if passwords match
	if (req.data.password1 && req.data.password2) {
      if (req.data.password1 == req.data.password2) {
   	   reg.password1 = req.data.password1;
         reg.password2 = req.data.password2;
      } else {
         res.message = "Passwords didn't match! Please re-enter:";
         reg.error = true;
      }
   } else
      reg.error = true;
   // check if email-address is valid
   if (req.data.email) {
   	reg.email = req.data.email;
      if (!checkEmail(req.data.email)) {
         res.message = "Ooops! The email-address you entered is not valid!";
         reg.error = true;
      }
   } else
      reg.error = true;
   if (req.data.description)
      reg.description = req.data.description;
   if (req.data.url)
   	reg.url = evalURL(req.data.url);

   return (reg);
}

/**
 * update user-profile
 */

function updateUser() {
   if (req.data.oldpwd && req.data.newpwd1 && req.data.newpwd2) {
      if (user.password != req.data.oldpwd) {
         res.message = "Old password incorrect!";
         res.redirect(this.href("edit"));
      } else if (req.data.newpwd1 != req.data.newpwd2) {
         res.message = "Ooops! Passwords didn't match! Please type in again!";
         res.redirect(this.href("edit"));
      } else
         user.password = req.data.newpwd1;
   }
   user.url = evalURL(req.data.url);
   user.email = req.data.email;
   user.description = req.data.description;
   res.message = "Changes were saved successfully!";
   res.redirect(this._parent.href());
}

/**
 * function retrieves a list of usernames/passwords for a submitted email-address
 * and sends them as mail
 */

function sendPwd() {
   if (!req.data.email)
      return;
   var email = req.data.email;
   var sqlClause = "select USERNAME,PASSWORD from USER where EMAIL = '" + email + "'";
   var dbConn = getDBConnection("antville");
   var result = dbConn.executeRetrieval(sqlClause);
   var cnt = 0;
   var pwdList = "";
   while (result.next()) {
      pwdList += "Username: " + result.getColumnItem("USERNAME") + "\n";
      pwdList += "Password: " + result.getColumnItem("PASSWORD") + "\n\n";
      cnt++;
   }
   result.release;
   if (!cnt) {
      res.message = "No accounts found for this eMail-address!";
      return;
   }
   // now we send the mail containing all accounts for this email-address
   var mail = new Mail();
   mail.setFrom(getProperty("adminEmail"));
   mail.addTo(email);
   mail.setSubject("Your Accounts for Antville");
   var mailParam = new Object();
   var now = new Date();
   mailParam.timestamp = this._parent.formatTimestamp(now,new Object());
   mailParam.text = pwdList;
	mail.setText(this.renderSkinAsString("pwdmail",mailParam));
   var result = mail.send();
   if (result.status)
      res.message = "An error occurred while trying to send the mail!";
   else
      res.message = "A mail containing your the password(s) was sent successfully!";
   res.redirect(this._parent.href());
}