| 21 | | function addTeamUser($email,$name,$password,$comment,$senderName,$senderEmail){ |
| 22 | | global $database,$service,$blogURL,$hostURL,$user,$blog,$owner; |
| 23 | | if(empty($email)) |
| 24 | | return 1; |
| 25 | | if(!ereg('^[^@]+@([[:alnum:]]+(-[[:alnum:]]+)*\.)+[[:alnum:]]+(-[[:alnum:]]+)*$',$email)) |
| 26 | | return 2; |
| 27 | | $Stmp = explode("@", $email); |
| 28 | | $Oident = $Sident = $Stmp[0]; |
| 29 | | while(1){ |
| 30 | | $sid = DBQuery::queryCell("SELECT name FROM `{$database['prefix']}BlogSettings` WHERE name=$Sident"); |
| 31 | | if(empty($sid)){ |
| 32 | | $identify = $Sident; |
| 33 | | break; |
| 34 | | } |
| 35 | | else{ |
| 36 | | $Sident = $Oident . rand(10,999); |
| 37 | | } |
| 38 | | } |
| 39 | | if(empty($name)){ |
| 40 | | $tmp = explode('@', $email); |
| 41 | | $name=$tmp[0]; |
| 42 | | } |
| 43 | | if(!ereg('^[[:alnum:]]+$',$identify)) |
| 44 | | return 4; |
| 45 | | if(empty($name)) |
| 46 | | $name=$identify; |
| 47 | | if(strcmp($email,mysql_lessen($email,64))!=0) |
| 48 | | return 11; |
| 49 | | $loginid=mysql_tt_escape_string(mysql_lessen($email,64)); |
| 50 | | $name=mysql_tt_escape_string(mysql_lessen($name,32)); |
| 51 | | $identify=mysql_tt_escape_string(mysql_lessen($identify,32)); |
| 52 | | if(empty($password)) $password=generatePassword(); |
| 53 | | $blogName=$identify; |
| 54 | | |
| 55 | | $result=DBQuery::query("SELECT * FROM `{$database['prefix']}Teamblog` a, `{$database['prefix']}Users` b WHERE b.loginid = '$loginid' and a.teams='$owner' and a.userid=b.userid"); |
| 56 | | if($result&&(mysql_num_rows($result)>0)){ |
| 57 | | return 21; |
| 58 | | } |
| 59 | | |
| 60 | | $result=DBQuery::query("SELECT * FROM `{$database['prefix']}Users` WHERE loginid = '$loginid'"); |
| 61 | | if(!$result||(mysql_num_rows($result)==0)){ |
| 62 | | $isold = 0; |
| 63 | | |
| 64 | | $result=DBQuery::query("SELECT * FROM `{$database['prefix']}ReservedWords` WHERE word = '$blogName'"); |
| 65 | | if($result&&(mysql_num_rows($result)>0)){ |
| 66 | | return 60; |
| 67 | | } |
| 68 | | $result=DBQuery::query("SELECT * FROM `{$database['prefix']}BlogSettings` WHERE name = '$blogName'"); |
| 69 | | if($result&&(mysql_num_rows($result)>0)){ |
| 70 | | return 61; |
| 71 | | } |
| 72 | | $result=DBQuery::query("INSERT INTO `{$database['prefix']}Users` (userid, loginid, password, name, created, lastLogin, host) VALUES (NULL, '$loginid', '".md5($password)."', '$name', UNIX_TIMESTAMP(), 0, $owner)"); |
| 73 | | if(!$result||(mysql_affected_rows()==0)){ |
| 74 | | return 11; |
| 75 | | } |
| 76 | | $id=mysql_insert_id(); |
| 77 | | $baseTimezone=mysql_tt_escape_string($service['timezone']); |
| 78 | | $result=DBQuery::query("INSERT INTO `{$database['prefix']}BlogSettings` (owner, name, language, blogLanguage, timezone) VALUES ('$id', '$identify', '$service[language]', '$service[language]', '$baseTimezone')"); |
| 79 | | if(!$result||(mysql_affected_rows()==0)){ |
| 80 | | DBQuery::execute("DELETE FROM `{$database['prefix']}Users` WHERE `userid` = $id"); |
| 81 | | return 12; |
| 82 | | } |
| 83 | | $result=DBQuery::query("INSERT INTO `{$database['prefix']}SkinSettings` (owner, skin) VALUES ($id, '{$service['skin']}')"); |
| 84 | | if(!$result||(mysql_affected_rows()==0)){ |
| 85 | | DBQuery::execute("DELETE FROM `{$database['prefix']}Users` WHERE `userid` = $id"); |
| 86 | | DBQuery::execute("DELETE FROM `{$database['prefix']}BlogSettings` WHERE `owner` = $id"); |
| 87 | | return 13; |
| 88 | | } |
| 89 | | $result=DBQuery::query("INSERT INTO `{$database['prefix']}FeedSettings` (owner) VALUES ($id)"); |
| 90 | | if(!$result||(mysql_affected_rows()==0)){ |
| 91 | | DBQuery::execute("DELETE FROM `{$database['prefix']}Users` WHERE `userid` = $id"); |
| 92 | | DBQuery::execute("DELETE FROM `{$database['prefix']}BlogSettings` WHERE `owner` = $id"); |
| 93 | | DBQuery::execute("DELETE FROM `{$database['prefix']}SkinSettings` WHERE `owner` = $id"); |
| 94 | | return 62; |
| 95 | | } |
| 96 | | $result=DBQuery::query("INSERT INTO `{$database['prefix']}FeedGroups` (owner, id) VALUES ($id, 0)"); |
| 97 | | if(!$result||(mysql_affected_rows()==0)){ |
| 98 | | DBQuery::execute("DELETE FROM `{$database['prefix']}Users` WHERE `userid` = $id"); |
| 99 | | DBQuery::execute("DELETE FROM `{$database['prefix']}BlogSettings` WHERE `owner` = $id"); |
| 100 | | DBQuery::execute("DELETE FROM `{$database['prefix']}SkinSettings` WHERE `owner` = $id"); |
| 101 | | DBQuery::execute("DELETE FROM `{$database['prefix']}FeedSettings` WHERE `owner` = $id"); |
| 102 | | return 62; |
| 103 | | } |
| 104 | | $enduser = $id; |
| 105 | | } |
| 106 | | else{ |
| 107 | | $ch_userid = DBQuery::queryCell("SELECT b.userid FROM {$database['prefix']}Users a, {$database['prefix']}Teamblog b WHERE `a.loginid`='$loginid' AND b.userid=a.userid"); |
| 108 | | if(empty($ch_userid)){ |
| 109 | | DBQuery::query("UPDATE {$database['prefix']}Users SET password='".md5($password)."', name='$name', created='UNIX_TIMESTAMP()', lastLogin='0' WHERE `loginid`='$loginid'"); |
| 110 | | $EndUset = $ch_userid; |
| 111 | | } |
| 112 | | else{ |
| 113 | | $enduser = 1; |
| 114 | | } |
| 115 | | |
| 116 | | $isold = 1; |
| 117 | | $res = mysql_fetch_array($result); |
| 118 | | $id = $res['userid']; |
| 119 | | $enduser = 1; |
| 120 | | } |
| 121 | | // 팀블로그 DB 에 사용자 정보 추가 |
| 122 | | $profile = $name . '님의 글입니다.'; |
| 123 | | $result=DBQuery::query("INSERT INTO `{$database['prefix']}Teamblog` VALUES('$owner', '$id', '$enduser', '0', '0', '$profile', '', '0', '#000000', '10', '0', UNIX_TIMESTAMP(), '0')"); |
| 124 | | if(!$result||(mysql_affected_rows()==0)){ |
| 125 | | if(empty($isold)){ |
| 126 | | DBQuery::query("DELETE FROM `{$database['prefix']}Users` WHERE `userid` = $id"); |
| 127 | | DBQuery::query("DELETE FROM `{$database['prefix']}BlogSettings` WHERE `owner` = $id"); |
| 128 | | DBQuery::query("DELETE FROM `{$database['prefix']}SkinSettings` WHERE `owner` = $id"); |
| 129 | | DBQuery::query("DELETE FROM `{$database['prefix']}FeedSettings` WHERE `owner` = $id"); |
| 130 | | DBQuery::query("DELETE FROM `{$database['prefix']}FeedGroups` WHERE `owner` = $id"); |
| 131 | | } |
| 132 | | return 20; |
| 133 | | } |
| 134 | | |
| 135 | | $headers='From: '.encodeMail($senderName).'<'.$senderEmail.">\n".'X-Mailer: '.TATTERTOOLS_NAME."\n"."MIME-Version: 1.0\nContent-Type: text/html; charset=utf-8\n"; |
| 136 | | if(empty($name)) |
| 137 | | $subject=_textf('귀하를 %1님이 초대합니다',$senderName); |
| 138 | | else |
| 139 | | $subject=_textf('%1님을 %2님이 초대합니다',$name,$senderName); |
| 140 | | $message=file_get_contents("../../../../../style/letter/letter.html"); |
| 141 | | $message=str_replace('[##_title_##]',_text('초대장'),$message); |
| 142 | | $message=str_replace('[##_content_##]',$comment,$message); |
| 143 | | $message=str_replace('[##_images_##]',"$hostURL{$service['path']}/style/letter",$message); |
| 144 | | if($isold == 1) $message=str_replace('[##_link_##]',getDefaultURL($owner).'/login?loginid='.rawurlencode($email).'&requestURI='.rawurlencode(getDefaultURL($owner)."/owner/center/dashboard/"),$message); |
| 145 | | else $message=str_replace('[##_link_##]',getDefaultURL($owner).'/login?loginid='.rawurlencode($email).'&password='.rawurlencode(md5($password)).'&requestURI='.rawurlencode(getDefaultURL($owner)."/owner/setting/account?password=".rawurlencode(md5($password))),$message); |
| 146 | | $message=str_replace('[##_go_blog_##]',getDefaultURL($owner),$message); |
| 147 | | $message=str_replace('[##_link_title_##]',_text('블로그 바로가기'),$message); |
| 148 | | if(empty($name)){ |
| 149 | | $message=str_replace('[##_to_##]','',$message); |
| 150 | | }else{ |
| 151 | | $message=str_replace('[##_to_##]',_text('받는 사람').': '.$name,$message); |
| 152 | | } |
| 153 | | $message=str_replace('[##_sender_##]',_text('보내는 사람').': '.$senderName,$message); |
| 154 | | @mail($email,encodeMail($subject),$message,$headers); |
| 155 | | |
| 156 | | return 15; |
| 157 | | |
| 158 | | } |