source: temp/trunk/html/regist/index.php @ 1328

<?php

require_once("../require.php");

//---- ¥Ú¡¼¥¸É½¼¨¥¯¥é¥¹
class LC_Page {
    
    var $arrSession;
    var $tpl_mainpage;
    var $arrPref;

    function LC_Page() {
        $this->tpl_css = '/css/layout/regist/index.css';    // ¥á¥¤¥óCSS¥Ñ¥¹
    }
}

$objConn = new SC_DBConn();
$objPage = new LC_Page();
$objView = new SC_SiteView();
$objSiteInfo = new SC_SiteInfo();
$objCustomer = new SC_Customer();
$CONF = sf_getBasisData();
$arrInfo = $objSiteInfo->data;

//--¡¡ËÜÅÐÏ¿´°Î»¤Î¤¿¤á¤Ë¥á¡¼¥ë¤«¤éÀܳ¤·¤¿¾ì¹ç
if ($_GET["mode"] == "regist") {
    
    //-- ÆþÎÏ¥Á¥§¥Ã¥¯
    $objPage->arrErr = lfErrorCheck($_GET);
    if ($objPage->arrErr) {
        $objPage->tpl_mainpage = 'regist/error.tpl';
        $objPage->tpl_css = "/css/layout/regist/error.css";
        $objPage->tpl_title = '¥¨¥é¡¼';

    } else {
        //$objPage->tpl_mainpage = 'regist/complete.tpl';
        //$objPage->tpl_title = ' ²ñ°÷ÅÐÏ¿(´°Î»¥Ú¡¼¥¸)';
        $registSecretKey = lfRegistData($_GET);         //Ëܲñ°÷ÅÐÏ¿¡Ê¥Õ¥é¥°Êѹ¹¡Ë
        lfSendRegistMail($registSecretKey);             //Ëܲñ°÷ÅÐÏ¿´°Î»¥á¡¼¥ëÁ÷¿®

        // ¥í¥°¥¤¥óºÑ¤ß¤Î¾õÂ֤ˤ¹¤ë¡£
        $objQuery = new SC_Query();
        $email = $objQuery->get("dtb_customer", "email", "secret_key = ?", array($registSecretKey));
        $objCustomer->setLogin($email);
        header("Location: ./complete.php");
        exit;
    }

//--¡¡¤½¤ì°Ê³°¤Î¥¢¥¯¥»¥¹¤Ï̵¸ú¤È¤¹¤ë
} else {
    $objPage->arrErr["id"] = "̵¸ú¤Ê¥¢¥¯¥»¥¹¤Ç¤¹¡£";
    $objPage->tpl_mainpage = 'regist/error.tpl';
    $objPage->tpl_css = "/css/layout/regist/error.css";
    $objPage->tpl_title = '¥¨¥é¡¼';

}

//----¡¡¥Ú¡¼¥¸É½¼¨
$objView->assignobj($objPage);
$objView->display(SITE_FRAME);

//---- ÅÐÏ¿
function lfRegistData($array) {
    global $objConn;
    global $arrInfo;
    
    do {
        $secret = sfGetUniqRandomId("r");
    } while( ($result = $objConn->getOne("SELECT COUNT(*) FROM dtb_customer WHERE secret_key = ?", array($secret)) ) != 0);

    $sql = "SELECT email FROM dtb_customer WHERE secret_key = ? AND status = 1";
    $email = $objConn->getOne($sql, array($array["id"]));

    $objConn->query("BEGIN");
    $arrRegist["secret_key"] = $secret; //¡¡ËÜÅÐÏ¿IDȯ¹Ô
    $arrRegist["status"] = 2;
    $arrRegist["update_date"] = "NOW()";
    
    $objQuery = new SC_Query();
    $where = "secret_key = ? AND status = 1";
    
    $arrRet = $objQuery->select("point", "dtb_customer", $where, array($array["id"]));
    // ²ñ°÷ÅÐÏ¿»þ¤Î²Ã»»¥Ý¥¤¥ó¥È(¹ØÆþ»þ²ñ°÷ÅÐÏ¿¤Î¾ì¹ç¤Ï¡¢¥Ý¥¤¥ó¥È²Ã»»¡Ë
    $arrRegist['point'] = $arrRet[0]['point'] + addslashes($arrInfo['welcome_point']);
    
    $objQuery->update("dtb_customer", $arrRegist, $where, array($array["id"]));
    
    $ret = $objQuery->getLastQuery(false);
    
    /* ¹ØÆþ»þÅÐÏ¿¤Î¾ì¹ç¡¢¤½¤Î²ó¤Î¹ØÆþ¤ò²ñ°÷¹ØÆþ¤È¤ß¤Ê¤¹¡£ */
    // ²ñ°÷¾ðÊó¤ÎÆɤ߹þ¤ß
    $where1 = "secret_key = ? AND status = 2";
    $customer = $objQuery->select("*", "dtb_customer", $where1, array($secret));
    // ½é²ó¹ØÆþ¾ðÊó¤ÎÆɤ߹þ¤ß
//  $where2 = "member_check = 1 AND order_email = ? AND password = ?";
//  $order_temp_id = $objQuery->get("dtb_order_temp", "order_temp_id", $where2, array($customer[0]['email'], $customer[0]['password']));
    $order_temp_id = $objQuery->get("dtb_order_temp", "order_temp_id");
    // ¹ØÆþ¾ðÊó¤Î¹¹¿·
    if ($order_temp_id != null) {
        $arrCustomer['customer_id'] = $customer[0]['customer_id'];
        $where3 = "order_temp_id = ?";
        $objQuery->update("dtb_order_temp", $arrCustomer, $where3, array($order_temp_id));
        $objQuery->update("dtb_order", $arrCustomer, $where3, array($order_temp_id));
    }

    $sql = "SELECT mail_flag FROM dtb_customer_mail WHERE email = ?";
    $result = $objConn->getOne($sql, array($email));
    
    switch($result) {
    // ²¾HTML
    case '4':
        $arrRegistMail["mail_flag"] = 1;
        break;
    // ²¾TEXT
    case '5':
        $arrRegistMail["mail_flag"] = 2;
        break;
    // ²¾¤Ê¤·
    case '6':
        $arrRegistMail["mail_flag"] = 3;
        break;
    default:
        $arrRegistMail["mail_flag"] = $result;
        break;
    }

    $objConn->autoExecute("dtb_customer_mail", $arrRegistMail, "email = '" .addslashes($email). "'");
    $objConn->query("COMMIT");
        
    return $secret;     // ËÜÅÐÏ¿ID¤òÊÖ¤¹
}

//---- ÆþÎÏ¥¨¥é¡¼¥Á¥§¥Ã¥¯
function lfErrorCheck($array) {

    global $objConn;
    $objErr = new SC_CheckError($array);

    $objErr->doFunc(array("²¾ÅÐÏ¿ID", 'id'), array("EXIST_CHECK"));
    if (! EregI("^[[:alnum:]]+$",$array["id"] )) {
        $objErr->arrErr["id"] = "̵¸ú¤ÊURL¤Ç¤¹¡£¥á¡¼¥ë¤Ëµ­ºÜ¤µ¤ì¤Æ¤¤¤ëËܲñ°÷ÅÐÏ¿ÍÑURL¤òºÆÅÙ¤´³Îǧ¤¯¤À¤µ¤¤¡£";
    }
    if (! $objErr->arrErr["id"]) {

        $sql = "SELECT customer_id FROM dtb_customer WHERE secret_key = ? AND status = 1 AND delete = 0";
        $result = $objConn->getOne($sql, array($array["id"]));

        if (! is_numeric($result)) {
            $objErr->arrErr["id"] .= "¢¨ ´û¤Ë²ñ°÷ÅÐÏ¿¤¬´°Î»¤·¤Æ¤¤¤ë¤«¡¢Ìµ¸ú¤ÊURL¤Ç¤¹¡£<br>";
            return $objErr->arrErr;

        }
    }

    return $objErr->arrErr;
}

//---- Àµ²ñ°÷ÅÐÏ¿´°Î»¥á¡¼¥ëÁ÷¿®
function lfSendRegistMail($registSecretKey) {
    global $objConn;
    global $CONF;

    //-- À«Ì¾¤ò¼èÆÀ
    $sql = "SELECT email, name01, name02 FROM dtb_customer WHERE secret_key = ?";
    $result = $objConn->getAll($sql, array($registSecretKey));
    $data = $result[0];
    
    //--¡¡¥á¡¼¥ëÁ÷¿®
    $objMailText = new SC_SiteView();
    $objMailText->assign("CONF", $CONF);
    $objMailText->assign("name01", $data["name01"]);
    $objMailText->assign("name02", $data["name02"]);
    $toCustomerMail = $objMailText->fetch("mail_templates/customer_regist_mail.tpl");
    $subject = sfMakeSubject('Ëܲñ°÷ÅÐÏ¿¤¬´°Î»¤·¤Þ¤·¤¿¡£');
    $objMail = new GC_SendMail();

    $objMail->setItem(
                          ''                                //¡¡°¸Àè
                        , $subject//"¡Ú" .$CONF["shop_name"]. "¡Û".ENTRY_CUSTOMER_REGIST_SUBJECT        //¡¡¥µ¥Ö¥¸¥§¥¯¥È
                        , $toCustomerMail                   //¡¡ËÜʸ
                        , $CONF["email03"]                  //¡¡ÇÛÁ÷¸µ¥¢¥É¥ì¥¹
                        , $CONF["shop_name"]                //¡¡ÇÛÁ÷¸µ¡¡Ì¾Á°
                        , $CONF["email03"]                  //¡¡reply_to
                        , $CONF["email04"]                  //¡¡return_path
                        , $CONF["email04"]                  //  Errors_to
                    );
    // °¸Àè¤ÎÀßÄê
    $name = $data["name01"] . $data["name02"] ." ÍÍ";
    $objMail->setTo($data["email"], $name);
    $objMail->sendMail();
}

?>