PHP Decode

?><?php

?>
<?php


class MxpAccount {

	
	public static function getEntry(){
		global $MxpDatabase, $MxpCustomer;

		$Qaccount = $MxpDatabase->query('select customers_gender, customers_firstname, customers_lastname, customers_company, customers_type, date_format(customers_dob, "%Y") as customers_dob_year, date_format(customers_dob, "%m") as customers_dob_month, date_format(customers_dob, "%d") as customers_dob_date, customers_email_address from :table_customers where customers_id = :customers_id');
		$Qaccount->bindTable(':table_customers', TABLE_CUSTOMERS);
		$Qaccount->bindInt(':customers_id', $MxpCustomer->getID());
		$Qaccount->execute();

		return $Qaccount;
	}

	
	public static function getID($email_address) {
		global $MxpDatabase;

		$Quser = $MxpDatabase->query('select customers_id from :table_customers where customers_email_address = :customers_email_address limit 1');
		$Quser->bindTable(':table_customers', TABLE_CUSTOMERS);
		$Quser->bindValue(':customers_email_address', $email_address);
		$Quser->execute();

		if ($Quser->numberOfRows() === 1) {
			return $Quser->valueInt('customers_id');
		}

		return false;
	}


	
	public static function createEntry($data) {
		global $MxpDatabase, $MxpSession, $MxpLanguage, $MxpShoppingCart, $MxpCustomer, $MxpNavigationHistory;

		$Qcustomer = $MxpDatabase->query('insert into :table_customers (customers_firstname, customers_lastname, customers_company, customers_email_address, customers_newsletter, customers_status, customers_type, customers_ip_address, customers_password, customers_gender, customers_dob, number_of_logons, date_account_created) values (:customers_firstname, :customers_lastname, :customers_company, :customers_email_address, :customers_newsletter, :customers_status, :customers_type, :customers_ip_address, :customers_password, :customers_gender, :customers_dob, :number_of_logons, :date_account_created)');
		$Qcustomer->bindTable(':table_customers', TABLE_CUSTOMERS);
		$Qcustomer->bindValue(':customers_firstname', ucwords($data['firstname']));
		$Qcustomer->bindValue(':customers_lastname', ucwords($data['lastname']));
		$Qcustomer->bindValue(':customers_company', (isset($data['company_name'])? $data['company_name'] : null));
		$Qcustomer->bindValue(':customers_email_address', $data['email_address']);
		$Qcustomer->bindValue(':customers_newsletter', (isset($data['newsletter']) && ($data['newsletter'] == '1') ? '1' : ''));
		$Qcustomer->bindValue(':customers_status', '1');
		if( isset($data['user']) && ($data['user']==0 || $data['user']==1) ){
			$Qcustomer->bindInt(':customers_type', $data['user']);
		}
		else{
			$Qcustomer->bindValue(':customers_type', null);
		}
		$Qcustomer->bindValue(':customers_ip_address', mxp_get_ip_address());
		$Qcustomer->bindValue(':customers_password', mxp_encrypt_string($data['password']));
		$Qcustomer->bindValue(':customers_gender', (((ACCOUNT_GENDER > -1) && isset($data['gender']) && (($data['gender'] == 'm') || ($data['gender'] == 'f'))) ? $data['gender'] : ''));
		$Qcustomer->bindValue(':customers_dob', ((defined('ACCOUNT_DATE_OF_BIRTH') && ACCOUNT_DATE_OF_BIRTH=='1') ? date('Ymd', $data['dob']) : ''));
		$Qcustomer->bindInt(':number_of_logons', 0);
		$Qcustomer->bindRaw(':date_account_created', 'now()');
		$Qcustomer->execute();

		if ($Qcustomer->affectedRows() === 1) {
			$customer_id = $MxpDatabase->nextID();

			if (SERVICE_SESSION_REGENERATE_ID == '1') {
				$MxpSession->recreate();
			}

			$MxpCustomer->setCustomerData($customer_id);

			// restore cart contents
			$MxpShoppingCart->synchronizeWithDatabase();

			$MxpNavigationHistory->removeCurrentPage();

			// build the message content
			if ((ACCOUNT_GENDER > -1) && isset($data['gender'])) {
				if ($data['gender'] == 'm') {
					$email_text = sprintf($MxpLanguage->get('email_addressing_gender_male'), $MxpCustomer->getLastName()) . "

";
				} else {
					$email_text = sprintf($MxpLanguage->get('email_addressing_gender_female'), $MxpCustomer->getLastName()) . "

";
				}
			} else {
				$email_text = sprintf($MxpLanguage->get('email_addressing_gender_unknown'), $MxpCustomer->getName()) . "

";
			}

			$email_text .= sprintf($MxpLanguage->get('email_create_account_body'), STORE_NAME, STORE_OWNER_EMAIL_ADDRESS);

			mxp_email($MxpCustomer->getName(), $MxpCustomer->getEmailAddress(), sprintf($MxpLanguage->get('email_create_account_subject'), STORE_NAME), $email_text, STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS);

			return true;
		}

		return false;
	}

	
	public static function saveEntry($data) {
		global $MxpDatabase, $MxpCustomer;

		$Qcustomer = $MxpDatabase->query('update :table_customers set customers_gender = :customers_gender, customers_firstname = :customers_firstname, customers_lastname = :customers_lastname, customers_email_address = :customers_email_address, customers_dob = :customers_dob, date_account_last_modified = :date_account_last_modified, customers_company = :customers_company where customers_id = :customers_id');
		$Qcustomer->bindTable(':table_customers', TABLE_CUSTOMERS);
		$Qcustomer->bindValue(':customers_gender', ((ACCOUNT_GENDER > -1) && isset($data['gender']) && (($data['gender'] == 'm') || ($data['gender'] == 'f'))) ? $data['gender'] : '');
		$Qcustomer->bindValue(':customers_firstname', ucwords($data['firstname']));
		$Qcustomer->bindValue(':customers_lastname', ucwords($data['lastname']));
		$Qcustomer->bindValue(':customers_email_address', $data['email_address']);
		$Qcustomer->bindValue(':customers_company', (isset($data['company_name'])? $data['company_name']:null) );
		$Qcustomer->bindValue(':customers_dob', (ACCOUNT_DATE_OF_BIRTH == '1') ? date('Ymd', $data['dob']) : '');
		$Qcustomer->bindRaw(':date_account_last_modified', 'now()');
		$Qcustomer->bindInt(':customers_id', $MxpCustomer->getID());
		$Qcustomer->execute();

		if ($Qcustomer->affectedRows() === 1) {
			return true;
		}

		return false;
	}

	
	public static function savePassword($password, $customer_id=null) {
		global $MxpDatabase, $MxpCustomer;

		if (is_numeric($customer_id) === false) {
			$customer_id = $MxpCustomer->getID();
		}

		$Qcustomer = $MxpDatabase->query('update :table_customers set customers_password = :customers_password, date_account_last_modified = :date_account_last_modified where customers_id = :customers_id');
		$Qcustomer->bindTable(':table_customers', TABLE_CUSTOMERS);
		$Qcustomer->bindValue(':customers_password', mxp_encrypt_string($password));
		$Qcustomer->bindRaw(':date_account_last_modified', 'now()');
		$Qcustomer->bindInt(':customers_id', $customer_id);
		$Qcustomer->execute();

		if ($Qcustomer->affectedRows() === 1) {
			return true;
		}

		return false;
	}

	
	public static function checkEntry($email_address) {
		global $MxpDatabase;

		$Qcheck = $MxpDatabase->query('select customers_id from :table_customers where customers_email_address = :customers_email_address limit 1');
		$Qcheck->bindTable(':table_customers', TABLE_CUSTOMERS);
		$Qcheck->bindValue(':customers_email_address', $email_address);
		$Qcheck->execute();

		if ($Qcheck->numberOfRows() === 1) {
			return true;
		}

		return false;
	}

	
	public static function checkEntries($data, $message_stack_class){
		global $messageStack, $MxpLanguage;

		if( MxpAddressBook::isRequired('gender')>0 ) {
			if (!isset($data['gender']) || (($data['gender'] != 'm') && ($data['gender'] != 'f'))) {
				$messageStack->add($message_stack_class, $MxpLanguage->get('field_customer_gender_error'));
			}
		}

		if( !isset($data['firstname']) || (strlen(trim($data['firstname']))<MxpAddressBook::isRequired('firstname')) ){
			$messageStack->add( $message_stack_class, sprintf($MxpLanguage->get('field_customer_first_name_error'), MxpAddressBook::isRequired('firstname') ) );
		}

		if( !isset($data['lastname']) || (strlen(trim($data['lastname']))<MxpAddressBook::isRequired('lastname')) ){
			$messageStack->add( $message_stack_class, sprintf($MxpLanguage->get('field_customer_last_name_error'), MxpAddressBook::isRequired('lastname')) );
		}

		if( isset($data['user']) && $data['user']==1 ){
			if ( !isset($data['company_name']) || (strlen(trim($data['company_name']))<MxpAddressBook::isRequired('company')) ) {
				$messageStack->add( $message_stack_class, sprintf($MxpLanguage->get('field_customer_company_error'), MxpAddressBook::isRequired('company')) );
			}
		}

		if( isset($data['email_address']) && (strlen(trim($data['email_address']))>=MxpAddressBook::isRequired('email_address')) ){
			if ( mxp_validate_email_address($data['email_address']) ) {
				if ( MxpAccount::checkDuplicateEntry($_POST['email_address']) ) {
					$messageStack->add( $message_stack_class, $MxpLanguage->get('field_customer_email_address_exists_error') );
				}
			} 
			else {
				$messageStack->add( $message_stack_class, $MxpLanguage->get('field_customer_email_address_check_error') );
			}
		} 
		else {
			$messageStack->add( $message_stack_class, sprintf($MxpLanguage->get('field_customer_email_address_error'), MxpAddressBook::isRequired('email_address')) );
		}

		// check those fields just if the user is logged on
		if( MxpTemplate::getModulePage()=='create' ){
			if( isset( $data['password'] )===false || ( isset( $data['password'] ) && ( strlen(trim($data['password']))<MxpAddressBook::isRequired('password') ) ) ){
				$messageStack->add( $message_stack_class, sprintf($MxpLanguage->get('field_customer_password_error'), MxpAddressBook::isRequired('password')) );
			} 
			elseif ( isset( $data['confirmation'] )===false || (isset($data['confirmation']) && (trim($data['password'])!=trim($data['confirmation']))) ) {
				$messageStack->add( $message_stack_class, $MxpLanguage->get('field_customer_password_mismatch_with_confirmation') );
			} 

			if( MxpAddressBook::isRequired('display_privacy_conditions')=='1' ) {
				if ( isset( $data['privacy_conditions'] )===false || (isset($data['privacy_conditions']) && ($data['privacy_conditions'] != '1')) ) {
					$messageStack->add($message_stack_class, $MxpLanguage->get('error_privacy_statement_not_accepted'));
				}
			}
		}

		return ($messageStack->size($message_stack_class) === 0) ? true : false;
	}

	
	public static function checkPassword( $password, $email_address=null ){
		global $MxpDatabase, $MxpCustomer;

		if ($email_address === null) {
			$Qcheck = $MxpDatabase->query('select customers_password from :table_customers where customers_id = :customers_id');
			$Qcheck->bindTable(':table_customers', TABLE_CUSTOMERS);
			$Qcheck->bindInt(':customers_id', $MxpCustomer->getID());
			$Qcheck->execute();
		} else {
			$Qcheck = $MxpDatabase->query('select customers_password from :table_customers where customers_email_address = :customers_email_address limit 1');
			$Qcheck->bindTable(':table_customers', TABLE_CUSTOMERS);
			$Qcheck->bindValue(':customers_email_address', $email_address);
			$Qcheck->execute();
		}

		if ($Qcheck->numberOfRows() === 1) {
			if ( (strlen($password) > 0) && (strlen($Qcheck->value('customers_password')) > 0) ) {
				$stack = explode(':', $Qcheck->value('customers_password'));

				if (sizeof($stack) === 2) {
					if (md5($stack[1] . $password) == $stack[0]) {
						return true;
					}
				}
			}
		}

		return false;
	}

	
	public static function checkDuplicateEntry($email_address) {
		global $MxpDatabase, $MxpCustomer;
		$cID = $MxpCustomer->getID();

		$Qcheck = $MxpDatabase->query('select customers_id from :table_customers where customers_email_address = :customers_email_address');
		if( !empty($cID) ) {
			$Qcheck->appendQuery(' and customers_id != :customers_id ');
			$Qcheck->bindInt(':customers_id', $MxpCustomer->getID());
		}
		$Qcheck->appendQuery(' limit 1');

		$Qcheck->bindTable(':table_customers', TABLE_CUSTOMERS);
		$Qcheck->bindValue(':customers_email_address', $email_address);
		$Qcheck->execute();

		if ( $Qcheck->numberOfRows() === 1 ) {
			return true;
		}

		return false;
	}
}
?>
<?