<?php
if( !$_POST && !$_POST['action'] ){
    exit;
}

include 'load.php';

if( !_hui('user_page_s') ){
    print_r(json_encode(array('error'=>1, 'msg'=>'该站点未开启会员中心功能')));
    exit;
}

$ui = array();
foreach ($_POST as $key => $value) {
    $ui[$key] = esc_sql(trim($value));
}

if( !$ui['action'] ){
    exit;
}

// print_r($ui);

switch ($ui['action']) {
    case 'signin':
        if( is_user_logged_in() ) {
            print_r(json_encode(array('error'=>1, 'msg'=>'你已经登录')));
            exit;
        }

        if ( !filter_var($ui['username'], FILTER_VALIDATE_EMAIL) ){
            $user_data = get_user_by('login', $ui['username']);
            if (empty($user_data)){
                print_r(json_encode(array('error'=>1, 'msg'=>'用户名或密码错误')));  
                exit();  
            }
        }else{
            $user_data = get_user_by('email', $ui['username']);
            if (empty($user_data)){
                print_r(json_encode(array('error'=>1, 'msg'=>'邮箱或密码错误')));  
                exit();  
            }
        }

        if( _hui('yzm_on') && isset($ui['ticket']) && isset($ui['randstr']) && !hui_v_captcha($ui['ticket'], $ui['randstr']) ){
            print_r(json_encode(array('error'=>110, 'msg'=>'验证码错误，请重试')));  
            exit();  
        }

        $username = $user_data->user_login;
    
        if($ui['remember']) $ui['remember'] = "true";  
        else $ui['remember'] = "false";  

        $login_data = array(
            'user_login' => $username,
            'user_password' => $ui['password'],
            'remember' => $ui['remember']
        ); 

        $user_verify = wp_signon( $login_data, is_ssl() );   

        if ( is_wp_error($user_verify) ){
            print_r(json_encode(array('error'=>1, 'msg'=>'用户名/邮箱或密码错误')));  
            exit();  
        }

        print_r(json_encode(array('error'=>0, 'msg'=>'成功登录，页面跳转中')));
        exit();  
        

        break;

    case 'signup':
        if( is_user_logged_in() ) {
            print_r(json_encode(array('error'=>1, 'msg'=>'你已经登录')));
            exit;
        }

        if( !preg_match('/^[a-zA-Z\d_]{3,20}$/i', $ui['name']) ) {  
            print_r(json_encode(array('error'=>1, 'msg'=>'昵称是以字母数字下划线组合的3-20位字符')));  
            exit();  
        } 

        if ( !filter_var($ui['email'], FILTER_VALIDATE_EMAIL) ){ 
            print_r(json_encode(array('error'=>1, 'msg'=>'邮箱格式错误')));  
            exit();  
        }

        if( _hui('yzm_on') && isset($ui['ticket']) && isset($ui['randstr']) && !hui_v_captcha($ui['ticket'], $ui['randstr']) ){
            print_r(json_encode(array('error'=>110, 'msg'=>'验证码错误，请重试')));  
            exit();  
        }

        /*if( sstrlen($ui['password'])<6 ) {  
            print_r(json_encode(array('error'=>1, 'msg'=>'密码太短')));  
            exit();
        }*/

        /*if( is_disable_username($ui['name']) ){
            print_r(json_encode(array('error'=>1, 'msg'=>'昵称含保留或非法字符，换一个再试')));  
            exit();
        }*/

        /*if( $ui['password'] !== $ui['password2'] ) {  
            print_r(json_encode(array('error'=>1, 'msg'=>'两次密码输入不一致')));  
            exit();
        }*/
  
        $random_password = wp_generate_password( 12, false );  
        // $uname = 'u'.get_millisecond().rand(1000,9999);
        $status = wp_create_user( $ui['name'], $random_password , $ui['email'] );  

        if ( is_wp_error($status) ){
            $err = $status->errors;
            // print_r($err);
            if( !empty($err['existing_user_login']) ){
                print_r(json_encode(array('error'=>1, 'msg'=>'用户名已存在，换一个试试')));  
                exit();
            }else if( !empty($err['existing_user_email']) ){
                print_r(json_encode(array('error'=>1, 'msg'=>'邮箱已存在，换一个试试')));  
                exit();
            }
            print_r(json_encode(array('error'=>1, 'msg'=>'注册失败，请稍后再试')));  
            exit();
        }

        /*if( $status ){
            // update_user_meta($status, 'nickname', $ui['name']);
            wp_update_user(array(
                'ID' => $status,
                'display_name' => $ui['name']
            ));

            $login_data = array(
                'user_login' => $ui['name'],
                'user_password' => $ui['password'],
                'remember' => true
            ); 

            $user_verify = wp_signon( $login_data, true );   

            _moloader('mo_get_user_page', false);

            print_r(json_encode(array('error'=>0, 'goto'=>mo_get_user_page())));  
        }
        exit();*/

        $from = get_option('admin_email');  
        $headers = 'From: '.$from . "\r\n";  
        $subject = '您已成功注册成为'.get_bloginfo('name').'用户';  
        $msg = '用户名：'.$ui['name']."\r\n".'密码：'.$random_password."\r\n".'网址：'.get_bloginfo('url');

        /*print_r($subject);
        print_r($msg);
        die;*/
        if( wp_mail( $ui['email'], $subject, $msg, $headers ) ){
            print_r(json_encode(array('error'=>0, 'msg'=>'密码已发送到您的邮箱，请前去查收')));  
        }else{
            print_r(json_encode(array('error'=>1, 'msg'=>'密码邮件发送失败，请联系网站管理员'))); 
        }

        exit();
        
        break;

    case 'password':
        if( !is_user_logged_in() ) {
            print_r(json_encode(array('error'=>1, 'msg'=>'必须登录才能操作')));
            exit;
        }

        if( !$ui['passwordold'] && !$ui['password'] && !$ui['password2'] ){
            print_r(json_encode(array('error'=>1, 'msg'=>'密码不能为空'))); 
            exit();
        }

        if( strlen($ui['password'])<6 ) {  
            print_r(json_encode(array('error'=>1, 'msg'=>'密码至少6位')));  
            exit();
        }

        if( $ui['password'] !== $ui['password2'] ) {  
            print_r(json_encode(array('error'=>1, 'msg'=>'两次密码输入不一致')));  
            exit();
        }

        if( $ui['passwordold'] == $ui['password'] ) {  
            print_r(json_encode(array('error'=>1, 'msg'=>'新密码和原密码不能相同')));  
            exit();
        }

        $uid = get_current_user_id();

        global $wp_hasher;
        require_once( ABSPATH.WPINC.'/class-phpass.php' );
        $wp_hasher = new PasswordHash(8, TRUE);

        if(!$wp_hasher->CheckPassword($ui['passwordold'], $current_user->user_pass)) {
            print_r(json_encode(array('error'=>1, 'msg'=>'原密码错误')));  
            exit(); 
        }

        require_once( ABSPATH.WPINC.'/registration.php' );
        $status = wp_update_user( 
            array (
                'ID' => $uid,
                'user_pass' => $ui['password']
            ) 
        );

        if( is_wp_error($status) ){
            print_r(json_encode(array('error'=>1, 'msg'=>'修改失败，请稍后再试')));  
            exit(); 
        }
        
        print_r(json_encode(array('error'=>0)));  
        exit(); 
        

        break;

    default:
        # code...
        break;
}

exit();
