' . esc_html__( 'You already have an account and are logged in.', 'unsupervised-schedular' ) . '
'; } // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- token identifies the invite; the form submit is nonce-checked below. $token = sanitize_text_field( Val::string( wp_unslash( $_REQUEST['us_invite'] ?? '' ) ) ); // Only the token's hash is stored, so hash the submitted token for lookup. $invite = '' !== $token ? $this->invites->findByToken( Invite::hashToken( $token ) ) : null; $open = $this->settings->openRegistrationEnabled(); // Only a redeemable invite fixes the form's email to the invited address. // A stale token (expired / accepted / revoked) with open registration on // must fall back to the normal editable email field, not show — and then // fail to submit — the stale invite's address. $inviteValid = null !== $invite && $invite->isAcceptable( current_time( 'mysql' ) ); $error = ''; $successType = ''; if ( isset( $_POST['us_register'] ) && check_admin_referer( 'us_student_register' ) ) { $result = $this->handleSubmit( $invite, $open ); if ( in_array( $result, [ self::RESULT_INVITE, self::RESULT_CONFIRM, self::RESULT_CONFIRM_GROUP ], true ) ) { $successType = $result; } else { $error = $result; } } // Result of an email-confirmation link (set by EmailConfirmationHandler's redirect). // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only display flag, not a state change. $confirmResult = sanitize_key( Val::string( wp_unslash( $_GET['us_confirmed'] ?? '' ) ) ); // Where the post-confirmation prompt sends students to sign in. $loginUrl = $this->loginUrl( Val::int( $atts['loginPageId'] ?? $atts['login_page_id'] ?? 0 ) ); $policyForms = $this->signupPolicies(); $accountQuestions = $this->questions->findByScope( Question::SCOPE_ACCOUNT, activeOnly: true ); $canRegister = $open || $inviteValid; // The two-step script only matters when there is a second step to reveal. if ( $canRegister && '' === $successType && [] !== $accountQuestions ) { wp_enqueue_script( 'us-scheduler-register' ); } ob_start(); include USC_PLUGIN_DIR . 'templates/frontend/register-page.php'; return (string) ob_get_clean(); } /** * Redirect to the configured registration page when an invite token lands * elsewhere (e.g. a link generated before the page was selected). Hooked on * `template_redirect`. */ public function maybeRedirectToRegistrationPage(): void { if ( is_admin() ) { return; } // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- read-only token used only to build the redirect target. $token = sanitize_text_field( Val::string( wp_unslash( $_GET['us_invite'] ?? '' ) ) ); if ( '' === $token ) { return; } $pageId = Val::int( get_option( RegistrationController::OPTION_PAGE, 0 ) ); if ( $pageId <= 0 || is_page( $pageId ) ) { return; } wp_safe_redirect( add_query_arg( 'us_invite', rawurlencode( $token ), (string) get_permalink( $pageId ) ) ); exit; } /** * Process the submitted registration. Returns a success signal * ({@see RESULT_INVITE} or {@see RESULT_CONFIRM}) or an error message string * on failure. * * The invite branch is tried first, so an invited student always completes * signup regardless of whether open registration is enabled. */ private function handleSubmit( ?Invite $invite, bool $open ): string { $inviteValid = null !== $invite && $invite->isAcceptable( current_time( 'mysql' ) ); if ( ! $inviteValid && ! $open ) { return esc_html__( 'This invitation is invalid, expired, or has already been used.', 'unsupervised-schedular' ); } // The submit nonce is verified by the caller (render) before this runs. // phpcs:disable WordPress.Security.NonceVerification.Missing // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- passwords must not be sanitized. $password = Val::string( wp_unslash( $_POST['password'] ?? '' ) ); $displayName = sanitize_text_field( Val::string( wp_unslash( $_POST['display_name'] ?? '' ) ) ); if ( strlen( $password ) < 8 ) { return esc_html__( 'Please choose a password of at least 8 characters.', 'unsupervised-schedular' ); } // The email is fixed by a personal invite; group-link signups and // self-signups supply their own. if ( $inviteValid && ! $invite->isGroup() ) { $email = $invite->email; } else { $email = sanitize_email( Val::string( wp_unslash( $_POST['email'] ?? '' ) ) ); if ( ! is_email( $email ) ) { return esc_html__( 'Please enter a valid email address.', 'unsupervised-schedular' ); } } $policyForms = $this->signupPolicies(); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- each element is coerced to a positive int in the array_map callback; slashes cannot survive integer coercion. $accepted = array_map( static fn( mixed $v ): int => absint( Val::int( $v ) ), (array) ( $_POST['accept'] ?? [] ) ); // phpcs:enable WordPress.Security.NonceVerification.Missing foreach ( $policyForms as $form ) { if ( ! in_array( (int) $form['version']->id, $accepted, true ) ) { return esc_html__( 'You must accept all required policies to register.', 'unsupervised-schedular' ); } } // Account-signup questions (step two) — validate before creating the user so // a missing required answer never leaves a half-registered account behind. $accountQuestions = $this->questions->findByScope( Question::SCOPE_ACCOUNT, activeOnly: true ); $answers = $this->submittedAnswers(); foreach ( $accountQuestions as $question ) { if ( $question->isRequired && '' === trim( (string) ( $answers[ (int) $question->id ] ?? '' ) ) ) { return esc_html__( 'Please answer all required registration questions.', 'unsupervised-schedular' ); } } if ( email_exists( $email ) ) { return esc_html__( 'An account already exists for this email.', 'unsupervised-schedular' ); } $userId = wp_insert_user( [ 'user_login' => $email, 'user_email' => $email, 'user_pass' => $password, 'display_name' => '' !== $displayName ? $displayName : $email, 'role' => $inviteValid ? $invite->role : RoleManager::STUDENT, ] ); if ( is_wp_error( $userId ) ) { return esc_html__( 'Could not create the account. Please contact the studio.', 'unsupervised-schedular' ); } $this->recordAcceptances( $policyForms, (int) $userId ); $this->recordAnswers( $accountQuestions, $answers, (int) $userId ); if ( $inviteValid && ! $invite->isGroup() ) { $this->invites->markAccepted( (int) $invite->id, (int) $userId ); // A personal invite may carry a group-class grant (invited by email); // point any grants for this address at the new account so the class // becomes enrollable for them. $this->access->linkStudentByEmail( $email, (int) $userId ); wp_set_current_user( (int) $userId ); wp_set_auth_cookie( (int) $userId ); return self::RESULT_INVITE; } // Group-link signups and self-signups both stay pending until they // confirm their email; the group link is multi-use so it is never marked // accepted. A group signup auto-approves on confirmation — no admin // review — while a self-signup then waits for studio approval. $autoApprove = $inviteValid && $invite->isGroup(); $rawToken = RegistrationStatus::markPending( (int) $userId, $autoApprove ); $user = get_user_by( 'id', (int) $userId ); if ( $user instanceof \WP_User ) { $this->mailer->sendConfirmation( $user, $this->confirmUrl( $rawToken ) ); } return $autoApprove ? self::RESULT_CONFIRM_GROUP : self::RESULT_CONFIRM; } /** * URL the post-confirmation sign-in link points to: the chosen login page * when one is configured (and still exists), otherwise the WordPress login * screen. */ private function loginUrl( int $loginPageId ): string { if ( $loginPageId > 0 ) { $url = get_permalink( $loginPageId ); if ( is_string( $url ) ) { return $url; } } return wp_login_url(); } /** * Build the email-confirmation URL for a raw token: the configured * registration page (falling back to the home page) with `?us_confirm=`. */ private function confirmUrl( string $rawToken ): string { $pageId = Val::int( get_option( RegistrationController::OPTION_PAGE, 0 ) ); $base = $pageId > 0 ? (string) get_permalink( $pageId ) : home_url( '/' ); return add_query_arg( 'us_confirm', rawurlencode( $rawToken ), $base ); } /** * The account-question answers submitted with the form, keyed by question id. * * @return array