News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

Malware Found

Started by Willie, December 15, 2016, 01:49:02 AM

Previous topic - Next topic

Willie

What is this?

smf/Sources/Register.php   ("\x47\x49\x46\x38\

smf/index.php   ("\x47

temp/Sources/ScheduledTasks.php    ("\x




Kindred

Who says it is malware?
What else is in those files?
Etc etc etc... you can't provide just a small bit and expect a valid answer
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Willie

#2
?php

/**
* Simple Machines Forum (SMF)
*
* @package SMF
* @author Simple Machines http://www.simplemachines.org
* @copyright 2011 Simple Machines
* @license http://www.simplemachines.org/about/smf/license.php BSD
*
* @version 2.0.7
*/

if (!defined('SMF'))
die('Hacking attempt...');

/* This file has two main jobs, but they really are one.  It registers new
members, and it helps the administrator moderate member registrations.
Similarly, it handles account activation as well.

void Register()
// !!!

void Register2()
// !!!

void Activate()
// !!!

void CoppaForm()
// !!!

void VerificationCode()
// Show the verification code or let it hear.

void RegisterCheckUsername()
// !!!
*/

// Begin the registration process.
function Register($reg_errors = array())
{
global $txt, $boarddir, $context, $settings, $modSettings, $user_info;
global $language, $scripturl, $smcFunc, $sourcedir, $smcFunc, $cur_profile;

// Is this an incoming AJAX check?
if (isset($_GET['sa']) && $_GET['sa'] == 'usernamecheck')
return RegisterCheckUsername();

// Check if the administrator has it disabled.
if (!empty($modSettings['registration_method']) && $modSettings['registration_method'] == 3)
fatal_lang_error('registration_disabled', false);

// If this user is an admin - redirect them to the admin registration page.
if (allowedTo('moderate_forum') && !$user_info['is_guest'])
redirectexit('action=admin;area=regcenter;sa=register');
// You are not a guest, so you are a member - and members don't get to register twice!
elseif (empty($user_info['is_guest']))
redirectexit();

loadLanguage('Login');
loadTemplate('Register');

// Do we need them to agree to the registration agreement, first?
$context['require_agreement'] = !empty($modSettings['requireAgreement']);
$context['registration_passed_agreement'] = !empty($_SESSION['registration_agreed']);
$context['show_coppa'] = !empty($modSettings['coppaAge']);

// Under age restrictions?
if ($context['show_coppa'])
{
$context['skip_coppa'] = false;
$context['coppa_agree_above'] = sprintf($txt['agreement_agree_coppa_above'], $modSettings['coppaAge']);
$context['coppa_agree_below'] = sprintf($txt['agreement_agree_coppa_below'], $modSettings['coppaAge']);
}

// What step are we at?
$current_step = isset($_REQUEST['step']) ? (int) $_REQUEST['step'] : ($context['require_agreement'] ? 1 : 2);

// Does this user agree to the registation agreement?
if ($current_step == 1 && (isset($_POST['accept_agreement']) || isset($_POST['accept_agreement_coppa'])))
{
$context['registration_passed_agreement'] = $_SESSION['registration_agreed'] = true;
$current_step = 2;

// Skip the coppa procedure if the user says he's old enough.
if ($context['show_coppa'])
{
$_SESSION['skip_coppa'] = !empty($_POST['accept_agreement']);

// Are they saying they're under age, while under age registration is disabled?
if (empty($modSettings['coppaType']) && empty($_SESSION['skip_coppa']))
{
loadLanguage('Login');
fatal_lang_error('under_age_registration_prohibited', false, array($modSettings['coppaAge']));
}
}
}
// Make sure they don't squeeze through without agreeing.
elseif ($current_step > 1 && $context['require_agreement'] && !$context['registration_passed_agreement'])
$current_step = 1;

// Show the user the right form.
$context['sub_template'] = $current_step == 1 ? 'registration_agreement' : 'registration_form';
$context['page_title'] = $current_step == 1 ? $txt['registration_agreement'] : $txt['registration_form'];

// Add the register chain to the link tree.
$context['linktree'][] = array(
'url' => $scripturl . '?action=register',
'name' => $txt['register'],
);

// If you have to agree to the agreement, it needs to be fetched from the file.
if ($context['require_agreement'])
{
// Have we got a localized one?
if (file_exists($boarddir . '/agreement.' . $user_info['language'] . '.txt'))
$context['agreement'] = parse_bbc(file_get_contents($boarddir . '/agreement.' . $user_info['language'] . '.txt'), true, 'agreement_' . $user_info['language']);
elseif (file_exists($boarddir . '/agreement.txt'))
$context['agreement'] = parse_bbc(file_get_contents($boarddir . '/agreement.txt'), true, 'agreement');
else
$context['agreement'] = '';
}

if (!empty($modSettings['userLanguage']))
{
$selectedLanguage = empty($_SESSION['language']) ? $language : $_SESSION['language'];

// Do we have any languages?
if (empty($context['languages']))
getLanguages();

// Try to find our selected language.
foreach ($context['languages'] as $key => $lang)
{
$context['languages'][$key]['name'] = strtr($lang['name'], array('-utf8' => ''));

// Found it!
if ($selectedLanguage == $lang['filename'])
$context['languages'][$key]['selected'] = true;
}
}

// Any custom fields we want filled in?
require_once($sourcedir . '/Profile.php');
loadCustomFields(0, 'register');

// Or any standard ones?
if (!empty($modSettings['registration_fields']))
{
require_once($sourcedir . '/Profile-Modify.php');

// Setup some important context.
loadLanguage('Profile');
loadTemplate('Profile');

$context['user']['is_owner'] = true;

// Here, and here only, emulate the permissions the user would have to do this.
$user_info['permissions'] = array_merge($user_info['permissions'], array('profile_account_own', 'profile_extra_own'));
$reg_fields = explode(',', $modSettings['registration_fields']);

// We might have had some submissions on this front - go check.
foreach ($reg_fields as $field)
if (isset($_POST[$field]))
$cur_profile[$field] = $smcFunc['htmlspecialchars']($_POST[$field]);

// Load all the fields in question.
setupProfileContext($reg_fields);
}

// Generate a visual verification code to make sure the user is no bot.
if (!empty($modSettings['reg_verification']))
{
require_once($sourcedir . '/Subs-Editor.php');
$verificationOptions = array(
'id' => 'register',
);
$context['visual_verification'] = create_control_verification($verificationOptions);
$context['visual_verification_id'] = $verificationOptions['id'];
}
// Otherwise we have nothing to show.
else
$context['visual_verification'] = false;

// Are they coming from an OpenID login attempt?
if (!empty($_SESSION['openid']['verified']) && !empty($_SESSION['openid']['openid_uri']))
{
$context['openid'] = $_SESSION['openid']['openid_uri'];
$context['username'] = $smcFunc['htmlspecialchars'](!empty($_POST['user']) ? $_POST['user'] : $_SESSION['openid']['nickname']);
$context['email'] = $smcFunc['htmlspecialchars'](!empty($_POST['email']) ? $_POST['email'] : $_SESSION['openid']['email']);
}
// See whether we have some prefiled values.
else
{
$context += array(
'openid' => isset($_POST['openid_identifier']) ? $_POST['openid_identifier'] : '',
'username' => isset($_POST['user']) ? $smcFunc['htmlspecialchars']($_POST['user']) : '',
'email' => isset($_POST['email']) ? $smcFunc['htmlspecialchars']($_POST['email']) : '',
);
}

// !!! Why isn't this a simple set operation?
// Were there any errors?
$context['registration_errors'] = array();
if (!empty($reg_errors))
foreach ($reg_errors as $error)
$context['registration_errors'][] = $error;
}

// Actually register the member.
function Register2($verifiedOpenID = false)
{
global $scripturl, $txt, $modSettings, $context, $sourcedir;
global $user_info, $options, $settings, $smcFunc;

// Start collecting together any errors.
$reg_errors = array();

// Did we save some open ID fields?
if ($verifiedOpenID && !empty($context['openid_save_fields']))
{
foreach ($context['openid_save_fields'] as $id => $value)
$_POST[$id] = $value;
}

// You can't register if it's disabled.
if (!empty($modSettings['registration_method']) && $modSettings['registration_method'] == 3)
fatal_lang_error('registration_disabled', false);

// Things we don't do for people who have already confirmed their OpenID allegances via register.
if (!$verifiedOpenID)
{
// Well, if you don't agree, you can't register.
if (!empty($modSettings['requireAgreement']) && empty($_SESSION['registration_agreed']))
redirectexit();

// Make sure they came from *somewhere*, have a session.
if (!isset($_SESSION['old_url']))
redirectexit('action=register');

// Are they under age, and under age users are banned?
if (!empty($modSettings['coppaAge']) && empty($modSettings['coppaType']) && empty($_SESSION['skip_coppa']))
{
// !!! This should be put in Errors, imho.
loadLanguage('Login');
fatal_lang_error('under_age_registration_prohibited', false, array($modSettings['coppaAge']));
}

// Check whether the visual verification code was entered correctly.
if (!empty($modSettings['reg_verification']))
{
require_once($sourcedir . '/Subs-Editor.php');
$verificationOptions = array(
'id' => 'register',
);
$context['visual_verification'] = create_control_verification($verificationOptions, true);

if (is_array($context['visual_verification']))
{
loadLanguage('Errors');
foreach ($context['visual_verification'] as $error)
$reg_errors[] = $txt['error_' . $error];
}
}
}

foreach ($_POST as $key => $value)
{
if (!is_array($_POST[$key]))
$_POST[$key] = htmltrim__recursive(str_replace(array("\n", "\r"), '', $_POST[$key]));
}

// Collect all extra registration fields someone might have filled in.
$possible_strings = array(
'website_url', 'website_title',
'aim', 'yim',
'location', 'birthdate',
'time_format',
'buddy_list',
'pm_ignore_list',
'smiley_set',
'signature', 'personal_text', 'avatar',
'lngfile',
'secret_question', 'secret_answer',
);
$possible_ints = array(
'pm_email_notify',
'notify_types',
'icq',
'gender',
'id_theme',
);
$possible_floats = array(
'time_offset',
);
$possible_bools = array(
'notify_announcements', 'notify_regularity', 'notify_send_body',
'hide_email', 'show_online',
);

if (isset($_POST['secret_answer']) && $_POST['secret_answer'] != '')
$_POST['secret_answer'] = md5($_POST['secret_answer']);

// Needed for isReservedName() and registerMember().
require_once($sourcedir . '/Subs-Members.php');

// Validation... even if we're not a mall.
if (isset($_POST['real_name']) && (!empty($modSettings['allow_editDisplayName']) || allowedTo('moderate_forum')))
{
$_POST['real_name'] = trim(preg_replace('~[\t\n\r \x0B\0' . ($context['utf8'] ? ($context['server']['complex_preg_chars'] ? '\x{A0}\x{AD}\x{2000}-\x{200F}\x{201F}\x{202F}\x{3000}\x{FEFF}' : "\xC2\xA0\xC2\xAD\xE2\x80\x80-\xE2\x80\x8F\xE2\x80\x9F\xE2\x80\xAF\xE2\x80\x9F\xE3\x80\x80\xEF\xBB\xBF") : '\x00-\x08\x0B\x0C\x0E-\x19\xA0') . ']+~' . ($context['utf8'] ? 'u' : ''), ' ', $_POST['real_name']));
if (trim($_POST['real_name']) != '' && !isReservedName($_POST['real_name']) && $smcFunc['strlen']($_POST['real_name']) < 60)
$possible_strings[] = 'real_name';
}

if (isset($_POST['msn']) && preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $_POST['msn']) != 0)
$profile_strings[] = 'msn';

// Handle a string as a birthdate...
if (isset($_POST['birthdate']) && $_POST['birthdate'] != '')
$_POST['birthdate'] = strftime('%Y-%m-%d', strtotime($_POST['birthdate']));
// Or birthdate parts...
elseif (!empty($_POST['bday1']) && !empty($_POST['bday2']))
$_POST['birthdate'] = sprintf('%04d-%02d-%02d', empty($_POST['bday3']) ? 0 : (int) $_POST['bday3'], (int) $_POST['bday1'], (int) $_POST['bday2']);

// By default assume email is hidden, only show it if we tell it to.
$_POST['hide_email'] = !empty($_POST['allow_email']) ? 0 : 1;

// Validate the passed language file.
if (isset($_POST['lngfile']) && !empty($modSettings['userLanguage']))
{
// Do we have any languages?
if (empty($context['languages']))
getLanguages();

// Did we find it?
if (isset($context['languages'][$_POST['lngfile']]))
$_SESSION['language'] = $_POST['lngfile'];
else
unset($_POST['lngfile']);
}
else
unset($_POST['lngfile']);

// Some of these fields we may not want.
if (!empty($modSettings['registration_fields']))
{
// But we might want some of them if the admin asks for them.
$standard_fields = array('icq', 'msn', 'aim', 'yim', 'location', 'gender');
$reg_fields = explode(',', $modSettings['registration_fields']);

$exclude_fields = array_diff($standard_fields, $reg_fields);

// Website is a little different
if (!in_array('website', $reg_fields))
$exclude_fields = array_merge($exclude_fields, array('website_url', 'website_title'));

// We used to accept signature on registration but it's being abused by spammers these days, so no more.
$exclude_fields[] = 'signature';
}
else
$exclude_fields = array('signature', 'icq', 'msn', 'aim', 'yim', 'location', 'gender', 'website_url', 'website_title');

$possible_strings = array_diff($possible_strings, $exclude_fields);
$possible_ints = array_diff($possible_ints, $exclude_fields);
$possible_floats = array_diff($possible_floats, $exclude_fields);
$possible_bools = array_diff($possible_bools, $exclude_fields);

// Set the options needed for registration.
$regOptions = array(
'interface' => 'guest',
'username' => !empty($_POST['user']) ? $_POST['user'] : '',
'email' => !empty($_POST['email']) ? $_POST['email'] : '',
'password' => !empty($_POST['passwrd1']) ? $_POST['passwrd1'] : '',
'password_check' => !empty($_POST['passwrd2']) ? $_POST['passwrd2'] : '',
'openid' => !empty($_POST['openid_identifier']) ? $_POST['openid_identifier'] : '',
'auth_method' => !empty($_POST['authenticate']) ? $_POST['authenticate'] : '',
'check_reserved_name' => true,
'check_password_strength' => true,
'check_email_ban' => true,
'send_welcome_email' => !empty($modSettings['send_welcomeEmail']),
'require' => !empty($modSettings['coppaAge']) && !$verifiedOpenID && empty($_SESSION['skip_coppa']) ? 'coppa' : (empty($modSettings['registration_method']) ? 'nothing' : ($modSettings['registration_method'] == 1 ? 'activation' : 'approval')),
'extra_register_vars' => array(),
'theme_vars' => array(),
);

// Include the additional options that might have been filled in.
foreach ($possible_strings as $var)
if (isset($_POST[$var]))
$regOptions['extra_register_vars'][$var] = $smcFunc['htmlspecialchars']($_POST[$var], ENT_QUOTES);
foreach ($possible_ints as $var)
if (isset($_POST[$var]))
$regOptions['extra_register_vars'][$var] = (int) $_POST[$var];
foreach ($possible_floats as $var)
if (isset($_POST[$var]))
$regOptions['extra_register_vars'][$var] = (float) $_POST[$var];
foreach ($possible_bools as $var)
if (isset($_POST[$var]))
$regOptions['extra_register_vars'][$var] = empty($_POST[$var]) ? 0 : 1;

// Registration options are always default options...
if (isset($_POST['default_options']))
$_POST['options'] = isset($_POST['options']) ? $_POST['options'] + $_POST['default_options'] : $_POST['default_options'];
$regOptions['theme_vars'] = isset($_POST['options']) && is_array($_POST['options']) ? $_POST['options'] : array();

// Make sure they are clean, dammit!
$regOptions['theme_vars'] = htmlspecialchars__recursive($regOptions['theme_vars']);

// If Quick Reply hasn't been set then set it to be shown but collapsed.
if (!isset($regOptions['theme_vars']['display_quick_reply']))
$regOptions['theme_vars']['display_quick_reply'] = 1;

// Check whether we have fields that simply MUST be displayed?
$request = $smcFunc['db_query']('', '
SELECT col_name, field_name, field_type, field_length, mask, show_reg
FROM {db_prefix}custom_fields
WHERE active = {int:is_active}',
array(
'is_active' => 1,
)
);
$custom_field_errors = array();
while ($row = $smcFunc['db_fetch_assoc']($request))
{
// Don't allow overriding of the theme variables.
if (isset($regOptions['theme_vars'][$row['col_name']]))
unset($regOptions['theme_vars'][$row['col_name']]);

// Not actually showing it then?
if (!$row['show_reg'])
continue;

// Prepare the value!
$value = isset($_POST['customfield'][$row['col_name']]) ? trim($_POST['customfield'][$row['col_name']]) : '';

// We only care for text fields as the others are valid to be empty.
if (!in_array($row['field_type'], array('check', 'select', 'radio')))
{
// Is it too long?
if ($row['field_length'] && $row['field_length'] < $smcFunc['strlen']($value))
$custom_field_errors[] = array('custom_field_too_long', array($row['field_name'], $row['field_length']));

// Any masks to apply?
if ($row['field_type'] == 'text' && !empty($row['mask']) && $row['mask'] != 'none')
{
//!!! We never error on this - just ignore it at the moment...
if ($row['mask'] == 'email' && (preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $value) === 0 || strlen($value) > 255))
$custom_field_errors[] = array('custom_field_invalid_email', array($row['field_name']));
elseif ($row['mask'] == 'number' && preg_match('~[^\d]~', $value))
$custom_field_errors[] = array('custom_field_not_number', array($row['field_name']));
elseif (substr($row['mask'], 0, 5) == 'regex' && trim($value) != '' && preg_match(substr($row['mask'], 5), $value) === 0)
$custom_field_errors[] = array('custom_field_inproper_format', array($row['field_name']));
}
}

// Is this required but not there?
if (trim($value) == '' && $row['show_reg'] > 1)
$custom_field_errors[] = array('custom_field_empty', array($row['field_name']));
}
$smcFunc['db_free_result']($request);

// Process any errors.
if (!empty($custom_field_errors))
{
loadLanguage('Errors');
foreach ($custom_field_errors as $error)
$reg_errors[] = vsprintf($txt['error_' . $error[0]], $error[1]);
}

// Lets check for other errors before trying to register the member.
if (!empty($reg_errors))
{
$_REQUEST['step'] = 2;
return Register($reg_errors);
}
// If they're wanting to use OpenID we need to validate them first.
if (empty($_SESSION['openid']['verified']) && !empty($_POST['authenticate']) && $_POST['authenticate'] == 'openid')
{
// What do we need to save?
$save_variables = array();
foreach ($_POST as $k => $v)
if (!in_array($k, array('sc', 'sesc', $context['session_var'], 'passwrd1', 'passwrd2', 'regSubmit')))
$save_variables[$k] = $v;

require_once($sourcedir . '/Subs-OpenID.php');
smf_openID_validate($_POST['openid_identifier'], false, $save_variables);
}
// If we've come from OpenID set up some default stuff.
elseif ($verifiedOpenID || (!empty($_POST['openid_identifier']) && $_POST['authenticate'] == 'openid'))
{
$regOptions['username'] = !empty($_POST['user']) && trim($_POST['user']) != '' ? $_POST['user'] : $_SESSION['openid']['nickname'];
$regOptions['email'] = !empty($_POST['email']) && trim($_POST['email']) != '' ? $_POST['email'] : $_SESSION['openid']['email'];
$regOptions['auth_method'] = 'openid';
$regOptions['openid'] = !empty($_POST['openid_identifier']) ? $_POST['openid_identifier'] : $_SESSION['openid']['openid_uri'];
}

$memberID = registerMember($regOptions, true);

// What there actually an error of some kind dear boy?
if (is_array($memberID))
{
$reg_errors = array_merge($reg_errors, $memberID);
$_REQUEST['step'] = 2;
return Register($reg_errors);
}

// Do our spam protection now.
spamProtection('register');

// We'll do custom fields after as then we get to use the helper function!
if (!empty($_POST['customfield']))
{
require_once($sourcedir . '/Profile.php');
require_once($sourcedir . '/Profile-Modify.php');
makeCustomFieldChanges($memberID, 'register');
}

// If COPPA has been selected then things get complicated, setup the template.
if (!empty($modSettings['coppaAge']) && empty($_SESSION['skip_coppa']))
redirectexit('action=coppa;member=' . $memberID);
// Basic template variable setup.
elseif (!empty($modSettings['registration_method']))
{
loadTemplate('Register');

$context += array(
'page_title' => $txt['register'],
'title' => $txt['registration_successful'],
'sub_template' => 'after',
'description' => $modSettings['registration_method'] == 2 ? $txt['approval_after_registration'] : $txt['activate_after_registration']
);
}
else
{
call_integration_hook('integrate_activate', array($row['member_name']));

setLoginCookie(60 * $modSettings['cookieTime'], $memberID, sha1(sha1(strtolower($regOptions['username']) . $regOptions['password']) . $regOptions['register_vars']['password_salt']));

redirectexit('action=login2;sa=check;member=' . $memberID, $context['server']['needs_login_fix']);
}
}

function Activate()
{
global $context, $txt, $modSettings, $scripturl, $sourcedir, $smcFunc, $language;

loadLanguage('Login');
loadTemplate('Login');

if (empty($_REQUEST['u']) && empty($_POST['user']))
{
if (empty($modSettings['registration_method']) || $modSettings['registration_method'] == 3)
fatal_lang_error('no_access', false);

$context['member_id'] = 0;
$context['sub_template'] = 'resend';
$context['page_title'] = $txt['invalid_activation_resend'];
$context['can_activate'] = empty($modSettings['registration_method']) || $modSettings['registration_method'] == 1;
$context['default_username'] = isset($_GET['user']) ? $_GET['user'] : '';

return;
}

// Get the code from the database...
$request = $smcFunc['db_query']('', '
SELECT id_member, validation_code, member_name, real_name, email_address, is_activated, passwd, lngfile
FROM {db_prefix}members' . (empty($_REQUEST['u']) ? '
WHERE member_name = {string:email_address} OR email_address = {string:email_address}' : '
WHERE id_member = {int:id_member}') . '
LIMIT 1',
array(
'id_member' => isset($_REQUEST['u']) ? (int) $_REQUEST['u'] : 0,
'email_address' => isset($_POST['user']) ? $_POST['user'] : '',
)
);

// Does this user exist at all?
if ($smcFunc['db_num_rows']($request) == 0)
{
$context['sub_template'] = 'retry_activate';
$context['page_title'] = $txt['invalid_userid'];
$context['member_id'] = 0;

return;
}

$row = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);

// Change their email address? (they probably tried a fake one first :P.)
if (isset($_POST['new_email'], $_REQUEST['passwd']) && sha1(strtolower($row['member_name']) . $_REQUEST['passwd']) == $row['passwd'] && ($row['is_activated'] == 0 || $row['is_activated'] == 2))
{
if (empty($modSettings['registration_method']) || $modSettings['registration_method'] == 3)
fatal_lang_error('no_access', false);

// !!! Separate the sprintf?
if (preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $_POST['new_email']) == 0)
fatal_error(sprintf($txt['valid_email_needed'], htmlspecialchars($_POST['new_email'])), false);

// Make sure their email isn't banned.
isBannedEmail($_POST['new_email'], 'cannot_register', $txt['ban_register_prohibited']);

// Ummm... don't even dare try to take someone else's email!!
$request = $smcFunc['db_query']('', '
SELECT id_member
FROM {db_prefix}members
WHERE email_address = {string:email_address}
LIMIT 1',
array(
'email_address' => $_POST['new_email'],
)
);
// !!! Separate the sprintf?
if ($smcFunc['db_num_rows']($request) != 0)
fatal_lang_error('email_in_use', false, array(htmlspecialchars($_POST['new_email'])));
$smcFunc['db_free_result']($request);

updateMemberData($row['id_member'], array('email_address' => $_POST['new_email']));
$row['email_address'] = $_POST['new_email'];

$email_change = true;
}

// Resend the password, but only if the account wasn't activated yet.
if (!empty($_REQUEST['sa']) && $_REQUEST['sa'] == 'resend' && ($row['is_activated'] == 0 || $row['is_activated'] == 2) && (!isset($_REQUEST['code']) || $_REQUEST['code'] == ''))
{
require_once($sourcedir . '/Subs-Post.php');

$replacements = array(
'REALNAME' => $row['real_name'],
'USERNAME' => $row['member_name'],
'ACTIVATIONLINK' => $scripturl . '?action=activate;u=' . $row['id_member'] . ';code=' . $row['validation_code'],
'ACTIVATIONLINKWITHOUTCODE' => $scripturl . '?action=activate;u=' . $row['id_member'],
'ACTIVATIONCODE' => $row['validation_code'],
'FORGOTPASSWORDLINK' => $scripturl . '?action=reminder',
);

$emaildata = loadEmailTemplate('resend_activate_message', $replacements, empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile']);

sendmail($row['email_address'], $emaildata['subject'], $emaildata['body'], null, null, false, 0);

$context['page_title'] = $txt['invalid_activation_resend'];

// This will ensure we don't actually get an error message if it works!
$context['error_title'] = '';

fatal_lang_error(!empty($email_change) ? 'change_email_success' : 'resend_email_success', false);
}

// Quit if this code is not right.
if (empty($_REQUEST['code']) || $row['validation_code'] != $_REQUEST['code'])
{
if (!empty($row['is_activated']))
fatal_lang_error('already_activated', false);
elseif ($row['validation_code'] == '')
{
loadLanguage('Profile');
fatal_error($txt['registration_not_approved'] . ' <a href="' . $scripturl . '?action=activate;user=' . $row['member_name'] . '">' . $txt['here'] . '</a>.', false);
}

$context['sub_template'] = 'retry_activate';
$context['page_title'] = $txt['invalid_activation_code'];
$context['member_id'] = $row['id_member'];

return;
}

// Let the integration know that they've been activated!
call_integration_hook('integrate_activate', array($row['member_name']));

// Validation complete - update the database!
updateMemberData($row['id_member'], array('is_activated' => 1, 'validation_code' => ''));

// Also do a proper member stat re-evaluation.
updateStats('member', false);

if (!isset($_POST['new_email']))
{
require_once($sourcedir . '/Subs-Post.php');

adminNotify('activation', $row['id_member'], $row['member_name']);
}

$context += array(
'page_title' => $txt['registration_successful'],
'sub_template' => 'login',
'default_username' => $row['member_name'],
'default_password' => '',
'never_expire' => false,
'description' => $txt['activate_success']
);
}

// This function will display the contact information for the forum, as well a form to fill in.
function CoppaForm()
{
global $context, $modSettings, $txt, $smcFunc;

loadLanguage('Login');
loadTemplate('Register');

// No User ID??
if (!isset($_GET['member']))
fatal_lang_error('no_access', false);

// Get the user details...
$request = $smcFunc['db_query']('', '
SELECT member_name
FROM {db_prefix}members
WHERE id_member = {int:id_member}
AND is_activated = {int:is_coppa}',
array(
'id_member' => (int) $_GET['member'],
'is_coppa' => 5,
)
);
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('no_access', false);
list ($username) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);

if (isset($_GET['form']))
{
// Some simple contact stuff for the forum.
$context['forum_contacts'] = (!empty($modSettings['coppaPost']) ? $modSettings['coppaPost'] . '<br /><br />' : '') . (!empty($modSettings['coppaFax']) ? $modSettings['coppaFax'] . '<br />' : '');
$context['forum_contacts'] = !empty($context['forum_contacts']) ? $context['forum_name_html_safe'] . '<br />' . $context['forum_contacts'] : '';

// Showing template?
if (!isset($_GET['dl']))
{
// Shortcut for producing underlines.
$context['ul'] = '<u>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</u>';
$context['template_layers'] = array();
$context['sub_template'] = 'coppa_form';
$context['page_title'] = $txt['coppa_form_title'];
$context['coppa_body'] = str_replace(array('{PARENT_NAME}', '{CHILD_NAME}', '{USER_NAME}'), array($context['ul'], $context['ul'], $username), $txt['coppa_form_body']);
}
// Downloading.
else
{
// The data.
$ul = '                ';
$crlf = "\r\n";
$data = $context['forum_contacts'] . $crlf . $txt['coppa_form_address'] . ':' . $crlf . $txt['coppa_form_date'] . ':' . $crlf . $crlf . $crlf . $txt['coppa_form_body'];
$data = str_replace(array('{PARENT_NAME}', '{CHILD_NAME}', '{USER_NAME}', '<br>', '<br />'), array($ul, $ul, $username, $crlf, $crlf), $data);

// Send the headers.
header('Connection: close');
header('Content-Disposition: attachment; filename="approval.txt"');
header('Content-Type: ' . ($context['browser']['is_ie'] || $context['browser']['is_opera'] ? 'application/octetstream' : 'application/octet-stream'));
header('Content-Length: ' . count($data));

echo $data;
obExit(false);
}
}
else
{
$context += array(
'page_title' => $txt['coppa_title'],
'sub_template' => 'coppa',
);

$context['coppa'] = array(
'body' => str_replace('{MINIMUM_AGE}', $modSettings['coppaAge'], $txt['coppa_after_registration']),
'many_options' => !empty($modSettings['coppaPost']) && !empty($modSettings['coppaFax']),
'post' => empty($modSettings['coppaPost']) ? '' : $modSettings['coppaPost'],
'fax' => empty($modSettings['coppaFax']) ? '' : $modSettings['coppaFax'],
'phone' => empty($modSettings['coppaPhone']) ? '' : str_replace('{PHONE_NUMBER}', $modSettings['coppaPhone'], $txt['coppa_send_by_phone']),
'id' => $_GET['member'],
);
}
}

// Show the verification code or let it hear.
function VerificationCode()
{
global $sourcedir, $modSettings, $context, $scripturl;

$verification_id = isset($_GET['vid']) ? $_GET['vid'] : '';
$code = $verification_id && isset($_SESSION[$verification_id . '_vv']) ? $_SESSION[$verification_id . '_vv']['code'] : (isset($_SESSION['visual_verification_code']) ? $_SESSION['visual_verification_code'] : '');

// Somehow no code was generated or the session was lost.
if (empty($code))
{
header('Content-Type: image/gif');
die("\x47\x49\x46\x38\x39\x61\x01\x00\x01\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x21\xF9\x04\x01\x00\x00\x00\x00\x2C\x00\x00\x00\x00\x01\x00\x01\x00\x00\x02\x02\x44\x01\x00\x3B");
}

// Show a window that will play the verification code.
elseif (isset($_REQUEST['sound']))
{
loadLanguage('Login');
loadTemplate('Register');

$context['verification_sound_href'] = $scripturl . '?action=verificationcode;rand=' . md5(mt_rand()) . ($verification_id ? ';vid=' . $verification_id : '') . ';format=.wav';
$context['sub_template'] = 'verification_sound';
$context['template_layers'] = array();

obExit();
}

// If we have GD, try the nice code.
elseif (empty($_REQUEST['format']))
{
require_once($sourcedir . '/Subs-Graphics.php');

if (in_array('gd', get_loaded_extensions()) && !showCodeImage($code))
header('HTTP/1.1 400 Bad Request');

// Otherwise just show a pre-defined letter.
elseif (isset($_REQUEST['letter']))
{
$_REQUEST['letter'] = (int) $_REQUEST['letter'];
if ($_REQUEST['letter'] > 0 && $_REQUEST['letter'] <= strlen($code) && !showLetterImage(strtolower($code{$_REQUEST['letter'] - 1})))
{
header('Content-Type: image/gif');
die("\x47\x49\x46\x38\x39\x61\x01\x00\x01\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x21\xF9\x04\x01\x00\x00\x00\x00\x2C\x00\x00\x00\x00\x01\x00\x01\x00\x00\x02\x02\x44\x01\x00\x3B");
}
}
// You must be up to no good.
else
{
header('Content-Type: image/gif');
die("\x47\x49\x46\x38\x39\x61\x01\x00\x01\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x21\xF9\x04\x01\x00\x00\x00\x00\x2C\x00\x00\x00\x00\x01\x00\x01\x00\x00\x02\x02\x44\x01\x00\x3B");
}
}

elseif ($_REQUEST['format'] === '.wav')
{
require_once($sourcedir . '/Subs-Sound.php');

if (!createWaveFile($code))
header('HTTP/1.1 400 Bad Request');
}

// We all die one day...
die();
}

// See if a username already exists.
function RegisterCheckUsername()
{
global $sourcedir, $smcFunc, $context, $txt;

// This is XML!
loadTemplate('Xml');
$context['sub_template'] = 'check_username';
$context['checked_username'] = isset($_GET['username']) ? $_GET['username'] : '';
$context['valid_username'] = true;

// Clean it up like mother would.
$context['checked_username'] = preg_replace('~[\t\n\r \x0B\0' . ($context['utf8'] ? ($context['server']['complex_preg_chars'] ? '\x{A0}\x{AD}\x{2000}-\x{200F}\x{201F}\x{202F}\x{3000}\x{FEFF}' : "\xC2\xA0\xC2\xAD\xE2\x80\x80-\xE2\x80\x8F\xE2\x80\x9F\xE2\x80\xAF\xE2\x80\x9F\xE3\x80\x80\xEF\xBB\xBF") : '\x00-\x08\x0B\x0C\x0E-\x19\xA0') . ']+~' . ($context['utf8'] ? 'u' : ''), ' ', $context['checked_username']);
if ($smcFunc['strlen']($context['checked_username']) > 25)
$context['checked_username'] = $smcFunc['htmltrim']($smcFunc['substr']($context['checked_username'], 0, 25));

// Only these characters are permitted.
if (preg_match('~[<>&"\'=\\\]~', preg_replace('~&#(?:\\d{1,7}|x[0-9a-fA-F]{1,6});~', '', $context['checked_username'])) != 0 || $context['checked_username'] == '_' || $context['checked_username'] == '|' || strpos($context['checked_username'], '[code') !== false || strpos($context['checked_username'], '[/code') !== false)
$context['valid_username'] = false;

if (stristr($context['checked_username'], $txt['guest_title']) !== false)
$context['valid_username'] = false;

if (trim($context['checked_username']) == '')
$context['valid_username'] = false;
else
{
require_once($sourcedir . '/Subs-Members.php');
$context['valid_username'] &= isReservedName($context['checked_username'], 0, false, false) ? 0 : 1;
}
}

?>

Willie

Thanks for your prompt reply Kindred.

I can't see any problem in the file, but Sitelock reported this and other code as malware yesterday.

I have two files  Register.php    and Register.php~   

One is a newer version. Why two? Did the update leave one?

admin has not been receiving notices of new registrations  for some time

Dzonny

Please use code tags when pasting codes inside post.

Anyway, the code that you posted in completely the same as the original Register.php file, so it's clean and have no malware or anything similar in it.
Register.php~ is backup file usually generated when you install some mods that affect that specific file.

Kindred

Sitelock is falsely reporting stuff....   looks like that is an embedded image

Basically, whatever settings you have on Sitelock are too extreme and it's picking up valid files
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Willie

Thanks. I hate to attribute motivation for such things, but I just got a renewal notice from Sitelock.

Krisper

I do not even have SiteLock, however my hosting company apparently uses it as a heuristics scan.

I just received a notice that my site was temporarily suspended due to 296 infected files - citing "SiteLock-PHP-BACKDOOR-GENERIC-ahj.UNOFFICIAL FOUND". All files were identified as SMF files, including index.php, ScheduledTasks.php, and Register.php. In manually comparing them, I see no differences.

In a support chat, I requested a detailed scan identifying the exact bit of malicious code that caused the finding, but they seem to be unable to give me that information. They just keep telling me to delete the file unless it's related to your website. I've told them numerous times it is, and the code has no differences in it when compared with a source code directly downloaded from SMF's website as of this morning.

Kindred

Your host is a complete idiot...
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Krisper

Yeah, I agree. They aren't the sharpest tool in the shed.

Advertisement: