<?php

	class UsersEventHandler extends kDBEventHandler
	{
		/**
		 * Allows to override standart permission mapping
		 *
		 */
		function mapPermissions()
		{
			parent::mapPermissions();
			$permissions = Array (
				// admin
				'OnSetPersistantVariable'	=>	Array('self' => 'view'), // because setting to logged in user only
				'OnUpdateRootPassword'		=>	Array('self' => true), // because setting to logged in user only

				// front
				'OnRefreshForm'				=>	Array('self' => true),

				'OnForgotPassword'			=>	Array('self' => true),
				'OnResetPassword'			=>	Array('self' => true),
				'OnResetPasswordConfirmed'	=>	Array('self' => true),

				'OnSubscribeQuery'			=>	Array('self' => true),
				'OnSubscribeUser'			=>	Array('self' => true),

				'OnRecommend'				=>	Array('self' => true),

				'OnItemBuild'				=>	Array('self' => true),
			);

			$this->permMapping = array_merge($this->permMapping, $permissions);
		}

		/**
		 * Shows only admins when required
		 *
		 * @param kEvent $event
		 */
		function SetCustomQuery(&$event)
		{
			$object =& $event->getObject();
			/* @var $object kDBList */

			if ($event->Special == 'admins') {
				$object->addFilter('primary_filter', 'ug.GroupId = 11');
			}

			if ($event->Special == 'regular') {
				$object->addFilter('primary_filter', 'ug.GroupId <> 11');
			}

			if (!$this->Application->IsAdmin()) {
				$object->addFilter('status_filter', '%1$s.Status = '.STATUS_ACTIVE);
			}
		}


		/**
		 * Checks permissions of user
		 *
		 * @param kEvent $event
		 */
		function CheckPermission(&$event)
		{
			if ($event->Name == 'OnLogin' || $event->Name == 'OnLogout') {
				// permission is checked in OnLogin event directly
				return true;
			}

			if (!$this->Application->IsAdmin()) {
				$user_id = $this->Application->RecallVar('user_id');
				$items_info = $this->Application->GetVar($event->getPrefixSpecial(true));

				if ($event->Name == 'OnCreate' && $user_id == -2) {
					// "Guest" can create new users
					return true;
				}

				if ($event->Name == 'OnUpdate' && $user_id > 0) {
					$user_dummy =& $this->Application->recallObject($event->Prefix.'.-item', null, Array('skip_autoload' => true));
					foreach ($items_info as $id => $field_values) {
						if ($id != $user_id) {
							// registered users can update their record only
							return false;
						}

						$user_dummy->Load($id);
						$status_field = array_shift($this->Application->getUnitOption($event->Prefix, 'StatusField'));

						if ($user_dummy->GetDBField($status_field) != STATUS_ACTIVE) {
							// not active user is not allowed to update his record (he could not activate himself manually)
							return false;
						}

						if (isset($field_values[$status_field]) && $user_dummy->GetDBField($status_field) != $field_values[$status_field]) {
							// user can't change status by himself
							return false;
						}
					}
					return true;
				}

				if ($event->Name == 'OnUpdate' && $user_id <= 0) {
					// guests are not allowed to update their record, because they don't have it :)
					return false;
				}
			}

			return parent::CheckPermission($event);
		}

		function OnSessionExpire()
		{
			$this->Application->resetCounters('UserSession');

			if ($this->Application->IsAdmin()) {
				$this->Application->Redirect('index', Array('expired' => 1), '', 'index.php');
			}

			if ($this->Application->GetVar('admin') == 1) {
				$session_admin =& $this->Application->recallObject('Session.admin');
				/* @var $session_admin Session */

				if (!$session_admin->LoggedIn()) {
					// front-end session created from admin session & both expired
					$this->Application->DeleteVar('admin');
					$this->Application->Redirect('index', Array('expired' => 1), '', 'admin/index.php');
				}
			}

			$get = $this->Application->HttpQuery->getRedirectParams();
			$t = $this->Application->GetVar('t');
			$get['js_redirect'] = $this->Application->ConfigValue('UseJSRedirect');
			$this->Application->Redirect($t ? $t : 'index', $get);
		}

		/**
		 * Checks user data and logs it in if allowed
		 *
		 * @param kEvent $event
		 */
		function OnLogin(&$event)
		{
			// persistent session data after login is not refreshed, because redirect will follow in any case
			$prefix_special = $this->Application->IsAdmin() ? 'u.current' : 'u'; // "u" used on front not to change theme
			$object =& $this->Application->recallObject($prefix_special, null, Array('skip_autoload' => true));
			$password = $this->Application->GetVar('password');

			$invalid_pseudo = $this->Application->IsAdmin() ? 'la_invalid_password' : 'lu_invalid_password';

			if(!$password)
			{
				$object->SetError('ValidateLogin', 'invalid_password', $invalid_pseudo);
				$event->status = erFAIL;
				return false;
			}

			$email_as_login = $this->Application->ConfigValue('Email_As_Login');
			list($login_field, $submit_field) = $email_as_login && !$this->Application->IsAdmin() ? Array('Email', 'email') : Array('Login', 'login');
			$login_value = $this->Application->GetVar($submit_field);

			// process "Save Username" checkbox
			if ($this->Application->IsAdmin()) {
				$save_username = $this->Application->GetVar('cb_save_username') ? $login_value : '';
				$this->Application->Session->SetCookie('save_username', $save_username, adodb_mktime() + 31104000); // 1 year expiration
				$this->Application->SetVar('save_username', $save_username); // cookie will be set on next refresh, but refresh won't occur if login error present, so duplicate cookie in HTTPQuery
			}

			$super_admin = ($login_value == 'super-root') && $this->verifySuperAdmin();
			if ($this->Application->IsAdmin() && ($login_value == 'root') || ($super_admin && $login_value == 'super-root')) {
				// logging in "root" (admin only)

				$login_value = 'root';

				$root_password = $this->Application->ConfigValue('RootPass');
				$password_formatter =& $this->Application->recallObject('kPasswordFormatter');
				$test = $password_formatter->EncryptPassword($password, 'b38');
				if ($root_password != $test) {
					$object->SetError('ValidateLogin', 'invalid_password', $invalid_pseudo);
					$event->status = erFAIL;
					return false;
				}
				elseif ($this->checkLoginPermission($login_value)) {
					$user_id = -1;
					$object->Load($user_id);
					$object->SetDBField('Login', $login_value);

					$session =& $this->Application->recallObject('Session');
					$session->SetField('PortalUserId', $user_id);
//					$session->SetField('GroupList', implode(',', $groups) );
					$this->Application->SetVar('u.current_id', $user_id);
					$this->Application->StoreVar('user_id', $user_id);

					if ($super_admin) {
						$this->Application->StoreVar('super_admin', 1);
					}

					$this->processLoginRedirect($event, $password);
					return true;
				}
				else {
					$object->SetError('ValidateLogin', 'invalid_license', 'la_invalid_license');
					$event->status = erFAIL;
					return false;
				}
			}

			/*$sql = 'SELECT PortalUserId FROM '.$object->TableName.' WHERE (%s = %s) AND (Password = MD5(%s))';
			$user_id = $this->Conn->GetOne( sprintf($sql, $login_field, $this->Conn->qstr($login_value), $this->Conn->qstr($password) ) );*/

			$sql = 'SELECT PortalUserId FROM '.$object->TableName.' WHERE (Email = %1$s OR Login = %1$s) AND (Password = MD5(%2$s))';
			$user_id = $this->Conn->GetOne( sprintf($sql, $this->Conn->qstr($login_value), $this->Conn->qstr($password) ) );

			if ($user_id) {
				$object->Load($user_id);
				if ($object->GetDBField('Status') == STATUS_ACTIVE) {
					$groups = $object->getMembershipGroups(true);
					if(!$groups) $groups = Array();
					array_push($groups, $this->Application->ConfigValue('User_LoggedInGroup') );
					$this->Application->StoreVar( 'UserGroups', implode(',', $groups) );

					if ($this->checkLoginPermission($login_value)) {
						$session =& $this->Application->recallObject('Session');
						$session->SetField('PortalUserId', $user_id);
						$session->SetField('GroupList', implode(',', $groups) );
						$this->Application->SetVar('u.current_id', $user_id);
						$this->Application->StoreVar('user_id', $user_id);

						$this_login = (int)$object->getPersistantVar('ThisLogin');
						$object->setPersistantVar('LastLogin', $this_login);
						$object->setPersistantVar('ThisLogin', adodb_mktime());
					}
					else {
						$object->Load(-2);
						$object->SetError('ValidateLogin', 'no_permission', 'lu_no_permissions');
						$event->status = erFAIL;
					}

					$this->processLoginRedirect($event, $password);
				}
				else {
					$event->redirect = $this->Application->GetVar('pending_disabled_template');
				}
			}
			else
			{
				$object->SetID(-2);
				$object->SetError('ValidateLogin', 'invalid_password', $invalid_pseudo);
				$event->status = erFAIL;
			}

			$event->SetRedirectParam('pass', 'all');
		}

		/**
		 * Checks that user is allowed to use super admin mode
		 *
		 * @return bool
		 */
		function verifySuperAdmin()
		{
			$sa_mode = ipMatch(defined('SA_IP') ? SA_IP : '');
			return $sa_mode || $this->Application->isDebugMode();
		}

		/**
		 * Enter description here...
		 *
		 * @param string $user_name
		 * @return bool
		 */
		function checkLoginPermission($user_name)
		{
			$ret = true;
			if ($this->Application->IsAdmin()) {
				$modules_helper =& $this->Application->recallObject('ModulesHelper');
				if ($user_name != 'root') {
					// root is virtual user, so allow him to login to admin in any case
					$ret = $this->Application->CheckPermission('ADMIN', 1);
				}
				$ret = $ret && $modules_helper->checkLogin();
			}
			else {
				$ret = $this->Application->CheckPermission('LOGIN', 1);
			}
			return $ret;
		}

		/**
		 * Process all required data and redirect logged-in user
		 *
		 * @param kEvent $event
		 */
		function processLoginRedirect(&$event, $password)
		{
			$prefix_special = $this->Application->IsAdmin() ? 'u.current' : 'u'; // "u" used on front not to change theme
			$object =& $this->Application->recallObject($prefix_special, null, Array('skip_autoload' => true));

			$next_template = $this->Application->GetVar('next_template');
			if ($next_template == '_ses_redirect') {
				$location = $this->Application->BaseURL().$this->Application->RecallVar($next_template);
				if( $this->Application->isDebugMode() && constOn('DBG_REDIRECT') )
				{
					$this->Application->Debugger->appendTrace();
					echo "<b>Debug output above!!!</b> Proceed to redirect: <a href=\"$location\">$location</a><br>";
				}
				else {
					header('Location: '.$location);
				}

				$session =& $this->Application->recallObject('Session');
				$session->SaveData();
				exit;
			}

			if ($next_template) {
				$event->redirect = $next_template;
			}

			if ($this->Application->ConfigValue('UseJSRedirect')) {
				$event->SetRedirectParam('js_redirect', 1);
			}

			$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
			$sync_manager->performAction('LoginUser', $object->GetDBField('Login'), $password);
			$this->Application->resetCounters('UserSession');
		}

		/**
		 * Called when user logs in using old in-portal
		 *
		 * @param kEvent $event
		 */
		function OnInpLogin(&$event)
		{
			$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
			$sync_manager->performAction('LoginUser', $event->getEventParam('user'), $event->getEventParam('pass') );

			if ($event->redirect && is_string($event->redirect)) {
				// some real template specified instead of true
				$this->Application->Redirect($event->redirect, $event->redirect_params);
			}
		}

		/**
		 * Called when user logs in using old in-portal
		 *
		 * @param kEvent $event
		 */
		function OnInpLogout(&$event)
		{
			$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
			$sync_manager->performAction('LogoutUser');
		}

		function OnLogout(&$event)
		{
			$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
			$sync_manager->performAction('LogoutUser');

			$session =& $this->Application->recallObject('Session');
			$session->SetField('PortalUserId', -2);
			$this->Application->SetVar('u.current_id', -2);
			$this->Application->StoreVar('user_id', -2);
			$object =& $this->Application->recallObject('u.current', null, Array('skip_autoload' => true));
			$object->Load(-2);

			$this->Application->DestroySession();

			$group_list = $this->Application->ConfigValue('User_GuestGroup').','.$this->Application->ConfigValue('User_LoggedInGroup');
			$session->SetField('GroupList', $group_list);
			$this->Application->StoreVar('UserGroups', $group_list);

			if ($this->Application->ConfigValue('UseJSRedirect')) {
				$event->SetRedirectParam('js_redirect', 1);
			}

			$this->Application->resetCounters('UserSession');
			$event->SetRedirectParam('pass', 'all');
		}

		/**
		 * Prefill states dropdown with correct values
		 *
		 * @param kEvent $event
		 * @access public
		 */
		function OnPrepareStates(&$event)
		{
			$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
			$cs_helper->PopulateStates($event, 'State', 'Country');

			$object =& $event->getObject();

			if( $object->isRequired('Country') && $cs_helper->CountryHasStates( $object->GetDBField('Country') ) ) $object->setRequired('State', true);
			$object->setLogin();
		}

		/**
		 * Redirects user after succesfull registration to confirmation template (on Front only)
		 *
		 * @param kEvent $event
		 */
		function OnAfterItemCreate(&$event)
		{
			$is_subscriber = $this->Application->GetVar('IsSubscriber');
			if(!$is_subscriber)
			{
				$object =& $event->getObject();

				$ug_table = TABLE_PREFIX.'UserGroup';
				if ($object->mode == 't') {
					$ug_table = $this->Application->GetTempName($ug_table, 'prefix:'.$event->Prefix);
				}

				$sql = 'UPDATE '.$ug_table.'
						SET PrimaryGroup = 0
						WHERE PortalUserId = '.$object->GetDBField('PortalUserId');
				$this->Conn->Query($sql);

				// set primary group to user
				if ($this->Application->IsAdmin() && $this->Application->GetVar('user_group')) {
					// while in admin you can set any group for new users
					$group_id = $this->Application->GetVar('user_group');
				}
				else {
					$group_id = $this->Application->ConfigValue('User_NewGroup');
				}

				$sql = 'REPLACE INTO '.$ug_table.'(PortalUserId,GroupId,PrimaryGroup) VALUES (%s,%s,1)';
				$this->Conn->Query( sprintf($sql, $object->GetID(), $group_id) );
			}
		}

		/**
		 * Login user if possible, if not then redirect to corresponding template
		 *
		 * @param kEvent $event
		 */
		function autoLoginUser(&$event)
		{
			$object =& $event->getObject();
			$this->Application->SetVar('u.current_id', $object->GetID() );

			if($object->GetDBField('Status') == STATUS_ACTIVE && !$this->Application->ConfigValue('User_Password_Auto'))
			{
				$email_as_login = $this->Application->ConfigValue('Email_As_Login');
				list($login_field, $submit_field) = $email_as_login ? Array('Email', 'email') : Array('Login', 'login');

				$this->Application->SetVar($submit_field, $object->GetDBField($login_field) );
				$this->Application->SetVar('password', $object->GetDBField('Password_plain') );

				$event->CallSubEvent('OnLogin');
			}
		}


		/**
		 * When creating user & user with such email exists then force to use OnUpdate insted of ?
		 *
		 * @param kEvent $event
		 */
		function OnSubstituteSubscriber(&$event)
		{
			$ret = false;
			$object =& $event->getObject( Array('skip_autoload' => true) );
			$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
			if($items_info)
			{
				list($id, $field_values) = each($items_info);
				$user_email = isset($field_values['Email']) ? $field_values['Email'] : false;
				if($user_email)
				{
					// check if is subscriber
					$verify_user =& $this->Application->recallObject('u.verify', null, Array('skip_autoload' => true) );
					$verify_user->Load($user_email, 'Email');
					if( $verify_user->isLoaded() && $verify_user->isSubscriberOnly() )
					{
						$items_info = Array( $verify_user->GetDBField('PortalUserId') => $field_values );
						$this->Application->SetVar($event->getPrefixSpecial(true), $items_info);
						$ret = true;
					}
				}
			}

			if( isset($event->MasterEvent) )
			{
				$event->MasterEvent->setEventParam('is_subscriber_only', $ret);
			}
			else
			{
				$event->setEventParam('is_subscriber_only', $ret);
			}
		}


		/**
		 * Enter description here...
		 *
		 * @param kEvent $event
		 * @return bool
		 */
		function isSubscriberOnly(&$event)
		{
			$event->CallSubEvent('OnSubstituteSubscriber');
			$is_subscriber = false;
			if( $event->getEventParam('is_subscriber_only') )
			{
				$is_subscriber = true;
				$object =& $event->getObject( Array('skip_autoload' => true) );
				$this->OnUpdate($event);
				if($event->status == erSUCCESS)
				{
					$this->OnAfterItemCreate($event);
					$object->SendEmailEvents();
					if( !$this->Application->IsAdmin() && ($event->status == erSUCCESS) && $event->redirect) $this->autoLoginUser($event);
				}
			}
			return $is_subscriber;
		}

		/**
		 * Creates new user
		 *
		 * @param kEvent $event
		 */
		function OnCreate(&$event)
		{
			if( !$this->Application->IsAdmin() ) $this->setUserStatus($event);

			if( !$this->isSubscriberOnly($event) )
			{
				$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
				$cs_helper->CheckStateField($event, 'State', 'Country');

				$object =& $event->getObject( Array('skip_autoload' => true) );
				/* @var $object kDBItem */
				if ($this->Application->ConfigValue('User_Password_Auto')) {
					$pass = makepassword4(rand(5,8));
					$object->SetField('Password', $pass);
					$object->SetField('VerifyPassword', $pass);
					$this->Application->SetVar('user_password',$pass);
				}
				parent::OnCreate($event);

				$this->Application->SetVar('u.current_id', $object->getID() ); // for affil:OnRegisterAffiliate after hook

				$this->setNextTemplate($event);

				if( !$this->Application->IsAdmin() && ($event->status == erSUCCESS) && $event->redirect)
				{
					$object->SendEmailEvents();
					$this->autoLoginUser($event);
				}
			}
		}

		/**
		 * Set's new user status based on config options
		 *
		 * @param kEvent $event
		 */
		function setUserStatus(&$event)
		{
			$object =& $event->getObject( Array('skip_autoload' => true) );

			$new_users_allowed = $this->Application->ConfigValue('User_Allow_New');
			// 1 - Instant, 2 - Not Allowed, 3 - Pending

			switch ($new_users_allowed)
			{
				case 1: // Instant
					$object->SetDBField('Status', 1);
					$next_template = $this->Application->GetVar('registration_confirm_template');
					if($next_template) $event->redirect = $next_template;
					break;

				case 3: // Pending
					$next_template = $this->Application->GetVar('registration_confirm_pending_template');
					if($next_template) $event->redirect = $next_template;
					$object->SetDBField('Status', 2);
					break;

				case 2: // Not Allowed
					$object->SetDBField('Status', 0);
					break;
			}

			/*if ($object->GetDBField('PaidMember') == 1) {
				$this->Application->HandleEvent($add_to_cart, 'ord:OnAddToCart');
				$event->redirect = 'in-commerce/checkout/shop_cart';
			} */

		}


		/**
		 * Set's new unique resource id to user
		 *
		 * @param kEvent $event
		 */
		function OnBeforeItemCreate(&$event)
		{
			$email_as_login = $this->Application->ConfigValue('Email_As_Login');
			$object =& $event->getObject();
			if ($email_as_login) {
				$object->Fields['Email']['error_msgs']['unique'] = $this->Application->Phrase('lu_user_and_email_already_exist');
			}

		}

		/**
		 * Set's new unique resource id to user
		 *
		 * @param kEvent $event
		 */
		function OnAfterItemValidate(&$event)
		{
			$object =& $event->getObject();
			$resource_id = $object->GetDBField('ResourceId');
			if (!$resource_id)
			{
				$object->SetDBField('ResourceId', $this->Application->NextResourceId() );
			}
		}


		/**
		 * Enter description here...
		 *
		 * @param kEvent $event
		 */
		function OnRecommend(&$event){

			$friend_email = $this->Application->GetVar('friend_email');
			$friend_name = $this->Application->GetVar('friend_email');

			// used for error reporting only -> rewrite code + theme (by Alex)
			$object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too

			if (preg_match("/^[_a-zA-Z0-9-\.]+@[a-zA-Z0-9-\.]+\.[a-z]{2,4}$/", $friend_email))
		    {
				$send_params = array();
				$send_params['to_email']=$friend_email;
				$send_params['to_name']=$friend_name;

				$user_id = $this->Application->RecallVar('user_id');
				$email_event = &$this->Application->EmailEventUser('SITE.SUGGEST', $user_id, $send_params);

				if ($email_event->status == erSUCCESS){
					$event->redirect_params = array('opener' => 's', 'pass' => 'all');
					$event->redirect = $this->Application->GetVar('template_success');
				}
				else {
//					$event->redirect_params = array('opener' => 's', 'pass' => 'all');
//					$event->redirect = $this->Application->GetVar('template_fail');

					$object->ErrorMsgs['send_error'] = $this->Application->Phrase('lu_email_send_error');
					$object->FieldErrors['Email']['pseudo'] = 'send_error';
					$event->status = erFAIL;
				}
		    }
		    else {
				$object->ErrorMsgs['invalid_email'] = $this->Application->Phrase('lu_InvalidEmail');
				$object->FieldErrors['Email']['pseudo'] = 'invalid_email';
				$event->status = erFAIL;
		    }
		}

		/**
		 * Saves address changes and mades no redirect
		 *
		 * @param kEvent $event
		 */
		function OnUpdateAddress(&$event)
		{
			$object =& $event->getObject( Array('skip_autoload' => true) );

			$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
			if($items_info)
			{
				list($id,$field_values) = each($items_info);
				if($id > 0) $object->Load($id);
				$object->SetFieldsFromHash($field_values);
				$object->setID($id);
				$object->Validate();
			}

			$event->redirect = false;
		}

		/**
		 * Validate subscriber's email & store it to session -> redirect to confirmation template
		 *
		 * @param kEvent $event
		 */
		function OnSubscribeQuery(&$event)
		{
			$user_email = $this->Application->GetVar('subscriber_email');
			if (preg_match("/^[_a-zA-Z0-9-\.]+@[a-zA-Z0-9-\.]+\.[a-z]{2,4}$/", $user_email)) {

				$object =& $this->Application->recallObject($this->Prefix.'.subscriber', null, Array('skip_autoload' => true));
				/* @var $object UsersItem */

				$this->Application->StoreVar('SubscriberEmail', $user_email);

				$object->Load($user_email, 'Email');
				if ($object->isLoaded()) {
					$group_info = $this->GetGroupInfo($object->GetID());
					$event->redirect = $this->Application->GetVar($group_info ? 'unsubscribe_template' : 'subscribe_template');
				}
				else {
					$event->redirect = $this->Application->GetVar('subscribe_template');
					$this->Application->StoreVar('SubscriberEmail', $user_email);
				}
			}
			else {
				// used for error reporting only -> rewrite code + theme (by Alex)
				$object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too
				$object->ErrorMsgs['invalid_email'] = $this->Application->Phrase('lu_InvalidEmail');
				$object->FieldErrors['SubscribeEmail']['pseudo'] = 'invalid_email';
				$event->status = erFAIL;
			}
		}

		/**
		 * Subscribe/Unsubscribe user based on email stored in previous step
		 *
		 * @param kEvent $event
		 */
		function OnSubscribeUser(&$event)
		{
			$object = &$this->Application->recallObject($this->Prefix.'.subscriber', null, Array('skip_autoload' => true));
			/* @var $object UsersItem */

			$user_email = $this->Application->RecallVar('SubscriberEmail');
			if (preg_match("/^[_a-zA-Z0-9-\.]+@[a-zA-Z0-9-\.]+\.[a-z]{2,4}$/", $user_email)) {
				$this->RemoveRequiredFields($object);
				$object->Load($user_email, 'Email');

				if ($object->isLoaded()) {
					$group_info = $this->GetGroupInfo($object->GetID());

					if ($group_info){
						if ($event->getEventParam('no_unsubscribe')) return;

						if ($group_info['PrimaryGroup']){
							// delete user
							$object->Delete();
						}
						else {
							$this->RemoveSubscriberGroup($object->GetID());
						}

						$event->redirect = $this->Application->GetVar('unsubscribe_ok_template');
					}
					else {
						$this->AddSubscriberGroup($object->GetID(), 0);
						$event->redirect = $this->Application->GetVar('subscribe_ok_template');
					}
				}
				else {
					$object->SetField('Email', $user_email);
					$object->SetField('Login', $user_email);
					$object->SetDBField('dob', 1);
					$object->SetDBField('dob_date', 1);
					$object->SetDBField('dob_time', 1);
					$ip = getenv('HTTP_X_FORWARDED_FOR')?getenv('HTTP_X_FORWARDED_FOR'):getenv('REMOTE_ADDR');
					$object->SetDBField('ip', $ip);

					$this->Application->SetVar('IsSubscriber', 1);

					if ($object->Create()) {
						$this->AddSubscriberGroup($object->GetID(), 1);
						$event->redirect = $this->Application->GetVar('subscribe_ok_template');
					}

					$this->Application->SetVar('IsSubscriber', 0);
				}
			}
		}

		function AddSubscriberGroup($user_id, $is_primary){

			$group_id = $this->Application->ConfigValue('User_SubscriberGroup');
			$sql = 'INSERT INTO '.TABLE_PREFIX.'UserGroup(PortalUserId,GroupId,PrimaryGroup) VALUES (%s,%s,'.$is_primary.')';
			$this->Conn->Query( sprintf($sql, $user_id, $group_id) );
			$this->Application->EmailEventAdmin('USER.SUBSCRIBE', $user_id);
			$this->Application->EmailEventUser('USER.SUBSCRIBE', $user_id);

		}

		function RemoveSubscriberGroup($user_id){

			$group_id = $this->Application->ConfigValue('User_SubscriberGroup');
			$sql = 'DELETE FROM '.TABLE_PREFIX.'UserGroup WHERE PortalUserId='.$user_id.' AND GroupId='.$this->Application->ConfigValue('User_SubscriberGroup');
			$this->Conn->Query($sql);
			$this->Application->EmailEventAdmin('USER.UNSUBSCRIBE', $user_id);
			$this->Application->EmailEventUser('USER.UNSUBSCRIBE', $user_id);

		}

		/**
		 * Allows to detect user subscription status (subscribed or not)
		 *
		 * @param int $user_id
		 * @return bool
		 */
		function GetGroupInfo($user_id)
		{
			$sql = 'SELECT *
					FROM '.TABLE_PREFIX.'UserGroup
					WHERE (PortalUserId = '.$user_id.') AND (GroupId = '.$this->Application->ConfigValue('User_SubscriberGroup').')';
			return $this->Conn->GetRow($sql);
		}

		function OnForgotPassword(&$event)
		{
			$user_object = &$this->Application->recallObject('u.forgot', null, Array('skip_autoload' => true));

			// used for error reporting only -> rewrite code + theme (by Alex)
			$user_current_object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too

			$username = $this->Application->GetVar('username');
			$email = $this->Application->GetVar('email');
			$found = false;
			$allow_reset = true;

			if( strlen($username) )
			{
				if( $user_object->Load(array('Login'=>$username)) )
				$found = ($user_object->GetDBField("Login")==$username && $user_object->GetDBField("Status")==1) && strlen($user_object->GetDBField("Password"));
			}
			else if( strlen($email) )
			{
				if( $user_object->Load(array('Email'=>$email)) )
				$found = ($user_object->GetDBField("Email")==$email && $user_object->GetDBField("Status")==1) && strlen($user_object->GetDBField("Password"));
			}

			if( $user_object->isLoaded() )
			{
				$PwResetConfirm 	= $user_object->GetDBField('PwResetConfirm');
				$PwRequestTime 		= $user_object->GetDBField('PwRequestTime');
				$PassResetTime 		= $user_object->GetDBField('PassResetTime');
				//$MinPwResetDelay 	= $user_object->GetDBField('MinPwResetDelay');
				$MinPwResetDelay 	= $this->Application->ConfigValue('Users_AllowReset');

				$allow_reset = (strlen($PwResetConfirm) ?
				adodb_mktime() > $PwRequestTime + $MinPwResetDelay :
				adodb_mktime() > $PassResetTime + $MinPwResetDelay);
			}

			if($found && $allow_reset)
			{
				$this->Application->StoreVar('tmp_user_id', $user_object->GetDBField("PortalUserId"));
				$this->Application->StoreVar('tmp_email', $user_object->GetDBField("Email"));
				$this->Application->EmailEventUser('INCOMMERCEUSER.PSWDC', $user_object->GetDBField("PortalUserId"));

				$event->redirect = $this->Application->GetVar('template_success');
			}
			else
			{
				if(!strlen($username) && !strlen($email))
				{
					$user_current_object->ErrorMsgs['forgotpw_nodata'] = $this->Application->Phrase('lu_ferror_forgotpw_nodata');
					$user_current_object->FieldErrors['Login']['pseudo'] = 'forgotpw_nodata';
					$user_current_object->FieldErrors['Email']['pseudo'] = 'forgotpw_nodata';
				}
				else
				{
					if($allow_reset)
					{
						if( strlen($username) ){
							$user_current_object->ErrorMsgs['unknown_username'] = $this->Application->Phrase('lu_ferror_unknown_username');
							$user_current_object->FieldErrors['Login']['pseudo']='unknown_username';
						}
						if( strlen($email) ){
							$user_current_object->ErrorMsgs['unknown_email'] = $this->Application->Phrase('lu_ferror_unknown_email');
							$user_current_object->FieldErrors['Email']['pseudo']='unknown_email';
						}
					}
					else
					{
						$user_current_object->ErrorMsgs['reset_denied'] = $this->Application->Phrase('lu_ferror_reset_denied');
						if( strlen($username) ){
							$user_current_object->FieldErrors['Login']['pseudo']='reset_denied';
						}
						if( strlen($email) ){
							$user_current_object->FieldErrors['Email']['pseudo']='reset_denied';
						}
					}
				}

				if($user_current_object->FieldErrors){
					$event->redirect = false;
				}
			}

		}

		/**
		 * Enter description here...
		 *
		 * @param kEvent $event
		 */
		function OnResetPassword(&$event)
		{
			$user_object =& $this->Application->recallObject('u.forgot');

			if($user_object->Load($this->Application->RecallVar('tmp_user_id'))){

				$this->Application->EmailEventUser('INCOMMERCEUSER.PSWDC', $user_object->GetDBField("PortalUserId"));
				$event->redirect = $this->Application->GetVar('template_success');

				$m_cat_id = $this->Application->findModule('Name', 'In-Commerce', 'RootCat');
				$this->Application->SetVar('m_cat_id', $m_cat_id);
				$event->SetRedirectParam('pass', 'm');
			}
		}

		function OnResetPasswordConfirmed(&$event)
		{
		   	$passed_key = $this->Application->GetVar('user_key');

	     	$user_object = &$this->Application->recallObject('u.forgot');

	     	// used for error reporting only -> rewrite code + theme (by Alex)
	     	$user_current_object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true));// TODO: change theme too

		    if (strlen(trim($passed_key)) == 0) {
				$event->redirect_params = array('opener' => 's', 'pass' => 'all');
				$event->redirect = false;

				$user_current_object->ErrorMsgs['code_is_not_valid'] = $this->Application->Phrase('lu_code_is_not_valid');
				$user_current_object->FieldErrors['PwResetConfirm']['pseudo'] = 'code_is_not_valid';
		    }


		    if($user_object->Load(array('PwResetConfirm'=>$passed_key)))
		    {
		    	$exp_time = $user_object->GetDBField('PwRequestTime') + 3600;
		    	$user_object->SetDBField("PwResetConfirm", '');
		      	$user_object->SetDBField("PwRequestTime", 0);
		      	if ( $exp_time > adodb_mktime() )
		      	{
		      		//$m_var_list_update['codevalidationresult'] = 'lu_resetpw_confirm_text';
			    	$newpw = makepassword4();

			    	$this->Application->StoreVar('password', $newpw);

			      	$user_object->SetDBField("Password",$newpw);
			      	$user_object->SetDBField("PassResetTime", adodb_mktime());
			      	$user_object->SetDBField("PwResetConfirm", '');
			      	$user_object->SetDBField("PwRequestTime", 0);
			      	$user_object->Update();

			      	$this->Application->SetVar('ForgottenPassword', $newpw);

			     	$email_event_user 	= &$this->Application->EmailEventUser('INCOMMERCEUSER.PSWD', $user_object->GetDBField('PortalUserId'));
			     	$email_event_admin 	= &$this->Application->EmailEventAdmin('INCOMMERCEUSER.PSWD');

			     	$this->Application->DeleteVar('ForgottenPassword');

			      	if ($email_event_user->status == erSUCCESS){
						$event->redirect_params = array('opener' => 's', 'pass' => 'all');
						$event->redirect = $this->Application->GetVar('template_success');
					}

			        $user_object->SetDBField("Password",md5($newpw));
			        $user_object->Update();

		      	} else {
		      		$user_current_object->ErrorMsgs['code_expired'] = $this->Application->Phrase('lu_code_expired');
		      		$user_current_object->FieldErrors['PwResetConfirm']['pseudo'] = 'code_expired';
		      		$event->redirect = false;

		      	}
		    } else {
		    	$user_current_object->ErrorMsgs['code_is_not_valid'] = $this->Application->Phrase('lu_code_is_not_valid');
		    	$user_current_object->FieldErrors['PwResetConfirm']['pseudo'] = 'code_is_not_valid';
		    	$event->redirect = false;

		    }
		}

		function OnUpdate(&$event)
		{
			$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
			$cs_helper->CheckStateField($event, 'State', 'Country');

			parent::OnUpdate($event);

			$this->setNextTemplate($event);
		}

		/**
		 * Enter description here...
		 *
		 * @param kEvent $event
		 */
		function setNextTemplate(&$event)
		{
			if( !$this->Application->IsAdmin() )
			{
				$event->redirect_params['opener'] = 's';
				$object =& $event->getObject();
				if($object->GetDBField('Status') == STATUS_ACTIVE)
				{
					$next_template = $this->Application->GetVar('next_template');
					if($next_template) $event->redirect = $next_template;
				}
			}
		}


		/**
		 * Delete users from groups if their membership is expired
		 *
		 * @param kEvent $event
		 */
		function OnCheckExpiredMembership(&$event)
		{
			// send pre-expiration reminders: begin
			$pre_expiration = adodb_mktime() + $this->Application->ConfigValue('User_MembershipExpirationReminder') * 3600 * 24;
			$sql = 'SELECT PortalUserId, GroupId
					FROM '.TABLE_PREFIX.'UserGroup
					WHERE (MembershipExpires IS NOT NULL) AND (ExpirationReminderSent = 0) AND (MembershipExpires < '.$pre_expiration.')';

			$skip_clause = $event->getEventParam('skip_clause');
			if ($skip_clause) {
				$sql .= ' AND !('.implode(') AND !(', $skip_clause).')';
			}

			$records = $this->Conn->Query($sql);
			if ($records) {
				$conditions = Array();
				foreach ($records as $record) {
					$email_event_user =& $this->Application->EmailEventUser('USER.MEMBERSHIP.EXPIRATION.NOTICE', $record['PortalUserId']);
					$email_event_admin =& $this->Application->EmailEventAdmin('USER.MEMBERSHIP.EXPIRATION.NOTICE');
					$conditions[] = '(PortalUserId = '.$record['PortalUserId'].' AND GroupId = '.$record['GroupId'].')';
				}
				$sql = 'UPDATE '.TABLE_PREFIX.'UserGroup
						SET ExpirationReminderSent = 1
						WHERE '.implode(' OR ', $conditions);
				$this->Conn->Query($sql);
			}
			// send pre-expiration reminders: end

			// remove users from groups with expired membership: begin
			$sql = 'SELECT PortalUserId
					FROM '.TABLE_PREFIX.'UserGroup
					WHERE (MembershipExpires IS NOT NULL) AND (MembershipExpires < '.adodb_mktime().')';
			$user_ids = $this->Conn->GetCol($sql);
			if ($user_ids) {
				foreach ($user_ids as $id) {
					$email_event_user =& $this->Application->EmailEventUser('USER.MEMBERSHIP.EXPIRED', $id);
					$email_event_admin =& $this->Application->EmailEventAdmin('USER.MEMBERSHIP.EXPIRED');
				}
			}
			$sql = 'DELETE FROM '.TABLE_PREFIX.'UserGroup
					WHERE (MembershipExpires IS NOT NULL) AND (MembershipExpires < '.adodb_mktime().')';
			$this->Conn->Query($sql);
			// remove users from groups with expired membership: end
		}

		/**
		 * Enter description here...
		 *
		 * @param kEvent $event
		 */
		function OnRefreshForm(&$event)
		{
			$event->redirect = false;
			$item_info = $this->Application->GetVar($event->Prefix_Special);
			list($id, $fields) = each($item_info);

			$object =& $event->getObject( Array('skip_autoload' => true) );
			$object->setID($id);
			$object->IgnoreValidation = true;
			$object->SetFieldsFromHash($fields);
		}

		/**
		 * Sets persistant variable
		 *
		 * @param kEvent $event
		 */
		function OnSetPersistantVariable(&$event)
		{
			$object =& $event->getObject();

			$field =  $this->Application->GetVar('field');
			$value = $this->Application->GetVar('value');
			$object->setPersistantVar($field, $value);

			$force_tab = $this->Application->GetVar('SetTab');
			if ($force_tab) {
				$this->Application->StoreVar('force_tab', $force_tab);
			}
		}

		/**
		 * Overwritten to return user from order by special .ord
		 *
		 * @param kEvent $event
		 */
		function getPassedID(&$event)
		{
			switch ($event->Special) {
				case 'ord':
					$order =& $this->Application->recallObject('ord');
					/* @var $order OrdersItem */

					$id = $order->GetDBField('PortalUserId');
					break;

				case 'profile':
					$id = $this->Application->GetVar('user_id');
					if (!$id) {
						// if none user_id given use current user id
						$id = $this->Application->RecallVar('user_id');
					}
					break;

				default:
					$id = parent::getPassedID($event);
					break;
			}

			return $id;
		}

		/**
		 * Allows to change root password
		 *
		 * @param kEvent $event
		 */
		function OnUpdateRootPassword(&$event)
		{
			$user_id = $this->Application->RecallVar('user_id');
			if ($user_id != -1) {
				// not "root" can't change root's password via this event
				return false;
			}

			// put salt to user's config
			$field_options = $this->Application->getUnitOption($event->Prefix.'.RootPassword', 'Fields');
			$field_options['salt'] = 'b38';
			$this->Application->setUnitOption($event->Prefix.'.RootPassword', 'Fields', $field_options);

			$object =& $event->getObject( Array('skip_autoload' => true) );
			/* @var $object UsersItem */

			$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
			if ($items_info) {
				list ($id, $field_values) = each($items_info);
				$this->RemoveRequiredFields($object);
				$object->SetDBField('RootPassword', $this->Application->ConfigValue('RootPass'));
	 			$object->SetFieldsFromHash($field_values);
	 			$status = $object->Validate();
				if ($status) {
					// validation on, password match too
					$fields_hash = 	Array (
											'VariableValue' => $object->GetDBField('RootPassword')
									);
					$conf_table = $this->Application->getUnitOption('conf', 'TableName');
					$this->Conn->doUpdate($fields_hash, $conf_table, 'VariableName = "RootPass"');
					$event->SetRedirectParam('opener', 'u');
				}
				else {
					$event->status = erFAIL;
					$event->redirect = false;
				}
			}
		}

		/**
		 * Apply some special processing to
		 * object beeing recalled before using
		 * it in other events that call prepareObject
		 *
		 * @param Object $object
		 * @param kEvent $event
		 * @access protected
		 */
		function prepareObject(&$object, &$event)
		{
			parent::prepareObject($object, $event);

			if (!$this->Application->IsAdmin()) {
				if ($this->Application->RecallVar('register_captcha_code')) return ;
				$captcha_helper =& $this->Application->recallObject('CaptchaHelper');
				/* @var $captcha_helper kCaptchaHelper */
				$this->Application->StoreVar('register_captcha_code', $captcha_helper->GenerateCaptchaCode());
			}
		}

		/**
		 * Apply custom processing to item
		 *
		 * @param kEvent $event
		 */
		function customProcessing(&$event, $type)
		{
			if ($event->Name == 'OnCreate' && $type == 'before') {
				$object =& $event->getObject();
				/* @var $object kDBItem */

				// if auto password has not been set already - store real one - to be used in email events
				if (!$this->Application->GetVar('user_password')) {
					$this->Application->SetVar('user_password', $object->GetDirtyField('Password'));
					$object->SetDBField('Password_plain', $object->GetDirtyField('Password'));
				}

				// Validate captcha image if it's requried
				if ($this->Application->ConfigValue('RegistrationCaptcha') && $object->GetDBField('Captcha') != $this->Application->RecallVar('register_captcha_code')) {
					$object->SetError('Captcha', 'captcha_error', 'lu_captcha_error');
					$captcha_helper =& $this->Application->recallObject('CaptchaHelper');
					/* @var $captcha_helper kCaptchaHelper */
					$this->Application->StoreVar('register_captcha_code', $captcha_helper->GenerateCaptchaCode());
				}

			}
		}

		/**
		 * Checks, that currently loaded item is allowed for viewing (non permission-based)
		 *
		 * @param kEvent $event
		 * @return bool
		 */
		function checkItemStatus(&$event)
		{
			$object =& $event->getObject();
			if (!$object->isLoaded()) {
				return true;
			}

			$virtual_users = Array (-1, -2); // root, Guest
			return ($object->GetDBField('Status') == STATUS_ACTIVE) || in_array($object->GetID(), $virtual_users);
		}
	}

?>