<?php 
require(AT_INCLUDE_PATH.'header.inc.php'); 
?>

<script language="JavaScript" src="sha-1factory.js" type="text/javascript"></script>

<script type="text/javascript">
function encrypt_password()
{
	document.form.password_error.value = "";

	err = verify_password(document.form.form_password1.value, document.form.form_password2.value);
	
	if (err.length > 0)
	{
		document.form.password_error.value = err;
	}
	else
	{
		document.form.form_password_hidden.value = hex_sha1(document.form.form_password1.value);
		document.form.form_password1.value = "";
		/*document.form.form_password2.value = "";*/
	}
}
function encrypt_password_login()
{
    document.form1.form1_password_hidden.value = hex_sha1(hex_sha1(document.form1.form1_password.value) + "<?php echo $_SESSION['token']; ?>");
	document.form1.form1_password.value = "";
	return true;
}
function show_login_form()
{
    document.getElementById('login_form_div').style.display = "block";
    document.form1.form1_login.focus();
}
</script>
<?php if(!(isset($_SESSION['member_id']) && $_SESSION['login'])) { ?>
<div class="column" style="margin-top:0;" >
    <a href="#" title="<?php echo _AT('already_registered'); ?>" onclick="show_login_form();return false;" >If already registered, click here</a>
</div>
<div class="input-form" style="clear: both;margin-top:0;display: none;" id="login_form_div">
    <form action="<?php $getvars = ''; if (isset($_REQUEST["en_id"]) && $_REQUEST["en_id"] <> "") $getvars = '?en_id='. $_REQUEST["en_id"]; echo $_SERVER['PHP_SELF'] . $getvars; ?>" method="post" name="form1">
        <input type="hidden" name="form1_login_action" value="true" />
        <input type="hidden" name="form1_password_hidden" value="" />
        <input type="hidden" name="p" value="<?php if (isset($_GET['p'])) {
    echo urlencode($_GET['p']);
} ?>" />

        <fieldset class="group_form"><legend class="group_form"><?php echo _AT('returning_user'); ?></legend>
            <p><?php echo _AT('login_text'); ?></p>
            <div class="row">
                <label for="login"><?php echo _AT('login_name_or_email'); ?></label><br />
                <input type="text" name="form1_login" size="30" id="login" /><br />
            </div>
            <div class="row">
                <label for="pass"><?php echo _AT('password'); ?></label><br />
                <input type="password" class="formfield" size="30" name="form1_password" id="pass" />
            </div>
            <br />
            <div class="row">
                <input type="submit" name="submit1" value="<?php echo _AT('login'); ?>" class="button" onclick="return encrypt_password_login();" /> 
            </div>
        </fieldset>			
    </form>
</div>
<?php } ?>

<form method="post" action="<?php $getvars = ''; if (isset($_REQUEST["en_id"]) && $_REQUEST["en_id"] <> "") $getvars = '?en_id='. $_REQUEST["en_id"]; echo $_SERVER['PHP_SELF'] . $getvars; ?>" name="form">
<?php global $languageManager, $_config, $moduleFactory; ?>
<input name="ml" type="hidden" value="<?php if(isset($this->ml)){ echo $this->ml; } ?>" />
<input name="password_error" type="hidden" />
<input type="hidden" name="form_password_hidden" value="" />
<input name="csrftoken" type="hidden" value="<?php echo $_SESSION['token']; ?>" />

<div class="input-form">
<fieldset class="group_form"><legend class="group_form"><?php echo _AT('required_information'); ?></legend>

<p><span class="required">*</span><?php echo _AT('required_field'); ?></p>
	<?php if (!isset($_POST['member_id']) && defined('AT_MASTER_LIST') && AT_MASTER_LIST && !admin_authenticate(AT_ADMIN_PRIV_USERS, TRUE)): ?>
		<div class="row">
			<h3><?php echo _AT('account_authorization'); ?></h3>
		</div>

		<div class="row">
			<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="student_id"><?php echo _AT('student_id'); ?></label><br />
			<input id="student_id" name="student_id" type="text" size="15" maxlength="15" value="<?php echo stripslashes(htmlspecialchars($_POST['student_id'])); ?>" /><br />
		</div>

		<div class="row">
			<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="student_pin"><?php echo _AT('student_pin'); ?></label><br />
			<input id="student_pin" name="student_pin" type="password" size="15" maxlength="15" value="<?php echo stripslashes(htmlspecialchars($_POST['student_pin'])); ?>" /><br />
		</div>
	<?php endif; ?>

	<?php 
		$table_title="
		<div class=\"row\">
			<h3>" . _AT('course_to_auto_enroll'). "</h3>
			<small>&middot; " ._AT('auto_enroll_msg')."</small>
		</div>";
		
		require(AT_INCLUDE_PATH.'html/auto_enroll_list_courses.inc.php'); 
        if (isset($_SESSION['member_id']) && $_SESSION['login']) {
            require_once(AT_INCLUDE_PATH.'header.inc.php');
            ?>
            <div class="row buttons">
                <input type="submit" name="submit" value=" <?php echo _AT('confirm'); ?> " accesskey="c" class="button"/>
                <input type="submit" name="cancel" value=" <?php echo _AT('cancel'); ?> "  class="button" />
            </div>
            <?php
            require_once(AT_INCLUDE_PATH.'footer.inc.php');
            exit;
        }
	?>
	

	<div class="row">
		<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="login"><?php echo _AT('login_name'); ?></label><br />
		<?php if (isset($_POST['member_id'])) : ?>
				<span id="login"><?php echo stripslashes(htmlspecialchars($_POST['login'])); ?></span>
				<input name="member_id" type="hidden" value="<?php echo intval($_POST['member_id']); ?>" />
				<input name="login" type="hidden" value="<?php if(isset($_POST['login'])){ echo stripslashes(htmlspecialchars($_POST['login'])); } ?>" />
		<?php else: ?>
			<input id="login" name="login" type="text" maxlength="20" size="30" value="<?php if(isset($_POST['login'])){echo stripslashes(htmlspecialchars($_POST['login']));} ?>" title="<?php echo _AT('login_name').':'._AT('contain_only'); ?>"/><br />
			<small>&middot; <?php echo _AT('contain_only'); ?><br />
				   &middot; <?php echo _AT('20_max_chars'); ?></small>
		<?php endif; ?>
	</div>

	<?php if (!admin_authenticate(AT_ADMIN_PRIV_USERS, TRUE) || !$_POST['member_id']): ?>
		<div class="row">
			<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="form_password1"><?php echo _AT('password'); ?></label><br />
			<input id="form_password1" name="form_password1" type="password" size="15" maxlength="15" title="<?php echo _AT('password').':'._AT('combination'); ?>"/><br />
			<small>&middot; <?php echo _AT('combination'); ?><br />
				   &middot; <?php echo _AT('15_max_chars'); ?></small>
		</div>

		<div class="row">
			<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="form_password2"><?php echo _AT('password_again'); ?></label><br />
			<input id="form_password2" name="form_password2" type="password" size="15" maxlength="15" />
		</div>
	<?php endif; ?>

	<?php if (isset($_config['use_captcha']) && $_config['use_captcha']==1 && !$this->no_captcha): ?>
	<div class="row">
		<span class="required" title="<?php echo _AT('required_field'); ?>">*</span>
		<label for="secret"><img src="<?php echo AT_INCLUDE_PATH; ?>securimage/securimage_show.php?sid=<?php echo md5(uniqid(time())); ?>" id="simage" align="left" /></label>
		<a href="<?php echo AT_INCLUDE_PATH; ?>securimage/securimage_play.php" title="<?php echo _AT('audible_captcha'); ?>"><img src="<?php echo AT_INCLUDE_PATH; ?>securimage/images/audio_icon.gif" alt="<?php echo _AT('audible_captcha'); ?>" onclick="this.blur()" align="top" border="0"></a><br>
		<a href="#" title="<?php echo _AT('refresh_image'); ?>" onclick="document.getElementById('simage').src = '<?php echo AT_INCLUDE_PATH; ?>securimage/securimage_show.php?sid=' + Math.random(); return false"><img src="<?php echo AT_INCLUDE_PATH; ?>securimage/images/refresh.gif" alt="<?php echo _AT('refresh_image'); ?>" onclick="this.blur()" align="bottom" border="0"></a>

		<br /><br />
		<label for="secret"><?php echo _AT('image_validation_text'); ?></label>
		<input id="secret" name="secret" type="text" size="6" maxlength="6" value="" />
		<br />
		<small><?php echo _AT('image_validation_text2'); ?><br /></small>
	</div>
	<?php endif; ?>

	<div class="row">
		<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="email"><?php echo _AT('email_address'); ?></label><br />
		<input id="email" name="email" type="text" size="30" maxlength="50" value="<?php if(isset($_POST['email'])){ echo stripslashes(htmlspecialchars($_POST['email']));} ?>" />
		<input type="checkbox" id="priv" name="private_email" value="1" <?php if (isset($_POST['private_email']) || !isset($_POST['submit'])) { echo 'checked="checked"'; } ?> /><label for="priv"><?php echo _AT('keep_email_private');?></label>
	</div>

	<div class="row">
		<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="email2"><?php echo _AT('email_again'); ?></label><br />
		<input id="email2" name="email2" type="text" size="30" maxlength="60" value="<?php if(isset($_POST['email2'])){  echo stripslashes(htmlspecialchars($_POST['email2']));} ?>" />
	</div>

	<div class="row">
		<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="first_name"><?php echo _AT('first_name'); ?></label><br />
		<input id="first_name" name="first_name" type="text" value="<?php if(isset($_POST['first_name'])){ echo stripslashes(htmlspecialchars($_POST['first_name']));} ?>" />
	</div>

	<div class="row">
		<label for="second_name"><?php echo _AT('second_name'); ?></label><br />
		<input id="second_name" name="second_name" type="text" value="<?php if(isset($_POST['second_name'])){ echo stripslashes(htmlspecialchars($_POST['second_name'])); } ?>" />
	</div>

	<div class="row">
		<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="last_name"><?php echo _AT('last_name'); ?></label><br />
		<input id="last_name" name="last_name" type="text" value="<?php if(isset($_POST['last_name'])){ echo stripslashes(htmlspecialchars($_POST['last_name']));} ?>" />
	</div>
	
	<?php if (admin_authenticate(AT_ADMIN_PRIV_USERS, TRUE)): 
			if ($_POST['status'] == AT_STATUS_INSTRUCTOR) {
				$inst = ' checked="checked"';
			} else if ($_POST['status'] == AT_STATUS_STUDENT) {
				$stud = ' checked="checked"';
			}  else if ($_POST['status'] == AT_STATUS_DISABLED) {
				$disa = ' checked="checked"';
			} else {
				$uncon = ' checked="checked"';
			}?>
			<input type="hidden" name="id" value="<?php echo intval($_POST['member_id']); ?>" />
			<div class="row">
				<span class="required" title="<?php echo _AT('required_field'); ?>">*</span><?php echo _AT('account_status'); ?><br />

				<input type="radio" name="status" value="0" id="disa" <?php echo $disa; ?> /><label for="disa"><?php echo _AT('disabled'); ?></label>
				<?php if (defined('AT_EMAIL_CONFIRMATION') && AT_EMAIL_CONFIRMATION): ?>
					<input type="radio" name="status" value="1" id="uncon" <?php echo $uncon; ?> /><label for="uncon"><?php echo _AT('unconfirmed'); ?></label>
				<?php endif; ?>

				<input type="radio" name="status" value="2" id="stud" <?php echo $stud; ?> /><label for="stud"><?php echo _AT('student'); ?></label>

				<input type="radio" name="status" value="3" id="inst" <?php echo $inst; ?> /><label for="inst"><?php echo _AT('instructor'); ?></label>

				<input type="hidden" name="old_status" value="<?php echo intval($_POST['old_status']); ?>" />
			</div>
	<?php endif; ?>
</fieldset>
<fieldset class="group_form"><legend class="group_form"><?php echo _AT('personal_information').' ('._AT('optional').')'; ?></legend>
	<?php 
	$mod = $moduleFactory->getModule('_standard/profile_pictures');
	if (admin_authenticate(AT_ADMIN_PRIV_USERS, TRUE) && $_POST['member_id'] && $mod->isEnabled() === TRUE): ?>
		<div class="row">
			<?php echo _AT('picture'); ?><br/>
			<?php if (profile_image_exists($_POST['member_id'])): ?>
				<a href="get_profile_img.php?id=<?php echo intval($_POST['member_id']).SEP.'size=o'; ?>"><?php print_profile_img($_POST['member_id']); ?></a>
				<input type="checkbox" name="profile_pic_delete" value="1" id="profile_pic_delete" /><label for="profile_pic_delete"><?php echo _AT('delete'); ?></label>
			<?php else: ?>
				<?php echo _AT('none'); ?> <a href="mods/_standard/profile_pictures/admin/profile_picture.php?member_id=<?php echo intval($_POST['member_id']); ?>"><?php echo _AT('add'); ?></a>
			<?php endif; ?>
		</div>
	<?php endif; ?>

	<?php if (admin_authenticate(AT_ADMIN_PRIV_USERS, TRUE) && defined('AT_MASTER_LIST') && AT_MASTER_LIST): ?>
		<input type="hidden" name="old_student_id" value="<?php echo intval($_POST['old_student_id']); ?>" />
		<div class="row">
			<label for="student_id" value="student id"><?php echo _AT('student_id'); ?></label><br />
				<input type="text" id="student_id" name="student_id" value="<?php echo intval($_POST['student_id']); ?>" size="20" /><br />
		</div>
		<div class="row">
			<input type="checkbox" id="overwrite" name="overwrite" value="1" <?php if ($_POST['overwrite']) { echo 'checked="checked"'; } ?> /><label for="overwrite"><?php echo _AT('overwrite_master');?></label>
		</div>

	<?php endif; ?>

	<div class="row">
		<?php echo _AT('date_of_birth'); ?><br />
		<label for="year"><?php echo _AT('year'); ?>: </label><input id="year" class="formfield" name="year" type="text" size="4" maxlength="4" value="<?php if(isset($_POST['year'])){ echo intval($_POST['year']);} ?>" />  <label for="month"><?php echo _AT('month'); ?>: </label><input id="month" class="formfield" name="month" type="text" size="2" maxlength="2" value="<?php if(isset($_POST['month'])){echo intval($_POST['month']);} ?>" /> <label for="day"><?php echo _AT('day'); ?>: </label><input id="day" class="formfield" name="day" type="text" size="2" maxlength="2" value="<?php if(isset($_POST['day'])){ echo intval($_POST['day']); } ?>" />
	</div>

	<div class="row">
		<?php echo _AT('gender'); ?><br />
		<input type="radio" name="gender" id="m" value="m" <?php if (isset($_POST['gender']) && $_POST['gender'] == 'm') { echo 'checked="checked"'; } ?> /><label for="m"><?php echo _AT('male'); ?></label> <input type="radio" value="f" name="gender" id="f" <?php if (isset($_POST['gender']) && $_POST['gender'] == 'f') { echo 'checked="checked"'; } ?> /><label for="f"><?php echo _AT('female'); ?></label>  <input type="radio" value="n" name="gender" id="ns" <?php if (isset($_POST['gender']) && ($_POST['gender']  == 'n' || $_POST['gender'] == '')) { echo 'checked="checked"'; } ?> /><label for="ns"><?php echo _AT('not_specified'); ?></label>
	</div>

	<div class="row">
		<label for="address"><?php echo _AT('street_address'); ?></label><br />
		<input id="address" name="address" size="40" type="text" value="<?php if (isset($_POST['address'])){ echo stripslashes(htmlspecialchars($_POST['address']));} ?>" />
	</div>

	<div class="row">
		<label for="postal"><?php echo _AT('postal_code'); ?></label><br />
		<input id="postal" name="postal" size="7" type="text" value="<?php if (isset($_POST['postal'])){ echo stripslashes(htmlspecialchars($_POST['postal']));} ?>" />
	</div>

	<div class="row">
		<label for="city"><?php echo _AT('city'); ?></label><br />
		<input id="city" name="city" type="text" value="<?php if (isset($_POST['city'])){ echo stripslashes(htmlspecialchars($_POST['city']));} ?>" />
	</div>

	<div class="row">
		<label for="province"><?php echo _AT('province'); ?></label><br />
		<input id="province" name="province" type="text" value="<?php if (isset($_POST['province'])){ echo stripslashes(htmlspecialchars($_POST['province']));} ?>" />
	</div>

	<div class="row">
		<label for="country"><?php echo _AT('country'); ?></label><br />
		<input id="country" name="country" type="text" value="<?php if (isset($_POST['country'])){ echo stripslashes(htmlspecialchars($_POST['country']));} ?>" />
	</div>

	<div class="row">
		<label for="phone"><?php echo _AT('phone'); ?></label><br />
		<input size="11" name="phone" type="text" value="<?php if (isset($_POST['phone'])){ echo stripslashes(htmlspecialchars($_POST['phone']));} ?>" id="phone" />
	</div>

	<div class="row">
		<label for="website"><?php echo _AT('web_site'); ?></label><br />
		<input id="website" name="website" size="40" type="text" value="<?php if (isset($_POST['website']) && $_POST['website'] == '') { echo 'http://'; } else { if (isset($_POST['website'])) { echo stripslashes(htmlspecialchars($_POST['website'])); }} ?>" />
	</div>
</fieldset>
	<div class="row buttons">
		<input type="submit" name="submit" value=" <?php echo _AT('save'); ?> " accesskey="s" onclick="encrypt_password()" class="button"/>
		<input type="submit" name="cancel" value=" <?php echo _AT('cancel'); ?> "  class="button" />
	</div>
</div>
</form>

<?php require(AT_INCLUDE_PATH.'footer.inc.php'); ?>