mudmin / userspice4

UserSpice4

+UserSpice 4 is a complete OOP PDO PHP User Management System. Full details, documentation, walkthroughs, and forums can be found at UserSpice.com. + +Ideally the git repository is for tracking changes. All downloads should probably go through UserSpice.com where they are properly packaged for installtion. + +What makes UserSpice different from almost any other PHP User Management Framework is that it has been designed from the beginning to get out of your way so you can spend your time working on your project. Other systems may force you to use their rewriting rules, template engines, frameworks, etc. UserSpice doesn't. You can use as much of it or as little as you choose. It just sits there and does its job. + +In most cases, UserSpice can control access to your existing pages with a single line of code. From there, we provide an incredible set of PHP Classes and Functions that you can choose to use or not use. Don't like the look? It's built using Bootstrap. You can change the look and feel of your site in seconds with a new css file and some well-documented tweaks. + +Most importantly, UserSpice is constantly in development. It's constantly getting better and more secure while maintaining the goal of getting out of the way. As additional major features are added, they will be in the form of plugins to keep things modular. + +So you can get on with the business of designing your project. All while being Bootstrap compatible so you can easily change the look and feel of your project. The goal of UserSpice is to strike a balance of being feature-rich without being bloated.

userspice4's Issues

Time Zone

step2.php does not include the Australian Region, preventing any Australian Timezone from being selected in Step2 of installation in the Region/Timezone (required) dropdown

Languageswitcher problem in IE and Edge

Hi @mudmin, @brandinarsenault ,
there seems to be a problem with the languageswitcher in userspice.
In https://github.com/mudmin/UserSpice4/blob/master/users/helpers/us_helpers.php on line 1712 it skips every $_POST value except the third. The order of var_dump($_POST) is "your_token, language_selector, de-DE_x, de-DE_y, csrf" which makes "de-DE_x" the third value. In Internet Explorer and Edge the order is as follows "your_token, language_selector, csrf, de-DE_x, de-DE_y". The post sending order was verified via fiddler https://www.telerik.com/download/fiddler. I replaced "if(($count != 3))" with "if(($count != 4))" which works in my case, cause it gets de-DE_x on FF and de-DE_y in IE and Edge.
There also is no value in the token var(csrf) on line 1747 and two alt attributes on 1743.
I don't know if you are using the value and not just the name of the *_x and *_y postvars, but there could be another problem in IE/Edge if you hit the flag with your return key - https://stackoverflow.com/questions/22004789/if-isset-post-not-working-for-internet-explorer/22005299#22005299

Thank you for providing this great framework!

SMTP Debug can't go above 1

As stated earlier, i'll like to send emails with userspice from localhost through a valid and authorised gmail account, but i get an SMTP() CONNECT error. Trying to debug i setup the debug level to above 1 and it goes back to 1 after saving, any fix?

EDIT: The PHPMailer was intatiated properly, the error log basically calls out an inconsistency in certificates, here is the log
2017-12-28 12:19:46 Connection: opening to ssl://smtp.gmail.com:465, timeout=300, options=array()
2017-12-28 12:20:00 Connection failed. Error #2: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed [C:\xampp\htdocs\m\1234\users\vendor\phpmailer\phpmailer\src\SMTP.php line 324]
2017-12-28 12:20:00 Connection failed. Error #2: stream_socket_client(): Failed to enable crypto [C:\xampp\htdocs\m\1234\users\vendor\phpmailer\phpmailer\src\SMTP.php line 324]
2017-12-28 12:20:00 Connection failed. Error #2: stream_socket_client(): unable to connect to ssl://smtp.gmail.com:465 (Unknown error) [C:\xampp\htdocs\m\1234\users\vendor\phpmailer\phpmailer\src\SMTP.php line 324]
2017-12-28 12:20:00 SMTP ERROR: Failed to connect to server: (0)

Same with TLS

pdo

hey great script, i would have posted the following question on your forums but I'm getting a forbidden notice when trying to register.

Has anyone come across this error "Fatal error: Class 'PDO' not found in /*/**/public_html/userspice/users/classes/DB.php on line 26" ? the script was working fine yesterday but this morning it threw this error. I've only modded the navigation and header html along with css. any thoughts ? PDO module is installed on my server

Copyright message with apostrophe causes error

The copyright message (given during install) becomes not backslashed. It's written out raw, and results an "Unexpected T_STRING at users/init.php" on homepage, if I close the apostrophe on install interface

undefined variable $master_account

Hello!

Due to wrong page permissions, I ran into an php error:
Undefined variable: master_account in /var/www/clients/client1/web11/web/users/helpers/us_helpers.php on line 431

$master_account is indeed not defined anywhere in the code.

egrep -R master_account *
users/helpers/us_helpers.php: }elseif ($user->data()->id == $master_account){ //Grant access if master user

Regards, Michael

PHP warning when trying to test database connection during install

If PHP is configured to show all errors, a PHP warning will appear when trying to test the database connection in step2.php. Recommend changing line 202 from:

$link = mysqli_connect($dbh, $dbu, $dbp, $dbn);

To:

$link = @mysqli_connect($dbh, $dbu, $dbp, $dbn);

The @ will suppress the warning, allowing the code to continue.

stripe ?

is stripe integrated as i found reference to it in init? if it is whats its intended usage in vanilla user spice ?

Extra fclose in step2.php

step2.php has an extra fclose($fh) on line 162, which throws a PHP warning. This would be seen if all errors and warnings are shown. By the time the code gets here, $fh is no longer available as fclose already ran on line 159. The subsequent file_put_contents doesn't utilize a file handle.

Unexpected end of file

When loading UserSpice4 I get this error in users/init.php on line 26:
AH01071: Got error 'PHP message: PHP Parse error: syntax error, unexpected end of file, expecting ')' in /var/www/vhosts/example.org/htdocs/vendor/userspice/users/init.php on line 26\n'
BTW is there a new walkthrough for hacking UserSpice4 using a custom frontend? I'd love to use UserSpice4 together with AdminLTE!

[Bug] Force password reset on manual creation

Hi there,

I have set up UserSpice and we want users to set their own password, however when a user receives the signup message with the "Set password" link - you get taken to a page where you can set your new password, except no matter what you enter as the new password you get an error: "Oops...something went wrong, maybe an old reset link you clicked on. Click below to try again".

The user must then manually request a password reset e-mail, which then accepts their new password.

Hopefully you can resolve the issue with manual account creation set password link.

Messages doesn't type in Russian

When I try to send message with Cyrillic symbols it convert text into ???...

I think it happens because database is not in utf8_general_ci, but changing encoding doesn't solve the problem. Please fix it in the next versions.

Notice: Undefined variable: master_account in

I get the following in us_helper.php

Notice: Undefined variable: master_account in /home/plob347868/domains/uzbc.nl/public_html/site/workload/users/helpers/us_helpers.php on line 788

Warning: in_array() expects parameter 2 to be array, null given in /home/plob347868/domains/uzbc.nl/public_html/site/workload/users/helpers/us_helpers.php on line 788

The $master_account is (normally) defined in init.php and is included. Don't know what's wrong, but I think it's a bug.

The value of $master_account is 1 and that account exists.

Please update doc : there is no core folder to cleanup

Install fail to delete and documentation is not up to date, core folder do not exist.