prepare("
SELECT id
FROM users
WHERE phone = :phone1 OR phone = :phone2
LIMIT 1
");
$stmt->execute([
':phone1' => $phoneNorm,
':phone2' => $phoneAlt,
]);
if ($stmt->fetch(PDO::FETCH_ASSOC)) {
$errors[] = __('page.registration.error.phone_exists');
} else {
$verifyCode = random_int(100000, 999999);
$status = 'pending';
$passwordHash = password_hash($password, PASSWORD_BCRYPT);
$ip = $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';
$insert = $pdo->prepare("
INSERT INTO users (
name,
phone,
ip,
password_hash,
role,
created_at,
verify_code,
status
) VALUES (
:name,
:phone,
:ip,
:password_hash,
:role,
NOW(),
:verify_code,
:status
)
");
$insert->execute([
':name' => $name,
':phone' => $phoneNorm,
':ip' => $ip,
':password_hash' => $passwordHash,
':role' => 'user',
':verify_code' => (string)$verifyCode,
':status' => $status,
]);
$userId = (int)$pdo->lastInsertId();
$stmt = $pdo->prepare("
SELECT
id,
name,
phone,
role,
created_at,
verify_code,
status,
COALESCE(session_version, 0) AS session_version,
COALESCE(balance, 0) AS balance
FROM users
WHERE id = :id
LIMIT 1
");
$stmt->execute([':id' => $userId]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$user) {
$errors[] = __('page.registration.error.generic');
} else {
session_regenerate_id(true);
$_SESSION['user'] = [
'id' => (int)$user['id'],
'name' => $user['name'] ?? '',
'phone' => $user['phone'] ?? '',
'role' => $user['role'] ?? 'user',
'created_at' => $user['created_at'] ?? null,
'verify_code' => $user['verify_code'] ?? null,
'status' => $user['status'] ?? null,
'session_version' => (int)($user['session_version'] ?? 0),
'balance' => (float)($user['balance'] ?? 0),
'is_superadmin' => (($user['role'] ?? '') === 'superadmin') ? 1 : 0,
];
header('Location: ' . mhk_url('index.php'));
exit;
}
}
}
}
$jsTexts = [
'enter8' => __('page.registration.error.phone_invalid'),
'checking' => __('page.registration.phone.checking'),
'exists' => __('page.registration.error.phone_exists'),
'free' => __('page.registration.phone.free'),
'wait_check' => __('page.registration.phone.wait_check'),
'legal_required' => $legalRequiredError,
];
?>
<?= htmlspecialchars(__('page.registration.title')) ?>