* Moving hardcoded styles into CSS.
[lhc/web/wiklou.git] / includes / SpecialUserlogin.php
index 8a14b64..7b5fea8 100644 (file)
@@ -1,20 +1,17 @@
 <?php
 /**
  *
+ * @package MediaWiki
+ * @subpackage SpecialPage
  */
 
 /**
- *
- */
-require_once('UserMailer.php');
-
-/**
- * consutrctor
+ * constructor
  */
 function wfSpecialUserlogin() {
        global $wgCommandLineMode;
        global $wgRequest;
-       if( !$wgCommandLineMode && !isset( $_COOKIE[ini_get("session.name")] )  ) {
+       if( !$wgCommandLineMode && !isset( $_COOKIE[ini_get('session.name')] )  ) {
                User::SetupSession();
        }
        
@@ -24,37 +21,51 @@ function wfSpecialUserlogin() {
 
 /**
  *
+ * @package MediaWiki
+ * @subpackage SpecialPage
  */
 class LoginForm {
        var $mName, $mPassword, $mRetype, $mReturnto, $mCookieCheck, $mPosted;
        var $mAction, $mCreateaccount, $mCreateaccountMail, $mMailmypassword;
        var $mLoginattempt, $mRemember, $mEmail;
        
+       /**
+        * Constructor
+        * @param webrequest $request A webrequest object passed by reference
+        */
        function LoginForm( &$request ) {
-               global $wgLang, $wgAllowRealName;
+               global $wgLang, $wgAllowRealName, $wgEnableEmail;
+               global $wgEmailAuthentication;
 
                $this->mName = $request->getText( 'wpName' );
                $this->mPassword = $request->getText( 'wpPassword' );
                $this->mRetype = $request->getText( 'wpRetype' );
                $this->mReturnto = $request->getVal( 'returnto' );
-               $this->mCookieCheck = $request->getVal( "wpCookieCheck" );
+               $this->mCookieCheck = $request->getVal( 'wpCookieCheck' );
                $this->mPosted = $request->wasPosted();
                $this->mCreateaccount = $request->getCheck( 'wpCreateaccount' );
-               $this->mCreateaccountMail = $request->getCheck( 'wpCreateaccountMail' );
-               $this->mMailmypassword = $request->getCheck( 'wpMailmypassword' );
+               $this->mCreateaccountMail = $request->getCheck( 'wpCreateaccountMail' )
+                                           && $wgEnableEmail;
+               $this->mMailmypassword = $request->getCheck( 'wpMailmypassword' )
+                                        && $wgEnableEmail;
                $this->mLoginattempt = $request->getCheck( 'wpLoginattempt' );
                $this->mAction = $request->getVal( 'action' );
                $this->mRemember = $request->getCheck( 'wpRemember' );
-               $this->mEmail = $request->getText( 'wpEmail' );
-               if ($wgAllowRealName) {
+               
+               if( $wgEnableEmail ) {
+                       $this->mEmail = $request->getText( 'wpEmail' );
+               } else {
+                       $this->mEmail = '';
+               }
+               if( $wgAllowRealName ) {
                    $this->mRealName = $request->getText( 'wpRealName' );
                } else {
                    $this->mRealName = '';
                }
            
                # When switching accounts, it sucks to get automatically logged out
-               if( $this->mReturnto == $wgLang->specialPage( "Userlogout" ) ) {
-                       $this->mReturnto = "";
+               if( $this->mReturnto == $wgLang->specialPage( 'Userlogout' ) ) {
+                       $this->mReturnto = '';
                }
        }
 
@@ -69,11 +80,11 @@ class LoginForm {
                                return $this->addNewAccountMailPassword();
                        } else if ( $this->mMailmypassword ) {
                                return $this->mailPassword();
-                       } else if ( ( "submit" == $this->mAction ) || $this->mLoginattempt ) {
+                       } else if ( ( 'submitlogin' == $this->mAction ) || $this->mLoginattempt ) {
                                return $this->processLogin();
                        }
                }
-               $this->mainLoginForm( "" );
+               $this->mainLoginForm( '' );
        }
 
        /**
@@ -81,9 +92,10 @@ class LoginForm {
         */
        function addNewAccountMailPassword() {
                global $wgOut;
+               global $wgEmailAuthentication;
                
-               if ("" == $this->mEmail) {
-                       $this->mainLoginForm( wfMsg( "noemail", $this->mName ) );
+               if ('' == $this->mEmail) {
+                       $this->mainLoginForm( wfMsg( 'noemail', htmlspecialchars( $this->mName ) ) );
                        return;
                }
 
@@ -93,20 +105,37 @@ class LoginForm {
                        return;
                }
 
-               $u->saveSettings();
-               $error = $this->mailPasswordInternal($u);
+               $newadr = strtolower($this->mEmail);
+
+               # prepare for authentication and mail a temporary password to newadr
+               if ( !$u->isValidEmailAddr( $newadr ) ) {
+                       return $this->mainLoginForm( wfMsg( 'invalidemailaddress', $error ) );
+               }
+               $u->mEmail = $newadr; # new behaviour: set this new emailaddr from login-page into user database record
+               $u->mEmailAuthenticationtimestamp = 0; # but flag as "dirty" = unauthenticated
 
-               $wgOut->setPageTitle( wfMsg( "accmailtitle" ) );
-               $wgOut->setRobotpolicy( "noindex,nofollow" );
+               if ($wgEmailAuthentication) {
+                       $error = $this->mailPasswordInternal( $u, true, $dummy ); # mail a temporary password to the dirty address
+               }
+
+               $wgOut->setPageTitle( wfMsg( 'accmailtitle' ) );
+               $wgOut->setRobotpolicy( 'noindex,nofollow' );
                $wgOut->setArticleRelated( false );
        
-               if ( $error === "" ) {
-                       $wgOut->addWikiText( wfMsg( "accmailtext", $u->getName(), $u->getEmail() ) );
-                       $wgOut->returnToMain( false );
+               if ($wgEmailAuthentication) {
+                       if ($error === '') {
+                               return $this->mainLoginForm( wfMsg( 'passwordsentforemailauthentication', $u->getName() ) );
                } else {
-                       $this->mainLoginForm( wfMsg( "mailerror", $error ) );
+                               return $this->mainLoginForm( wfMsg( 'mailerror', $error ) );
                }
-
+                       # if user returns, that new email address gets authenticated in checkpassword()
+               }
+#              if ( $error === '' ) {
+#                      $wgOut->addWikiText( wfMsg( 'accmailtext', $u->getName(), $u->getEmail() ) );
+#                      $wgOut->returnToMain( false );
+#              } else {
+#                      $this->mainLoginForm( wfMsg( 'mailerror', $error ) );
+#              }
                $u = 0;
        }
 
@@ -116,7 +145,7 @@ class LoginForm {
         */
        function addNewAccount() {
                global $wgUser, $wgOut;
-               global $wgDeferredUpdateList;
+               global $wgEmailAuthentication;
 
                $u = $this->addNewAccountInternal();
 
@@ -124,20 +153,39 @@ class LoginForm {
                        return;
                }
 
+               $newadr = strtolower($this->mEmail);
+               if ($newadr != '') {            # prepare for authentication and mail a temporary password to newadr
+                       if ( !$u->isValidEmailAddr( $newadr ) ) {
+                               return $this->mainLoginForm( wfMsg( 'invalidemailaddress', $error ) );
+                       }
+                       $u->mEmail = $newadr; # new behaviour: set this new emailaddr from login-page into user database record
+                       $u->mEmailAuthenticationtimestamp = 0; # but flag as "dirty" = unauthenticated
+
+                       if ($wgEmailAuthentication) {
+                               # mail a temporary password to the dirty address
+
+                               $error = $this->mailPasswordInternal( $u, true, $dummy );
+                               if ($error === '') {
+                                       return $this->mainLoginForm( wfMsg( 'passwordsentforemailauthentication', $u->getName() ) );
+                               } else {
+                                       return $this->mainLoginForm( wfMsg( 'mailerror', $error ) );
+                               }
+                               # if user returns, that new email address gets authenticated in checkpassword()
+                       }
+               }
+
                $wgUser = $u;
                $wgUser->setCookies();
 
-               $up = new UserUpdate();
-               array_push( $wgDeferredUpdateList, $up );
+               $wgUser->saveSettings();
 
                if( $this->hasSessionCookie() ) {
-                       return $this->successfulLogin( wfMsg( "welcomecreation", $wgUser->getName() ) );
+                       return $this->successfulLogin( wfMsg( 'welcomecreation', $wgUser->getName() ) );
                } else {
-                       return $this->cookieRedirectCheck( "new" );
+                       return $this->cookieRedirectCheck( 'new' );
                }
        }
 
-
        /**
         * @access private
         */
@@ -145,58 +193,81 @@ class LoginForm {
                global $wgUser, $wgOut;
                global $wgMaxNameChars;
                global $wgMemc, $wgAccountCreationThrottle, $wgDBname, $wgIP;
+               global $wgMinimalPasswordLength;
 
                if (!$wgUser->isAllowedToCreateAccount()) {
                        $this->userNotPrivilegedMessage();
-                       return;
+                       return false;
                }
 
                if ( 0 != strcmp( $this->mPassword, $this->mRetype ) ) {
-                       $this->mainLoginForm( wfMsg( "badretype" ) );
-                       return;
+                       $this->mainLoginForm( wfMsg( 'badretype' ) );
+                       return false;
                }
                
                $name = trim( $this->mName );
                $u = User::newFromName( $name );
-               if ( ( "" == $name ) ||
-                 preg_match( "/\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}/", $name ) ||
-                 (strpos( $name, "/" ) !== false) ||
+               if ( is_null( $u ) ||
+                 ( '' == $name ) ||
+                 $wgUser->isIP( $name ) ||
+                 (strpos( $name, '/' ) !== false) ||
                  (strlen( $name ) > $wgMaxNameChars) ||
                  ucFirst($name) != $u->getName() ) 
                {
-                       $this->mainLoginForm( wfMsg( "noname" ) );
-                       return;
+                       $this->mainLoginForm( wfMsg( 'noname' ) );
+                       return false;
                }
                if ( wfReadOnly() ) {
                        $wgOut->readOnlyPage();
-                       return;
+                       return false;
                }
                
                if ( 0 != $u->idForName() ) {
-                       $this->mainLoginForm( wfMsg( "userexists" ) );
-                       return;
+                       $this->mainLoginForm( wfMsg( 'userexists' ) );
+                       return false;
+               }
+
+               if ( strlen( $this->mPassword ) < $wgMinimalPasswordLength ) {
+                       $this->mainLoginForm( wfMsg( 'passwordtooshort', $wgMinimalPasswordLength ) );
+                       return false;
                }
 
                if ( $wgAccountCreationThrottle ) {
-                       $key = "$wgDBname:acctcreate:ip:$wgIP";
+                       $key = $wgDBname.':acctcreate:ip:'.$wgIP;
                        $value = $wgMemc->incr( $key );
                        if ( !$value ) {
                                $wgMemc->set( $key, 1, 86400 );
                        }
                        if ( $value > $wgAccountCreationThrottle ) {
                                $this->throttleHit( $wgAccountCreationThrottle );
-                               return;
+                               return false;
                        }
                }
 
+               return $this->initUser( $u );
+       }
+       
+       /**
+        * Actually add a user to the database.
+        * Give it a User object that has been initialised with a name.
+        *
+        * @param User $u
+        * @return User
+        * @access private
+        */
+       function &initUser( &$u ) {
                $u->addToDatabase();
                $u->setPassword( $this->mPassword );
                $u->setEmail( $this->mEmail );
                $u->setRealName( $this->mRealName );
+               $u->setToken();
+               
+               global $wgAuth;
+               $wgAuth->initUser( $u );
 
                if ( $this->mRemember ) { $r = 1; }
                else { $r = 0; }
-               $u->setOption( "rememberpassword", $r );
+               $u->setOption( 'rememberpassword', $r );
                
                return $u;
        }
@@ -205,23 +276,50 @@ class LoginForm {
         * @access private
         */
        function processLogin() {
-               global $wgUser;
-               global $wgDeferredUpdateList;
+               global $wgUser, $wgLang;
+               global $wgEmailAuthentication;
 
-               if ( "" == $this->mName ) {
-                       $this->mainLoginForm( wfMsg( "noname" ) );
+               if ( '' == $this->mName ) {
+                       $this->mainLoginForm( wfMsg( 'noname' ) );
                        return;
                }
                $u = User::newFromName( $this->mName );
-               $id = $u->idForName();
-               if ( 0 == $id ) {
-                       $this->mainLoginForm( wfMsg( "nosuchuser", $u->getName() ) );
+               if( is_null( $u ) ) {
+                       $this->mainLoginForm( wfMsg( 'noname' ) );
                        return;
                }
-               $u->setId( $id );
-               $u->loadFromDatabase();
+               if ( 0 == $u->getID() ) {
+                       global $wgAuth;
+                       /**
+                        * If the external authentication plugin allows it,
+                        * automatically create a new account for users that
+                        * are externally defined but have not yet logged in.
+                        */
+                       if ( $wgAuth->autoCreate() && $wgAuth->userExists( $u->getName() ) ) {
+                               if ( $wgAuth->authenticate( $u->getName(), $this->mPassword ) ) {
+                                       $u =& $this->initUser( $u );
+                               } else {
+                                       $this->mainLoginForm( wfMsg( 'wrongpassword' ) );
+                                       return;
+                               }
+                       } else {
+                               $this->mainLoginForm( wfMsg( 'nosuchuser', $u->getName() ) );
+                               return;
+                       }
+               } else {
+                       $u->loadFromDatabase();
+               }
+
+               # store temporarily the status before the password check is performed
+               $mailmsg = '';
+               $oldadr = strtolower($u->getEmail());
+               $newadr = strtolower($this->mEmail);
+               $alreadyauthenticated = (( $u->mEmailAuthenticationtimestamp != 0 ) || ($oldadr == '')) ;
+
+               # checkPassword sets EmailAuthenticationtimestamp, if the newPassword is used
+
                if (!$u->checkPassword( $this->mPassword )) {
-                       $this->mainLoginForm( wfMsg( "wrongpassword" ) );
+                       $this->mainLoginForm( wfMsg( 'wrongpassword' ) );
                        return;
                }
 
@@ -229,22 +327,61 @@ class LoginForm {
                #
                if ( $this->mRemember ) {
                        $r = 1;
-                       $u->setCookiePassword( $this->mPassword );
                } else {
                        $r = 0;
                }
-               $u->setOption( "rememberpassword", $r );
+               $u->setOption( 'rememberpassword', $r );
+
+               /* check if user with correct password has entered a new email address */
+               if (($newadr <> '') && ($newadr <> $oldadr)) { # the user supplied a new email address on the login page
+
+                       # prepare for authentication and mail a temporary password to newadr
+                       if ( !$u->isValidEmailAddr( $newadr ) ) {
+                               return $this->mainLoginForm( wfMsg( 'invalidemailaddress', $error ) );
+                       }
+                       $u->mEmail = $newadr; # new behaviour: store this new emailaddr from login-page now into user database record ...
+                       $u->mEmailAuthenticationtimestamp = 0; # ... but flag the address as "dirty" (unauthenticated)
+                       $alreadyauthenticated = false;
+
+                       if ($wgEmailAuthentication) {
+
+                               # mail a temporary one-time password to the dirty address and return here to complete the user login
+                               # if the user returns now or later using this temp. password, then the new email address $newadr
+                               # - which is already stored in his user record - gets authenticated in checkpassword()
+
+                               $error = $this->mailPasswordInternal( $u, false, $newpassword_temp);
+                               $u->mNewpassword = $newpassword_temp;
+
+                               #       The temporary password is mailed. The user is logged-in as he entered his correct password
+                               #       This appears to be more intuitive than alternative 2.
+
+                               if ($error === '') {
+                                       $mailmsg = '<br />' . wfMsg( 'passwordsentforemailauthentication', $u->getName() );
+                               } else {
+                                       $mailmsg = '<br />' . wfMsg( 'mailerror', $error ) ;
+                               }
+                       }
+               }
 
                $wgUser = $u;
                $wgUser->setCookies();
 
-               $up = new UserUpdate();
-               array_push( $wgDeferredUpdateList, $up );
+               # save all settings (incl. new email address and/or temporary password, if applicable)
+               $wgUser->saveSettings();
+               
+               if ( !$wgEmailAuthentication || $alreadyauthenticated ) {
+                       $authenticated = '';
+                       $mailmsg = '';
+               } elseif ($u->mEmailAuthenticationtimestamp != 0) {
+                               $authenticated = ' ' . wfMsg( 'emailauthenticated', $wgLang->timeanddate( $u->mEmailAuthenticationtimestamp, true ) );
+                       } else {
+                               $authenticated = ' ' . wfMsg( 'emailnotauthenticated' );
+                       }
 
                if( $this->hasSessionCookie() ) {
-                       return $this->successfulLogin( wfMsg( "loginsuccess", $wgUser->getName() ) );
+                       return $this->successfulLogin( wfMsg( 'loginsuccess', $wgUser->getName() ) . $authenticated .  $mailmsg );
                } else {
-                       return $this->cookieRedirectCheck( "login" );
+                       return $this->cookieRedirectCheck( 'login' );
                }
        }
 
@@ -255,81 +392,96 @@ class LoginForm {
                global $wgUser, $wgDeferredUpdateList, $wgOutputEncoding;
                global $wgCookiePath, $wgCookieDomain, $wgDBname;
 
-               if ( "" == $this->mName ) {
-                       $this->mainLoginForm( wfMsg( "noname" ) );
+               if ( '' == $this->mName ) {
+                       $this->mainLoginForm( wfMsg( 'noname' ) );
                        return;
                }
                $u = User::newFromName( $this->mName );
-               $id = $u->idForName();
-               if ( 0 == $id ) {
-                       $this->mainLoginForm( wfMsg( "nosuchuser", $u->getName() ) );
+               if( is_null( $u ) ) {
+                       $this->mainLoginForm( wfMsg( 'noname' ) );
                        return;
                }
-               $u->setId( $id );
+               if ( 0 == $u->getID() ) {
+                       $this->mainLoginForm( wfMsg( 'nosuchuser', $u->getName() ) );
+                       return;
+               }
+
                $u->loadFromDatabase();
 
-               $error = $this->mailPasswordInternal( $u );
-               if ($error === "") {
-                       $this->mainLoginForm( wfMsg( "passwordsent", $u->getName() ) );
+               $error = $this->mailPasswordInternal( $u, true, $dummy );
+               if ($error === '') {
+                       $this->mainLoginForm( wfMsg( 'passwordsent', $u->getName() ) );
                } else {
-                       $this->mainLoginForm( wfMsg( "mailerror", $error ) );
+                       $this->mainLoginForm( wfMsg( 'mailerror', $error ) );
                }
-
+               return;
        }
 
 
        /**
         * @access private
         */
-       function mailPasswordInternal( $u ) {
-               global $wgDeferredUpdateList, $wgOutputEncoding;
+       function mailPasswordInternal( $u, $savesettings = true, &$newpassword_out ) {
                global $wgPasswordSender, $wgDBname, $wgIP;
                global $wgCookiePath, $wgCookieDomain;
 
-               if ( "" == $u->getEmail() ) {
-                       $this->mainLoginForm( wfMsg( "noemail", $u->getName() ) );
-                       return;
+               if ( '' == $u->getEmail() ) {
+                       return wfMsg( 'noemail', $u->getName() );
                }
-               $np = User::randomPassword();
+
+               $np = $u->randomPassword();
                $u->setNewpassword( $np );
 
-               setcookie( "{$wgDBname}Password", "", time() - 3600, $wgCookiePath, $wgCookieDomain );
+               # we want to store this new password together with other values in the calling function
+               $newpassword_out = $u->mNewpassword;
+
+               # WHY IS THIS HERE ? SHOULDN'T IT BE User::setcookie ???
+               setcookie( "{$wgDBname}Token", '', time() - 3600, $wgCookiePath, $wgCookieDomain );
+
+               if ($savesettings) {
                $u->saveSettings();
+               }
 
                $ip = $wgIP;
-               if ( "" == $ip ) { $ip = "(Unknown)"; }
+               if ( '' == $ip ) { $ip = '(Unknown)'; }
 
-               $m = wfMsg( "passwordremindertext", $ip, $u->getName(), $np );
+               $m = wfMsg( 'passwordremindermailbody', $ip, $u->getName(), wfUrlencode($u->getName()), $np );
 
-               $error = userMailer( $u->getEmail(), $wgPasswordSender, wfMsg( "passwordremindertitle" ), $m );
-                 
-               return $error;
+               require_once('UserMailer.php');
+               $error = userMailer( $u->getEmail(), $wgPasswordSender, wfMsg( 'passwordremindermailsubject' ), $m );
+               
+               return htmlspecialchars( $error );
        }
 
 
        /**
+        * @param string $msg Message that will be shown on success.
         * @access private
         */
        function successfulLogin( $msg ) {
                global $wgUser;
-               global $wgDeferredUpdateList;
                global $wgOut;
 
-               $wgOut->setPageTitle( wfMsg( "loginsuccesstitle" ) );
-               $wgOut->setRobotpolicy( "noindex,nofollow" );
+               # Run any hooks; ignore results
+               
+               wfRunHooks('UserLoginComplete', array(&$wgUser));
+               
+               $wgOut->setPageTitle( wfMsg( 'loginsuccesstitle' ) );
+               $wgOut->setRobotpolicy( 'noindex,nofollow' );
                $wgOut->setArticleRelated( false );
                $wgOut->addWikiText( $msg );
                $wgOut->returnToMain();
        }
 
+       /** */
        function userNotPrivilegedMessage() {
-               global $wgOut, $wgUser, $wgLang;
+               global $wgOut;
                
-               $wgOut->setPageTitle( wfMsg( "whitelistacctitle" ) );
-               $wgOut->setRobotpolicy( "noindex,nofollow" );
+               $wgOut->setPageTitle( wfMsg( 'whitelistacctitle' ) );
+               $wgOut->setRobotpolicy( 'noindex,nofollow' );
                $wgOut->setArticleRelated( false );
 
-               $wgOut->addWikiText( wfMsg( "whitelistacctext" ) );
+               $wgOut->addWikiText( wfMsg( 'whitelistacctext' ) );
                
                $wgOut->returnToMain( false );
        }
@@ -339,135 +491,45 @@ class LoginForm {
         */
        function mainLoginForm( $err ) {
                global $wgUser, $wgOut, $wgLang;
-               global $wgDBname, $wgAllowRealName;
-
-               $le = wfMsg( "loginerror" );
-               $yn = wfMsg( "yourname" );
-               $yp = wfMsg( "yourpassword" );
-               $ypa = wfMsg( "yourpasswordagain" );
-               $rmp = wfMsg( "remembermypassword" );
-               $nuo = wfMsg( "newusersonly" );
-               $li = wfMsg( "login" );
-               $ca = wfMsg( "createaccount" );
-               $cam = wfMsg( "createaccountmail" );
-               $ye = wfMsg( "youremail" );
-               if ($wgAllowRealName) {
-                   $yrn = wfMsg( "yourrealname" );
-               } else {
-                   $yrn = '';
-               }
-               $efl = wfMsg( "emailforlost" );
-               $mmp = wfMsg( "mailmypassword" );
-               $endText = wfMsg( "loginend" );
-
-               if ( $endText = "&lt;loginend&gt;" ) {
-                       $endText = "";
-               }
+               global $wgDBname, $wgAllowRealName, $wgEnableEmail;
+               global $wgEmailAuthentication;
 
-               if ( "" == $this->mName ) {
-                       if ( 0 != $wgUser->getID() ) {
+               if ( '' == $this->mName ) {
+                       if ( $wgUser->isLoggedIn() ) {
                                $this->mName = $wgUser->getName();
                        } else {
-                               $this->mName = @$_COOKIE["{$wgDBname}UserName"];
+                               $this->mName = @$_COOKIE[$wgDBname.'UserName'];
                        }
                }
 
-               $wgOut->setPageTitle( wfMsg( "userlogin" ) );
-               $wgOut->setRobotpolicy( "noindex,nofollow" );
-               $wgOut->setArticleRelated( false );
-
-               if ( "" == $err ) {
-                       $lp = wfMsg( "loginprompt" );
-                       $wgOut->addHTML( "<h2>$li:</h2>\n<p>$lp</p>" );
-               } else {
-                       $wgOut->addHTML( "<h2>$le:</h2>\n<font size='+1' 
-       color='red'>$err</font>\n" );
-               }
-               if ( 1 == $wgUser->getOption( "rememberpassword" ) ) {
-                       $checked = " checked";
-               } else {
-                       $checked = "";
-               }
-               
-               $q = "action=submit";
+               $q = 'action=submitlogin';
                if ( !empty( $this->mReturnto ) ) {
-                       $q .= "&returnto=" . wfUrlencode( $this->mReturnto );
+                       $q .= '&returnto=' . wfUrlencode( $this->mReturnto );
                }
-               
-               $titleObj = Title::makeTitle( NS_SPECIAL, "Userlogin" );
-               $action = $titleObj->escapeLocalUrl( $q );
+               $titleObj = Title::makeTitle( NS_SPECIAL, 'Userlogin' );
 
-               $encName = htmlspecialchars( $this->mName );
-               $encPassword = htmlspecialchars( $this->mPassword );
-               $encRetype = htmlspecialchars( $this->mRetype );
-               $encEmail = htmlspecialchars( $this->mEmail );
-               $encRealName = htmlspecialchars( $this->mRealName );
-
-               if ($wgUser->getID() != 0) {
-                       $cambutton = "<input tabindex='6' type='submit' name=\"wpCreateaccountMail\" value=\"{$cam}\" />";
-               } else {
-                       $cambutton = "";
-               }
-
-               $wgOut->addHTML( "
-       <form name=\"userlogin\" id=\"userlogin\" method=\"post\" action=\"{$action}\">
-       <table border='0'><tr>
-       <td align='right'>$yn:</td>
-       <td align='left'>
-       <input tabindex='1' type='text' name=\"wpName\" value=\"{$encName}\" size='20' />
-       </td>
-       <td align='left'>
-       <input tabindex='3' type='submit' name=\"wpLoginattempt\" value=\"{$li}\" />
-       </td>
-       </tr>
-       <tr>
-       <td align='right'>$yp:</td>
-       <td align='left'>
-       <input tabindex='2' type='password' name=\"wpPassword\" value=\"{$encPassword}\" size='20' />
-       </td>
-       <td align='left'>
-       <input tabindex='7' type='checkbox' name=\"wpRemember\" value=\"1\" id=\"wpRemember\"$checked /><label for=\"wpRemember\">$rmp</label>
-       </td>
-       </tr>");
-
-               if ($wgUser->isAllowedToCreateAccount()) {
-                       $encRetype = htmlspecialchars( $this->mRetype );
-                       $encEmail = htmlspecialchars( $this->mEmail );
-       $wgOut->addHTML("<tr><td colspan='3'>&nbsp;</td></tr><tr>
-       <td align='right'>$ypa:</td>
-       <td align='left'>
-       <input tabindex='4' type='password' name=\"wpRetype\" value=\"{$encRetype}\" 
-       size='20' />
-       </td><td>$nuo</td></tr>
-       <tr>
-       <td align='right'>$ye:</td>
-       <td align='left'>
-       <input tabindex='6' type='text' name=\"wpEmail\" value=\"{$encEmail}\" size='20' />
-       </td>");
-                   
-       if ($wgAllowRealName) {
-           $wgOut->addHTML("<td>&nbsp;</td>
-                             </tr><tr>
-                            <td align='right'>$yrn:</td>
-                            <td align='left'>
-                             <input tabindex='6' type='text' name=\"wpRealName\" value=\"{$encRealName}\" size='20' />
-                             </td>");
-       }
-                   
-       $wgOut->addHTML("<td align='left'>
-       <input tabindex='7' type='submit' name=\"wpCreateaccount\" value=\"{$ca}\" />
-       $cambutton
-       </td></tr>");
-               }
-           
-               $wgOut->addHTML("
-       <tr><td colspan='3'>&nbsp;</td></tr><tr>
-       <td colspan='3' align='left'>
-       <p>$efl<br />
-       <input tabindex='8' type='submit' name=\"wpMailmypassword\" value=\"{$mmp}\" /></p>
-       </td></tr></table>
-       </form>\n" );
-               $wgOut->addHTML( $endText );
+               require_once( 'templates/Userlogin.php' );
+               $template =& new UserloginTemplate();
+               
+               $template->set( 'name', $this->mName );
+               $template->set( 'password', $this->mPassword );
+               $template->set( 'retype', $this->mRetype );
+               $template->set( 'email', $this->mEmail );
+               $template->set( 'realname', $this->mRealName );
+
+               $template->set( 'action', $titleObj->getLocalUrl( $q ) );
+               $template->set( 'error', $err );
+               $template->set( 'create', $wgUser->isAllowedToCreateAccount() );
+               $template->set( 'createemail', $wgEnableEmail && $wgUser->isLoggedIn() );
+               $template->set( 'userealname', $wgAllowRealName );
+               $template->set( 'useemail', $wgEnableEmail );
+               $template->set( 'useemailauthent', $wgEmailAuthentication );
+               $template->set( 'remember', $wgUser->getOption( 'rememberpassword' ) or $this->mRemember  );
+               
+               $wgOut->setPageTitle( wfMsg( 'userlogin' ) );
+               $wgOut->setRobotpolicy( 'noindex,nofollow' );
+               $wgOut->setArticleRelated( false );
+               $wgOut->addTemplate( $template );
        }
 
        /**
@@ -475,7 +537,7 @@ class LoginForm {
         */
        function hasSessionCookie() {
                global $wgDisableCookieCheck;
-               return ( $wgDisableCookieCheck ) ? true : ( "" != $_COOKIE[session_name()] );
+               return ( $wgDisableCookieCheck ) ? true : ( '' != $_COOKIE[session_name()] );
        }
          
        /**
@@ -484,8 +546,8 @@ class LoginForm {
        function cookieRedirectCheck( $type ) {
                global $wgOut, $wgLang;
 
-               $titleObj = Title::makeTitle( NS_SPECIAL, "Userlogin" );
-               $check = $titleObj->getFullURL( "wpCookieCheck=$type" );
+               $titleObj = Title::makeTitle( NS_SPECIAL, 'Userlogin' );
+               $check = $titleObj->getFullURL( 'wpCookieCheck='.$type );
 
                return $wgOut->redirect( $check );
        }
@@ -497,16 +559,16 @@ class LoginForm {
                global $wgUser;
 
                if ( !$this->hasSessionCookie() ) {
-                       if ( $type == "new" ) {
-                               return $this->mainLoginForm( wfMsg( "nocookiesnew" ) );
-                       } else if ( $type == "login" ) {
-                               return $this->mainLoginForm( wfMsg( "nocookieslogin" ) );
+                       if ( $type == 'new' ) {
+                               return $this->mainLoginForm( wfMsg( 'nocookiesnew' ) );
+                       } else if ( $type == 'login' ) {
+                               return $this->mainLoginForm( wfMsg( 'nocookieslogin' ) );
                        } else {
                                # shouldn't happen
-                               return $this->mainLoginForm( wfMsg( "error" ) );
+                               return $this->mainLoginForm( wfMsg( 'error' ) );
                        }
                } else {
-                       return $this->successfulLogin( wfMsg( "loginsuccess", $wgUser->getName() ) );
+                       return $this->successfulLogin( wfMsg( 'loginsuccess', $wgUser->getName() ) );
                }
        }