Temporarily revert 14847; makes incompatible changes to message strings.
[lhc/web/wiklou.git] / includes / SpecialUserlogin.php
index 75ebb10..6a549e2 100644 (file)
 function wfSpecialUserlogin() {
        global $wgCommandLineMode;
        global $wgRequest;
-       if( !$wgCommandLineMode && !isset( $_COOKIE[ini_get('session.name')] )  ) {
+       if( !$wgCommandLineMode && !isset( $_COOKIE[session_name()] )  ) {
                User::SetupSession();
        }
-       
+
        $form = new LoginForm( $wgRequest );
        $form->execute();
 }
@@ -25,18 +25,24 @@ function wfSpecialUserlogin() {
  * @subpackage SpecialPage
  */
 class LoginForm {
-       var $mName, $mPassword, $mRetype, $mReturnto, $mCookieCheck, $mPosted;
+       var $mName, $mPassword, $mRetype, $mReturnTo, $mCookieCheck, $mPosted;
        var $mAction, $mCreateaccount, $mCreateaccountMail, $mMailmypassword;
-       var $mLoginattempt, $mRemember, $mEmail;
-       
+       var $mLoginattempt, $mRemember, $mEmail, $mDomain;
+
+       /**
+        * Constructor
+        * @param webrequest $request A webrequest object passed by reference
+        */
        function LoginForm( &$request ) {
                global $wgLang, $wgAllowRealName, $wgEnableEmail;
-               global $wgEmailAuthentication;
+               global $wgAuth;
 
+               $this->mType = $request->getText( 'type' );
                $this->mName = $request->getText( 'wpName' );
                $this->mPassword = $request->getText( 'wpPassword' );
                $this->mRetype = $request->getText( 'wpRetype' );
-               $this->mReturnto = $request->getVal( 'returnto' );
+               $this->mDomain = $request->getText( 'wpDomain' );
+               $this->mReturnTo = $request->getVal( 'returnto' );
                $this->mCookieCheck = $request->getVal( 'wpCookieCheck' );
                $this->mPosted = $request->wasPosted();
                $this->mCreateaccount = $request->getCheck( 'wpCreateaccount' );
@@ -47,7 +53,7 @@ class LoginForm {
                $this->mLoginattempt = $request->getCheck( 'wpLoginattempt' );
                $this->mAction = $request->getVal( 'action' );
                $this->mRemember = $request->getCheck( 'wpRemember' );
-               
+
                if( $wgEnableEmail ) {
                        $this->mEmail = $request->getText( 'wpEmail' );
                } else {
@@ -58,10 +64,15 @@ class LoginForm {
                } else {
                    $this->mRealName = '';
                }
-           
+
+               if( !$wgAuth->validDomain( $this->mDomain ) ) {
+                       $this->mDomain = 'invaliddomain';
+               }
+               $wgAuth->setDomain( $this->mDomain );
+
                # When switching accounts, it sucks to get automatically logged out
-               if( $this->mReturnto == $wgLang->specialPage( 'Userlogout' ) ) {
-                       $this->mReturnto = '';
+               if( $this->mReturnTo == $wgLang->specialPage( 'Userlogout' ) ) {
+                       $this->mReturnTo = '';
                }
        }
 
@@ -76,7 +87,7 @@ class LoginForm {
                                return $this->addNewAccountMailPassword();
                        } else if ( $this->mMailmypassword ) {
                                return $this->mailPassword();
-                       } else if ( ( 'submit' == $this->mAction ) || $this->mLoginattempt ) {
+                       } else if ( ( 'submitlogin' == $this->mAction ) || $this->mLoginattempt ) {
                                return $this->processLogin();
                        }
                }
@@ -84,12 +95,11 @@ class LoginForm {
        }
 
        /**
-        * @access private
+        * @private
         */
        function addNewAccountMailPassword() {
                global $wgOut;
-               global $wgEmailAuthentication;
-               
+
                if ('' == $this->mEmail) {
                        $this->mainLoginForm( wfMsg( 'noemail', htmlspecialchars( $this->mName ) ) );
                        return;
@@ -101,179 +111,202 @@ class LoginForm {
                        return;
                }
 
-               $newadr = strtolower($this->mEmail);
-
-               # prepare for authentication and mail a temporary password to newadr
-               if ( !$u->isValidEmailAddr( $newadr ) ) {
-                       return $this->mainLoginForm( wfMsg( 'invalidemailaddress', $error ) );
-               }
-               $u->mEmail = $newadr; # new behaviour: set this new emailaddr from login-page into user database record
-               $u->mEmailAuthenticationtimestamp = 0; # but flag as "dirty" = unauthenticated
+               $u->saveSettings();
+               $result = $this->mailPasswordInternal($u);
 
-               if ($wgEmailAuthentication) {
-                       $error = $this->mailPasswordInternal( $u, true, $dummy ); # mail a temporary password to the dirty address
-               }
+               wfRunHooks( 'AddNewAccount', array( $u ) );
 
                $wgOut->setPageTitle( wfMsg( 'accmailtitle' ) );
                $wgOut->setRobotpolicy( 'noindex,nofollow' );
                $wgOut->setArticleRelated( false );
-       
-               if ($wgEmailAuthentication) {
-                       if ($error === '') {
-                               return $this->mainLoginForm( wfMsg( 'passwordsentforemailauthentication', $u->getName() ) );
+
+               if( WikiError::isError( $result ) ) {
+                       $this->mainLoginForm( wfMsg( 'mailerror', $result->getMessage() ) );
                } else {
-                               return $this->mainLoginForm( wfMsg( 'mailerror', $error ) );
-               }
-                       # if user returns, that new email address gets authenticated in checkpassword()
+                       $wgOut->addWikiText( wfMsg( 'accmailtext', $u->getName(), $u->getEmail() ) );
+                       $wgOut->returnToMain( false );
                }
-#              if ( $error === '' ) {
-#                      $wgOut->addWikiText( wfMsg( 'accmailtext', $u->getName(), $u->getEmail() ) );
-#                      $wgOut->returnToMain( false );
-#              } else {
-#                      $this->mainLoginForm( wfMsg( 'mailerror', $error ) );
-#              }
                $u = 0;
        }
 
 
        /**
-        * @access private
+        * @private
         */
        function addNewAccount() {
-               global $wgUser, $wgOut;
-               global $wgEmailAuthentication;
-
+               global $wgUser, $wgEmailAuthentication;
+               
+               # Create the account and abort if there's a problem doing so
                $u = $this->addNewAccountInternal();
-
-               if ($u == NULL) {
+               if( $u == NULL )
                        return;
-               }
-
-               $newadr = strtolower($this->mEmail);
-               if ($newadr != '') {            # prepare for authentication and mail a temporary password to newadr
-                       if ( !$u->isValidEmailAddr( $newadr ) ) {
-                               return $this->mainLoginForm( wfMsg( 'invalidemailaddress', $error ) );
-                       }
-                       $u->mEmail = $newadr; # new behaviour: set this new emailaddr from login-page into user database record
-                       $u->mEmailAuthenticationtimestamp = 0; # but flag as "dirty" = unauthenticated
-
-                       if ($wgEmailAuthentication) {
-                               # mail a temporary password to the dirty address
-
-                               $error = $this->mailPasswordInternal( $u, true, $dummy );
-                               if ($error === '') {
-                                       return $this->mainLoginForm( wfMsg( 'passwordsentforemailauthentication', $u->getName() ) );
-                               } else {
-                                       return $this->mainLoginForm( wfMsg( 'mailerror', $error ) );
-                               }
-                               # if user returns, that new email address gets authenticated in checkpassword()
+                       
+               # Save user settings and send out an email authentication message if needed
+               $u->saveSettings();
+               if( $wgEmailAuthentication && User::isValidEmailAddr( $u->getEmail() ) )
+                       $u->sendConfirmationMail();
+                       
+               # If not logged in, assume the new account as the current one and set session cookies
+               # then show a "welcome" message or a "need cookies" message as needed
+               if( $wgUser->isAnon() ) {
+                       $wgUser = $u;
+                       $wgUser->setCookies();
+                       wfRunHooks( 'AddNewAccount', array( $wgUser ) );
+                       if( $this->hasSessionCookie() ) {
+                               return $this->successfulLogin( wfMsg( 'welcomecreation', $wgUser->getName() ), false );
+                       } else {
+                               return $this->cookieRedirectCheck( 'new' );
                        }
-               }
-
-               $wgUser = $u;
-               $wgUser->setCookies();
-
-               $wgUser->saveSettings();
-
-               if( $this->hasSessionCookie() ) {
-                       return $this->successfulLogin( wfMsg( 'welcomecreation', $wgUser->getName() ) );
                } else {
-                       return $this->cookieRedirectCheck( 'new' );
+                       # Confirm that the account was created
+                       global $wgOut;
+                       $skin = $wgUser->getSkin();
+                       $self = Title::makeTitle( NS_SPECIAL, 'Userlogin' );
+                       $wgOut->setPageTitle( wfMsgHtml( 'accountcreated' ) );
+                       $wgOut->setArticleRelated( false );
+                       $wgOut->setRobotPolicy( 'noindex,nofollow' );
+                       $wgOut->addHtml( wfMsgWikiHtml( 'accountcreatedtext', $u->getName() ) );
+                       $wgOut->returnToMain( $self->getPrefixedText() );
+                       wfRunHooks( 'AddNewAccount', array( $u ) );
+                       return true;
                }
        }
 
        /**
-        * @access private
+        * @private
         */
        function addNewAccountInternal() {
                global $wgUser, $wgOut;
-               global $wgMaxNameChars;
-               global $wgMemc, $wgAccountCreationThrottle, $wgDBname, $wgIP;
+               global $wgEnableSorbs, $wgProxyWhitelist;
+               global $wgMemc, $wgAccountCreationThrottle, $wgDBname;
+               global $wgAuth, $wgMinimalPasswordLength, $wgReservedUsernames;
+
+               // If the user passes an invalid domain, something is fishy
+               if( !$wgAuth->validDomain( $this->mDomain ) ) {
+                       $this->mainLoginForm( wfMsg( 'wrongpassword' ) );
+                       return false;
+               }
+
+               // If we are not allowing users to login locally, we should
+               // be checking to see if the user is actually able to
+               // authenticate to the authentication server before they
+               // create an account (otherwise, they can create a local account
+               // and login as any domain user). We only need to check this for
+               // domains that aren't local.
+               if( 'local' != $this->mDomain && '' != $this->mDomain ) {
+                       if( !$wgAuth->canCreateAccounts() && ( !$wgAuth->userExists( $this->mName ) || !$wgAuth->authenticate( $this->mName, $this->mPassword ) ) ) {
+                               $this->mainLoginForm( wfMsg( 'wrongpassword' ) );
+                               return false;
+                       }
+               }
+
+               if ( wfReadOnly() ) {
+                       $wgOut->readOnlyPage();
+                       return false;
+               }
 
                if (!$wgUser->isAllowedToCreateAccount()) {
                        $this->userNotPrivilegedMessage();
-                       return;
+                       return false;
                }
 
-               if ( 0 != strcmp( $this->mPassword, $this->mRetype ) ) {
-                       $this->mainLoginForm( wfMsg( 'badretype' ) );
+               $ip = wfGetIP();
+               if ( $wgEnableSorbs && !in_array( $ip, $wgProxyWhitelist ) &&
+                 $wgUser->inSorbsBlacklist( $ip ) )
+               {
+                       $this->mainLoginForm( wfMsg( 'sorbs_create_account_reason' ) . ' (' . htmlspecialchars( $ip ) . ')' );
                        return;
                }
-               
+
                $name = trim( $this->mName );
                $u = User::newFromName( $name );
-               if ( is_null( $u ) ||
-                 ( '' == $name ) ||
-                 $wgUser->isIP( $name ) ||
-                 (strpos( $name, "/" ) !== false) ||
-                 (strlen( $name ) > $wgMaxNameChars) ||
-                 ucFirst($name) != $u->getName() ) 
-               {
+               if ( is_null( $u ) || in_array( $u->getName(), $wgReservedUsernames ) ) {
                        $this->mainLoginForm( wfMsg( 'noname' ) );
-                       return;
-               }
-               if ( wfReadOnly() ) {
-                       $wgOut->readOnlyPage();
-                       return;
+                       return false;
                }
-               
+
                if ( 0 != $u->idForName() ) {
                        $this->mainLoginForm( wfMsg( 'userexists' ) );
-                       return;
+                       return false;
+               }
+
+               if ( 0 != strcmp( $this->mPassword, $this->mRetype ) ) {
+                       $this->mainLoginForm( wfMsg( 'badretype' ) );
+                       return false;
+               }
+
+               if ( !$wgUser->isValidPassword( $this->mPassword ) ) {
+                       $this->mainLoginForm( wfMsg( 'passwordtooshort', $wgMinimalPasswordLength ) );
+                       return false;
                }
 
                if ( $wgAccountCreationThrottle ) {
-                       $key = $wgDBname.':acctcreate:ip:'.$wgIP;
+                       $key = $wgDBname.':acctcreate:ip:'.$ip;
                        $value = $wgMemc->incr( $key );
                        if ( !$value ) {
                                $wgMemc->set( $key, 1, 86400 );
                        }
                        if ( $value > $wgAccountCreationThrottle ) {
                                $this->throttleHit( $wgAccountCreationThrottle );
-                               return;
+                               return false;
                        }
                }
 
+               $abortError = '';
+               if( !wfRunHooks( 'AbortNewAccount', array( $u, &$abortError ) ) ) {
+                       // Hook point to add extra creation throttles and blocks
+                       wfDebug( "LoginForm::addNewAccountInternal: a hook blocked creation\n" );
+                       $this->mainLoginForm( $abortError );
+                       return false;
+               }
+
+               if( !$wgAuth->addUser( $u, $this->mPassword ) ) {
+                       $this->mainLoginForm( wfMsg( 'externaldberror' ) );
+                       return false;
+               }
+
+               # Update user count
+               $ssUpdate = new SiteStatsUpdate( 0, 0, 0, 0, 1 );
+               $ssUpdate->doUpdate();
+
                return $this->initUser( $u );
        }
-       
+
        /**
         * Actually add a user to the database.
         * Give it a User object that has been initialised with a name.
         *
-        * @param User $u
-        * @return User
-        * @access private
+        * @param $u User object.
+        * @return User object.
+        * @private
         */
        function &initUser( &$u ) {
                $u->addToDatabase();
                $u->setPassword( $this->mPassword );
                $u->setEmail( $this->mEmail );
                $u->setRealName( $this->mRealName );
-               
+               $u->setToken();
+
                global $wgAuth;
                $wgAuth->initUser( $u );
 
-               if ( $this->mRemember ) { $r = 1; }
-               else { $r = 0; }
-               $u->setOption( 'rememberpassword', $r );
-               
+               $u->setOption( 'rememberpassword', $this->mRemember ? 1 : 0 );
+
                return $u;
        }
 
        /**
-        * @access private
+        * @private
         */
        function processLogin() {
-               global $wgUser, $wgLang;
-               global $wgEmailAuthentication;
+               global $wgUser, $wgAuth, $wgReservedUsernames;
 
                if ( '' == $this->mName ) {
                        $this->mainLoginForm( wfMsg( 'noname' ) );
                        return;
                }
                $u = User::newFromName( $this->mName );
-               if( is_null( $u ) ) {
+               if( is_null( $u ) || in_array( $u->getName(), $wgReservedUsernames ) ) {
                        $this->mainLoginForm( wfMsg( 'noname' ) );
                        return;
                }
@@ -284,10 +317,13 @@ class LoginForm {
                         * automatically create a new account for users that
                         * are externally defined but have not yet logged in.
                         */
-                       if( $wgAuth->autoCreate() &&
-                           $wgAuth->userExists( $u->getName() ) &&
-                           $wgAuth->authenticate( $u->getName(), $this->mPassword ) ) {
-                           $u =& $this->initUser( $u );
+                       if ( $wgAuth->autoCreate() && $wgAuth->userExists( $u->getName() ) ) {
+                               if ( $wgAuth->authenticate( $u->getName(), $this->mPassword ) ) {
+                                       $u =& $this->initUser( $u );
+                               } else {
+                                       $this->mainLoginForm( wfMsg( 'wrongpassword' ) );
+                                       return;
+                               }
                        } else {
                                $this->mainLoginForm( wfMsg( 'nosuchuser', $u->getName() ) );
                                return;
@@ -296,16 +332,8 @@ class LoginForm {
                        $u->loadFromDatabase();
                }
 
-               # store temporarily the status before the password check is performed
-               $mailmsg = '';
-               $oldadr = strtolower($u->getEmail());
-               $newadr = strtolower($this->mEmail);
-               $alreadyauthenticated = (( $u->mEmailAuthenticationtimestamp != 0 ) || ($oldadr == '')) ;
-
-               # checkPassword sets EmailAuthenticationtimestamp, if the newPassword is used
-
                if (!$u->checkPassword( $this->mPassword )) {
-                       $this->mainLoginForm( wfMsg( 'wrongpassword' ) );
+                       $this->mainLoginForm( wfMsg( $this->mPassword == '' ? 'wrongpasswordempty' : 'wrongpassword' ) );
                        return;
                }
 
@@ -318,66 +346,32 @@ class LoginForm {
                }
                $u->setOption( 'rememberpassword', $r );
 
-               /* check if user with correct password has entered a new email address */
-               if (($newadr <> '') && ($newadr <> $oldadr)) { # the user supplied a new email address on the login page
-
-                       # prepare for authentication and mail a temporary password to newadr
-                       if ( !$u->isValidEmailAddr( $newadr ) ) {
-                               return $this->mainLoginForm( wfMsg( 'invalidemailaddress', $error ) );
-                       }
-                       $u->mEmail = $newadr; # new behaviour: store this new emailaddr from login-page now into user database record ...
-                       $u->mEmailAuthenticationtimestamp = 0; # ... but flag the address as "dirty" (unauthenticated)
-                       $alreadyauthenticated = false;
-
-                       if ($wgEmailAuthentication) {
-
-                               # mail a temporary one-time password to the dirty address and return here to complete the user login
-                               # if the user returns now or later using this temp. password, then the new email address $newadr
-                               # - which is already stored in his user record - gets authenticated in checkpassword()
-
-                               $error = $this->mailPasswordInternal( $u, false, $newpassword_temp);
-                               $u->mNewpassword = $newpassword_temp;
-
-                               #       The temporary password is mailed. The user is logged-in as he entered his correct password
-                               #       This appears to be more intuitive than alternative 2.
-
-                               if ($error === '') {
-                                       $mailmsg = '<br>' . wfMsg( 'passwordsentforemailauthentication', $u->getName() );
-                               } else {
-                                       $mailmsg = '<br>' . wfMsg( 'mailerror', $error ) ;
-                               }
-                       }
-               }
+               $wgAuth->updateUser( $u );
 
                $wgUser = $u;
                $wgUser->setCookies();
 
-               # save all settings (incl. new email address and/or temporary password, if applicable)
                $wgUser->saveSettings();
-               
-               if ( !$wgEmailAuthentication || $alreadyauthenticated ) {
-                       $authenticated = '';
-                       $mailmsg = '';
-               } elseif ($u->mEmailAuthenticationtimestamp != 0) {
-                               $authenticated = ' ' . wfMsg( 'emailauthenticated', $wgLang->timeanddate( $u->mEmailAuthenticationtimestamp, true ) );
-                       } else {
-                               $authenticated = ' ' . wfMsg( 'emailnotauthenticated' );
-                       }
 
                if( $this->hasSessionCookie() ) {
-                       return $this->successfulLogin( wfMsg( 'loginsuccess', $wgUser->getName() ) . $authenticated .  $mailmsg );
+                       return $this->successfulLogin( wfMsg( 'loginsuccess', $wgUser->getName() ) );
                } else {
                        return $this->cookieRedirectCheck( 'login' );
                }
        }
 
        /**
-        * @access private
+        * @private
         */
        function mailPassword() {
-               global $wgUser, $wgDeferredUpdateList, $wgOutputEncoding;
-               global $wgCookiePath, $wgCookieDomain, $wgDBname;
-
+               global $wgUser, $wgOut;
+               
+               # Check against the rate limiter
+               if( $wgUser->pingLimiter( 'mailpassword' ) ) {
+                       $wgOut->rateLimited();
+                       return;
+               }
+       
                if ( '' == $this->mName ) {
                        $this->mainLoginForm( wfMsg( 'noname' ) );
                        return;
@@ -394,22 +388,22 @@ class LoginForm {
 
                $u->loadFromDatabase();
 
-               $error = $this->mailPasswordInternal( $u, true, $dummy );
-               if ($error === '') {
-                       $this->mainLoginForm( wfMsg( 'passwordsent', $u->getName() ) );
+               $result = $this->mailPasswordInternal( $u );
+               if( WikiError::isError( $result ) ) {
+                       $this->mainLoginForm( wfMsg( 'mailerror', $result->getMessage() ) );
                } else {
-                       $this->mainLoginForm( wfMsg( 'mailerror', $error ) );
+                       $this->mainLoginForm( wfMsg( 'passwordsent', $u->getName() ), 'success' );
                }
-               return;
        }
 
 
        /**
-        * @access private
+        * @return mixed true on success, WikiError on failure
+        * @private
         */
-       function mailPasswordInternal( $u, $savesettings = true, &$newpassword_out ) {
-               global $wgPasswordSender, $wgDBname, $wgIP;
-               global $wgCookiePath, $wgCookieDomain;
+       function mailPasswordInternal( $u ) {
+               global $wgCookiePath, $wgCookieDomain, $wgCookiePrefix, $wgCookieSecure;
+               global $wgServer, $wgScript;
 
                if ( '' == $u->getEmail() ) {
                        return wfMsg( 'noemail', $u->getName() );
@@ -418,117 +412,168 @@ class LoginForm {
                $np = $u->randomPassword();
                $u->setNewpassword( $np );
 
-               # we want to store this new password together with other values in the calling function
-               $newpassword_out = $u->mNewpassword;
+               setcookie( "{$wgCookiePrefix}Token", '', time() - 3600, $wgCookiePath, $wgCookieDomain, $wgCookieSecure );
 
-               # WHY IS THIS HERE ? SHOULDN'T IT BE User::setcookie ???
-               setcookie( "{$wgDBname}Token", '', time() - 3600, $wgCookiePath, $wgCookieDomain );
-
-               if ($savesettings) {
                $u->saveSettings();
-               }
 
-               $ip = $wgIP;
+               $ip = wfGetIP();
                if ( '' == $ip ) { $ip = '(Unknown)'; }
 
-               $m = wfMsg( 'passwordremindermailbody', $ip, $u->getName(), wfUrlencode($u->getName()), $np );
+               $m = wfMsg( 'passwordremindertext', $ip, $u->getName(), $np, $wgServer . $wgScript );
 
-               require_once('UserMailer.php');
-               $error = userMailer( $u->getEmail(), $wgPasswordSender, wfMsg( 'passwordremindermailsubject' ), $m );
-               
-               return htmlspecialchars( $error );
+               $result = $u->sendMail( wfMsg( 'passwordremindertitle' ), $m );
+               return $result;
        }
 
 
        /**
-        * @access private
+        * @param string $msg Message that will be shown on success
+        * @param bool $auto Toggle auto-redirect to main page; default true
+        * @private
         */
-       function successfulLogin( $msg ) {
+       function successfulLogin( $msg, $auto = true ) {
                global $wgUser;
                global $wgOut;
 
                # Run any hooks; ignore results
-               
-               wfRunHooks('UserLoginComplete', $wgUser);
-               
+
+               wfRunHooks('UserLoginComplete', array(&$wgUser));
+
                $wgOut->setPageTitle( wfMsg( 'loginsuccesstitle' ) );
                $wgOut->setRobotpolicy( 'noindex,nofollow' );
                $wgOut->setArticleRelated( false );
                $wgOut->addWikiText( $msg );
-               $wgOut->returnToMain();
+               if ( !empty( $this->mReturnTo ) ) {
+                       $wgOut->returnToMain( $auto, $this->mReturnTo );
+               } else {
+                       $wgOut->returnToMain( $auto );
+               }
        }
 
+       /** */
        function userNotPrivilegedMessage() {
-               global $wgOut, $wgUser, $wgLang;
-               
+               global $wgOut;
+
                $wgOut->setPageTitle( wfMsg( 'whitelistacctitle' ) );
                $wgOut->setRobotpolicy( 'noindex,nofollow' );
                $wgOut->setArticleRelated( false );
 
                $wgOut->addWikiText( wfMsg( 'whitelistacctext' ) );
-               
+
                $wgOut->returnToMain( false );
        }
 
        /**
-        * @access private
+        * @private
         */
-       function mainLoginForm( $err ) {
-               global $wgUser, $wgOut, $wgLang;
-               global $wgDBname, $wgAllowRealName, $wgEnableEmail;
-               global $wgEmailAuthentication;
+       function mainLoginForm( $msg, $msgtype = 'error' ) {
+               global $wgUser, $wgOut;
+               global $wgAllowRealName, $wgEnableEmail;
+               global $wgCookiePrefix;
+               global $wgAuth;
+
+               if ( $this->mType == 'signup' && !$wgUser->isAllowedToCreateAccount() ) {
+                       $this->userNotPrivilegedMessage();
+                       return;
+               }
 
                if ( '' == $this->mName ) {
-                       if ( 0 != $wgUser->getID() ) {
+                       if ( $wgUser->isLoggedIn() ) {
                                $this->mName = $wgUser->getName();
                        } else {
-                               $this->mName = @$_COOKIE[$wgDBname.'UserName'];
+                               $this->mName = @$_COOKIE[$wgCookiePrefix.'UserName'];
                        }
                }
 
-               $q = 'action=submit';
-               if ( !empty( $this->mReturnto ) ) {
-                       $q .= '&returnto=' . wfUrlencode( $this->mReturnto );
-               }
                $titleObj = Title::makeTitle( NS_SPECIAL, 'Userlogin' );
 
+               require_once( 'SkinTemplate.php' );
                require_once( 'templates/Userlogin.php' );
-               $template =& new UserloginTemplate();
+
+               if ( $this->mType == 'signup' ) {
+                       $template =& new UsercreateTemplate();
+                       $q = 'action=submitlogin&type=signup';
+                       $linkq = 'type=login';
+                       $linkmsg = 'gotaccount';
+               } else {
+                       $template =& new UserloginTemplate();
+                       $q = 'action=submitlogin&type=login';
+                       $linkq = 'type=signup';
+                       $linkmsg = 'nologin';
+               }
+
+               if ( !empty( $this->mReturnTo ) ) {
+                       $returnto = '&returnto=' . wfUrlencode( $this->mReturnTo );
+                       $q .= $returnto;
+                       $linkq .= $returnto;
+               }
+
+               $link = '<a href="' . htmlspecialchars ( $titleObj->getLocalUrl( $linkq ) ) . '">';
+               $link .= wfMsgHtml( $linkmsg . 'link' );
+               $link .= '</a>';
+
+               # Don't show a "create account" link if the user can't
+               if( $this->showCreateOrLoginLink( $wgUser ) )
+                       $template->set( 'link', wfMsgHtml( $linkmsg, $link ) );
+               else
+                       $template->set( 'link', '' );
                
+               $template->set( 'header', '' );
                $template->set( 'name', $this->mName );
                $template->set( 'password', $this->mPassword );
                $template->set( 'retype', $this->mRetype );
                $template->set( 'email', $this->mEmail );
                $template->set( 'realname', $this->mRealName );
+               $template->set( 'domain', $this->mDomain );
 
                $template->set( 'action', $titleObj->getLocalUrl( $q ) );
-               $template->set( 'error', $err );
-               $template->set( 'create', $wgUser->isAllowedToCreateAccount() );
-               $template->set( 'createemail', $wgEnableEmail && ($wgUser->getID() != 0) );
+               $template->set( 'message', $msg );
+               $template->set( 'messagetype', $msgtype );
+               $template->set( 'createemail', $wgEnableEmail && $wgUser->isLoggedIn() );
                $template->set( 'userealname', $wgAllowRealName );
                $template->set( 'useemail', $wgEnableEmail );
-               $template->set( 'useemailauthent', $wgEmailAuthentication );
-               $template->set( 'remember', $wgUser->getOption( 'rememberpassword' ) );
+               $template->set( 'remember', $wgUser->getOption( 'rememberpassword' ) or $this->mRemember  );
                
+               // Give authentication and captcha plugins a chance to modify the form
+               $wgAuth->modifyUITemplate( $template );
+               if ( $this->mType == 'signup' ) {
+                       wfRunHooks( 'UserCreateForm', array( &$template ) );
+               } else {
+                       wfRunHooks( 'UserLoginForm', array( &$template ) );
+               }
+
                $wgOut->setPageTitle( wfMsg( 'userlogin' ) );
                $wgOut->setRobotpolicy( 'noindex,nofollow' );
                $wgOut->setArticleRelated( false );
                $wgOut->addTemplate( $template );
        }
+       
+       /**
+        * @private
+        */
+       function showCreateOrLoginLink( &$user ) {
+               if( $this->mType == 'signup' ) {
+                       return( true );
+               } elseif( $user->isAllowedToCreateAccount() ) {
+                       return( true );
+               } else {
+                       return( false );
+               }
+       }
 
        /**
-        * @access private
+        * @private
         */
        function hasSessionCookie() {
                global $wgDisableCookieCheck;
-               return ( $wgDisableCookieCheck ) ? true : ( '' != $_COOKIE[session_name()] );
+               return ( $wgDisableCookieCheck ) ? true : ( isset( $_COOKIE[session_name()] ) );
        }
-         
+
        /**
-        * @access private
+        * @private
         */
        function cookieRedirectCheck( $type ) {
-               global $wgOut, $wgLang;
+               global $wgOut;
 
                $titleObj = Title::makeTitle( NS_SPECIAL, 'Userlogin' );
                $check = $titleObj->getFullURL( 'wpCookieCheck='.$type );
@@ -537,7 +582,7 @@ class LoginForm {
        }
 
        /**
-        * @access private
+        * @private
         */
        function onCookieRedirectCheck( $type ) {
                global $wgUser;
@@ -557,7 +602,7 @@ class LoginForm {
        }
 
        /**
-        * @access private
+        * @private
         */
        function throttleHit( $limit ) {
                global $wgOut;