local code = util.trim(param.get("code"))

local member

if app.session.authority == "ldap" then
  if not config.ldap.member or config.ldap.member.registration ~= "manual" then
    return execute.view { module = "index", view = "403" }
  end
  member = ldap.create_member(app.session.authority_uid, true)
  
else
  if config.registration_disabled then
    return execute.view { module = "index", view = "403" }
  end
  member = Member:new_selector()
    :add_where{ "invite_code = ?", code }
    :add_where{ "activated ISNULL" }
    :add_where{ "NOT locked" }
    :optional_object_mode()
    :for_update()
    :exec()
end


if not member then
  slot.put_into("error", _"The code you've entered is invalid")
  request.redirect{
    mode   = "forward",
    module = "index",
    view   = "register", params = {
      redirect_module = param.get("redirect_module"),
      redirect_view = param.get("redirect_view"),
      redirect_id = param.get("redirect_id"),
      redirect_params = param.get("redirect_params")
    }
  }
  return false
end

local notify_email = param.get("notify_email")

if not util.is_profile_field_locked(member, "notify_email") and not member.notify_email and notify_email then
  if #notify_email < 5 then
    slot.put_into("error", _"Email address too short!")
    request.redirect{
      mode   = "redirect",
      module = "index",
      view   = "register",
      params = { 
        code = member.invite_code,
        skip = param.get("skip"),
        redirect_module = param.get("redirect_module"),
        redirect_view = param.get("redirect_view"),
        redirect_id = param.get("redirect_id"),
        redirect_params = param.get("redirect_params")
      }
    }
    return false
  end
end

if member and not util.is_profile_field_locked(member, "notify_email") and not member.notify_email and not notify_email then
  request.redirect{
    mode   = "redirect",
    module = "index",
    view   = "register",
    params = {
      code = member.invite_code, 
      skip = param.get("skip"),
      step = 1, 
      redirect_module = param.get("redirect_module"),
      redirect_view = param.get("redirect_view"),
      redirect_id = param.get("redirect_id"),
      redirect_params = param.get("redirect_params")
    }
  }
  return false
end


local name = util.trim(param.get("name"))

if not util.is_profile_field_locked(member, "name") and name then

  if #name < 3 then
    slot.put_into("error", _"This screen name is too short!")
    request.redirect{
      mode   = "redirect",
      module = "index",
      view   = "register",
      params = {
        code = member.invite_code,
        notify_email = notify_email,
        step = 1,
        skip = param.get("skip"),
        redirect_module = param.get("redirect_module"),
        redirect_view = param.get("redirect_view"),
        redirect_id = param.get("redirect_id"),
        redirect_params = param.get("redirect_params")
      }
    }
    return false
  end

  local check_member = Member:by_name(name)
  if check_member and check_member.id ~= member.id then
    slot.put_into("error", _"This name is already taken, please choose another one!")
    request.redirect{
      mode   = "redirect",
      module = "index",
      view   = "register",
      params = {
        code = member.invite_code,
        notify_email = notify_email,
        step = 1,
        skip = param.get("skip"),
        redirect_module = param.get("redirect_module"),
        redirect_view = param.get("redirect_view"),
        redirect_id = param.get("redirect_id"),
        redirect_params = param.get("redirect_params")
      }
    }
    return false
  end

  member.name = name

end

if notify_email and not util.is_profile_field_locked(member, "name") and not member.name then
  request.redirect{
    mode   = "redirect",
    module = "index",
    view   = "register",
    params = {
      code = member.invite_code,
      notify_email = notify_email,
      step = 1,
      skip = param.get("skip"),
      redirect_module = param.get("redirect_module"),
      redirect_view = param.get("redirect_view"),
      redirect_id = param.get("redirect_id"),
      redirect_params = param.get("redirect_params")
    }
  }
  return false
end

local login = util.trim(param.get("login"))

if not util.is_profile_field_locked(member, "login") and login then
  if #login < 3 then 
    slot.put_into("error", _"This login is too short!")
    request.redirect{
      mode   = "redirect",
      module = "index",
      view   = "register",
      params = { 
        code = member.invite_code,
        notify_email = notify_email,
        name = member.name,
        step = 1,
        skip = param.get("skip"),
        redirect_module = param.get("redirect_module"),
        redirect_view = param.get("redirect_view"),
        redirect_id = param.get("redirect_id"),
        redirect_params = param.get("redirect_params")
      }
    }
    return false
  end

  local check_member = Member:by_login(login)
  if check_member and check_member.id ~= member.id then 
    slot.put_into("error", _"This login is already taken, please choose another one!")
    request.redirect{
      mode   = "redirect",
      module = "index",
      view   = "register",
      params = { 
        code = member.invite_code,
        notify_email = notify_email,
        name = member.name,
        step = 1,
        skip = param.get("skip"),
        redirect_module = param.get("redirect_module"),
        redirect_view = param.get("redirect_view"),
        redirect_id = param.get("redirect_id"),
        redirect_params = param.get("redirect_params")
      }
    }
    return false
  end
  member.login = login
end

if member.name and not util.is_profile_field_locked(member, "login") and not member.login then
  request.redirect{
    mode   = "redirect",
    module = "index",
    view   = "register",
    params = { 
      code = member.invite_code,
      notify_email = notify_email,
      name = member.name,
      step = 1,
      skip = param.get("skip"),
      redirect_module = param.get("redirect_module"),
      redirect_view = param.get("redirect_view"),
      redirect_id = param.get("redirect_id"),
      redirect_params = param.get("redirect_params")
    }
  }
  return false
end

local step = param.get("step", atom.integer)

if step > 2 then

  for i, checkbox in ipairs(config.use_terms_checkboxes) do
    local member_useterms = MemberUseterms:new_selector()
      :add_where{ "member_id = ?", member.id }
      :add_where{ "contract_identifier = ?", checkbox.name }
      :exec()
    if #member_useterms == 0 then
      local accepted = param.get("use_terms_checkbox_" .. checkbox.name, atom.boolean)
      if not accepted then
        slot.put_into("error", checkbox.not_accepted_error)
        return false
      end
    end
  end  

  if member.authority ~= "ldap" then
  
    local password1 = param.get("password1")
    local password2 = param.get("password2")

    if login and not password1 then
      request.redirect{
        mode   = "redirect",
        module = "index",
        view   = "register",
        params = { 
          code = member.invite_code,
          notify_email = notify_email,
          name = member.name,
          login = member.login,
          skip = param.get("skip"),
          redirect_module = param.get("redirect_module"),
          redirect_view = param.get("redirect_view"),
          redirect_id = param.get("redirect_id"),
          redirect_params = param.get("redirect_params")
        }
      }
    --]]
      return false
    end

    if password1 ~= password2 then
      slot.put_into("error", _"Passwords don't match!")
      return false
    end

    if #password1 < 8 then
      slot.put_into("error", _"Passwords must consist of at least 8 characters!")
      return false
    end

    member:set_password(password1)

  end

  if not util.is_profile_field_locked(member, "login") then
    member.login = login
  end

  if not util.is_profile_field_locked(member, "name") then
    member.name = name
  end

  if not member.notify_email then
    local success = member:set_notify_email(notify_email)
    if not success then
      slot.put_into("error", _"Can't send confirmation email")
      return
    end
  end
  
  local now = db:query("SELECT now() AS now", "object").now

  for i, checkbox in ipairs(config.use_terms_checkboxes) do
    local accepted = param.get("use_terms_checkbox_" .. checkbox.name, atom.boolean)
    local member_useterms = MemberUseterms:new()
    member_useterms.member_id = member.id
    member_useterms.contract_identifier = checkbox.name
    member_useterms:save()
  end

  member.activated = 'now'
  member.active = true
  member.last_activity = 'now'
  member:save()
  
  if not member.profile then
    local profile = MemberProfile:new()
    profile.member_id = member.id
    profile.profile = json.object()
    profile:save()
  end
  
  slot.put_into("notice", _"Registration succeeded")
  
  app.session.member_id = member.id
  app.session:save()

  request.redirect{
    mode   = "redirect",
    module = param.get("redirect_module") or "index",
    view   = param.get("redirect_view") or "index",
    id     = param.get("redirect_id"),
    params = json.import(param.get("redirect_params") or "")
  }
end