valid() && isset($_REQUEST["signout"]))
$Conf->confirmMsg("You have been signed out. Thanks for using the system.");
$Me->invalidate();
unset($_SESSION["AskedYouToUpdateContactInfo"]);
unset($_SESSION["l"]);
unset($_SESSION["info"]);
unset($_SESSION["rev_tokens"]);
unset($_SESSION["rev_token_fail"]);
unset($_SESSION["comment_msgs"]);
foreach ($allowedSessionVars as $v)
unset($_SESSION[$v]);
if (isset($_REQUEST["signout"]))
unset($_SESSION["afterLogin"]);
}
function doFirstUser($msg) {
global $Conf, $Opt, $Me;
$msg .= "As the first user, you have been automatically signed in and assigned system administrator privilege.";
if (!isset($Opt["ldapLogin"]))
$msg .= " Your password is “" . htmlspecialchars($Me->password) . "”. All later users will have to sign in normally.";
$while = "while granting system administrator privilege";
$Conf->qe("insert into ChairAssistant (contactId) values (" . $Me->contactId . ")", $while);
if ($Conf->sversion >= 6)
$Conf->qe("update ContactInfo set roles=" . (Contact::ROLE_ADMIN) . " where contactId=" . $Me->contactId, $while);
$Conf->qe("delete from Settings where name='setupPhase'", "while leaving setup phase");
$Conf->log("Granted system administrator privilege to first user", $Me);
$Conf->confirmMsg($msg);
if (!function_exists("imagecreate"))
$Conf->warnMsg("Your PHP installation appears to lack GD support, which is required for drawing score graphs. You may want to fix this problem and restart Apache.");
return true;
}
function doCreateAccount() {
global $Conf, $Opt, $Me, $email_class;
if ($Me->valid() && $Me->visits > 0) {
$email_class = " error";
return $Conf->errorMsg("An account already exists for " . htmlspecialchars($_REQUEST["email"]) . ". To retrieve your password, select “I forgot my password, email it to me.”");
} else if (!validateEmail($_REQUEST["email"])) {
$email_class = " error";
return $Conf->errorMsg("“" . htmlspecialchars($_REQUEST["email"]) . "” is not a valid email address.");
} else if (!$Me->valid()) {
$result = $Me->initialize($_REQUEST["email"]);
if (!$result)
return $Conf->errorMsg($Conf->dbErrorText(true, "while adding your account"));
}
$Me->sendAccountInfo($Conf, true, true);
$Conf->log("Account created", $Me);
$msg = "Successfully created an account for " . htmlspecialchars($_REQUEST["email"]) . ". ";
// handle setup phase
if (defval($Conf->settings, "setupPhase", false))
return doFirstUser($msg);
if ($Conf->allowEmailTo($Me->email))
$msg .= "A password has been emailed to you. Return here when you receive it to complete the registration process. If you don't receive the email, check your spam folders and verify that you entered the correct address.";
else {
if ($Opt['sendEmail'])
$msg .= "The email address you provided seems invalid.";
else
$msg .= "The conference system is not set up to mail passwords at this time.";
$msg .= "Although an account was created for you, you need the site administrator's help to retrieve your password. The site administrator is " . htmlspecialchars($Opt["contactName"] . " <" . $Opt["contactEmail"] . ">") . ".";
}
if (isset($_REQUEST["password"]) && $_REQUEST["password"] != "")
$msg .= "Note that the password you supplied on the login screen was ignored.";
$Conf->confirmMsg($msg);
return null;
}
function doLDAPLogin() {
// check for bogus configurations
if (!function_exists("ldap_connect") || !function_exists("ldap_bind"))
return $Conf->errorMsg("Internal error: \$Opt[\"ldapLogin\"] is set, but this PHP installation doesn't support LDAP. Logins will fail until this error is fixed.");
// the body is elsewhere because we need LDAP constants, which might[?]
// cause errors absent LDAP support
require_once("Code/ldaplogin.inc");
return ldapLoginAction();
}
function doLogin() {
global $Conf, $Opt, $ConfSiteSuffix, $Me, $email_class, $password_class;
// In all cases, we need to look up the account information
// to determine if the user is registered
if (!isset($_REQUEST["email"])
|| ($_REQUEST["email"] = trim($_REQUEST["email"])) == "") {
$email_class = " error";
if (isset($Opt["ldapLogin"]))
return $Conf->errorMsg("Enter your LDAP username.");
else
return $Conf->errorMsg("Enter your email address.");
}
// Check for the cookie
if (!isset($_COOKIE["CRPTestCookie"]) && !isset($_REQUEST["cookie"])) {
// set a cookie to test that their browser supports cookies
setcookie("CRPTestCookie", true);
$url = "cookie=1";
foreach (array("email", "password", "action", "go", "afterLogin", "signin") as $a)
if (isset($_REQUEST[$a]))
$url .= "&$a=" . urlencode($_REQUEST[$a]);
$Conf->go("?" . $url);
} else if (!isset($_COOKIE["CRPTestCookie"]))
return $Conf->errorMsg("You appear to have disabled cookies in your browser, but this site needs to set cookies to function. Google has an informative article on how to enable them.");
// do LDAP login before validation, since we might create an account
if (isset($Opt["ldapLogin"])) {
$_REQUEST["action"] = "login";
if (!doLDAPLogin())
return false;
}
$Me->lookupByEmail($_REQUEST["email"]);
if ($_REQUEST["action"] == "new") {
if (!($reg = doCreateAccount()))
return $reg;
$_REQUEST["password"] = $Me->password;
}
if (!$Me->valid()) {
if (isset($Opt["ldapLogin"])) {
$result = $Me->initialize($_REQUEST["email"], true);
if (!$result)
return $Conf->errorMsg($Conf->dbErrorText(true, "while adding your account"));
if (defval($Conf->settings, "setupPhase", false))
return doFirstUser($msg);
} else {
$email_class = " error";
return $Conf->errorMsg("No account for " . htmlspecialchars($_REQUEST["email"]) . " exists. Did you enter the correct email address?");
}
}
if ($_REQUEST["action"] == "forgot") {
$worked = $Me->sendAccountInfo($Conf, false, true);
$Conf->log("Sent password", $Me);
if ($worked)
$Conf->confirmMsg("Your password has been emailed to " . $_REQUEST["email"] . ". When you receive that email, return here to sign in.");
return null;
}
if (!isset($_REQUEST["password"]) || $_REQUEST["password"] == "") {
$password_class = " error";
return $Conf->errorMsg("Enter your password. If you've forgotten it, enter your email address and use the “I forgot my password, email it to me” option.");
}
if ($Me->password != $_REQUEST["password"] && !isset($Opt["ldapLogin"])) {
$password_class = " error";
return $Conf->errorMsg("That password doesn't match. If you've forgotten your password, enter your email address and use the “I forgot my password, email it to me” option.");
}
$Conf->qe("update ContactInfo set visits=visits+1, lastLogin=" . time() . " where contactId=" . $Me->contactId, "while recording login statistics");
if (isset($_REQUEST["go"]))
$where = $_REQUEST["go"];
else if (isset($_SESSION["afterLogin"]))
$where = $_SESSION["afterLogin"];
else
$where = "index$ConfSiteSuffix";
setcookie("CRPTestCookie", false);
unset($_SESSION["afterLogin"]);
//if ($where == "index$ConfSiteSuffix")
// return true;
$Me->go($where);
exit;
}
if (isset($_REQUEST["email"]) && isset($_REQUEST["action"]) && isset($_REQUEST["signin"])) {
if (doLogin() !== true) {
// if we get here, login failed
$Me->invalidate();
}
}
// set a cookie to test that their browser supports cookies
if (!$Me->valid())
setcookie("CRPTestCookie", true);
// perhaps redirect through account
if ($Me->valid() && !isset($_SESSION["AskedYouToUpdateContactInfo"]))
$_SESSION["AskedYouToUpdateContactInfo"] = 0;
if ($Me->valid() && (($_SESSION["AskedYouToUpdateContactInfo"] < 2
&& (!$Me->lastName || !$Me->affiliation))
|| ($_SESSION["AskedYouToUpdateContactInfo"] < 3
&& ($Me->roles & Contact::ROLE_PC)
&& !$Me->collaborators))) {
$_SESSION["AskedYouToUpdateContactInfo"] = 1;
$Me->go("account$ConfSiteSuffix?redirect=1");
}
// check global system settings
if ($Me->privChair) {
if (preg_match("/^[1-4]\\./", phpversion()))
$Conf->warnMsg("HotCRP requires PHP version 5.2 or higher. You are running PHP version " . htmlspecialchars(phpversion()) . ".");
if (get_magic_quotes_gpc())
$Conf->errorMsg("The PHP magic_quotes_gpc feature is on, which is a bad idea. Check that your Web server is using HotCRP's .htaccess file. You may also want to disable magic_quotes_gpc in your php.ini configuration file.");
if (get_magic_quotes_runtime())
$Conf->errorMsg("The PHP magic_quotes_runtime feature is on, which is a bad idea. Check that your Web server is using HotCRP's .htaccess file. You may also want to disable magic_quotes_runtime in your php.ini configuration file.");
if ($Opt["globalSessionLifetime"] < $Opt["sessionLifetime"])
$Conf->warnMsg("The systemwide session.gc_maxlifetime setting, which is " . htmlspecialchars($Opt["globalSessionLifetime"]) . " seconds, is less than HotCRP's preferred session expiration time, which is " . $Opt["sessionLifetime"] . " seconds. You should update session.gc_maxlifetime in the php.ini file or users will likely be booted off the system earlier than you expect.");
$result = $Conf->qx("show variables like 'max_allowed_packet'");
$max_file_size = ini_get_bytes("upload_max_filesize");
if (($row = edb_row($result)) && $row[1] < $max_file_size)
$Conf->warnMsg("MySQL's max_allowed_packet setting, which is " . htmlspecialchars($row[1]) . " bytes, is less than the PHP upload file limit, which is $max_file_size bytes. You should update max_allowed_packet in the system-wide my.cnf file or the system may not be able to handle large papers.");
}
// review tokens
if (isset($_REQUEST["token"]) && $Me->valid() && $Conf->sversion >= 13) {
$oldtokens = isset($_SESSION["rev_tokens"]);
unset($_SESSION["rev_tokens"]);
$tokeninfo = array();
foreach (preg_split('/\s+/', $_REQUEST["token"]) as $x)
if ($x == "")
/* no complaints */;
else if (!($token = decodeToken($x)))
$Conf->errorMsg("Invalid review token “" . htmlspecialchars($token) . ".” Check your typing and try again.");
else if (defval($_SESSION, "rev_token_fail", 0) >= 5)
$Conf->errorMsg("Too many failed attempts to use a review token. Sign out and in to try again.");
else {
$result = $Conf->qe("select paperId from PaperReview where reviewToken=$token", "while searching for review token");
if (($row = edb_row($result))) {
$tokeninfo[] = "Review token “" . htmlspecialchars($x) . "” lets you review paper #" . $row[0] . ".";
if (!isset($_SESSION["rev_tokens"]) || array_search($token, $_SESSION["rev_tokens"]) === false)
$_SESSION["rev_tokens"][] = $token;
$Me->isReviewer = true;
} else {
$Conf->errorMsg("Review token “" . htmlspecialchars($x) . "” hasn't been assigned.");
$_SESSION["rev_token_fail"] = defval($_SESSION, "rev_token_fail", 0) + 1;
}
}
if (count($tokeninfo))
$Conf->infoMsg(join("
\n", $tokeninfo));
else if ($oldtokens)
$Conf->infoMsg("Review tokens cleared.");
}
if (isset($_REQUEST["cleartokens"]) && $Me->valid())
unset($_SESSION["rev_tokens"]);
$Conf->header($Me->valid() ? "Home" : "Sign in", "home", actionBar());
$xsep = " | ";
// Sidebar
echo "";
// Conference management
if ($Me->privChair) {
echo "
\n";
}
// Conference info sidebar
echo "
Conference information
\n";
// Any deadlines set?
$sep = "";
if ($Conf->setting('sub_reg') || $Conf->setting('sub_update') || $Conf->setting('sub_sub')
|| ($Me->isAuthor && $Conf->setting('resp_open') > 0 && $Conf->setting('resp_done'))
|| ($Me->isPC && $Conf->setting('rev_open') && $Conf->setting('pcrev_hard'))
|| ($Me->amReviewer() && $Conf->setting('rev_open') && $Conf->setting('extrev_hard'))) {
echo " - Deadlines
\n";
}
echo " - Program committee
\n";
if (isset($Opt['conferenceSite']) && $Opt['conferenceSite'] != $Opt['paperSite'])
echo " - Conference site
\n";
if ($Conf->timeAuthorViewDecision()) {
$result = $Conf->qe("select outcome, count(paperId) from Paper where timeSubmitted>0 group by outcome", "while loading acceptance statistics");
$n = $nyes = 0;
while (($row = edb_row($result))) {
$n += $row[1];
if ($row[0] > 0)
$nyes += $row[1];
}
echo " - ", plural($nyes, "paper"), " were accepted out of ", $n, " submitted.
\n";
}
echo "
\n
\n";
// Profile
if ($Me->valid()) {
echo "
\n ";
if (($nh = contactNameHtml($Me)))
echo "Welcome, ", $nh, ".";
else
echo "Welcome.";
echo "
\n";
}
echo "
Welcome to the ", htmlspecialchars($confname), " submissions site.
Sign in to submit or review papers.";
if (isset($Opt["conferenceSite"]))
echo " For general information about ", htmlspecialchars($Opt["shortName"]), ", see the
conference site.";
$passwordFocus = ($email_class == "" && $password_class != "");
echo "
\n";
$Conf->footerScript("crpfocus(\"login\", null, 2)");
}
// Submissions
$papersub = $Conf->setting("papersub");
$homelist = ($Me->privChair || ($Me->isPC && $papersub) || ($Me->amReviewer() && $papersub));
if ($homelist) {
echo "
\n";
}
// Review token printing
function reviewTokenGroup($close_hr) {
global $reviewTokenGroupPrinted, $ConfSiteSuffix;
if ($reviewTokenGroupPrinted)
return;
echo "\n";
$tokens = array();
foreach (defval($_SESSION, "rev_tokens", array()) as $tt)
$tokens[] = encodeToken($tt);
echo "
Review tokens:
",
"
\n";
if ($close_hr)
echo "
";
echo "
\n";
// Overview
echo "
Reviews:
";
$result = $Conf->qe("select PaperReview.contactId, count(reviewSubmitted), count(if(reviewNeedsSubmit=0,reviewSubmitted,1)), group_concat(overAllMerit), PCMember.contactId as pc from PaperReview join Paper using (paperId) left join PCMember on (PaperReview.contactId=PCMember.contactId) where Paper.timeSubmitted>0 group by PaperReview.contactId", "while fetching review status");
$rf = reviewForm();
$maxOverAllMerit = $rf->maxNumericScore("overAllMerit");
$npc = $npcScore = $sumpcScore = $sumpcSubmit = 0;
$myrow = null;
while (($row = edb_row($result))) {
$row[3] = scoreCounts($row[3], $maxOverAllMerit);
if ($row[0] == $Me->contactId)
$myrow = $row;
if ($row[4]) {
$npc++;
$sumpcSubmit += $row[1];
}
if ($row[4] && $row[1]) {
$npcScore++;
$sumpcScore += $row[3]->avg;
}
}
if ($myrow) {
if ($myrow[2] == 1 && $myrow[1] <= 1)
echo "You ", ($myrow[1] == 1 ? "have" : "have not"), " submitted your
review";
else
echo "You have submitted ", $myrow[1], " of
", plural($myrow[2], "review"), "";
if (in_array("overAllMerit", $rf->fieldOrder) && $myrow[1])
echo " with an average ", htmlspecialchars($rf->shortName["overAllMerit"]), " score of ", unparseScoreAverage($myrow[3]->avg, $rf->reviewFields["overAllMerit"]);
echo ".
\n";
}
if (($Me->isPC || $Me->privChair) && $npc) {
echo sprintf(" The average PC member has submitted %.1f reviews", $sumpcSubmit / $npc);
if (in_array("overAllMerit", $rf->fieldOrder) && $npcScore)
echo " with an average ", htmlspecialchars($rf->shortName["overAllMerit"]), " score of ", unparseScoreAverage($sumpcScore / $npcScore, $rf->reviewFields["overAllMerit"]);
echo ".";
if ($Me->isPC || $Me->privChair)
echo "
(Details)";
echo "
\n";
}
if ($myrow && $myrow[1] < $myrow[2]) {
$rtyp = ($Me->isPC ? "pcrev_" : "extrev_");
if ($Conf->timeReviewPaper($Me->isPC, true, false)) {
$d = $Conf->printableTimeSetting("${rtyp}soft");
if ($d == "N/A")
$d = $Conf->printableTimeSetting("${rtyp}hard");
if ($d != "N/A")
echo "
Please submit your ", ($myrow[2] == 1 ? "review" : "reviews"), " by $d.\n";
} else if ($Conf->timeReviewPaper($Me->isPC, true, true))
echo "
Reviews are overdue. They were requested by " . $Conf->printableTimeSetting("${rtyp}soft") . ".\n";
else if (!$Conf->timeReviewPaper($Me->isPC, true, true, true))
echo "
The deadline for submitting " . ($Me->isPC ? "PC" : "external") . " reviews has passed.\n";
else
echo "
The site is not open for reviewing.\n";
} else if ($Me->isPC && $Conf->timeReviewPaper(true, false, true)) {
$d = $Conf->printableTimeSetting("pcrev_soft");
if ($d != "N/A")
echo "
The review deadline is $d.\n";
}
if ($Me->isPC && $Conf->timeReviewPaper(true, false, true))
echo "
As a PC member, you may review any submitted paper.\n";
else if ($Me->privChair)
echo "
As an administrator, you may review any submitted paper.\n";
if (($myrow || $Me->privChair) && $npc)
echo "
";
// Actions
$sep = "";
if ($myrow) {
echo $sep, foldbutton("re", "review list"), "
Your Reviews";
$sep = $xsep;
}
if ($Me->isPC && $Conf->setting("paperlead") > 0
&& $Me->amDiscussionLead(0)) {
echo $sep, "
Your discussion leads";
$sep = $xsep;
}
if ($Me->isPC && $Conf->timePCReviewPreferences()) {
echo $sep, "
Preferences";
$sep = $xsep;
}
if ($Conf->settingsAfter("rev_open") || $Me->privChair) {
echo $sep, "
Offline reviewing";
$sep = $xsep;
}
if ($Me->isRequester) {
echo $sep, "
Monitor external reviews";
$sep = $xsep;
}
if ($myrow && $Conf->sversion >= 12
&& $Conf->setting("rev_ratings") != REV_RATINGS_NONE) {
$badratings = PaperSearch::unusableRatings($Me->privChair, $Me->contactId);
$qx = (count($badratings) ? " and not (PaperReview.reviewId in (" . join(",", $badratings) . "))" : "");
/*$result = $Conf->qe("select rating, count(distinct PaperReview.reviewId) from PaperReview join ReviewRating on (PaperReview.contactId=$Me->contactId and PaperReview.reviewId=ReviewRating.reviewId$qx) group by rating order by rating desc", "while checking ratings");
if (edb_nrows($result)) {
$a = array();
while (($row = edb_row($result)))
if (isset($ratingTypes[$row[0]]))
$a[] = "
$row[1] of your reviews as " . htmlspecialchars($ratingTypes[$row[0]]);
if (count($a) > 0) {
echo "
\nOther reviewers ",
"
rated ",
textArrayJoin($a);
if (count($a) > 1)
echo " (these sets might overlap)";
echo ".
\n";
}
}*/
$result = $Conf->qe("select rating, count(PaperReview.reviewId) from PaperReview join ReviewRating on (PaperReview.contactId=$Me->contactId and PaperReview.reviewId=ReviewRating.reviewId$qx) group by rating order by rating desc", "while checking ratings");
if (edb_nrows($result)) {
$a = array();
while (($row = edb_row($result)))
if (isset($ratingTypes[$row[0]]))
$a[] = "
$row[1] “" . htmlspecialchars($ratingTypes[$row[0]]) . "” " . pluralx($row[1], "rating") . "";
if (count($a) > 0) {
echo "
\nYour reviews have received ",
textArrayJoin($a);
if (count($a) > 1)
echo " (these sets might overlap)";
echo ".
?\n";
}
}
}
if ($Me->isReviewer) {
$plist = new PaperList(false, true, new PaperSearch($Me, array("t" => "r")));
$ptext = $plist->text("reviewerHome", $Me);
if ($plist->count > 0)
echo "
";
}
if ($Conf->setting("rev_tokens"))
reviewTokenGroup(false);
if ($Me->amReviewer()) {
require_once("Code/commentview.inc");
$offset = 0;
$t0 = 0;
$entries = array();
$ncmt = 0;
$limit = 30;
while (count($entries) < $limit) {
$crows = $Conf->commentRows(CommentView::commentFlowQuery($Me, $t0, $limit, $offset));
if (count($crows) == 0)
break;
foreach ($crows as $cr)
if ($Me->canViewComment($cr, $cr, $whyNot, true)) {
$entries[] = CommentView::commentFlowEntry($Me, $cr, "k" . (count($entries) % 2) . (count($entries) >= 10 ? " fx21" : ""));
if (count($entries) == $limit)
break;
}
$offset += $limit;
}
if (count($entries)) {
$fold20 = defval($_SESSION, "foldhomeactivity", 1) ? "fold20c" : "fold20o";
echo "
",
foldbutton("homeactivity", "recent activity", 20),
"
";
if (count($entries) > 10)
echo "
More »« Fewer";
echo foldsessionpixel("homeactivity20", "foldhomeactivity"),
"
";
}
}
echo "
";
// Overview
if ($Me->isAuthor)
echo "
Your Submissions:
";
else
echo "
Submissions:
";
$startable = $Conf->timeStartPaper();
if ($startable && !$Me->valid())
echo "
", $Conf->printableDeadlineSetting('sub_reg'), "\n
You must sign in to register papers.";
else if ($startable || $Me->privChair) {
echo "
Start new paper (", $Conf->printableDeadlineSetting('sub_reg'), ")";
if ($Me->privChair)
echo "
\n
As an administrator, you can start a paper regardless of deadlines and on behalf of others.";
}
$plist = null;
if ($Me->isAuthor) {
$plist = new PaperList(false, true, new PaperSearch($Me, array("t" => "a")));
$plist->showHeader = 0;
$ptext = $plist->text("authorHome", $Me);
if ($plist->count > 0)
echo "
\n", $ptext;
}
$deadlines = array();
if ($plist && $plist->needFinalize > 0) {
if (!$Conf->timeFinalizePaper()) {
// Be careful not to refer to a future deadline; perhaps an admin
// just turned off submissions.
if ($Conf->settingsBetween("", "sub_sub", "sub_grace"))
$deadlines[] = "The site is not open for submissions at the moment.";
else
$deadlines[] = "The
deadline for submitting papers has passed.";
} else if (!$Conf->timeUpdatePaper()) {
$deadlines[] = "The
deadline for updating papers has passed, but you can still submit.";
$time = $Conf->printableTimeSetting('sub_sub');
if ($time != 'N/A')
$deadlines[] = "You have until $time to submit papers.";
} else if (($time = $Conf->printableTimeSetting('sub_update')) != 'N/A')
$deadlines[] = "You have until $time to submit papers.";
}
if (!$startable && !count($deadlines)) {
if ($Conf->settingsAfter('sub_open'))
$deadlines[] = "The
deadline for registering new papers has passed.";
else
$deadlines[] = "The site is not open for submissions at the moment.";
}
if ($plist && $Conf->timeSubmitFinalPaper() && $plist->accepted > 0) {
$time = $Conf->printableTimeSetting("final_soft");
if ($Conf->settingsAfter("final_soft") && $plist->needFinalCopy > 0)
$deadlines[] = "
Final copies are overdue. They were requested by $time.";
else if ($time != "N/A")
$deadlines[] = "Submit final copies of your accepted papers by $time.";
}
if (count($deadlines) > 0) {
if ($plist && $plist->count > 0)
echo "
";
else if ($startable || $Me->privChair)
echo "
";
echo "
",
join("\n
", $deadlines),
"";
}
echo "