Registro de usuarios en WordPress sin plugin mediante formulario: código mejorado

Hace tiempo publicábamos cómo crear un formulario de registro de usuarios en WordPress, para permitir que nuevos usuarios se den de alta en nuestra web sin necesidad de pasar por el gestor. Publicamos ahora el código mejorado, más organizado y con alguna funcionalidad extra: se incluye el código para notificar por correo al administrador de la página el registro del nuevo usuario, y el envío también por correo de los datos de inicio de sesión al usuario. También se incluye la manera de rellenar campos personalizados del perfil, que hemos tenido que crear previamente.

El nuevo método es el mismo que utilizamos para permitir que un usuario inicie sesión y la abandone mediante un formulario:

• Alojar en un archivo el formulario de registro, por ejemplo en user-forms.php
• Insertar en otro archivo las acción para registrarse, por ejemplo, en user.php. Este paso no es extrictamente necesario, pero hace que tengamos todo el código relativo a gestión de usuarios controlado en el mismo archivo, cuestión de orden. De esta manera podemos tener las acciones de registro, inicio y abandono de sesión en un mismo archivo, que podemos llamar cuando lo necesitemos.
• Llamar al archivo user.php desde el archivo header.php para que así las acciones se ejecuten antes de cargar las cabeceras de la página y podamos redirigir convenientemente a la URL que queramos, y llamar al archivo user-forms.php desde el lugar en el que deseemos que aparezcan los formularios.

Formulario, user-forms.php

// la URL que contendrá la acción es la propia página que contiene el formulario
$action_slug = $wp_query->query_vars['name'];
// preparing errors if sign up form has been submited
if ( isset($_POST['signup-submit']) ) {
        // if username is empty
        if ( $_POST['signup-username'] == '' || $_POST['signup-username'] == ' ' ) {
                $name_val = '';
                $name_msg = "<span class="error"><strong>You must choose a username: with an empty field you are out of the game.</strong></span>";
                $form_username_class = " error";
        } elseif ( isset($user_exist) ) {
        // if username already exist
                $name_val = $_POST['signup-username'];
                $name_msg = "<span class="error"><strong>The username you have chosen already exists.</strong> Try something different.</span>";
                $form_username_class = " error";
        } else {
        // if username is ok
                $name_val = $_POST['signup-username'];
                $name_msg = "";
                $form_username_class = "";
        }

        if ( $_POST['signup-pass'] != $_POST['signup-pass2'] ) {
        // if the pass confirmation is not correct
                $pass_val = "";
                $pass_msg = "<span class="error"><strong>There is any error in the password you have chosen. Try to type it again carefully.</strong></span>
";
                $form_pass_class = " error";
       } else {
                $pass_val = "";
                $pass_msg = "";
                $form_pass_class = "";
        }

        if ( $_POST['signup-mail'] == '' ) {
        // if mail field is empty
                $mail_val = "";
                $mail_msg = "<span class="error"><strong>The mail address is a mandatory field. You will receive all your login data in this address.</strong></span>
";
                $form_mail_class = " error";
        } elseif ( isset($mail_exist) ) {
        // if mail is already asociated to other user
                $mail_val = $_POST['signup-mail'];
                $mail_msg = "<span class="error"><strong>The mail address you have chosen is already associated to other user account.</strong> Try another different.</span>
";
                $form_mail_class = " error";
        } else {
                $mail_val = $_POST['signup-mail'];
                $mail_msg = "";
                $form_mail_class = "";
        }

        if ( $_POST['signup-human'] != '13' ) {
        // is the user a robot?
                $human_val = $_POST['signup-human'];
                $human_msg = "<span class="error"><strong>Are you sure you are not a robot?</strong> We don't.</span>
";
                $form_human_class = " error";
        } else {
                $human_val = $_POST['signup-human'];
                $human_msg = "";
                $form_human_class = "";
        }
        if ( $_POST['signup-conditions'] != 'accept' ) {
        // if legal conditions have not been accepted
                $conditions_val = "accept";
                $conditions_msg = "<span class="error"><strong>You must read and accept the Legal and Privacy Advise to sign up.</strong></span>
";
                $form_conditions_class = " error";
        } else {
                $conditions_val = "accept";
                $conditions_msg = "";
                $form_conditions_class = "";
        }
        // catching all $_POST data
        $first_val = $_POST['signup-firstname'];
        $last_val = $_POST['signup-lastname'];
        $bio_val = $_POST['signup-bio'];
        $twitter_val = $_POST['signup-twitter'];
        $web_val = $_POST['signup-website'];
        $feed_val = $_POST['signup-feed'];
        $institution_val = $_POST['signup-institution'];

} else {
// if no errors, nothing
}

$signup_form = '
<form id="signup" action="' .$action_slug. '" method="post" name="signup">
<fieldset class="required' .$form_username_class. '"><span class="req">*</span>
 <input id="signup-username" type="text" name="signup-username" value="' .$name_val. '" />
 <label>Username</label>
<div class="mini-faq">" .$name_msg. "</div></fieldset>
<fieldset><input id="signup-pass" type="password" name="signup-pass" value="" />
 <label>Password</label>
<div class="mini-faq"><strong>Choose a strong password</strong>, a good recipe could be a combination of characters and numbers with any capital letters. To make other people difficult to access to your account is always a good idea.</div></fieldset>
<fieldset class="required' .$form_pass_class. '"><input id="signup-pass2" type="password" name="signup-pass2" value="" />
 <label>Password confirmation</label>
<div class="mini-faq">" .$pass_msg. "If you leave the password boxes empty, a random password will be sent to your email address.</div></fieldset>
<fieldset class="required' .$form_mail_class. '"><span class="req">*</span>
 <input id="signup-mail" type="text" name="signup-mail" value="&quot; .$mail_val. &quot;" />
 <label>E-mail</label>
<div class="mini-faq">' .$mail_msg. '<strong>Spam is evil and you\'ll never see any from us</strong>. <strong>This address will not be shown in the web, of course!</strong></div></fieldset>
<fieldset><input id="signup-firstname" type="text" name="signup-firstname" value="' .$first_val. '" />
 <label>First name</label>
<div class="mini-faq"><strong>All this information about (first and last names, description, institution...) you will appear next to your projects</strong> or other content you submit. You can complete it in any moment after sign up.</div></fieldset>
<fieldset><input id="signup-lastname" type="text" name="signup-lastname" value="' .$last_val. '" />
 <label>Last name</label></fieldset>
<fieldset><textarea id="signup-bio" name="signup-bio" rows="10" cols="45">' .$bio_val. '</textarea>
 <label>Briefly about you</label></fieldset>
<fieldset><input id="signup-institution" type="text" name="signup-institution" value="' .$institution_val. '" />
 <label>Institution</label>
<div class="mini-faq">Do you belong to any academic institution or other kind of organization?</div></fieldset>
<fieldset><input id="signup-twitter" type="text" name="signup-twitter" value="' .$twitter_val. '" />
 <label>Twitter account</label>
<div class="mini-faq"><strong>Your twitter username</strong>.</div></fieldset>
<fieldset><input id="signup-website" type="text" name="signup-website" value="' .$web_val. '" />
 <label>Website</label></fieldset>
<fieldset><input id="signup-feed" type="text" name="signup-feed" value="' .$feed_val. '" />
 <label>Website Feed</label>
<div class="mini-faq">Don\'t you know what a feed is? Have a look at <a href="http://en.wikipedia.org/wiki/Web_feed" target="_blank">Wikipedia</a>.</div></fieldset>
<fieldset class="rem' .$form_conditions_class. '"><input id="signup-conditions" type="checkbox" name="signup-conditions" value="' .$conditions_val. '" />
 <label>I have read the <a href="/privacy-advise" target="_blank">Legal and Privacy Advise</a> and I agree with it.</label>
<div class="mini-faq">' .$conditions_msg. '</div></fieldset>
<fieldset class="required' .$form_human_class. '"><input id="signup-human" type="text" name="signup-human" value="' .$human_val. '" />
 <label>four plus nine?</label>
<div class="mini-faq">' .$human_msg. '<strong>Prove that you are not a robot!</strong></div></fieldset>
<fieldset><input id="sigup-ref" type="hidden" name="signup-ref" value="' .$ref. '" />
 <input id="signup-submit" type="submit" name="signup-submit" value="Sign up" /></fieldset>
</form>
<!-- #signup -->
';

Acciones para registrarse, user.php

// to sign up a new user
if ( isset($_POST['signup-submit']) ) {

        // catching all $_POST data
        $username = $_POST['signup-username'];
        $pass = $_POST['signup-pass'];
        $pass2 = $_POST['signup-pass2'];
        $mail = $_POST['signup-mail'];
        $firstname = $_POST['signup-firstname'];
        $lastname = $_POST['signup-lastname'];
        $bio = $_POST['signup-bio'];
        $twitter = $_POST['signup-twitter'];
        $website = $_POST['signup-website'];
        $feed = $_POST['signup-feed'];
        $conditions = $_POST['signup-conditions'];
        $institution = $_POST['signup-institution'];
        $human = $_POST['signup-human'];

        require_once(ABSPATH . WPINC . '/registration.php');

        // testing errors
        $user_id = username_exists( $username );
        $mail_id = email_exists($mail);
        if ( $user_id || $username == "" || $username == " " ) {
                // if username already exists or is empty
                global $user_exist;
                $user_exist = $user_id;
                $errore = "user";
        }
        if ( $mail_id || $mail == "" ) {
                // if email is already associated to other user or is empty
                global $mail_exist;
                $mail_exist = $mail_id;
                $errore = "mail";
        }
        if ( $pass != $pass2 ) {
                // if passwords don't match
                $errore = "pass";
        }
        if ( $human != '13' ) {
                // if user is not human
                $errore = "robot";
        }
        if ( $conditions != 'accept' ) {
                // if user didn't accept the legal advise
                $errore = "conditions";

        if ( isset($errore) ) {
                // if there is any error, stop the proccess
        } else {
                // if no errors, do the sign up actions
                // if pass is empty, we generate a random one
                $random_pass = wp_generate_password( 12, false );
                if ( $pass == '' ) { $pass = $random_pass; }
                $userdata = array(
                        'user_pass' => $pass,
                        'user_login' => $username,
                        'user_url' => $website,
                        'user_email' => $mail,
                        'first_name' => $firstname,
                        'last_name' => $lastname,
                        'description' => $bio,
                        'role' => 'contributor',
                        'twitter' => $twitter,
                        'feed' => $feed,
                );
                $user_id = wp_insert_user( $userdata );
                // to insert $twitter and $feed custom fields
                // (to create fields in functions.php is needed!)
                update_user_meta( $user_id, 'twitter', $twitter );
                update_user_meta( $user_id, 'feed', $feed );

                $success_msg = "<span class="error">You have sign up successfully. In order to submit any content, first of all <strong>you must log in using the form underneath.</strong></span>";
                // to send confirmation mail to the new user
                $user_data = get_userdata( $user_id );
                $to = $user_data->user_email;
                $subject = "Username and password to login in My Web";
                $message = 'Hi ' .$user_data->user_login. ',' . "\r\n" .
                        'you have signed up succesfully in My Web. You can log in using your username ('.$user_data->user_login.') and password (' .$pass. '), here: http://example.net/' . "\r\n\r\n" .
                        'If you have forgotten your username or password, you can recover them here: http://example.net/wp-login.php?action=lostpassword';
                $headers[] = 'From: My Web -- a funny and simple web ';
                wp_mail( $to, $subject, $message, $headers );
                // to send a notification to web admin that a new user has sign up
                $to = 'info@example.net';
                $subject = "New user has sign up in example.net";
                $message = 'A new user has sign up in example.net: ' . "\r\n\r\n" .
                        '+ '.$user_data->user_login. "\r\n\r\n" .
                $headers[] = 'From: My web -- a funny and simple web ';
                $headers[] = 'Cc: info@example.com';
                wp_mail( $to, $subject, $message, $headers );
        } // end testing errors

//      header("location: " .$redirect);
}
// end sign up proccess

Para poner en marcha el sistema de registro basta incluir el archivo con el formulario en la plantilla que queramos que aparezca, y llamar al archivo user.php en el header.php mediante un include.