addUser.i

<?php
/**
 * @package addUser.i -- file is for adding a new user to the system.  It is called through a link on the user search dialog or through a card in the user hub.
 */

$dontRunGroupSearch = true;
require_once("userSearch.i");
require_once("aGroupSupport.i");
require_once("$sharedLibrary/hcuTranslate.i"); // ValidateUsername needs to return the same error messages as in banking.

$parameters = array("a" => array("operation" => ""));
$string = array("filter" => FILTER_DEFAULT);
HCU_ImportVars($parameters, "a", array("operation" => $string));

switch($parameters["a"]["operation"]) {
    case "addUser":
        $returnArray = addUser($dbh, $Cu, $Cn);

        header('Content-type: application/json');
        print HCU_JsonEncode($returnArray);
        exit; // Since this is an included file, whatever is in the script will execute if not exited here.
    case "validateUsername":
        $parameters = array("a" => array("username" => ""));
        HCU_ImportVars($parameters, "a", array("username" => $string));
        $username = HCU_array_key_exists("username", $parameters["a"]) ? trim($parameters["a"]["username"]) : "";
        $returnArray = validateUsername($dbh, $Cu, $username);

        header('Content-type: application/json');
        print HCU_JsonEncode($returnArray);
        exit; // Since this is an included file, whatever is in the script will execute if not exited here.
}

/**
 * function validateUsername($dbh, $Cu, $username)
 * This ensures that the username chosen is not already in existence.
 *
 * @param integer $dbh -- the database connection
 * @param string $Cu -- the credit union
 * @param string $username -- the username to validate
 *
 * @return "code" -- zero if no error, nonzero if there is an error, "error" -- the first error encountered or an empty array, "valid" -- true if the username doesn't exist.
 */
function validateUsername($dbh, $Cu, $username) {
    $MC = new hcu_talk_base("en_US"); // Needed to return same error messages as banking.
    try {

        // Treat admin SLIGHTLY differently.  Admin SHOULD be able to create an username with a number like what would happen through the user activation process.
        if (!ctype_digit(strval(trim($username)))) {
            // * Validate user alias length
            if ( strlen( $username ) >= 0 && strlen( $username ) < 6 ) {
              throw new exception ($MC->msg('Username too short', HCU_DISPLAY_AS_JS), 1);
            }

            if ( strlen( $username ) > 5 && !check_alias_format( $username ) ) {
              // * Validate the useralias is correct format
              throw new exception ($MC->msg('Username appears invalid', HCU_DISPLAY_AS_JS), 2);
            }
        }

        $sql = "select 'FOUND' from ${Cu}user where lower(trim(user_name)) = '" . prep_save(strtolower(trim($username)), 50) . "'";
        $sth = db_query($sql, $dbh);
        if (!$sth || db_num_rows($sth) > 0) {
            throw new exception($MC->msg( "Username not available" , HCU_DISPLAY_AS_JS), 3);
        }

        $returnArray = array("status" => "000", "error" => "");
    } catch(exception $e) {
        $returnArray = array("status" => $e->getCode(), "error" => $e->getMessage());
    }
    return $returnArray;
}

/**
 * function readForAddUser($dbh, $Cu)
 * Two things are needed: 1) the profile list for the credit union, 2) the default profile for the credit union and 3) the password rules for the credit union.
 *
 * @param integer $dbh -- the database connection
 * @param string $Cu -- the credit union
 *
 * @return "code" -- zero if is no error, nonzero if there is an error, "error" -- the first error encountered or an empty array, "profileDDL" -- the list of profiles for the CU,
 *      "passwordRules" -- the password rules for the CU.
 */
function readForAddUser($dbh, $Cu) {
    try {
        $sql = "select profile_id as value, trim(description) as text from cu_profile where cu = '$Cu' order by trim(description)";
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("profile id query failed.", 1);
        }
        $ddl = array(array("value" => "", "text" => "(None)"));
        for($i = 0; $row = db_fetch_assoc($sth, $i); $i++) {
            $ddl[] = $row;
        }

        $sql = "select profile_id from cu_profile p left join cuadmin a on p.profile_code = a.settings::json->>'profile' where a.cu = '$Cu'";
        $sth = db_query($sql, $dbh);
        if(!$sth) {
            throw new Exception("default profile query failed.", 2);
        }
        $dftprofile = db_fetch_row($sth, 0)[0];

        $sql = "select pwdconfig from cuadmin where cu = '$Cu'";
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("pwdconfig query failed.", 4);
        }
        $pwdconfig = db_fetch_row($sth, 0)[0];
        $pwdconfig = HCU_JsonDecode($pwdconfig);
        if (!is_array($pwdconfig)) {
            throw new exception("Password array is malformed.", 5);
        }

        return array("code" => 0, "error" => array(), "profileDDL" => $ddl, "profileDefault" => $dftprofile, "passwordRules" => $pwdconfig,
            "usePhonesInsteadOfMFA" => getUsePhonesInsteadOfMFA($dbh, $Cu));
    } catch(exception $e) {
        return array("code" => $e->getCode(), "error" => array($e->getMessage()), "profileDDL" => array(), "profileDefault"=>"", "passwordRules" => array(),
            "usePhonesInsteadOfMFA" => false);
    }
}

/**
 * function readUserSearch($dbh, $Cu)
 * This read the user search
 *
 * @param $dbh -- the database connection
 * @param $Cu -- the credit union
 * @param $Cn -- the logged in user
 *
 * @return array("code" => 0 if no errors; nonzero otherwise, "error" => list of errors encountered, "sql" => list of SQL executed, "data" => results of search,
 *      "encryption" => if there is one record returned, then encrypt that record and send.)
 * Next error code: 34
 */
function addUser($dbh, $Cu, $Cn) {
    $parameters = array("a" => array("username" => "", "email" => "", "password" => "", "phone" => "", "groupId" => "", "profileId" => "", "confirm" => ""));
    $encryption = array("message" => "", "hash" => "");
    try {
        $string = array("filter" => HCUFILTER_INPUT_STRING);
        HCU_ImportVars($parameters, "a", array("username" => $string, "email" => $string, "password" => $string, "phones" => $string, "groupId" => $string,
            "profileId" => $string, "confirm" => $string));
        extract($parameters["a"]);

        $username = isset($username) ? trim($username) : "";
        $email = isset($email) ? trim($email) : "";
        $password = isset($password) ? trim($password) : "";
        $phones = isset($phones) ? trim($phones) : "";
        $groupId = isset($groupId) ? trim($groupId) : "";
        $profileId = isset($profileId) ? trim($profileId) : "";
        $confirm = isset($confirm) ? trim($confirm) : "";

        if ($username == "") {
            throw new exception("Username is required.", 1);
        }
        if ($email == "") {
            throw new exception("Email is required.", 2);
        }
        if ($password == "") {
            throw new exception("Password is required.", 3);
        }
        if ($password != $confirm) {
            throw new exception("Passwords must match.", 31);
        }
        if ($profileId == "") {
            if ($groupId == "") {
                throw new exception("Group id or profile id needs to be set (not both).", 7);
            }
            if (!is_numeric($groupId)) {
                throw new exception("Group id needs to be numeric.", 10);
            }
        } else {
            if ($groupId != "") {
                throw new exception("Group id or profile id needs to be set (not both).", 8);
            }
            if (!is_numeric($profileId)) {
                throw new exception("Profile id needs to be numeric.", 11);
            }
        }

        $userValidate = validateUsername($dbh, $Cu, $username);
        if ($userValidate["status"] !== "000") {
            throw new exception($userValidate["error"], 28);
        }

        $phoneRecord = array();
        $contactId = 0;
        if ($phones != "" && $phones != "[]") {
            $phones = HCU_JsonDecode($phones);
            if (!is_array($phones)) {
                throw new exception("Phones are malformed.", 22);
            }
            $phoneArray = array("mobile" => array());
            foreach($phones as $phone) {
                $value = trim($phone);
                if ($value != "") {
                    if (!is_numeric($value) || $value <= 0 || strlen($value) != 10) {
                        throw new exception("Phones are malformed.", 25);
                    }
                    $value = substr($value, 0, 3) . "-" . substr($value, 3, 3) . "-" . substr($value, 6);
                    $phoneArray["mobile"][] = $value;
                }
            }

            $sql = "select nextval('${Cu}usercontact_contact_id_seq'::regclass)";
            $sth = db_query($sql, $dbh);

            if (!$sth) {
                throw new exception("Nextval query failed.", 26);
            }
            $contactId = intval(db_fetch_row($sth, 0)[0]);

            $phoneRecord = array("_action" => "create", "contact_id" => $contactId, "phones" => HCU_JsonEncode($phoneArray));
        }

        if (!validateEmail($email)) {
            throw new exception("Email is not valid.", 5);
        }

        $userRecord = array("_action" => "create", "user_name" => $username, "email" => $email);
        $groupRecord = array();

        if ($groupId != "") {
            // Validate group id
            $sql = "select 'FOUND' from ${Cu}group where group_id = " . intval($groupId);
            $sth = db_query($sql, $dbh);
            if (!$sth) {
                throw new exception("Validate group query failed.", 15);
            }

            $userRecord["group_id"] = $groupId;
            $userRecord["is_group_primary"] = false;
            $openAccessControl = false;
        } else {
            // Validate profile id
            $sql = "select profile_id, cu from cu_profile where profile_id = " . intval($profileId);
            $sth = db_query($sql, $dbh);
            if (!$sth) {
                throw new exception("Validate query failed.", 12);
            }
            if (db_num_rows($sth) == 0) {
                throw new exception("Profile id not found.", 13);
            }
            if (strtolower(trim($Cu)) != strtolower(trim(db_fetch_row($sth, 0)[1]))) {
                throw new exception("Profile id belongs to another CU.", 14);
            }

            $sql = "select nextval('${Cu}group_group_id_seq'::regclass)";
            $sth = db_query($sql, $dbh);

            if (!$sth) {
                throw new exception("Nextval query failed.", 9);
            }
            $groupId = intval(db_fetch_row($sth, 0)[0]);
            $userRecord["group_id"] = $groupId;
            $userRecord["is_group_primary"] = true;

            $groupRecord = array("_action" => "create", "group_id" => $groupId, "group_name" => $username, "profile_id" => $profileId, "contact" => $contactId);
            $openAccessControl = true;
        }

        // You don't validate password for admin EXCEPT for being greater than or equal to four characters long.
        if (strlen($password) < 4) {
            throw new exception("Password needs to be four characters or greater.", 34);
        }

        $hash = password_hash($password, PASSWORD_DEFAULT);
        $userRecord["passwd"] = "$hash";

        $envVars = array("cu" => $Cu);

        $context = "admin";
        $script = "addUser.i";

        $sql = "select email from cuadminusers where user_name = '$Cn' and cu = '$Cu'";
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("email query failed.", 16);
        }
        $email = db_fetch_row($sth)[0];

        $sql = "select coalesce(ca.retrylimit,5) as retry, coalesce(ca.gracelimit,5) as grace from cuadmin ca where ca.cu = '$Cu'";
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("retry query failed.", 30);
        }
        $row = db_fetch_assoc($sth, 0);

        $userRecord["failedremain"] = intval($row["retry"]);
        $userRecord["forceremain"] = intval($row["grace"]);
        $userRecord["userflags"] = 2;

        $sql = "select nextval('" . strtolower(trim($Cu)) . "user_id_seq'::regclass)";
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("Nextval query failed.", 19);
        }
        $userId = intval(db_fetch_row($sth, 0)[0]);
        $userRecord["user_id"] = $userId;
        $userRecord["contact"] = $contactId;

        if (!db_work ($dbh, HOMECU_WORK_BEGIN)) {
            throw new exception("begin query failed.", 32);
        }

        if (count($phoneRecord) > 0) {
            $phoneRecord = array("usercontact" => array($phoneRecord));
            if (DataUserTableUpdate($dbh, $envVars, null, $phoneRecord, $userId, "P_ADD", $context, $script, "A", "Phone Add", $Cn, $email, trim($_SERVER["REMOTE_ADDR"])) === false) {
                throw new exception("Add contact failed.", 127);
            }
        }

        if (count($groupRecord) > 0) {
            $groupRecord = array("group" => array($groupRecord));
            if (DataUserTableUpdate($dbh, $envVars, null, $groupRecord, $userId, "G_ADD", $context, $script, "A", "Group Add", $Cn, $email, trim($_SERVER["REMOTE_ADDR"])) === false) {
                throw new exception("Add group failed.", 117);
            }
        }

        $userRecord = array("user" => array($userRecord));
        if (DataUserTableUpdate($dbh, $envVars, null, $userRecord, $userId, "U_ADD", $context, $script, "A", "User Add", $Cn, $email, trim($_SERVER["REMOTE_ADDR"])) === false) {
            throw new exception("Add user failed.", 118);
        }

        if (!db_work($dbh, HOMECU_WORK_COMMIT)) {
            throw new exception("commit work failed.", 133);
        }

        $sql = "select u.user_id, u.user_name, u.email, u.name, array_to_string(ss.cellnumbers, ',') as cellnumber, g.group_name, g.group_id, p.profile_code, p.profile_id,
        p.description as profile_desc
           from ${Cu}user u
            left join (select uc.user_id, array_agg(distinct s.cellnumber::text) as cellnumbers from ${Cu}useraccounts uc
                left join cusms s on trim(uc.accountnumber) = trim(s.accountnumber) and s.cu = '${Cu}' group by uc.user_id
            ) ss on u.user_id = ss.user_id
           left join ${Cu}group g on u.group_id = g.group_id
           left join cu_profile p on g.profile_id = p.profile_id where u.user_id = $userId";
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("Query query failed.", 20);
        }
        if (db_num_rows($sth) == 0) {
            throw new exception("Query query didn't return anything.", 21);
        }
        $thisUser = db_fetch_assoc($sth, 0);
        $encryption = encryptUser($Cu, $thisUser, false);
        $counts = getUserHubCounts($dbh, $Cu, intval($thisUser["user_id"]));

        $groupEncryption = encryptGroup($dbh, $Cu, $thisUser);

        return array("code" => 0, "error" => array(), "encryption" => $encryption, "data" => array($thisUser), "counts" => $counts, "groupEncryption" => $groupEncryption,
            "openAccessControl" => $openAccessControl);
    } catch(exception $e) {
        if ($e->getCode() >= 100) {
            db_work($dbh, HOMECU_WORK_ROLLBACK); // Got greater problems if this fails.
        }

        return array("code" => $e->getCode(), "error" => array($e->getMessage()), "data" => array());
    }
}

/**
 * function printDoAddUser($self, $callbackName, $formName, $itIsKnownKhaleesi, $knownGroupId, $closeDialog)
 * Function to handle packaging for the data call to add a user.
 *
 * @param $self -- refers to the location of this script: main.prg?ft=15 I believe.
 * @param $callbackName -- the callback function on the user hub side to call.
 * @param $formName -- the name of the form to validate.
 * @param $itIsKnownKhaleesi -- true if the groupId is known.
 * @param $knownGroupId -- the groupId if known.
 * @param $closeDialog -- if there is a dialog to close.
 */
function printDoAddUser($self, $callbackName, $formName, $itIsKnownKhaleesi, $knownGroupId, $closeDialog, $usePhonesInsteadOfMFA) { ?>
    $.homecuValidator.doValidateUsername = false;
    if ($.homecuValidator.validate()) {
        var parameters = {username: $("#<?php echo $formName; ?> [name='username']").val().trim(), email: $("#<?php echo $formName; ?> [name='email']").val().trim(),
        password: $("#<?php echo $formName; ?> [name='passwordi']").val().trim(), confirm: $("#<?php echo $formName; ?> [name='confirmi']").val().trim()};

        <?php if ($usePhonesInsteadOfMFA) { ?>
        var phoneData = $("#<?php echo $formName; ?> #phoneGrid").data("kendoGrid").dataSource.data();
        var phoneArray = [];
        for(var i = 0; i != phoneData.length; i++) {
            if (!phoneData[i].isAdd) {
                phoneArray.push(phoneData[i].value.trim().replace(/\D+/g, ""));
            }
        }
        parameters.phones = kendo.stringify(phoneArray);
        <?php } ?>

        <?php if ($itIsKnownKhaleesi) { ?>
            parameters.groupId = <?php echo intval($knownGroupId); ?>;
        <?php } else { ?>
        switch($("#<?php echo $formName; ?> [name='group']:checked").data("val"))
        {
            case "addToGroup": parameters.groupId = $("#userAddDialog [name='groupPopup']").data("id").trim(); break;
            case "newGroup": parameters.profileId = profileDDL.value(); break;
        }
        <?php } ?>

        showWaitWindow();
        $.post("<?php echo $self; ?>&operation=addUser", parameters, function(data) {
            hideWaitWindow();
            if (data.error.length > 0) {
                $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
            } else {
                <?php if ($closeDialog) { ?>
                if (typeof(<?php echo $callbackName; ?>) == "function") {
                    <?php echo $callbackName; ?>("successfulOneRecord", data.encryption, data.data[0], data.counts, data.groupEncryption, data.openAccessControl);
                }


                    $("#userAddDialog").data("invalid", false);
                    $("#userAddDialog").data("kendoDialog").close();
                <?php } else { ?>
                    window.location.href = "main.prg?ft=22&payload=" + encodeURIComponent(encodeURI(data.encryption));
                <?php } ?>
            }
        });
    }
    $.homecuValidator.doValidateUsername = true;
<?php }

/**
 * function printAddUserInit($selectGroupOrProfile, $profileDDL, $formName)
 * Function to set up all the add user components.
 *
 * @param $selectGroupOrProfile -- If true, then group or profile selection is included in the package.
 * @param $profileDDL -- the dropdownlist data for the profile.
 * @param $formName -- the name of the form.
 */
function printAddUserInit($selectGroupOrProfile, $profileDDL, $profileDefault, $formName, $usePhonesInsteadOfMFA)
{ ?>

    <?php if ($selectGroupOrProfile) { ?>
    $("#userAddDialog [name='groupPopup']").click(function() {

        <?php // close group search module if loaded ?>
        if (groupSearch != null) {
            groupSearch.Close();
        }

        <?php // load group search module ?>
        $("#groupSearchModule").empty();
        $("#groupSearchModule").load("main.prg?ft=102102", function(response) {
            groupSearch = new GroupSearch();
            groupSearch.Data([]);
            groupSearch.Init(groupCallback, this);
            groupSearch.Open(window.activeWindows);
        });
    });

    profileDDL = $("#<?php echo $formName; ?> #profileDDL").kendoDropDownList({
        dataTextField: "text",
        dataValueField: "value",
        dataSource: {
            data: <?php echo HCU_JsonEncode($profileDDL); ?>
        },
        filter: "startswith",
        value: <?php echo HCU_JsonEncode($profileDefault); ?>
    }).data("kendoDropDownList");
    <?php } // End if ($selectGroupOrProfile) { ?>

    <?php if ($usePhonesInsteadOfMFA)
        printInitPhoneGrid($formName);
}

function printInitPhoneGrid($formName, $data = "")
{ ?>
    var data = [{kendoId: 1, value: 0, isAdd: true}];
    var kendoId = 2;
    <?php if ($data != "") { ?>
    var predata = <?php echo $data; ?>;
    <?php // Bad data got into the phones column so have to check if the data is an array and if the contents are strings like expected. If not, then it will show up as empty.  #1232. ?>
    if (Array.isArray(predata)) {
        for (var i = 0, iLength = predata.length; i <= iLength; i++) {
            if (typeof(predata[i]) == "string") {
                value = predata[i].replace(/\D+/g, "");
                value = "(" + value.substring(0,3) + ") " + value.substring(3,6) + "-" + value.substring(6);
                data.push({kendoId: kendoId++, value: value, isAdd: false});
            }
        }
    }

    <?php } ?>
    var inPhoneSave = false;
    var phoneGrid = $("#<?php echo $formName; ?> #phoneGrid").kendoGrid({
        dataSource: {
            data: data,
            schema: {
                model: {
                    id: "kendoId",
                    fields: {
                        kendoId: {type: "number"},
                        value: {type: "string"},
                        isAdd: {type: "boolean"}
                    }
                }
            },
            sort: [{field: "isAdd", dir: "asc"}, {field: "kendoId", dir: "asc"}]
        },
        editable: {
            confirmation: false
        },
        height: 100,
        columns: [
            {template: '<span class="fa fa-minus-circle"></span>', width: 30},
            {field: "value", template: "<div class='validateable'># if (value == null) { # &nbsp; # } else { # #: value # # } #</div>", editor: function(container, options) {
                var mtb = $("<input class='validatePhone' name='" + options.field + "'>").appendTo(container).kendoMaskedTextBox({
                    mask: "(000) 000-0000"
                }).data("kendoMaskedTextBox");
            }}],
        rowTemplate: "# if (isAdd) { # <tr class='addRow'><td class='addBtn'><span class='fa fa-plus-circle'></span></td><td>Add phone</td></tr> # } else { #"
            + " <tr data-uid='#: uid #'><td class='removeBtn'><span class='fa fa-minus-circle'></span></td>"
            + "<td class='phoneValueTD'><div class='validateable'># if (value == null) { # &nbsp; # } else { # #: value # # } #</div></td></tr> # } #",
        save: function(e) {
            $("#<?php echo $formName; ?> #phoneGrid").data("phonesChanged", true);
            window.setTimeout(function() { $("#<?php echo $formName; ?> [name='validatePhonesHidden']").blur(); <?php /* validate grid */ ?>}, 100);
        }
    }).data("kendoGrid");

    $("#<?php echo $formName; ?> #phoneGrid").data("phonesChanged", false);

    $("#<?php echo $formName; ?> #phoneGrid").css({height: "auto"});
    $("#<?php echo $formName; ?> #phoneGrid .k-grid-header").remove();

    $("#<?php echo $formName; ?> #phoneGrid").on("mousedown", ".removeBtn", function() {
        $("#<?php echo $formName; ?> #phoneGrid").data("phonesChanged", true);
        $("#<?php echo $formName; ?> #phoneGrid .validatePhone:visible").blur();
        window.setTimeout(function() { $("#<?php echo $formName; ?> [name='validatePhonesHidden']").blur(); <?php /* validate grid */ ?>}, 100);
        phoneGrid.saveRow();
        phoneGrid.removeRow($(this).closest("tr"));
        return false;
    });

    $("#<?php echo $formName; ?> #phoneGrid").on("mousedown", ".addRow", function() {
        $("#<?php echo $formName; ?> #phoneGrid").data("phonesChanged", true);
        $("#<?php echo $formName; ?> #phoneGrid .validatePhone:visible").blur();
        window.setTimeout(function() { $("#<?php echo $formName; ?> [name='validatePhonesHidden']").blur(); <?php /* validate grid */ ?>}, 100);
        phoneGrid.saveRow();
        phoneGrid.addRow();
        return false;
    });

    var toolTipProps = homecuTooltip.defaults;
    toolTipProps.filter = ".validatePhone";
    toolTipProps.content = "Mobile Number";

    $("#<?php echo $formName; ?> #phoneGrid").kendoTooltip(toolTipProps);

<?php }

/**
 * function printAddUserValidationSetup($self, $passwordRules, $formValidate, $formStatusField, $doValidateGroup)
 * Function sets up the homecuValidator.
 *
 * @param $self -- the location of this script: main.prg?ft=15
 * @param $passwordRules -- the password rules from the cuadmin record for the credit union.
 * @param $formValidate -- the form to validate.
 * @param $formStatusField -- the DIV to use for statuses.
 * @param $doValidateGroup -- boolean to include the group validation.  (Doesn't happen for the add user card because that can only add a user to the current group.)
 */
function printAddUserValidationSetup($self, $passwordRules, $formValidate, $formStatusField, $doValidateGroup, $usePhonesInsteadOfMFA) {
    // Setting up the homecuValidator doesn't clear out previous custom rules.
    ?>
    $.homecuValidator.settings.homecuCustomRules.validateGroup = undefined;

    $.homecuValidator.setup({formValidate:'<?php echo $formValidate; ?>', formStatusField: '<?php echo $formStatusField; ?>', homecuCustomRules: {
        confirmA: function(input) {
            if ($(input).is("#<?php echo $formValidate; ?> [name='confirmi']"))
            {
                var password = $("#<?php echo $formValidate; ?> [name='passwordi']").val().trim();
                if (password == "") {
                    return true;
                }
                if (password != $(input).val().trim()) {
                    $(input).attr("data-confirmA-msg", "Passwords must match.");
                    return false;
                }
            }
            return true;
        },
        validateUsername1: function(input) {
            if ($(input).is("#<?php echo $formValidate; ?> [name='username']")) {
                var theHidden = $("#<?php echo $formValidate; ?> [name='usernameHidden']");
                if ($(input).val().trim() == "") {
                    $(input).attr("data-validateUsername1-msg", "Username is required.");
                    $(theHidden).attr("data-validateUsername2-msg", "");
                    $("#<?php echo $formValidate; ?> .k-invalid-msg[data-for='usernameHidden']").empty();
                    return false;
                } else if ($.homecuValidator.doValidateUsername) {
                    $(theHidden).attr("data-validateUsername2-msg", "");
                    $.post("<?php echo $self; ?>&operation=validateUsername", {username: $(input).val().trim()}, function(data) {
                        if (data.status === "000") {
                            $(input).removeClass("k-invalid");
                        } else {
                            $(theHidden).attr("data-validateUsername2-msg", data.error);
                            $(input).addClass("k-invalid");
                        }
                        $(theHidden).blur();
                    });
                }
            }
            return true;
        },
        validateUsername2: function(input) {
            if ($(input).is("#<?php echo $formValidate; ?> [name='usernameHidden']")) {
                if ($(input).attr("data-validateUsername2-msg") != null && $(input).attr("data-validateUsername2-msg") != "") {
                    $("#<?php echo $formValidate; ?> [name='username']").addClass("k-invalid");
                    $.homecuValidator.showErrorMessage = true;
                    return false;
                }
            }
            return true;
        }
        <?php if ($usePhonesInsteadOfMFA) {
            echo ","; printValidatePhones($formValidate);
        } ?>
        , validatepassword: function(input) {
            if (!input.is("[name='passwordi']")) {
                return true;
            }
            var password = $(input).val();
            if (password.length < 4) {
                $(input).attr("data-validatepassword-msg", "Password must be four or more characters.");
                return false;
            }
            var invalidMatches = password.match(/['"\s]/g);
            if (invalidMatches != null && invalidMatches.length > 0) {
                $(input).attr("data-validatepassword-msg", "Password has illegal characters.");
                return false;
            }
            return true;
        }
        <?php if ($doValidateGroup) { ?>,
        validateGroup: function(input) {
            if ($(input).is("[name='validateGroup']")) {
                switch($("#<?php echo $formValidate; ?> [name='group']:checked").data("val")) {
                    case "addToGroup":
                        if ($("#<?php echo $formValidate; ?> [name='groupPopup']").text().trim() == "(none selected)") {
                            $(input).attr("data-validateGroup-msg", "Group must be selected.");
                            return false;
                        }
                        break;
                    case "newGroup":
                        if ($("#<?php echo $formValidate; ?> #profileDDL").data("kendoDropDownList").value() == "") {
                            $(input).attr("data-validateGroup-msg", "Profile must be selected.");
                            return false;
                        }
                        break;
                    default:
                        $(input).attr("data-validateGroup-msg", "Please specify new group or add to group.");
                        return false;
                }
            }
            return true;
        }
        <?php } ?>
    }});
    $.homecuValidator.doValidateUsername = true;
    $.homecuValidator.passwordRules = <?php echo HCU_JsonEncode($passwordRules); ?>;
<?php }

function printValidatePhones($formValidate) { ?>
    validatePhones: function(input) {
        if ($(input).is("[name='validatePhonesHidden']")) {
            var valid = true;

            $("#<?php echo $formValidate; ?> #phoneGrid .phoneValueTD").removeClass("k-invalid");
            $("#<?php echo $formValidate; ?> #phoneGrid .phoneValueTD .validateable").removeClass("k-invalid");
            var numPhones = 0, phoneMap = {};
            $("#<?php echo $formValidate; ?> #phoneGrid .phoneValueTD .validateable").each(function() {
                if ($(this).text().trim() != "") {
                    numPhones++;
                    var value = $(this).text().trim();

                    if (value.match(/^\(\d{3}\) \d{3}-\d{4}$/) == null) {
                        valid = false;
                        $(input).attr("data-validatePhones-msg", "One or more phones are invalid.");
                    } else if (numPhones > 5) {
                        valid = false;
                        $(input).attr("data-validatePhones-msg", "You cannot have over 5 phone numbers.");
                    } else if (phoneMap[value] != null) {
                        valid = false;
                        $(input).attr("data-validatePhones-msg", "You have duplicate phone numbers.");
                    }

                    phoneMap[value] = true;
                    if (!valid) {
                        $(this).addClass("k-invalid");
                        $(this).closest(".phoneValueTD").remove("k-invalid");
                    }
                }
            });
            if (!valid) {
                return false;
            }
        }
        return true;
    }
<?php }

/**
 * function printAddNewUser($self, $callbackName, $dbh, $Cu)
 * This prints the user search open function and whatnot
 *
 * @param string $self -- main.prg?ft=$ft
 * @param string $callbackName -- the name to the callback function (when the user is created)
 * @param integer $dbh -- the database connection
 * @param string $Cu -- the credit union
 */
function printAddNewUser($self, $callbackName, $dbh, $Cu) {
    $record = readForAddUser($dbh, $Cu);
    $formName = "addNewUserForm";
    $formValidateDiv = "userNewValidation";

    /**
     * function openAddNewUser(fromSearchUser)
     * This function opens the add user dialog.
     *
     * @param boolean fromSearchUser -- if coming from the user search, then on cancel, return to this.
     */
    ?>
    function openAddNewUser(fromSearchUser, autoFill) {
        var userAddDialog = $("#userAddDialog").data("kendoDialog");
        var groupSearch = null;
        var profileDDL = null;
        if (userAddDialog == null) {
            var phoneGridIndex = 2;
            var content = '<div class="userSearchTop container hcu-all-100"><div class="row">'
            + '<div id="<?php echo $formValidateDiv; ?>"></div></div></div><br>'
            + '<div class="userSearchContents container hcu-all-100"><form id="<?php echo $formName; ?>">'
            + '<div class="row hcuSpacer"><div class="col-xs-4 hcu-no-padding"><label>Username*</label></div>'
            + '<div class="col-xs-8 hcu-no-padding"><input name="username" type="text" maxlength="50" class="hcu-all-100 k-input k-textbox">'
            + '<span data-for="usernameHidden" class="k-invalid-msg"></span></div></div>'
                    <?php dialogPrintInputLine("Email*", "", "email", 255, " required data-required-msg=\"Email is required.\"", "email", false); ?>
            + '<div class="row hcuSpacer"><div class="col-xs-4 hcu-no-padding"><label>Password*</label></div><div class="col-xs-8 hcu-no-padding">'
            + '<input name="passwordi" type="password" maxlength="255" class="hcu-all-100 k-input k-textbox"></div></div>'
                    <?php dialogPrintInputLine("Confirm*", "", "confirmi", 255, false, "password", false); ?>
            + '<div class="row hcuSpacer"><div class="radio"><label class="col-xs-4 hcu-no-padding"><input type="radio" name="group" data-val="addToGroup" checked>Add To Group</label></div>'
            + '<div class="col-xs-8 hcu-no-padding"><a href="#" name="groupPopup" data-id="">(none selected)</a></div></div>'
            + '<div class="row hcuSpacer"><div class="radio"><label class="col-xs-4 hcu-no-padding"><input type="radio" name="group" data-val="newGroup">Add To Profile</label></div>'
            + '<div class="col-xs-8 hcu-no-padding"><div id="profileDDL" class="hcu-all-100"></div></div></div>'
            <?php if ($record["usePhonesInsteadOfMFA"]) { ?>
            + '<div class="row hcuSpacer"><span class="h3">Phones</span></div>'
            + '<div class="row hcuSpacer"><div id="phoneGrid"></div></div>'
            <?php } ?>
            + '<input type="hidden" name="usernameHidden"><input type="hidden" name="validatePhonesHidden"><input type="hidden" name="validatePhoneTypesHidden">'
            + '<input type="hidden" name="validateGroup">'
                    + '</form></div>';
            userAddDialog = $("<div id='userAddDialog' class='searchDialog'></div>").appendTo("body").kendoDialog({
                title: "New User",
                content: content,
                actions: [{text: "Cancel"},
                {text: "Add User", primary: true, action: function() {
                    var fromSearchUser = $("#userAddDialog").data("fromSearchUser");
                    <?php printDoAddUser($self, $callbackName, $formName, false, null, true, $record["usePhonesInsteadOfMFA"]); ?>
                    return false;
                }}],
                open: function() {
                    if (window.activeWindows != null) {
                        window.activeWindows.push(this);
                    }
                    $("#userAddDialog").data("invalid", true);
                },
                show: function() {
                    <?php printAddUserValidationSetup($self, $record["passwordRules"], $formName, $formValidateDiv, true, $record["usePhonesInsteadOfMFA"]); ?>
                    <?php if ($record["code"] != 0) { ?>
                        $.homecuValidator.displayMessage(<?php echo HCU_JsonEncode($record["error"]); ?>, $.homecuValidator.settings.statusError );
                    <?php } ?>
                },
                close: function() {
                    if (window.activeWindows != null) {
                        window.activeWindows.pop();
                    }
                    var fromSearchUser = $("#userAddDialog").data("fromSearchUser");
                    var invalid = $("#userAddDialog").data("invalid");
                    if (fromSearchUser && invalid) {
                        $("#userSearchDialog").data("kendoDialog").open();
                    }
                },
                minWidth: 300,
                maxWidth: 450,
                width: "90%",
                visible: false,
                modal: true
            }).data("kendoDialog");

            <?php printAddUserInit(true, $record["profileDDL"], $record['profileDefault'], $formName, $record["usePhonesInsteadOfMFA"]); ?>
        }
        else <?php // Clear all inputs ?>
        {
            $("#<?php echo $formName; ?> [name='username']").val(null);
            $("#<?php echo $formName; ?> [name='email']").val(null);
            $("#<?php echo $formName; ?> [name='passwordi']").val(null);
            $("#<?php echo $formName; ?> [name='confirmi']").val(null);
            $("#<?php echo $formName; ?> [name='group']:eq(0)").click();
            <?php if ($record["usePhonesInsteadOfMFA"]) { ?>
            $("#<?php echo $formName; ?> #phoneGrid").data("kendoGrid").dataSource.data([{kendoId: 1, type: "", value: 0, isAdd: true}]);
            <?php } ?>
            $("#<?php echo $formName; ?> [name='groupPopup']").attr("data-id", "").text("(none selected)");
            $("#<?php echo $formName; ?> #profileDDL").data("kendoDropDownList").value("");
            $("#<?php echo $formName; ?> .k-invalid").removeClass("k-invalid");
        }

        if (autoFill != null) {
            $("#<?php echo $formName; ?> [name='username']").val(autoFill);
        }

        if (fromSearchUser) {
            $("#userSearchDialog").data("kendoDialog").close();
        }
        userAddDialog.open();
        $("#userAddDialog").data("fromSearchUser", fromSearchUser);
    }

    <?php
    /**
     * function groupCallback(unused, groupInfo)
     * Run this function on return of the group search dialog.
     *
     * @param null unused -- there are two parameters in the groupSearch return function and I don't care about the first one.
     * @param {} groupInfo -- the info that I need.
     */
    ?>
    function groupCallback(apparentlyItActuallyIsUsed, groupInfo) {
        if (apparentlyItActuallyIsUsed == "updateGroupInfo") {
            $("#<?php echo $formName; ?> [name='groupPopup']").data("id", groupInfo.group.g_id);
            $("#<?php echo $formName; ?> [name='groupPopup']").text(groupInfo.group.g_name);
        }
    }
<?php }