hcuActivate.prg

<?php
/*
 * File: hcuActivate
 *
 * Purpose:  Allow the member to sign up for digital banking. Notify CU. Handle
 *          case where member signed up but wasn't able to sign up for E-Statements.
 *          Generate an initial password for the member.
 *
 * This script will use Custom Content files: ActivateMember, ActivateMemberThanks, signupDisclosure, and
 * esTermsStart. The secure form enrollment uses signupFrm and signupThanks.
 *
 *
 * ** MIR PACKET ENROLLMENT **
 * ** mobile1 **
 * ** This value will be considered a valid mobile number for the user.  It will NOT be validated against any
 * ** value from the core.
 * ** custom2 **
 * ** This value has not changed.  --FUTURE ENHANCEMENT - Could add a checkbox that will set the mobile1 value
 * ** if the user specifies the number as a valid mobile.  This can be done on the client piece.
 *
 *
 */

  // ** SET SCRIPT LEVEL VARIABLE

  // ** INCLUDE MAIN GLOBAL SCRIPT -- Handles security / global variable values
  $serviceSkipCredentials = true;
  $serviceSkipSecurity = true;
  $serviceShowInfo = false;
  $serviceLoadMenu = false;
  $serviceLiveCheck = true;

  require_once(dirname(__FILE__) . '/../library/hcuService.i');

  // ** IMPORT Variables from form
  $dmsValuesList = array(
  'reqfields' => 'string', 'reqtitles' => 'string', 'reqtypes' => 'string', 'member' => 'digits',
  'ref1' => 'string', 'ref2' => 'string', 'ref3' => 'string', 'custom1' => 'string', 'custom2' => 'string',
  'mobile1' => 'string','ref5' => 'string', 'optin'=>'string', 'action' => 'string', "pin" => "string",
  "pfirst" => "string", "pmid" => "string", "plast" => "string", "confirm" => "string",
  "ssn" => "string", "bdate" => "string", "email" => "string", "class" => "string",
  "addr" => "string", "city" => "string", "state" => "string", "zip" => "string",
  "home" => "string", "cell" => "string", "work" => "string", "workext" => "string",
  "password" => "string", "hint" => "string", "previousDate" => "string",
  "agree" => "string", "g-recaptcha-response" => "string" );

  dms_import_v2($HB_ENV, 'HCUPOST', $dmsValuesList);

  $action = $HB_ENV["HCUPOST"]["action"];

  // They are used for the secure form method but initialize them here so that there aren't any E_NOTICEs.
  $pmid = "";
  $addr = "";
  $city = "";
  $state = "";
  $zip = "";
  $home = "";
  $cell = "";
  $work = "";
  $workext = "";
  $agree = "";

  /**
   * function CheckUserMemberValidity($member, $HB_ENV, &$msg, &$userFound)
   * Checks to see what error to display (if any)
   *
   * @param $member -- the account number
   * @param $HB_ENV -- the environment variables
   * @param $msg -- the error message to append to
   * @param $userFound -- the user found boolean is used elsewhere
   */
  function CheckUserMemberValidity($member, $HB_ENV, &$msg, &$userFound) {
      $MC = $HB_ENV["MC"];
      if ( "$member" != "" && is_numeric($member)) {
        $canActivateUser = CanActivateUser($HB_ENV, $member);
        $memberFound = $canActivateUser["memberExists"];
        $userFound = $canActivateUser["userExists"];

        // ALLOW ENROLL FIELD REPLACES SEEING IF THE PRIMARY ACCOUNT IS SET
        if (!$memberFound || $canActivateUser["allowEnroll"]) {

          // CHECK USER EXISTS
          if ($userFound) {
            # CHECK USER PASSWORD NOT NULL
            if (!$canActivateUser["isNullPassword"]) {
              if ($HB_ENV['flagset'] & GetFlagsetValue("CU_MEMRESET")) {
                $msg .= $MC->combo_msg("Activate member already exists", HCU_DISPLAY_AS_HTML, "#reset_link#", "{$HB_ENV['loginpath']}/hcuResetPwd.prg?{$HB_ENV['cuquery']}");
              } else {
                $msg .= $MC->msg("Member number already setup", HCU_DISPLAY_AS_HTML) . "<br>";
              }
            }

            # CHECK IF USER IS LOCKED
            if ($canActivateUser["isNullPassword"] && $canActivateUser["isFailed"]) {
              $msg .= $MC->msg("Account is Locked", HCU_DISPLAY_AS_HTML) . "<br>";
            }
          }


        } else {
          # MEMBER DOES NOT ALLOW ENROLL, ERROR
          if ($HB_ENV['flagset'] & GetFlagsetValue("CU_MEMRESET")) {
            $msg .= $MC->combo_msg("Activate member already exists", HCU_DISPLAY_AS_HTML, "#reset_link#", "{$HB_ENV['loginpath']}/hcuResetPwd.prg?{$HB_ENV['cuquery']}");
          } else {
            $msg .= $MC->msg("Member number already setup", HCU_DISPLAY_AS_HTML) . "<br>";
          }
        }
      }
  }

  /**
   * function printMemberThanks($ref3, $newpass, $HB_ENV, $cu, $Flang, $MC, $thanksContent)
   * Prints out the member activation thanks custom content with some string substitution.
   *
   * @param $ref3 -- The email used for the form.
   * @param $newpass -- The password used for the form.
   * @param $HB_ENV -- the environment variables.
   * @param $cu -- the credit union.
   * @param $Flang -- the language selected.
   * @param $MC -- the dictionary (needed for thankyou and clickhere translation.)
   * @param $thanksContent -- the custom content to string replace.
   */
  function printMemberThanks($ref3, $newpass, $HB_ENV, $cu, $Flang, $MC, $thanksContent, $member) {
    print strtr(
      $thanksContent["notice"][0]["notice_text"],
      array(
        "#passwd#" => $newpass,
        "#ref3#" => $ref3,
        "#thankyou#" => $MC->msg('Thank You', HCU_DISPLAY_AS_HTML),
        "#targetString#" => $HB_ENV["loginscript"] . "?cu={$cu}&Flang=$Flang",
        "#clickhere#" => $MC->msg("Click Here", HCU_DISPLAY_AS_HTML),
        "#memnumber#" => $member
      )
    );

    print strtr(
      "<div class=\"col-xs-12\"><a class=\"k-button hide-for-apps\" href=\"#targetString#\" target=\"_top\">#clickhere#</a></div>",
      array(
        "#targetString#" => $HB_ENV["loginscript"] . "?cu={$cu}&Flang=$Flang",
        "#clickhere#" => $MC->msg("Return To Home Banking", HCU_DISPLAY_AS_HTML)
      )
    );
  }


  /**
   * function getDefaultProfileName($pEnv)
   * This gets the default profile name which has been decreed to be "DEF".  Perhaps this will be varied based on CU.
   * @param array $pEnv -- the environment
   * @return string of the profile name
   */
  function getDefaultProfileName($pEnv) {
    $cu = $pEnv['Cu'];
    $dbh = $pEnv['dbh'];

    $sql = "select settings::json->>'profile' as default_profile from cuadmin where cu = '$cu'";
    $sth = db_query($sql, $dbh);
    if(!$sth) {
      throw new Exception("default profile query failed.", 2);
    }
    $dftprofile = db_fetch_row($sth, 0)[0];
    return $dftprofile;
  }

  /**
   * function addUserTransaction($dbh, $member, $cu, $hash, $ref3, $egenl_flag, $HB_ENV, $MC, $retry, $phoneNumber, $estatements)
   * This function adds a user, group to the default profile for the CU.
   *
   * @param $dbh -- the database connection
   * @param $member -- the account number to add the user for
   * @param $cu -- the credit union
   * @param $hash -- the hash needed for the password
   * @param $ref3 -- the email address
   * @param $egenl_flag -- the egenl flag (I have no idea what this is; some optin or whatnot.)
   * @param $HB_ENV -- the environment variables
   * @param $MC -- the dictionary
   * @param $retry -- the amount of times to retry
   * @param $phoneNumber -- save the phone number too
   * @param $estatements -- if true, add the estatement right record.
   * @param $accountData -- the PIN method gets the data.  Do not call the FindMemberAccounts function in this case.
   *
   * @return boolean : true if transaction was successful.  False if the transaction wasn't started or it was rolled back.
   */
  function addUserTransaction($dbh, $member, $cu, $hash, $ref3, $egenl_flag, $HB_ENV, $MC, $retry, $phoneNumber, $estatements, $accountData = null) {
    try {
      $logger = $HB_ENV["SYSENV"]["logger"];
      $sql = "select user_id, user_name, group_id, email from {$cu}user where user_name = '$member'";
      $sth = db_query($sql, $dbh);
      if (!$sth) {
        throw new exception("User select query failed.", 1);
      }

      $groupExists = false;
      $userTable = array(
        'user_name' => $member,
        "is_group_primary" => true,
        'passwd' => $hash,
        'email' => $ref3,
        'failedremain' => $retry,
        'forcechange' => "Y",
        'forceremain' => 1,
        'egenl_flag' => $egenl_flag,
        'pwchange' => 'now',
        "userflags" => 2);
      $groupTable = array(
        "group_name" => "g$member",
        "contact" => 0
        );

      if ($phoneNumber != '') {
        // ** Only properly format if it is entered
        $phoneNumber = preg_replace('/\D+/', "", $phoneNumber);
        $phoneNumber = "(" . substr($phoneNumber, 0, 3) . ") " . substr($phoneNumber, 3, 3) . "-" . substr($phoneNumber, 6);
        $phoneArray = array("mobile" => Array($phoneNumber));
      } else {
        $phoneArray = array("mobile" => Array());
      }
      $phoneTable = array("_action" => "create", "phones" => HCU_JsonEncode($phoneArray));

      if (db_num_rows($sth) > 0) {
        $row = db_fetch_assoc($sth, 0);
        $userTable["user_id"] = $row["user_id"];
        $userTable["_action"] = "update";

        if (isset($row["group_id"])) {
          $groupId = $row["group_id"];
          $sql = "select group_id from ${cu}group where group_id = " . intval($row["group_id"]);
          $sth = db_query($sql, $dbh);
          if (!$sth) {
            throw new exception("Group select query failed.", 2);
          }
          $groupExists = db_num_rows($sth) > 0;
        }

        $userShort = "U_UPD";
      } else {
        $userTable["user_id"] = "";
        $userTable["_action"] = "create";
        $userShort = "U_ADD";
      }

      $sql = "select profile_id from cu_profile where cu = '$cu' and profile_code = '" . getDefaultProfileName($HB_ENV) . "'";
      $sth = db_query($sql, $dbh);
      if (!$sth) {
        throw new exception("Default profile select query failed.", 5);
      }
      $profileId = db_fetch_row($sth, 0)[0];
      $profileId = isset($profileId) ? intval($profileId) : 0;
      if ($profileId == 0) {
        throw new exception("Group needs to be attached to the default profile which apparently doesn't exist.", 6);
      }

      $groupTable["profile_id"] = $profileId;

      if (!$groupExists) {
        $sql = "select nextval('${cu}group_group_id_seq'::regclass)";
        $sth = db_query($sql, $dbh);
        if (!$sth) {
          throw new exception("Nextval query failed.", 3);
        }
        $groupId = intval(db_fetch_row($sth, 0)[0]);

        $userTable["group_id"] = $groupId;
        $groupTable["group_id"] = $groupId;
        $groupTable["_action"] = "create";

        $groupShort = "G_ADD";
      } else {
        $groupTable["_action"] = "update";
        $groupTable["group_id"] = $groupId;

        $groupShort = "G_UPD";
      }

      // Ensure that it isn't necessary to back out from the select functions before changing anything in the database.
      /*
       * User Activation occurs prior to the Session cookie being created.
       * The low level functions are looking for the Fset flags rather than their counterpart 'flagset'
       *   Set the Fset values here so they can be called at the lower leve.
       * The reason not to just change low level functions to use the flagset is to keep in mind the AppFeed script
       *   may also call those functions and may not have those values set
       */
      $HB_ENV['Fset'] = $HB_ENV['flagset'];
      $HB_ENV['Fset2'] = $HB_ENV['flagset2'];
      $HB_ENV['Fset3'] = $HB_ENV['flagset3'];

      if (!isset($accountData)) {
        $accountData = FindMemberAccounts($HB_ENV, array("member" => $member));
        switch ($accountData["code"]) {
          case "001":
            throw new exception("No data was found.", 6);
            break;
          case "999":
            throw new exception($accountData["error"], 7);
            break;
          case "000":
            break; // The correct case with data.
          default:
            throw new exception("There was an internal problem.", 8);
            break;
        }
      } else if (is_array($accountData)) {

        // Now need to validate it to see if it is the same format.
        if (!HCU_array_key_exists("code", $accountData) || $accountData["code"] != "000") {
          throw new exception("Data is in a bad format.", 12);
        }

        if (!HCU_array_key_exists("data", $accountData) || !HCU_array_key_exists("accounts", $accountData["data"])) {
          throw new exception("Data is in a bad format.", 13);
        }
      } else {
        throw new exception("Data is in a bad format.", 11);
      }

      $sql = "select ma.accountnumber, ma.primary_user, ma.allowenroll, u.user_id, ma.estmnt_flag from ${cu}memberacct ma
              left join ${cu}user u on ma.primary_user = u.user_id where trim(ma.accountnumber) = '$member'";
      $sqls[] = $sql;
      $sth = db_query($sql, $dbh);
      if (!$sth) {
        throw new exception("Select query failed.", 14);
      }
      $memberAcctExists = $userExists = db_num_rows($sth) > 0;
      $changePrimaryUser = false;
      $allowEnroll = false;
      $changeEstatements = false; // If estatements is already set to Y, don't modify that.  If it is any other value, then change it to the estatement flag.
      if ($memberAcctExists) {
        $row = db_fetch_assoc($sth, 0);
        $userExists = isset($row["user_id"]);
        $changePrimaryUser = intval($row["primary_user"]) == 0 || !isset($row["user_id"]); // Set the primary user if it is zero or if it doesn't relate to a user.
        $allowEnroll = $row["allowenroll"];
        $changeEstatements = !isset($row["estmnt_flag"]) || trim($row["estmnt_flag"]) != "Y"; // Set the estatement flag if it doesn't exist or if it isn't already Yes.
      }

      if ($memberAcctExists && !$allowEnroll) {
        throw new exception("Member account doesn't allow member activation.", 9);
      }

      $sql = "select nextval('${cu}usercontact_contact_id_seq'::regclass)";
      $sqls[] = $sql;
      $sth = db_query($sql, $dbh);

      if (!$sth) {
        throw new exception("Nextval query failed.", 10);
      }

      $contactId = intval(db_fetch_row($sth, 0)[0]);

      $phoneTable["contact_id"] = $contactId;
      $userTable["contact"] = $contactId;
      $groupTable["contact"] = $contactId;

      if (!db_work ($dbh, HOMECU_WORK_BEGIN)) {
        throw new exception("Unable to begin transaction.", 4);
      }

      $userId = HCU_array_key_exists("user_id", $userTable) ? $userTable["user_id"] : null;
      if (DataUserTableUpdate($dbh, $HB_ENV, $MC, array("user" => array($userTable)), $userId, $userShort, $HB_ENV['platform'], $HB_ENV['currentscript'], 'U', 'Activate User', $member,
        $ref3, $HB_ENV['remoteIp']) === false) {
        throw new exception("User update failed.", 101);
      }

      // Need to get the UID of the user record to associate it to the user account record.  This should exist at this point.
      $sql = "select user_id from ${cu}user where trim(user_name) = '$member'";
      $sqls[] = $sql;
      $sth = db_query($sql, $dbh);
      if (!$sth) {
        throw new exception("user_id query failed.", 104);
      }
      if (db_num_rows($sth) == 0) {
        throw new exception("user_id not found.", 105);
      }
      $userId = intval(db_fetch_row($sth, 0)[0]);

      if (DataUserTableUpdate($dbh, $HB_ENV, $MC, array("usercontact" => array($phoneTable)), $userId, "UC_ADD", $HB_ENV['platform'], $HB_ENV['currentscript'], 'U', 'Activate User', $member,
        $ref3, $HB_ENV['remoteIp']) === false) {
        throw new exception("User contact failed.", 109);
      }

      if (DataUserTableUpdate($dbh, $HB_ENV, $MC, array("group" => array($groupTable)), $userId, $groupShort, $HB_ENV['platform'], $HB_ENV['currentscript'], 'U', 'Activate User', $member,
        $ref3, $HB_ENV['remoteIp']) === false) {
        throw new exception("Group update failed.", 102);
      }

      // Add subaccounts
      $subaccountInfo = $accountData["data"]["accounts"];

      // ** List of account numbers we processed during XAC updates
        // * list maintained to not over query an account we know we
        // * have processed.
      $processedMbrAcct = Array();

      foreach($subaccountInfo as $type => $subaccounts) {
        foreach($subaccounts as $subaccount) {
          $canWithdraw = HCU_array_key_exists("may_withdraw", $subaccount) ? !!$subaccount["may_withdraw"] :
            (HCU_array_key_exists("may_addon", $subaccount) ? !!$subaccount["may_addon"] : false);
          $canDeposit = HCU_array_key_exists("may_deposit", $subaccount) ? !!$subaccount["may_deposit"] :
            (HCU_array_key_exists("may_payment", $subaccount) ? !!$subaccount["may_payment"] : false);

          if ($type == "xa") {
            // ** Support XAC
            if (($HB_ENV['flagset3'] & GetFlagsetValue("CU3_CREATE_ACCESS_CONTROL_FROM_XAC")) == 0) {
              // ** XAC records get added as an overloaded type in the accounttype column  99#99999
              $newAcctNbr = $member;    // * this will always be the "main" member number that is being added
              $newAcctSfx = HCU_array_key_value("accounttype", $subaccount) . '#' . HCU_array_key_value("tomember", $subaccount);
              $newAcctCrt = ($type == "deposit" ? HCU_array_key_value("certnumber", $subaccount) : '0');
              $newAcctRec = HCU_array_key_value("deposittype", $subaccount) == 'L' ? 'P' : 'T';

            } else {
              if (trim(HCU_array_key_value("tomember", $subaccount)) == trim(HCU_array_key_value("accountnumber", $subaccount))) {
                /* ** SKIP ** */
                // * Skip this XAC record IF the accountnumber matches the tomember.  This means it is a circular reference.
                continue;
              }
              // ** XAC records get added as their own PRIMARY account -- They will have their own account setup in Access Control
              $newAcctNbr = HCU_array_key_value("tomember", $subaccount);
              $newAcctSfx = HCU_array_key_value("accounttype", $subaccount);
              $newAcctCrt = '0';
              $newAcctRec = HCU_array_key_value("deposittype", $subaccount) == 'L' ? 'L' : 'D';

              // ** Need to identify if the Member has been added to the memberacct table

              if (!in_array($newAcctNbr, $processedMbrAcct)) {
                if (!FindMemberAccountExists ($dbh, $HB_ENV['cu'], $newAcctNbr)) {
                  // ** add the account number to the array of processed
                  $processedMbrAcct[] = $newAcctNbr;
                  // ** memberacct record NOT found

                  $memberRecords = array("memberacct" => array(array("_action" => "create", "accountnumber" => $newAcctNbr, "primary_user" => 0, "allowenroll" => true)));

                  if (DataUserTableUpdate($dbh, $HB_ENV, null, $memberRecords, $userId, "UM_ADD", HCU_array_key_value("platform", $HB_ENV), HCU_array_key_value('currentscript', $HB_ENV), "A", "Auto Add Member Acct", HCU_array_key_value('Cn', $HB_ENV), '', HCU_array_key_value('remoteIp', $HB_ENV)) === false) {
                    throw new exception("Adding member account relationship failed.", 110);
                  }

                }
              }

            }
          } else {
            $newAcctNbr = $member;    // * this will always be the "main" member number that is being added
            $newAcctSfx = ($type == "deposit" ? $subaccount["accounttype"] : $subaccount['loannumber']);
            $newAcctCrt = ($type == "deposit" ? HCU_array_key_value("certnumber", $subaccount) : '0');
            $newAcctRec = ($type == "deposit" ? 'D' : 'L');
          }

          $createRecords[] = array("_action" => "create", "user_id" => $userId, "display_name" => "",
            "accountnumber" => $newAcctNbr, "accounttype" => $newAcctSfx,
            "certnumber" => $newAcctCrt,
            "recordtype" => $newAcctRec,

            "view_balances" => ($type == 'xa' ? false : true), "view_transactions" => ($type == 'xa' ? false : true), "int_deposit" => $canDeposit,
            "ext_deposit" => ($type == 'xa' ? false : $canDeposit), "int_withdraw" => $canWithdraw, "ext_withdraw" => ($type == 'xa' ? false : $canWithdraw),
            "display_order" => 0);
        }
      }
      $createRecords = array("useraccounts" => $createRecords);

      if (DataUserTableUpdate($dbh, $HB_ENV, $MC, $createRecords, $userId, "UA_ADD", $HB_ENV['platform'], $HB_ENV['currentscript'], 'U', 'Activate User', $member,
        $ref3, $HB_ENV['remoteIp']) === false) {
          throw new exception("User account add failed.", 106);
      }

      if ($memberAcctExists) {
        $memberAcctModify = array("_action" => "update", "accountnumber" => $member, "allowenroll" => false);
        $changePrimaryUser ? $memberAcctModify["primary_user"] = $userId : null;
        $changeEstatements ? $memberAcctModify["estmnt_flag"] = $estatements ? "Y" : "N" : null;
      } else {
        $memberAcctModify = array("_action" => "create", "accountnumber" => $member, "primary_user" => $userId, "estmnt_flag" => $estatements ? "Y" : "N", "allowenroll" => false);
      }

      $memberAcctModify = array("memberacct" => array($memberAcctModify));

      if (DataUserTableUpdate($dbh, $HB_ENV, $MC, $memberAcctModify, $userId, $memberAcctExists ? "UM_UPD" : "UM_ADD", $HB_ENV['platform'], $HB_ENV['currentscript'], 'U', 'Activate User',
        $member, $ref3, $HB_ENV['remoteIp']) === false) {
        throw new exception("User member modify failed.", 107);
      }

      $official = array(
        array("_action" => "create", "accountnumber" => $member, "user_id" => $userId, "whichright" => "ACCESS"),
        array("_action" => "create", "accountnumber" => $member, "user_id" => $userId, "whichright" => "ES", "platform" => '["D","A"]'),
        array("_action" => "create", "accountnumber" => $member, "user_id" => $userId, "whichright" => "BP", "platform" => '["D","A"]'),
        array("_action" => "create", "accountnumber" => $member, "user_id" => $userId, "whichright" => "RDC", "platform" => '["D","A"]'),
      );

      $official = array("memberacctrights" => $official);

      if (DataUserTableUpdate($dbh, $HB_ENV, $MC, $official, $userId, "MAR_ADD", $HB_ENV['platform'], $HB_ENV['currentscript'], 'U', 'Activate User',
        $member, $ref3, $HB_ENV['remoteIp']) === false) {
        throw new exception("Adding rights failed.", 108);
      }

      if (!db_work ($dbh, HOMECU_WORK_COMMIT)) {
        throw new exception("commit work failed.", 103);
      }

    } catch(exception $e) {
      $logger->error($e->getMessage());

      if ($e->getCode() >= 100) {
        db_work ($dbh, HOMECU_WORK_ROLLBACK);
      }
      return false;
    }
    return true;
  }

  /*
   * move throtlpkt after import of cu variable
   */
// NOTE: This is called in hcuService, but should hcuService be after dms_import_v2?

  $cu = $HB_ENV["cu"];
  $cu = preg_replace("/[^A-Za-z0-9]/","",$cu);
  $cu = substr($cu,0,12);
  $chome = strtolower($cu);
  $backto = "/~$chome/mindex.html";

  // this is available from hcuService: $offline = $HB_ENV["HCUPOST"]["offline"];

  $sql = "select offlinestat, coalesce(retrylimit,5), coalesce(gracelimit,3),
                livebatch, trim(liveserver), settings::json->>'profile' from cuadmin where cu = '$cu'";
  $sth = db_query($sql,$dbh);
  list ($offline,$retry,$grace,$livebatch,$fetcher,$profile) = db_fetch_array($sth,0);

  $offline = (trim($offline) == '' ? 'N' : trim($offline));
  $profile = $profile === null ? null : trim($profile);

  $self = $_SERVER['PHP_SELF'];

  $gCaptchaResponse = trim( $HB_ENV["HCUPOST"]['g-recaptcha-response'] );

  // these fields are always supplied for the ActivateMember form (might only be one of custom1, custom2)
  $ref1 = htmlentities(trim($HB_ENV["HCUPOST"]["ref1"]));
  $ref2 = htmlentities(trim($HB_ENV["HCUPOST"]["ref2"]));
  $ref3 = htmlentities(trim($HB_ENV["HCUPOST"]["ref3"]));       // this is always the email
  $previousDate = htmlentities(trim($HB_ENV["HCUPOST"]["previousDate"]));
  $custom1 = htmlentities(trim($HB_ENV["HCUPOST"]["custom1"])); // if provided, it is the numeric portion of address
  $custom2 = htmlentities(trim($HB_ENV["HCUPOST"]["custom2"])); // if provided, it is the home phone number (but could be cell number)
  $mobile1 = htmlentities(trim($HB_ENV['HCUPOST']['mobile1'])); // (optional) A mobile phone to save to the user's contact record

  // this may or may not be supplied for the ActivateMember form
  $class = HCU_array_key_exists("class", $HB_ENV["HCUPOST"]) ? strtoupper(trim($HB_ENV["HCUPOST"]["class"])) : "";
  $class = $class == "B" ? "B" : "";

  // these are only needed for the secure form validation
  $member = htmlentities(trim($HB_ENV["HCUPOST"]["member"])); // ACTUALLY, this is also used for all member activation forms (secure form, regular, and PIN.)
  $pfirst = htmlentities(trim($HB_ENV["HCUPOST"]["pfirst"]));
  $plast = htmlentities(trim($HB_ENV["HCUPOST"]["plast"]));
  $ssn = htmlentities(trim($HB_ENV["HCUPOST"]["ssn"]));
  $bdate = htmlentities(trim($HB_ENV["HCUPOST"]["bdate"]));
  $email = htmlentities(trim($HB_ENV["HCUPOST"]["email"])); // ACTUALLY, this is also used in the PIN option.
  $password = htmlentities(trim($HB_ENV["HCUPOST"]["password"]));
  $hint = htmlentities(trim($HB_ENV["HCUPOST"]["hint"]));

  // Only needed for PIN
  $confirm = htmlentities(trim($HB_ENV["HCUPOST"]["confirm"]));
  $pin = htmlentities(trim($HB_ENV["HCUPOST"]["pin"]));

  // ** INCLUDE PRE CONTENT SCRIPT
  require_once(dirname(__FILE__) . '/../includes/hcuPreContent.i');

  ?>
  <style type="text/css">
  .container-fluid-margin {
    margin: 15px;
  }

  .k-block > .k-header {
    white-space: normal;
    height: 100%;
  }

  .hcu-info-margin, .hcu-error-margin {
    margin: 15px 0;
  }

  .hcu-info-padding, .hcu-error-padding {
    padding: 15px;
  }

  .hcu-full-width {
    width: 100%;
  }
  /* top-bottom margin */
  .hcu-container-margin {
    margin: 15px 0;
  }

  .hide-for-apps {
    <?php if ( isset( $_COOKIE["cookie"] ) && $_COOKIE["cookie"] == "mobile_app_access" ) { ?>
      display: none;
    <?php } ?>
  }
  </style>
  <?php

  // start the output contents
  $outputContent = "";

  $outputContent .= sprintf( "<FORM id='form1' class='formInputx' ACTION='{$self}?cu={$cu}&Flang=$Flang' METHOD=post >
        <input type='hidden' name=cu value='$cu'>
        <input type='hidden' name=action value='activate'>" );

  // all paths validate with the CAPTCHA, so do it here
  $msg = "";
  if ( strlen( $action ) > 0 ) {

    // Do not verify on localhost because the captcha doesn't work by default there.  To test the captcha, 1) make run, 2) create an alias to localhost: yourname.homecu.io,
    // 3) replace the localhost in the URL with yourname.homecu.io.
    if ( !$HB_ENV["SYSENV"]["devmode"]) {
    if (strlen( $gCaptchaResponse ) ) {
      // super-secret key - do not share publicly
      $reCaptchaSecret = GetCaptchaSecret();

      $url = "https://www.google.com/recaptcha/api/siteverify?secret=$reCaptchaSecret&response=$gCaptchaResponse&remoteip=".$_SERVER['REMOTE_ADDR'];

      $response = file_get_contents($url);
      $responseObj = HCU_JsonDecode($response);

      if ( $responseObj["success"] == false ) {
        if ( $responseObj["error-codes"] ) {
          $msg .= $MC->msg("Error Occurred", HCU_DISPLAY_AS_HTML) . "<br>";
          $errorCodes = $responseObj["error-codes"];

          for ( $i = 0; $i < count( $errorCodes ); $i++ ) {
            $code = $errorCodes[$i];
            $errorString = "";
            if ( $code == "missing-input-secret" ) {
              $errorString = "The secret parameter is missing.";
            } else if ( $code == "invalid-input-secret" ) {
              $errorString = "The secret parameter is invalid or malformed.";
            } else if ( $code == "missing-input-response" ) {
              $errorString = "The response parameter is missing.";
            } else if ( $code == "invalid-input-response" ) {
              $errorString = "The response parameter is invalid or malformed.";
            } else {
              $errorString = "Unknown CAPTCHA test failure";
            }

            $msg .= "  &bull; $errorString<br />";
          }
        } else {
          // since this is regarding the captcha, use just English
          $msg .= "CAPTCHA test failed.<br>";
        }
      }
    } else {
      // since this is regarding the captcha, use just English
      $msg .= "Please validate using the CAPTCHA.<br>";
    }}

    if (isset($HB_ENV["HCUPOST"]["reqfields"])) {
      // these are hidden fields in the form the member submits
      $reqfields = str_replace('"','',$HB_ENV["HCUPOST"]["reqfields"]);
      $reqtitles = str_replace('"','',$HB_ENV["HCUPOST"]["reqtitles"]);
      $reqtypes = str_replace('"','',$HB_ENV["HCUPOST"]["reqtypes"]);
      $reqfields = explode(',',$reqfields);
      $reqtitles = explode(',',$reqtitles);
      $reqtypes = explode(',',$reqtypes);
      foreach($reqfields as $key => $f) {
        if(!isset($$f)) {
          if(isset($reqtitles[$key])) {
            $msg .= $reqtitles[$key] . " " . $MC->msg("is a Required Field", HCU_DISPLAY_AS_HTML) . "<br>";
          } else {
            $msg .= $MC->msg("Critical Field Missing", HCU_DISPLAY_AS_HTML) . " ($f) <br>";
          }
        } else {
          if(isset($reqtypes[$key])) {
    #    valid types numeric (digits only), date, email, string (no edit)
            switch($reqtypes[$key]) {
              case "numeric":
                if (preg_match("/\D/", $$f)) {
                  $msg .= $MC->msg('Invalid entry', HCU_DISPLAY_AS_HTML);
                  if (isset($reqtitles[$key])) $msg .= " - " . $reqtitles[$key];
                  $msg .= "<br>";
                }
              break;
              case "date":
                if ( $f == "ref1" && $class != "B" ) {
                  $parts = explode( "/", $$f );
                  $m = intval($parts[0]);
                  $d = intval($parts[1]);
                  $y = intval($parts[2]);
                  if (!checkdate($m, $d, $y)) {
                    $msg .= $MC->msg('Invalid Date Format', HCU_DISPLAY_AS_HTML);
                    if (isset($reqtitles[$key])) $msg .= " - " . $reqtitles[$key];
                    $msg .= "<br>";
                  }
                }
              break;
              case "email":
                if (!validateEmail($$f)) {
                  $msg .= $MC->msg('Email appears invalid', HCU_DISPLAY_AS_HTML);
                  if (isset($reqtitles[$key])) $msg .= " - " . $reqtitles[$key];
                  $msg .= "<br>";
                }
              break;
              case "string":
                if(preg_match("/[;`]/", $$f)) {
                  $msg .= $MC->msg('Invalid entry', HCU_DISPLAY_AS_HTML);
                  if (isset($reqtitles[$key])) $msg .= " - " . $reqtitles[$key];
                  $msg .= "<br>";
                }
                break;
              case "phone":
                // strip out (,),-,<space> and should only have digits left
                $search = array("(", ")", "-", " " );
                $testVal = str_replace( $search, "", $$f );
                if ( !ctype_digit( $testVal ) ) {
                  $msg .= $MC->msg('Invalid entry', HCU_DISPLAY_AS_HTML);
                  if (isset($reqtitles[$key])) $msg .= " - " . $reqtitles[$key];
                  $msg .= "<br>";
                }
                break;
              default:
                $msg .= $MC->msg('Invalid entry', HCU_DISPLAY_AS_HTML) . " :(";
                if (isset($reqtitles[$key])) $msg .= " - " . $reqtitles[$key];
                $msg .= "<br>";
            }
          }
        }
      }
    }
  }

  $option = 0;

  /* *****************************************
   * OPTION 1: MIR packet authentication
   * *****************************************/
  if ( $HB_ENV['flagset3'] & $CU3_ENROLL_MIR ) {
    $option = 1;
    /*
     * RETRIEVE the ActivateMember and ActivateThanks custom content
     * THE disclosure is provided by signupDisclosure and is optional if not existing
     * NOTE: NO ESTATEMENT SIGNUP WITH THIS TYPE OF ACTIVATION
     */
    $activateContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "ActivateMember", true);
    $thanksContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "ActivateMemberThanks", true);

    $disclosureContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "signupDisclosure", 0);
    $disclosureTarget = $disclosureContent["notice"][0]["notice_linktarget"];

    $estatementContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "esTermsStart", 0);
    $estmtLinkTarget = $estatementContent["notice"][0]["notice_linktarget"];

    // make sure notice and other stuff are available
    $livebatch = ($HB_ENV['live'] == 1 ? "L" : "B");
    if ( $livebatch != "L" ||
         $activateContent["status"]["code"] != "000" ||
         !$activateContent["notice"][0]["notice_id"] ||
         $thanksContent["status"]["code"] != "000" ||
         !$thanksContent["notice"][0]["notice_id"] ||
         $profile === null) {
      // not a live interface, or missing custom content, or MA trancode not allowed
      $serviceErrorTitle = $MC->msg("Feature Unavailable", HCU_DISPLAY_AS_HTML);
      $serviceErrorMsg = $MC->msg('Feature Not Set', HCU_DISPLAY_AS_HTML) . ".  " . $MC->msg('Contact CU', HCU_DISPLAY_AS_HTML);

      $serviceErrorCode = 915;
      require(dirname(__FILE__) . "/../includes/hcuErrorPage.i");
      exit;
    }


    if (isset($action)) {
      # if $reqfields list is provided, make sure listed fields are present
      # if $reqtitles list is provided, use provided titles in error message
      # if $reqtypes list is provided, check input to be specific type
      #    valid types numeric (digits only), date, email, string (no edit)
      # make sure member number is provided and numeric
      # make sure member number is for a member who has never logged in
      # make sure ref3 (email address) is provided & appears valid
      # make sure at least one of (ref1,ref2) is provided
      # make sure at least one of (custom1,custom2) is provided
      #
      $member = htmlentities(trim($HB_ENV["HCUPOST"]["member"]));
      $optin = htmlentities(trim($HB_ENV["HCUPOST"]["optin"]));

      // Monitor Flag - Odyssey Options: Allow member accounts with leading zeros.
      // If this flag is not set we must strip the leading zeros from the account
      // number.
      if (($HB_ENV['flagset3'] & GetFlagsetValue("CU3_ALLOW_LEAD_ZEROS")) == 0) {
        $member = preg_replace("/^0*/","",$member);
      }
      $userFound = false;

      CheckUserMemberValidity($member, $HB_ENV, $msg, $userFound);

      if ( trim($member) == "") {
          $msg .= $MC->msg("Member Number Missing", HCU_DISPLAY_AS_HTML) . "<br>";
      }
      if (!is_numeric($member)) {
          $msg .= $MC->msg('Member Number Numeric', HCU_DISPLAY_AS_HTML) . "<br>";
      }
      if ( trim($ref3) == "") {
          $msg .= $MC->msg("EMail Missing", HCU_DISPLAY_AS_HTML) . "<br>";
      }
      if (!validateEmail($ref3)) {
          $msg .= $MC->msg('Email appears invalid', HCU_DISPLAY_AS_HTML) . "<br>";
      }
      // need last four of soc sec or EIN (ref1) and birth date (ref2) and
      //    either numeric portion of address (custom1) or home phone (custom2)
      // NOTE: business accounts use EIN and don't require birth date.
      if ( strlen(trim($ref1)) != 4 || ($class !== "B" && trim($ref2) == "") ||
           trim("$custom1$custom2") == "") {
          $msg .= $MC->msg("Critical Field Missing", HCU_DISPLAY_AS_HTML) . "<br>";
      }

      /** Validate Mobile Phone **/
      if (strlen(trim($mobile1)) > 0) {
        $phones = array("mobile" => $mobile1);
        $phoneErr = array();

        // ** Valid formats are (999) 999-9999 (999)999-9999
        if (!preg_match('/^\(\\d{3}\)[\\s]{0,1}\\d{3}-\\d{4}$/', $mobile1)) {
          // ** Invalid Mobile Number Format
          $msg .= $MC->msg("enter valid cell", HCU_DISPLAY_AS_HTML) . "<br>";
        }
      }
      $egenl_flag = (isset($optin) && $optin == 'Y' ? 'Y' : 'N');

      if (empty($msg)){
        // see if the core can provide a MIR packet
        $MIR = GetMemberInfo($HB_ENV, array("member" => $member));

        $statcode = $MIR["code"];
        if ($statcode == '000') {

          // now validate the parameters
          $validTests = true;

          // ref1 = last 4 of SSN
          $test1 = substr( $MIR["data"]["ssn"], -4 );

          if ( $validTests && $test1 != $ref1 ) {
            $validTests = false;
          }

          // birth date is not required for business accounts
          if ( $class == "B" ) {
            // verify the account is a business account
            if ( strtoupper( $MIR["data"]["class"]) != "B" &&
                 strtoupper( $MIR["data"]["class"]) != "T" ) {
              $validTests = false;
            }
          } else {
            // ref2 = birth date (figure out if yyyymmdd or mm/dd/yyyy or yyyy/mm/dd; always get into yyyymmdd format)
            // NOTE: this allows /,-,., and <space> for delimiters
            $validDate = false;
            if ( preg_match( "/^\\d{4}[-\/]\\d{2}[-\/]\\d{2}$/", $MIR["data"]["dob"] ) ) {
              // yyyy/mm/dd
              $test2 = preg_replace("/[^0-9]/", '', $MIR["data"]["dob"]);
              $validDate = true;
            } else if ( preg_match( "/^\\d{2}[-\/]\\d{2}[-\/]\\d{4}$/", $MIR["data"]["dob"] ) ) {
              // mm/dd/yyyy
              $test2 = substr( $MIR["data"]["dob"], -4 ) . substr( $MIR["data"]["dob"], 0, 2 ) . substr( $MIR["data"]["dob"], 3, 2 );
              $validDate = true;
            } else if ( ctype_digit( $MIR["data"]["dob"] ) && strlen( $MIR["data"]["dob"] ) == 8 ) {
              // yyyymmdd, but check the year to make sure
              $yearTest = substr( $MIR["data"]["dob"], 0, 4 );
              if ( $yearTest > 1900 ) {
                $test2 = $MIR["data"]["dob"];
                $validDate = true;
              }
            }

            if ( $validDate ) {
              // member entered date will always be mm/dd/yyyy
              $testDOBParts = explode( "/", $ref2 );
              $testDOB = $testDOBParts[2] . $testDOBParts[0] . $testDOBParts[1];
              if ( $validTests && $testDOB != $test2 ) {
                $validTests = false;
              }

            }
          }

          /* Test numeric portion of address. This is the first number.  If the address is 7035 sw 39rd ave, it is 7035, not 39 and definitely not 703539 which it was before. */
          $matches = array();
          $test4 = "";
          if ($custom1 != "") {
            $validCustom = preg_match('/^\D*(\d+)/', $MIR["data"]["address1"] . " " . trim($MIR["data"]["address2"]), $matches);
            // From the start of the string, match any number of non-digits and then save one or more digits after that.
            if (count($matches) > 1) {
              $test4 = $matches[1];
            }

            // NOTE: May need to test for case where PO Box is not numberic: e.g. PO BOX FF.
            //       Also, could be "PO BOX" or "P.O. BOX" or "POB", etc.
            $validTests = $validTests && $test4 == $custom1;
          }

          $setUserMobile = '';
          // custom2 = home phone number (but still check cell if home phone fails) - only test if exists
          if ( strlen( $custom2 ) > 0 ) {
            $test5_1 = preg_replace("/[^0-9]/", '', $MIR["data"]["homephone"]);
            $testPhone = preg_replace("/[^0-9]/", '', $custom2);
            if ( $validTests ) {
              if ( $test5_1 != $testPhone ) {
                // test the cell phone, too, just in case
                $test5_2 = preg_replace("/[^0-9]/", '', $MIR["data"]["cellphone"]);
                if ( $test5_2 != $testPhone ) {
                  $validTests = false;
                }
              }
            }
          }

          // ** mobile1 - Add mobile number if it is entered
          if ( strlen($mobile1) > 0) {
            // ** Passed validation to be here
            $setUserMobile = $mobile1;
          }

          if ( $validTests) {


            # if response is 101, do this stuff
            $newpass = trim(`/usr/bin/pwgen --numerals --no-capitalize 8 1`);
            $hash = trim(password_hash($newpass, PASSWORD_DEFAULT));

            if (addUserTransaction($dbh, $member, $cu, $hash, $ref3, $egenl_flag, $HB_ENV, $MC, $retry, $setUserMobile, false)) { // Cannot currently turn on estatements through MIR

              // update the cucms table, the user has accepted disclosure
              if ($disclosureContent) {
                if ($disclosureContent["notice"][0]["notice_id"]) {
                  // Set up HCUPOST.
                  $HB_ENV['HCUPOST']['notice_id'] = $disclosureContent['notice'][0]['notice_id'];
                  $HB_ENV['HCUPOST']['notice_type'] = $disclosureContent['notice'][0]['notice_type'];
                  $HB_ENV['HCUPOST']['notice_device'] = "D";

                  $HB_ENV["HCUPOST"]['notice_response'] = array("answer" => 1);    // something non-zero but numeric
                  # not sure if the next two are needed -
                  $HB_ENV["HCUPOST"]['notice_cancel'] = "0";
                  $HB_ENV['HCUPOST']['notice_msg_show'] = 1;

                  // Need to get the UID of the user record
                  $sql = "select user_id from ${cu}user where trim(user_name) = '$member'";
                  $sqls[] = $sql;
                  $sth = db_query($sql, $dbh);
                  if (!$sth) {
                    throw new exception("user_id query failed.", 104);
                  }
                  if (db_num_rows($sth) == 0) {
                    throw new exception("user_id not found.", 105);
                  }
                  $HB_ENV["Uid"] = intval(db_fetch_row($sth, 0)[0]);

                  $noticeUpd = Update_NoticeInfo($dbh, $HB_ENV, $MC);
                }
              }

              printMemberThanks($ref3, $newpass, $HB_ENV, $cu, $Flang, $MC, $thanksContent, $member);
              exit;
            } else {
              # something went wrong trying to update the database
              $msg .= $MC->msg('Error Occurred updating settings', HCU_DISPLAY_AS_HTML);
              # should fall through to initial screen w/ message showing
              }
          } else {
            $msg .=  $MC->msg('Authentication Failed', HCU_DISPLAY_AS_HTML) . ". ";

            if (!$userFound) {
              # take care of inserting NULL PASSWORD record
              $sql = "insert into ${cu}user (user_name, passwd, forcechange, forceremain, failedremain, pwchange)
                    values ('$member', 'NULL PASSWORD','Y',$grace, $retry, now())";
            } else {
                # or decrementing retry counter if there already is one.
              $sql = "select hcumbrloginfailed('$cu','$member',$MEM_LOGIN_FAILED_PWD)";
            }
            $sth = db_query($sql,$dbh);
          }
        } else {
          # status response was something other than 101
          $msg = $MC->msg("Unable to activate account", HCU_DISPLAY_AS_HTML) . ".  ";

          // don't give any detailed info as to what failed
          if ($statcode == '001') {
            $msg .=  $MC->msg('Authentication Failed', HCU_DISPLAY_AS_HTML) . ". ";
          }

        }

      }
    }

    $outputContent .= <<<ENDSCRIPT
  <script>
    $(document).ready(function() {
        CloseWaitWindow();

        $.homecuValidator.settings.formStatusField = "formStatus";
        $.homecuValidator.hideMessage();

        $.homecuValidator.setup({formValidate: "form1",
                                 validateOnClick: 'btnSubmit',
                                 formErrorTitle: "{$MC->msg("Error Occurred", HCU_DISPLAY_AS_JS)}",
                                });

      $("#btnSubmit").on('click', function(event) {
          if ( $.homecuValidator.homecuValidate === false ) {

            $('#formStatus').show();
            $(document).scrollTop( 0 );
            event.preventDefault();
          } else {
            ShowWaitWindow('Loading Data');
          }
      });

    });
  </script>
ENDSCRIPT;

  // substitute the form variables
  $outputContent .= strtr($activateContent["notice"][0]["notice_text"],
    array("#member#" => $member, "#ref1#" => $ref1, "#ref2#" => $ref2,
          "#ref3#" => $ref3, "#custom1#" => $custom1, "#custom2#" => $custom2,
          "#mobile1#" => $mobile1, "#class#" => $class, "#estmt_terms_link#" => $estmtLinkTarget,
          "#disclosure_link#" => $disclosureTarget, "#previousDate#" => $previousDate));

  /* ************************************
   * OPTION 4: Core PIN
   * ************************************/

  } else if ($HB_ENV['flagset3'] & GetFlagsetValue("CU3_ENROLL_PIN")) {
    $option = 4;
    /*
     * RETRIEVE the ActivateMember and ActivateThanks custom content
     * THE disclosure is provided by signupDisclosure and is optional if not existing
     * NOTE: NO ESTATEMENT SIGNUP WITH THIS TYPE OF ACTIVATION
     */
    $activateContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "ActivateMemberPin", true);
    $thanksContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "ActivateMemberThanks", true);

    $disclosureContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "signupDisclosure", 0);
    $disclosureTarget = $disclosureContent["notice"][0]["notice_linktarget"];

    $estatementContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "esTermsStart", 0);
    $estmtLinkTarget = $estatementContent["notice"][0]["notice_linktarget"];

    // make sure notice and other stuff are available
    if ( $activateContent["status"]["code"] != "000" || count($activateContent["notice"]) == 0 || !$activateContent["notice"][0]["notice_id"] || $thanksContent["status"]["code"] != "000"
        || !$thanksContent["notice"][0]["notice_id"] || $profile === null) {
      // not a live interface, or missing custom content, or MA trancode not allowed
      $serviceErrorTitle = $MC->msg("Feature Unavailable", HCU_DISPLAY_AS_HTML);
      $serviceErrorMsg = $MC->msg('Feature Not Set', HCU_DISPLAY_AS_HTML) . ".  " . $MC->msg('Contact CU', HCU_DISPLAY_AS_HTML);

      $serviceErrorCode = 915;
      require(dirname(__FILE__) . "/../includes/hcuErrorPage.i");
      exit;
    }

    $errors = array();
    if (isset($action)) {
      // Monitor Flag - Odyssey Options: Allow member accounts with leading zeros.
      // If this flag is not set we must strip the leading zeros from the account
      // number.
      if (($HB_ENV['flagset3'] & GetFlagsetValue("CU3_ALLOW_LEAD_ZEROS")) == 0) {
        $member = preg_replace("/^0*/","",$member);
      }
      $userFound = false;

      CheckUserMemberValidity($member, $HB_ENV, $msg, $userFound);

      $email = isset($email) ? trim($email) : "";
      $confirm = isset($confirm) ? trim($confirm) : "";
      $pin = isset($pin) ? trim($pin) : "";
      if ( trim($member) == "") {
          $msg .= $MC->msg("Member Number Missing", HCU_DISPLAY_AS_HTML) . "<br>";
      } else if (!is_numeric($member)) {
          $msg .= $MC->msg('Member Number Numeric', HCU_DISPLAY_AS_HTML) . "<br>";
      }

      if ( $email == "") {
          $msg .= $MC->msg("EMail Missing", HCU_DISPLAY_AS_HTML) . "<br>";
      } else if (!validateEmail($email)) {
          $msg .= $MC->msg('Email appears invalid', HCU_DISPLAY_AS_HTML) . "<br>";
      } else if (strcmp($confirm, $email) != 0) {
          $msg .= $MC->msg("Email Address Mismatch", HCU_DISPLAY_AS_HTML) . "<br>";
      }

      if ( $pin == "") {
          $msg .= $MC->msg("new PIN not entered", HCU_DISPLAY_AS_HTML) . "<br>";
      } else {
        $results = preg_match('/[^A-Za-z0-9]/', $pin);
        if ($results === 1) {
          $msg .= $MC->msg("PIN alphanumeric", HCU_DISPLAY_AS_HTML) . "<br>";
        }
      }

      // Pass validation, do stuff
      $successful = false;
      $logUnsuccessful = false;
      if ($msg == "") {
        $verifyResults = VerifyMemberPin($HB_ENV, array("member" => $member, "pin" => $pin));

        switch($verifyResults["code"]) {
          case "001": // Invalid account.
              # status response was something other than 101
              $msg = $MC->msg("Unable to activate account", HCU_DISPLAY_AS_HTML) . ".  <br/>";

              // don't give any detailed info as to what failed
              $msg .=  $MC->msg('Invalid Login Password', HCU_DISPLAY_AS_HTML) . ". ";
            break;
          case "002": // Invalid PIN.
            $logUnsuccessful = true;
            break;
          case "000": // It's all good!
            $successful = true;
            break;
          case "003": // Account is closed.
          case "999": // General error.
          default: // None of the above?  I guess treat it as general error.
            # status response was something other than 101
            $msg = $MC->msg("Unable to activate account", HCU_DISPLAY_AS_HTML) . ".  ";
            break;
        }
      }

      if ($successful) {
          # if response is 101, do this stuff
          $newpass = trim(`/usr/bin/pwgen --numerals --no-capitalize 8 1`);
          $hash = trim(password_hash($newpass, PASSWORD_DEFAULT));

          if (addUserTransaction($dbh, $member, $cu, $hash, $email, "N", $HB_ENV, $MC, $retry, '', false, $verifyResults)) { // Cannot currently turn on estatements through PIN

            // update the cucms table, the user has accepted disclosure
            if ($disclosureContent) {
              if ($disclosureContent["notice"][0]["notice_id"]) {
                // Set up HCUPOST.
                $HB_ENV['HCUPOST']['notice_id'] = $disclosureContent['notice'][0]['notice_id'];
                $HB_ENV['HCUPOST']['notice_type'] = $disclosureContent['notice'][0]['notice_type'];
                $HB_ENV['HCUPOST']['notice_device'] = "D";

                $HB_ENV["HCUPOST"]['notice_response'] = array("answer" => 1);    // something non-zero but numeric
                # not sure if the next two are needed -
                $HB_ENV["HCUPOST"]['notice_cancel'] = "0";
                $HB_ENV['HCUPOST']['notice_msg_show'] = 1;

                // Need to get the UID of the user record
                $sql = "select user_id from ${cu}user where trim(user_name) = '$member'";
                $sqls[] = $sql;
                $sth = db_query($sql, $dbh);
                if (!$sth) {
                  throw new exception("user_id query failed.", 104);
                }
                if (db_num_rows($sth) == 0) {
                  throw new exception("user_id not found.", 105);
                }
                $HB_ENV["Uid"] = intval(db_fetch_row($sth, 0)[0]);

                $noticeUpd = Update_NoticeInfo($dbh, $HB_ENV, $MC);
              }
            }

            printMemberThanks($ref3, $newpass, $HB_ENV, $cu, $Flang, $MC, $thanksContent, $member);
            exit;
          } else {
            $msg .= $MC->msg('Error Occurred updating settings', HCU_DISPLAY_AS_HTML);
          }
      } else if ($logUnsuccessful) {
          $msg = $MC->msg("Unable to activate account", HCU_DISPLAY_AS_HTML) . ".  <br/>";
          $msg .=  $MC->msg('Invalid Login Password', HCU_DISPLAY_AS_HTML) . ". ";

          if (!$userFound) {
            # take care of inserting NULL PASSWORD record
            $sql = "insert into ${cu}user (user_name, passwd, forcechange, forceremain, failedremain, pwchange)
                  values ('$member', 'NULL PASSWORD','Y',$grace, $retry, now())";
          } else {
              # or decrementing retry counter if there already is one.
            $sql = "select hcumbrloginfailed('$cu','$member',$MEM_LOGIN_FAILED_PWD)";
          }
          $sth = db_query($sql,$dbh);
      }

    } // End of if there is an action.

    $outputContent .= "<script>
      $(document).ready(function() {
          CloseWaitWindow();

          $.homecuValidator.settings.formStatusField = \"formStatus\";
          $.homecuValidator.hideMessage();

          $.homecuValidator.setup({formValidate: \"form1\",
                                   validateOnClick: 'btnSubmit',
                                   formErrorTitle: \"{$MC->msg('Error Occurred', HCU_DISPLAY_AS_JS)}\",
                                  });

        $(\"#btnSubmit\").on('click', function(event) {
            if ( $.homecuValidator.homecuValidate === false ) {

              $('#formStatus').show();
              $(document).scrollTop( 0 );
              event.preventDefault();
            } else {
              ShowWaitWindow('Loading Data');
            }
        });

      });
    </script>";

  // substitute the form variables
  $outputContent .= strtr($activateContent["notice"][0]["notice_text"], array("#member#" => $member, "#email#" => $email, "#confirm#" => $confirm, "#pin#" => $pin,
                                                                              "#estmt_terms_link#" => $estmtLinkTarget, "#disclosure_link#" => $disclosureTarget));


  } else {
    $sql = "select count(*) from cuhavetrans
               where cu = '$cu' and trancode = 'MA'";
    $sth = db_query($sql,$dbh);
    list($maflag) = db_fetch_array($sth,0);

    /* ********************************
     * OPTION 2: Secure Forms
     * ********************************/

    if ( $maflag == 0 ) {// must be 0
      $option = 2;
      /*
       * RETRIEVE the signupFrm and signupThanks custom content
       * Also get the link for showing the signupDisclosure
       */
      $signupContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "signupFrm", true);
      $signupThanks = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "signupThanks", true);
      // disclosure is required
      $signupDisclosure = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "signupDisclosure", 0);

      $signupDisclosureLinkTarget = count($signupDisclosure["notice"]) > 0 ? $signupDisclosure["notice"][0]["notice_linktarget"] : "";

      $estatementContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "esTermsStart", 0);

      $estmtLinkTarget = count($estatementContent["notice"]) > 0 ? $estatementContent["notice"][0]["notice_linktarget"] : "";

      // make sure notice and other stuff are available
      if ($signupContent["status"]["code"] != "000" ||
           count($signupContent["notice"]) == 0 || !$signupContent["notice"][0]["notice_id"] ||
           $signupThanks["status"]["code"] != "000" ||
           count($signupThanks["notice"]) == 0 || !$signupThanks["notice"][0]["notice_id"] ||
           $signupDisclosure["status"]["code"] != "000" ||
           !$signupDisclosure["notice"][0]["notice_id"]) {
        // not a live interface, or missing custom content, or MA trancode not allowed
        $serviceErrorTitle = $MC->msg("Feature Unavailable", HCU_DISPLAY_AS_HTML);
        $serviceErrorMsg = $MC->msg('Feature Not Set', HCU_DISPLAY_AS_HTML) . ".  " . $MC->msg('Contact CU', HCU_DISPLAY_AS_HTML);

        $serviceErrorCode = 915;
        require(dirname(__FILE__) . "/../includes/hcuErrorPage.i");
        exit;
      }

      if ( isset($action) ) {
        # if $reqfields list is provided, make sure listed fields are present
        # if $reqtitles list is provided, use provided titles in error message
        # if $reqtypes list is provided, check input to be specific type
        #    valid types numeric (digits only), date, email, string (no edit)
        # make sure member number is provided and numeric
        # make sure member number is for a member who has never logged in
        # make sure ref3 (email address) is provided & appears valid
        #
        // sanitize by converting html characters to entities

        // $member, $pfirst, $plast, $ssn, $bdate, $email were gathered earlier as part of the content validation

        // these are not as required
        $pmid = HCU_array_key_exists("pmid", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["pmid"])) : "";
        $addr = HCU_array_key_exists("addr", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["addr"])) : "";
        $city = HCU_array_key_exists("city", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["city"])) : "";
        $state = HCU_array_key_exists("state", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["state"])) : "";
        $zip = HCU_array_key_exists("zip", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["zip"])) : "";
        $home = HCU_array_key_exists("home", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["home"])) : "";
        $cell = HCU_array_key_exists("cell", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["cell"])) : "";
        $work = HCU_array_key_exists("work", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["work"])) : "";
        $workext = HCU_array_key_exists("workext", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["workext"])) : "";
        $agree = HCU_array_key_exists("agree", $HB_ENV["HCUPOST"]) ? htmlentities(trim($HB_ENV["HCUPOST"]["agree"])) : "";

        // Monitor Flag - Odyssey Options: Allow member accounts with leading zeros.
        // If this flag is not set we must strip the leading zeros from the account
        // number.
        if (($HB_ENV['flagset3'] & GetFlagsetValue("CU3_ALLOW_LEAD_ZEROS")) == 0) {
          $member = preg_replace("/^0*/","",$member);
        }
        $userFound = false;

        CheckUserMemberValidity($member, $HB_ENV, $msg, $userFound);

        if ( trim("{$member}") == "") {
            $msg .= $MC->msg("Member Number Missing", HCU_DISPLAY_AS_HTML) . "<br>";
        }
        if (!is_numeric($member)) {
            $msg .= $MC->msg('Member Number Numeric', HCU_DISPLAY_AS_HTML) . "<br>";
        }
        if ( trim("{$email}") == "") {
            $msg .= $MC->msg("EMail Missing", HCU_DISPLAY_AS_HTML) . "<br>";
        }
        if (!validateEmail($email)) {
            $msg .= $MC->msg('Email appears invalid', HCU_DISPLAY_AS_HTML) . "<br>";
        }
        if ( trim("$pfirst") == "" ||
             trim("$plast") == "" ||
             trim("$ssn") == "" ||
             trim("$bdate") == "" ||
             trim("$agree") == "") {
            $msg .= $MC->msg("Critical Field Missing", HCU_DISPLAY_AS_HTML) . "<br>";
        }

        if (empty($msg)){
          // post the request to the admin
          $sslFormsDir = "/home/{$HB_ENV['chome']}/sslforms/";

          /*
           * File name should be
           * Enroll[YYYYMMDDHHNNSS{PID}].html
           */
          $sslFormsFileName = 'Enroll' . date('YmdHis') . posix_getpid() . '.html';

          // get the notification email
          $sql = "SELECT email
                  FROM cuadmnotify
                  WHERE cu = '{$HB_ENV['Cu']}'
                    AND role = 'enrollnotify'";
          $emRs = db_query($sql, $dbh);
          list($notifyEmail) = db_fetch_array($emRs);
          db_free_result($emRs);

          // ** Check the Email exists and directory has sufficient rights
          if ( trim($notifyEmail) == '' || !(is_writable($sslFormsDir)) ) {
            $msg .= $MC->msg('Contact CU', HCU_DISPLAY_AS_RAW) . "<br>";
          }

          if ( empty( $msg )) {
            // set up the secure message
            $secureFormDataAry = array();
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Submission Date",
                                          'value' => "Received on " . date( "m/d/Y") . " at " . date( "H:i T" ) );
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Member",
                                          'value' => $member );
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Primary Member First Name",
                                          'value' => $pfirst );
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Middle Name/Initial",
                                          'value' => $pmid );
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Last Name",
                                          'value' => $plast );
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Last 4 of SSN",
                                          'value' => $ssn );
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Birth Date",
                                          'value' => $bdate );
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Member Email",
                                          'value' => $email );
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Address",
                                          'value' => $addr );
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "City, State Zip",
                                          'value' => "$city, $state $zip" );
            if ( strlen( $home ) ) {
              $secureFormDataAry[] = Array( 'type' => 'field',
                                            'label' => "Home Phone",
                                            'value' => $home );
            }

            if ( strlen( $cell ) ) {
              $secureFormDataAry[] = Array( 'type' => 'field',
                                            'label' => "Cell Phone",
                                            'value' => $cell );
            }

            if( strlen( $work ) ) {
              $workShow = $work;

              if ( strlen( $workext ) ) {
                $workShow .= " ($workext)";
              }
              $secureFormDataAry[] = Array( 'type' => 'field',
                                            'label' => "Work Phone (Ext)",
                                            'value' => "$work ($workext)" );
            }

            if (strlen($password)) {
              $secureFormDataAry[] = Array(
                "type" => "field",
                "label" => "Password",
                "value" => $password
              );
            }

            if (strlen($hint)) {
              $secureFormDataAry[] = Array(
                "type" => "field",
                "label" => "Password Hint",
                "value" => $hint
              );
            }
            $secureFormDataAry[] = Array( 'type' => 'field',
                                          'label' => "Member Agreed To Disclosure",
                                          'value' => $agree );

            // set the destination path/file
            $securePathFileName = $sslFormsDir . $sslFormsFileName;

            // set up the email message
            $emailInfo["target"] = $notifyEmail;
            $emailInfo["reply"] = "";
            $emailInfo["subject"] = "SECURE FORM NOTIFICATION (Enroll)";
            $body =  "A secure enrollment form has been submitted to your site.  You\n";
            $body .= "can retrieve it in the password protected admin directory.\n";
            $body .= "\n\n{$HB_ENV["Cu"]}\n";
            $emailInfo["body"] = $body;

            $secureFormTitle = "Digital Banking Enrollment Request";

            $result = PostSecureMessage( $secureFormDataAry, $securePathFileName, $secureFormTitle, $emailInfo, $HB_ENV );

            // show success
            $telluser = $signupThanks["notice"][0]["notice_text"];

            print $telluser;

            exit;
          }
        }
      }

      $outputContent .= <<<ENDSCRIPT
    <script>
      $(document).ready(function() {
          $.homecuValidator.settings.formStatusField = "formStatus";
          $.homecuValidator.hideMessage();

          $.homecuValidator.setup({formValidate: "form1",
                                   validateOnClick: 'btnSubmit',
                                   formErrorTitle: "{$MC->msg("Error Occurred", HCU_DISPLAY_AS_JS)}",
                                  });

        $('#btnSubmit').on('click', function (event) {
            if ( $.homecuValidator.homecuValidate === false ) {
              $('#formStatus').show();
              $(document).scrollTop( 0 );
              event.preventDefault();
            }
        });

      });
    </script>
ENDSCRIPT;

      $telluser = $signupContent["notice"][0]["notice_text"];

      // substitute data (#estmt_terms_link# is the full href for showing the EStatement terms)
      $pat = array('/#member#/', '/#pfirst#/', '/#pmid#/',
                    '/#plast#/', '/#ssn#/', '/#bdate#/', '/#email#/', '/#addr#/',
                    '/#city#/', '/#state#/', '/#zip#/', '/#home#/', '/#cell#/',
                    '/#work#/', '/#workext#/', '/#password#/', '/#hint#/', '/#disclosure_link#/', '/#estmt_terms_link#/');
      $rep = array($member, $pfirst, $pmid, $plast, $ssn, $bdate, $email, $addr, $city, $state, $zip,
                 $home, $cell, $work, $workext, $password, $hint, $signupDisclosureLinkTarget, $estmtLinkTarget);
      $outputContent .= preg_replace( $pat, $rep, $telluser );

    /* *****************************
     * OPTION 3: MA TRANSACTION
     * *****************************/

    } else {
      $option = 3;
      /*
       * RETRIEVE the ActivateMember and ActivateThanks custom content
       * Also get the link for showing the EStatement terms
       */
      $activateContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "ActivateMember", true);
      $thanksContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "ActivateMemberThanks", true);
      $estatementContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "esTermsStart", 0);

      $estmtLinkTarget = $estatementContent["notice"][0]["notice_linktarget"];

      $disclosureContent = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "signupDisclosure", 0);
      $disclosureTarget = $disclosureContent["notice"][0]["notice_linktarget"];

      // make sure notice and other stuff are available
      if ( $livebatch != "L" ||
           $activateContent["status"]["code"] != "000" ||
           !$activateContent["notice"][0]["notice_id"] ||
           $thanksContent["status"]["code"] != "000" ||
           !$thanksContent["notice"][0]["notice_id"] ) {
        // not a live interface, or missing custom content, or MA trancode not allowed
        $serviceErrorTitle = $MC->msg("Feature Unavailable", HCU_DISPLAY_AS_HTML);
        $serviceErrorMsg = $MC->msg('Feature Not Set', HCU_DISPLAY_AS_HTML) . ".  " . $MC->msg('Contact CU', HCU_DISPLAY_AS_HTML);

        $serviceErrorCode = 902;
        require(dirname(__FILE__) . "/../includes/hcuErrorPage.i");
        exit;
      }

      if (isset($action)) {
        # if $reqfields list is provided, make sure listed fields are present
        # if $reqtitles list is provided, use provided titles in error message
        # if $reqtypes list is provided, check input to be specific type
        #    valid types numeric (digits only), date, email, string (no edit)
        # make sure member number is provided and numeric
        # make sure member number is for a member who has never logged in
        # make sure ref3 (email address) is provided & appears valid
        # make sure at least one of (ref1,ref2) is provided
        # make sure custom1 is provided
        #
        $member = htmlentities(trim($HB_ENV["HCUPOST"]["member"]));
        $ref1 = htmlentities(trim($HB_ENV["HCUPOST"]["ref1"]));
        $ref2 = htmlentities(trim($HB_ENV["HCUPOST"]["ref2"]));
        $ref3 = htmlentities(trim($HB_ENV["HCUPOST"]["ref3"]));       // this is always the email
        $previousDate = htmlentities(trim($HB_ENV["HCUPOST"]["previousDate"]));
        $ref5 = htmlentities(trim($HB_ENV["HCUPOST"]["ref5"]));
        $optin = htmlentities(trim($HB_ENV["HCUPOST"]["optin"]));

        // Monitor Flag - Odyssey Options: Allow member accounts with leading zeros.
        // If this flag is not set we must strip the leading zeros from the account
        // number.
        if (($HB_ENV['flagset3'] & GetFlagsetValue("CU3_ALLOW_LEAD_ZEROS")) == 0) {
          $member = preg_replace("/^0*/","",$member);
        }
        $userFound = false;

        CheckUserMemberValidity($member, $HB_ENV, $msg, $userFound);

        if ( trim("{$member}") == "") {
            $msg .= $MC->msg("Member Number Missing", HCU_DISPLAY_AS_HTML) . "<br>";
        }
        if (!is_numeric($member)) {
            $msg .= $MC->msg('Member Number Numeric', HCU_DISPLAY_AS_HTML) . "<br>";
        }
        if ( trim("{$ref3}") == "") {
            $msg .= $MC->msg("EMail Missing", HCU_DISPLAY_AS_HTML) . "<br>";
        }
        if (!validateEmail($ref3)) {
            $msg .= $MC->msg('Email appears invalid', HCU_DISPLAY_AS_HTML) . "<br>";
        }
        // NOTE: MA enrollment doesn't allow for Business or Trust type accounts.
        if ( trim("$ref1") == "" ||
             trim("$ref2") == "" ||
             trim("$custom1") == "") {
            $msg .= $MC->msg("Critical Field Missing", HCU_DISPLAY_AS_HTML) . "<br>";
        }

        $estmt_flag = isset($ref5) && trim($ref5) != "";
        $egenl_flag = (isset($optin) && $optin == 'Y' ? 'Y' : 'N');

        if (empty($msg)){
          #
          # format and submit MA request
          $Tc = "MA";
          $R1 = (trim($ref1) == '' ? '-': urlencode("$ref1"));
          $R2 = (trim($ref2) == '' ? '-': "$ref2"); # PostTransactionRequest routine in sAPIAppl.i urlencodes this one
          $R3 = "$ref3"; # post_packet routine in throtlpkt.i urlencodes this one
          $R4 = (trim($custom1) == '' ? '-': urlencode("$custom1"));
          $R5 = urlencode("$estmt_flag");

          $txnValues = array( "account" => $member, "txncode" => $Tc, "email" => $ref3, "memo" => "",
            "R1" => $R1, "R2" => $R2, "R3" => $R3, "R4" => $R4, "amount" => "NA" // Specific to this operation.  Whatever these values actually are.
          );
          /* ** NEW SYNTAX ** */
          $txnValues = array(
                             "member" => $member,
                             "type" => "T",
                             "tran_code" => $Tc,
                             "tmemo" => "",
                             "ref1" => $R1,
                             "ref2" => $R2,
                             "ref3" => $R3,
                             "ref4" => $R4
                            );

          $sendResp = SendTransaction( $HB_ENV, "MEMBERACTIVATE", $txnValues );
          $statcode = $sendResp['status']['code'];
          if ($statcode == '999') {
            // ** SendTransaction function did not complete as expected - General error
            $statcode = '999';
            $statreason = "Unable to activate account";
          } else {
            // ** Otherwise - -function completed set the statcode / statreason
            $statreason = HCU_array_key_value("desc", $sendResp['data']);

          }

          if ($statcode == '000' || $statcode == '011') {
            if ($statcode == '011') {
              #
              # response 011 means activation was successful, but the core system could not
              # enroll the member for e-statements.  Send a message to interested folks,
              # then continue as if 000 response.
              #

              $sql = "SELECT email FROM cuadmnotify WHERE cu = '$cu' AND role = 'agree'";
              $em_rs = db_query($sql, $dbh);
              list($agreemail) = db_fetch_array($em_rs, 0);
              db_free_result($em_rs);

              $agreemail = ("$agreemail" == "" ? "cuerror@homecu.net" : "$agreemail");

              $notify = new ErrorMail;
              $notify->mailto = $agreemail;
              $notify->replyto = $ref3;
              $notify->subject = "Member eStatement Setting Failed";
              $notify->msgbody =  "\tMember eStatement Setting Request\n\n";
              $notify->msgbody .= "Member $member requested auto-activation ";
              $notify->msgbody .= "with eStatement setting $R5. \n\n";
              $notify->msgbody .= "The auto-activation was successful, ";
              $notify->msgbody .= "but eStatement setting failed.\n\n";
              $notify->msgbody .= "Member:   {$member}\n";
              $notify->msgbody .= "Member Email:   {$ref3}\n";
              $notify->msgbody .= "Member CU:   {$cu}\n";
              $notify->callingfunction = __FUNCTION__;
              $notify->file = __FILE__;
              $notify->cu = $cu;
              $notify->SendMail();
            }

            # if response is 000, do this stuff
            $newpass = trim(`/usr/bin/pwgen --numerals --no-capitalize 8 1`);
            $hash = trim(password_hash(rtrim($newpass), PASSWORD_DEFAULT));

            if (addUserTransaction($dbh, $member, $cu, $hash, $ref3, $egenl_flag, $HB_ENV, $MC, $retry, $custom2, $estmt_flag)) {

              printMemberThanks($ref3, $newpass, $HB_ENV, $cu, $Flang, $MC, $thanksContent, $member);

              exit;
            } else {
              # something went wrong trying to update the database
              $msg .= $MC->msg('Error Occurred updating settings', HCU_DISPLAY_AS_HTML);
              # should fall through to initial screen w/ message showing
              }
          } else {
            # status response was something other than 000, 011
            $msg = $MC->msg("Unable to activate account", HCU_DISPLAY_AS_HTML) . ".  ";
            if ($statcode == '002') {
              $msg .=  $MC->msg('Authentication Failed', HCU_DISPLAY_AS_HTML) . ". ";
    # if status response was 002, take care of inserting NULL PASSWORD record

              if ($userFound) {
              $sql = "insert into ${cu}user (user_name, passwd, forcechange, forceremain, failedremain, pwchange)
                    values ('$member', 'NULL PASSWORD','Y',$grace, $retry, now())";
              } else {
    # or decrementing retry counter if there already is one.
              $sql = "select hcumbrloginfailed('$cu','$member',$MEM_LOGIN_FAILED_PWD)";
              }
            $sth = db_query($sql,$dbh);
            } elseif ($statcode == '001' || $statcode == '003') {
              $msg .=  $MC->msg('Invalid Member Number', HCU_DISPLAY_AS_HTML);
            } elseif ($statcode != '999') {
              $msg .= "$statreason";
            }
          }

        }
      }

      $outputContent .= <<<ENDSCRIPT
    <script>
      $(document).ready(function() {
          $.homecuValidator.settings.formStatusField = "formStatus";
          $.homecuValidator.hideMessage();

          $.homecuValidator.setup({formValidate: "form1",
                                   validateOnClick: 'btnSubmit',
                                   formErrorTitle: "{$MC->msg("Error Occurred", HCU_DISPLAY_AS_JS)}",
                                  });

        $("#btnSubmit").on('click', function(event) {
            if ( $.homecuValidator.homecuValidate === false ) {
              $('#formStatus').show();
              $(document).scrollTop( 0 );
              event.preventDefault();
            }
        });

      });
    </script>
ENDSCRIPT;

    // substitute the form variables
    // NOTE: not substituting $class because it is not allowed for the MA type activation
    $outputContent .= strtr($activateContent["notice"][0]["notice_text"],
      array("#member#" => $member, "#ref1#" => $ref1, "#ref2#" => $ref2,
            "#ref3#" => $ref3, "#custom1#" => $custom1, "#custom2#" => $custom2,
            "#mobile1#" => $mobile1, "#estmt_terms_link#" => $estmtLinkTarget,
            "#disclosure_link#" => $disclosureTarget, "#previousDate#" => $previousDate));
    }
  }

  // display any error messages
  if ("$msg" > "") {
    $msg = preg_replace('/\r\n|\r|\n/', '</li><li>', rtrim($msg));
    $outputContent .= "
      <script>
        $(document).ready(function() {
          $.homecuValidator.displayMessage('$msg', $.homecuValidator.settings.statusError);
        });
      </script>\n";
  }

if (!$HB_ENV["SYSENV"]["devmode"]) { // Captcha doesn't work on localhost by default nor should it.  So for development, do not show it.
  // add the captcha (reCaptcha v2.0)
  $outputContent .= <<< ENDSCRIPT
    <style scoped>
      #recaptcha_area, #recaptcha_table {
        margin: auto;
      }

      #recap .g-recaptcha > div {
        margin:auto;
      }

      @media (min-width: 768px) {
        #recap .g-recaptcha > div {
          margin-left: 45px;
        }

      }

    </style>
ENDSCRIPT;

  $outputContent .= "<script src='https://www.google.com/recaptcha/api.js' async defer></script>
   <div id='recap'>
    <div class='g-recaptcha' data-sitekey='" . GetCaptchaSiteKey() . "'></div>
   </div>";
}
  // submit and cancel buttons
  if ($option == 4) { // For PIN, do it slightly differently so that it aligns.
    $outputContent .= "<br />
        <div class='container-fluid pinDiv'>
          <div class='row'>
            <div class='col-xs-6'>
              <input class='k-button hcu-all-100' id='btnSubmit' name='BtnSubmit' type='submit' value='{$MC->msg('Submit', HCU_DISPLAY_AS_RAW)}' />
            </div>

            <div class='col-xs-6 hide-for-apps'>
              <input class='k-button hcu-all-100' type='button' value='{$MC->msg("Cancel", HCU_DISPLAY_AS_RAW)}'
              onClick='document.location=\"{$HB_ENV['loginpath']}/hcuLogin.prg?{$HB_ENV['cuquery']}\"' />
            </div>
        </div>";
  } else {
  $outputContent .= <<<ENDSCRIPT
        <br />
        <div class="k-content container-fluid container-fluid-margin">
          <div class="col-xs-12 col-md-9 col-lg-6">
            <div class="row">
              <div class="col-xs-6">
                <input class='k-button' id='btnSubmit' name='BtnSubmit' type='submit' value='{$MC->msg("Submit", HCU_DISPLAY_AS_RAW)}'
                style="width: 100%;"/>
              </div>

              <div class="col-xs-6 hide-for-apps">
                <input class='k-button' type='button' value='{$MC->msg("Cancel", HCU_DISPLAY_AS_RAW)}' onClick='document.location="{$HB_ENV['loginpath']}/hcuLogin.prg?{$HB_ENV['cuquery']}"'
                  style="width: 100%;"/>
              </div>
            </div>
          </div>
        </div>
ENDSCRIPT;
  }

  $outputContent .= "</form>";

  print $outputContent;

  /*
   * ** END CONTENT
   */
  // ** INCLUDE POST CONTENT SCRIPT
  require_once(dirname(__FILE__) . '/../includes/hcuPostContent.i');