";
//	print_r( $_GET );
//	print_r( $_SESSION );
//	print_r( "
cmd: " . $cmd . "
" );
//	print_r( "result: " . $result . "
" );
//	print_r( $output ); exit;

    unlink( $data_fn );
    unlink( $sig_fn );


    if( $result == 0 )
    {
	    $words = explode( ' ', $output[ 2 ] );
	    $id = $words[ count( $words )-1 ];
	    
//		echo "
";
//		print_r( "
id: " . $id . "
" );
//		print_r( "
cmd: " . $cmd . "
" );
//		print_r( "result: " . $result . "
" );
//		print_r( $output ); exit;

		// woohoo!  verified the user
		return $id;
    }
    else
    {
		if( count( $output ) == 11 )
		{
		    $words = explode( ' ', $output[ 10 ] );
		    if( $words[ count( $words )-1 ] == "found" )
		    {
		    	// we don't have the users public key, go fetch
				$url = '/?ow-action=upload-key/';
				wp_redirect($url);
				exit();
		    }
		    else if( false && $words[ 1 ] == "BAD" )
		    {
				// TODO: pretty error message.
				echo "Sorry, we could not verify your login.";
				exit();
		    }
		}
		else if( count( $output ) == 1 ) {
		    $words = explode( ' ', $output[ 0 ] );
			if( $words[ 3 ] == "failed:" ) {
				echo "Sorry, we could not verify your login.";
				exit();
			}						
		}
		open_wallet_failed( $result, $output );
    }
}


function open_wallet_verify_user() {
	$id = open_wallet_verify_sig();
	open_wallet_login( $id );
}

function open_wallet_failed( $result, $output ) {
	header('HTTP/1.1 500 Internal Server Error' );
    header('Status: 500 Internal Server Error' );
	
	?>
500 Internal Server Error
Unexpected GnuPG Output
";
	print_r( "result: " . $result . "
" );
	print_r( "output:
" );
	print_r( $output );
	echo "
";
	exit;
}

function open_wallet_store_key()
{
    $output = array();
    $result = 0;

    $tempfn = tempnam("c:\\temp","ow-");
    $fh = fopen($tempfn, "w");
    fwrite( $fh, $_GET[ 'ow-key' ]);
    fclose( $fh );

//    if( isLoggedIn() )
//    {
//	exec( GPG . ' ' . GPG_HOMEDIR . ' --batch --no-tty --yes --delete-keys ' . $_SESSION[ 'id' ] . ' 2>&1', $output2, $result );
//        $_SESSION[ 'output2' ] = $output2;
//    }

	$cmd = open_wallet_get_gpg() . ' ' . open_wallet_get_gpg_homedir_param() . ' --batch --no-tty --import --verbose --verbose ' . $tempfn . ' 2>&1';
	exec( $cmd, $output, $result );

//	echo "
";
//	print_r( $_GET[ 'ow-key' ] );
//	print_r( "
cmd: " . $cmd . "
" );
//	print_r( "result: " . $result . "
" );
//	print_r( $output ); exit;


    unlink( $tempfn );

    if( $result == 0 )
    {
    	get_currentuserinfo();
    	global $current_user;
    	if( $current_user->ID == 0 ) {
    		// user is not yet logged in.
    		// go and verify the signature.
			open_wallet_verify_user();
    	}
    	else {
    		// firstly, lets verify that the signature is good,
    		// otherwise someone might be trying to trick the system
    		$key_id = open_wallet_verify_sig();
			// NOTE: for security reasons, $key_id is the key id from the signature,
			// not the key they sent us.  We can only ever trust signatures.
			    		
    		// first we need to see if this key is currently associated with
    		// another user.
    		$matching_user_id = open_wallet_find_user( $key_id );
    		if( NULL !== $matching_user_id )  {
    			// this key belongs to another user.
    			// This can occur if the user has multiple accounts on
    			// this blog and they are trying to associate the key
    			// with both accounts.
    			// TODO: pretty error message
    			echo "Error: this key is already associated with another account";
    			exit();
    		}
    		else {
    			// associate the key with the current user.
				global $wpdb, $current_user;
				$user_id = $current_user->ID;
				$table_name = $wpdb->prefix . OW_KEY_TABLE;
				$wpdb->query("INSERT INTO {$table_name} (user_id, key_id) VALUES ({$user_id}, '" . $wpdb->escape($key_id) . "')");
				wp_redirect("/wordpress/wp-admin/profile.php");		
				exit;
    		}
    	}
    }
    else
    {
		open_wallet_failed( $result, $output );
    }
}

function open_wallet_do_login( $user_id ) {
	$user = new WP_User( $user_id );
				
	if( wp_login( $user->user_login, md5($user->user_pass), true ) ) {
		do_action('wp_login', $user->user_login);
		wp_clearcookie();
		wp_setcookie($user->user_login, md5($user->user_pass), true, '', '', true);
		wp_redirect("/wordpress/wp-admin/profile.php");
		exit;
	}
}

function open_wallet_find_user( $key_id ) {
	global $wpdb;
	$table_name = $wpdb->prefix . OW_KEY_TABLE;
	$row = $wpdb->get_row("SELECT user_ID FROM {$table_name} WHERE key_id = '" . $wpdb->escape($key_id) . "' LIMIT 1");
	return $row->user_ID;				
}

function open_wallet_get_user_keys() {
	global $current_user;
	$user_id = $current_user->ID;
	global $wpdb;
	$table_name = $wpdb->prefix . OW_KEY_TABLE;
	$results = $wpdb->get_results("SELECT key_id FROM {$table_name} WHERE user_ID = " . $wpdb->escape($user_id));
	$rval = array();
	foreach( $results as $row ) {
		$rval[] = $row->key_id;
	}
	return $rval;				
}

function open_wallet_create_user( $key_id ) {
	@include_once( ABSPATH . 'wp-admin/upgrade-functions.php');	// 2.1
 	@include_once( ABSPATH . WPINC . '/registration-functions.php'); // 2.0.4
			
	$username = $key_id;
	$password = substr( md5( uniqid( microtime() ) ), 0, 7);
			
	$user_id = wp_create_user( $username, $password );
	global $wpdb;
	$table_name = $wpdb->prefix . OW_KEY_TABLE;
	$wpdb->query("INSERT INTO {$table_name} (user_id, key_id) VALUES ({$user_id}, '" . $wpdb->escape($key_id) . "')");
	
	if( $user_id ) {	// created ok
		update_usermeta( $user_id, 'registered_with_openwallet', true );

		$user = new WP_User( $user_id );

		if( wp_login( $user->user_login, md5($user->user_pass), true ) ) {
			do_action('wp_login', $user->user_login);

			// Call the usual user-registration hooks
			do_action('user_register', $user_id);
			wp_new_user_notification( $user->user_login );

			wp_clearcookie();
			wp_setcookie($user->user_login, md5($user->user_pass), true, '', '', true);
			wp_redirect("/wordpress/wp-admin/profile.php");
			exit;
		}
		else {
			// failed to create user for some reason.
			echo "openWallet authentication successful, but failed to login the Wordpress user. This is probably a bug.";
			exit;				
		}
	} 
	else {
		// failed to create user for some reason.
		echo "openWallet authentication successful, but failed to create Wordpress user. This is probably a bug.";
		exit;
	}
	
}

function open_wallet_login( $id ) {
	$matching_user_id = open_wallet_find_user( $id );
	if( NULL !== $matching_user_id ) {
		open_wallet_do_login( $matching_user_id );
	}
	else {
		// key id is new, so create a new user
		open_wallet_create_user( $id );
	}
}


add_action('init', 'open_wallet_handle_action' );


function open_wallet_register_link( $link ) {
	if ( ! is_user_logged_in() && get_option('users_can_register') ) {
		$link = str_replace("prefix . 'openwallet_keyid';
	
	if($wpdb->get_var("SHOW TABLES LIKE '$table_name'") != $table_name) {
		$query = <<
Or
Login Using openWallet »
What is openWallet?


openWallet Keys
You can add openWallet keys that are associated with your account.

Upload Key »
Current Key(s):




Options saved.
Open Wallet Options
">
Path to GPG executable

Change this value if the gpg exectuable is not in the PATH. e.g., '"C:\\Program Files\\GNU\\GnuPG\\gpg.exe"' on Windows.
GPG home directory

If you canot write to the default GPG home directory, change this value to a directory that does have write access. e.g., '/home/foobar/_priv/gpg'
Note:Do not specify a home directory that within your web root.