<?php
    use Concrete\Core\User\User;
    $u = new user();
    $ui = UserInfo::getByID($u->getUserID()); 
    $semail = $ui->getUserEmail();
 
    if(isset($_GET['email']) && !empty($_GET['email'])){
        $email = $_GET['email'];
        $usercheck = UserInfo::getByEmail($email);
        if(!empty($usercheck)) {
            echo "<span style='color:red;'>Email exists.  Please select another.</span>";
        } else if(!filter_var($email, FILTER_VALIDATE_EMAIL)) {
            echo "<span style='color:red;'>Invalid email.</span>";
        } else {
            $uname = $_GET['firstname'] . $_GET['lastname'];
 
            $alphabet = "abcdefghijklmnopqrstuwxyzABCDEFGHIJKLMNOPQRSTUWXYZ0123456789";
            $pass = array();
            $alphaLength = strlen($alphabet) - 1;
            for ($i = 0; $i < 8; $i++) {
                $n = rand(0, $alphaLength);
                $pass[] = $alphabet[$n];
            }
            $password = implode($pass); //turn the array into a
 
            $userRegistrationService = Core::make('Concrete\Core\User\RegistrationServiceInterface');
            $userinfo = [ 'uName' => $uname, 'uEmail' => $email, 'uPassword' => $password, 'uIsValidated' => '1' ];
            $user = $userRegistrationService->create($userinfo); // User we are creating
 
            if( isset($_GET['canread']) && !empty($_GET['canread']) ) {
                $user->setAttribute('can_read',true);
            }
 
            $user->setAttribute('sponsor',$ui->getUserName()); // Set sponsor field
            $membergroup = Group::getByName('Member');
            $client = UserInfo::getByUserName($uname);
            $clientid = $client->getUserID();
            $cu = User::getByUserID($clientid);
            $cu->enterGroup($membergroup);
 
            if( isset($_GET['canread']) && !empty($_GET['canread']) ) {
                $user->setAttribute('can_read',true);
            } else {
                $user->setAttribute('can_read',false);
            }
 
            // The message
            $message = "An account has been created for you.\r\n
                        Please complete the process.\r\n
                        You will use this email and the password: " . $password;
 
            // Send
            mail($semail, $uname.' Created', 'Account created for '.$_GET['firstname'].' '.$_GET['lastname'].' ('.$email.') using the password "'.$password.'".', 'From: noreply@fake.com');
            mail($email, 'Your login', $message, 'From: noreply@fake.com');
 
            if( isset($_GET['login']) && !empty($_GET['login']) ) {
                $u->loginByUserID($user->getUserID());
                header('https://www.fake.com/firstlogin');
            } else {
                header('Location:https://www.fake.com/');
            }
        }
    } else {
 
    }
 
?>
 
 
<form action="https://www.fake.com/thispage">
  First name:<br>
  <input type="text" name="firstname">
  <br>
  Last name:<br>
  <input type="text" name="lastname">
  <br>
  Email:<br>
  <input type="text" name="email">
  <br><br>
<!--
  Password:<br>
  <input type="text" name="password">
  <br><br>
-->
  <input type="checkbox" name="login" value="1">  Login user now<br>
  <br><br>
  <input type="submit" value="Submit">
</form>