From 3e8a50c55afd3e8c78d2c3368efcf208b4af0aa6 Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Sat, 27 Oct 2007 19:51:09 +0000 Subject: rm account-create.php account-edit.php --- web/account-create.php | 106 ------------------------------ web/account-edit.php | 174 ------------------------------------------------- 2 files changed, 280 deletions(-) delete mode 100644 web/account-create.php delete mode 100644 web/account-edit.php diff --git a/web/account-create.php b/web/account-create.php deleted file mode 100644 index f56273f..0000000 --- a/web/account-create.php +++ /dev/null @@ -1,106 +0,0 @@ - 1, - have_session => 1, - have_user => 1 ) -) or - die("Nobody loves me. I don't even have space for a name."); - -$rules = Array(); -$rules['commit']['username'] = array(type => 'string'); -$rules['commit']['name'] = array(type => 'string', optional => 1); -$rules['commit']['address'] = array(type => 'string'); -$rules['commit']['goto'] = array(type => 'string', optional => 1); -$rules['ask']['goto'] = array(type => 'string', optional => 1); -$rules['ask']['username'] = array(type => 'string', optional => 1); -$rules['ask']['name'] = array(type => 'string', optional => 1); -$rules['ask']['address'] = array(type => 'string', optional => 1); -$arguments = param_check($GLOBALS, $rules, array(params_required=>false)); - -$message = ''; -$created = 0; - -if ( $arguments['form_id']=='commit' ) { - $namespace->session->set_id(); - $username = $arguments['username']; - $address = $arguments['address']; - $name = $arguments['name']; - - if (! preg_match('/^[a-zA-Z][a-zA-Z0-9]+$/', $username) ) - error("Username '$username' does not match ^[a-zA-Z][a-zA-Z0-9]+"); - if (! preg_match('/^[a-zA-Z0-9+=_.-]+@[a-zA-Z0-9+=_.-]+$/', $address) ) - error("Address '$address' does not match ^[a-zA-Z0-9+=_.-]+@[a-zA-Z0-9+=_.-]+$"); - - $password = md5($_SERVER["UNIQUE_ID"].time.rand(0,1000000)); - $password = substr($password, 0, 8); - - $account = array(); - $account['username'] = $username; - $account['name'] = $name; - $account['password'] = $password; - - $result = $namespace->database->insert('account', $account); - if ($result) { - $account = $namespace->database->query_row('SELECT account.ref FROM account WHERE account.username=?', array($username)); - assert($account); - assert(isset($account['ref'])); - $addr = array(); - $addr['address'] = $address; - $addr['verified'] = 'T'; - $addr['enabled'] = 'T'; - $addr['account_ref'] = $account['ref']; - $result = $namespace->database->insert('address', $addr); - assert($result); - - $created = 1; - $message = "Someone, probably you, has requested the following Account on www.noreply.org:\n". - "\n". - "Username: $username\n". - "Name: $name\n". - "Address: $address\n". - "\n". - "Your Password is »".$password."«\n". - "\n". - "You can log in at\n". - "http://www.noreply.org/login.php?form_id=login&username=$username\n\n". - "\n". - "Should you have problems please contact ".$namespace->config->mail_operator.".\n"; - mail($address, "Your Noreply Account", $message, - "From: ".$namespace->config->mail_from."\n". - "Sender: ".$namespace->config->mail_sender."\n". - "Reply-To: ".$namespace->config->mail_replyto."\n". - "Mime-Version: 1.0\n". - "Content-Type: text/plain; charset=iso-8859-1\n". - "Content-Disposition: inline" - ); - } else - $message = 'Error (perhaps the username already exists).'; -} - -if (! $created ) { - $data = array(); - $data['goto'] = $arguments['goto']; - $data['message'] = $message; - $data['username'] = $namespace->session->data['user']['username']; - $data['username_field'] = $arguments['username']; - $data['name_field'] = $arguments['name']; - $data['username_field'] = $arguments['username']; - $data['address_field'] = $arguments['address']; - - $template = new Template('account-create.html', $namespace->config->template_path); - $template->parse($data); - print $template->output(); -} else { - redirect($namespace, './login.php?form_id=login&goto='.$arguments['goto'].'&username='.$username.'&message=Account+Created.+Password+will+be+sent+via+email.'); -} - -$namespace->stop(); - - -# vim:set ts=4: -# vim:set shiftwidth=4: -?> diff --git a/web/account-edit.php b/web/account-edit.php deleted file mode 100644 index 5702a23..0000000 --- a/web/account-edit.php +++ /dev/null @@ -1,174 +0,0 @@ - 1, - have_session => 1, - have_user => 1 ) -) or - die("Nobody loves me. I don't even have space for a name."); - -if (! $namespace->user->check_login()) { - redirect($namespace, 'login.php?form_id=login&goto=account-edit.php'); - $namespace->stop(); - exit; -}; - -$rules = Array(); -$rules['commit']['name'] = array(type => 'string', optional => 1); -$rules['commit']['password1'] = array(type => 'string', optional => 1); -$rules['commit']['password2'] = array(type => 'string', optional => 1); - -$rules['addr_enable']['address_ref'] = array(type => 'integer'); -$rules['addr_enable']['enable'] = array(type => 'string', length=>200, discard=>1); - -$rules['addr_disable']['address_ref'] = array(type => 'integer'); -$rules['addr_disable']['disable'] = array(type => 'string', length=>200, discard=>1); - -$rules['addr_verify']['address_ref'] = array(type => 'integer'); -$rules['addr_verify']['code'] = array(type => 'string', length=>200); -$rules['addr_verify']['verify'] = array(type => 'string', length=>200, discard=>1); - -$rules['addr_delete']['address_ref'] = array(type => 'integer'); -$rules['addr_delete']['delete'] = array(type => 'string', length=>200, discard=>1); - -$rules['addr_new']['address'] = array(type => 'string', length=>512); -$rules['addr_new']['addr_new'] = array(type => 'string', length=>200, discard=>1); - -$arguments = param_check($GLOBALS, $rules, array(params_required=>false)); - -$message = ''; -$created = 0; - -unset($selected_address); -if (isset($arguments['address_ref'])) { - $selected_address = $namespace->database->query_row('SELECT address.ref, address.address FROM address WHERE address.account_ref=? AND address.ref=?', array($namespace->session->data['user']['ref'], $arguments['address_ref'])); - if (! $selected_address) - error('Insufficient priviliges'); -}; - -switch($arguments['form_id']) { - case 'commit': - $namespace->session->set_id(); - $name = $arguments['name']; - $password1 = $arguments['password1']; - $password2 = $arguments['password2']; - - if ($password1 != $password2) { - $message .= 'Pasword mismatch.'; - } else { - $account = array(); - $account['name'] = $name; - if ($password1 != '') { - $account['password'] = $password1; - }; - - $result = $namespace->database->update('account', $namespace->session->data['user']['ref'], $account); - if ($result) - $message = 'Update successfull.'; - else - $message = 'Error (do not ask me what happened. I would be the last to know.)'; - } - break; - - case 'addr_enable': - $result = $namespace->database->update('address', $arguments['address_ref'], array(enabled => 'T')); - if ($result) $message = 'Update successfull.'; - else $message = 'Error (do not ask me what happened. I would be the last to know.)'; - break; - - case 'addr_disable': - $result = $namespace->database->update('address', $arguments['address_ref'], array(enabled => 'F')); - if ($result) $message = 'Update successfull.'; - else $message = 'Error (do not ask me what happened. I would be the last to know.)'; - break; - - case 'addr_verify': - assert(isset($selected_address)); - assert(isset($selected_address['address'])); - $address = $selected_address['address']; - $code = md5($address . $namespace->config->secret); - $code = substr($code, 0, 8); - if ($code == $arguments['code']) { - $update = array(); - $update['verified'] = 'T'; - $result = $namespace->database->update('address', $arguments['address_ref'], $update); - if ($result) $message = 'Update successfull.'; - else $message = 'Error (do not ask me what happened. I would be the last to know.)'; - } else - $message = 'Mismatch - Address not enabled'; - break; - - case 'addr_delete': - $result = $namespace->database->delete_row('address', $arguments['address_ref']); - if ($result) $message = 'Update successfull.'; - else $message = 'Error (do not ask me what happened. I would be the last to know.)'; - break; - - case 'addr_new': - $address = $arguments['address']; - if (! preg_match('/^[a-zA-Z0-9+=_.-]+@[a-zA-Z0-9+=_.-]+$/', $address) ) - error("Address '$address' does not match ^[a-zA-Z0-9+=_.-]+@[a-zA-Z0-9+=_.-]+$"); - - $code = md5($address.$namespace->config->secret); - $code = substr($code, 0, 8); - - $addr = array(); - $addr['address'] = $address; - $addr['account_ref'] = $namespace->session->data['user']['ref']; - $addr['verified'] = 'F'; - $addr['enabled'] = 'T'; - - $username = $namespace->session->data['user']['username']; - $result = $namespace->database->insert('address', $addr); - if ($result) { - $message = "Someone, probably you, has requested the following address be added to the $username\r\n". - "account on www.noreply.org:\r\n". - "\r\n". - "Address: $address\r\n". - "\r\n". - "Your Code to activate that address is »".$code."«\r\n". - "\r\n". - "You can log in at\r\n". - "http://www.noreply.org/login.php?form_id=login&username=$username\n\r\n". - "\r\n". - "Should you have problems please contact ".$namespace->config->mail_operator.".\r\n"; - mail($address, "Your Noreply Account", $message, - "From: ".$namespace->config->mail_from."\r\n". - "Sender: ".$namespace->config->mail_sender."\r\n". - "Reply-To: ".$namespace->config->mail_replyto - ); - $message = 'Update successfull. An email with the authorization code has been sent.'; - } else - $message = 'Error (perhaps the username already exists).'; - break; - - case '': - break; - - default: - error('unknown form '.$form_id.' in switch statement'); -} - -$row = $namespace->database->query_row('SELECT ref, username, name FROM account WHERE ref=?', array($namespace->session->data['user']['ref'])); - -$data = array(); -$data['message'] = $message; -$data['user'] = $namespace->session->data['user']['username']; -$data['username_field'] = $row['username']; -$data['name_field'] = $row['name']; -$data['addresses'] = $namespace->database->query_all('SELECT address.*, true as t, false as f FROM address WHERE account_ref=?', array($row['ref'])); -$data['PHP_SELF'] = $PHP_SELF; - -$template = new Template('account-edit.html', $namespace->config->template_path); -$template->parse($data); -print $template->output(); - -$namespace->stop(); - - -# vim:set ts=4: -# vim:set shiftwidth=4: -?> -- cgit v1.2.3