thies/loginpagefoo
Template
1
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Wiki Activity

commented activate.php

Browse Source
This commit is contained in:
Thies Mueller 2021-01-12 17:37:19 +01:00
parent 039d1b1f2a
commit 2b67675b51
1 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
activate.php
View File

@ -7,13 +7,14 @@
</head> </head>
<body> <body>
<?php <?php
include 'db.inc.php'; include 'db.inc.php'; //first we need a db
//this time no session, cause you don't need that session here. (and cause i stole my code from my forgot password script)
if(!isset($_GET['userid']) || !isset($_GET['code'])) { if(!isset($_GET['userid']) || !isset($_GET['code'])) { //if theres a code or userid missing, say so & die
die('<div class="alert alert-warning" role="alert">No code delivered. nothing to do here.</div>'); die('<div class="alert alert-warning" role="alert">No code delivered. nothing to do here.</div>');
} }
$userid = $_GET['userid']; $userid = $_GET['userid']; //storing the userid & code provided in variables
$code = $_GET['code']; $code = $_GET['code'];
@ -26,24 +27,24 @@ if($user === null || $user['activationcode'] === null) {
die('<div class="alert alert-danger" role="alert"> die('<div class="alert alert-danger" role="alert">
No User matching your request.</div>'); No User matching your request.</div>');
} }
//check if the 24h window is still open for this code
if($user['activationcode_time'] === null || strtotime($user['activationcode_time']) < (time()-24*3600) ) { if($user['activationcode_time'] === null || strtotime($user['activationcode_time']) < (time()-24*3600) ) {
die('<div class="alert alert-danger" role="alert"> die('<div class="alert alert-danger" role="alert">
Ooops. This code isnt valid anymore.</div>'); Ooops. This code isnt valid anymore.</div>');
} }
//check if the codes match
if(sha1($code) != $user['activationcode']) { if(sha1($code) != $user['activationcode']) {
die('<div class="alert alert-danger" role="alert"> die('<div class="alert alert-danger" role="alert">
Not the valid activationcode!</div>'); Not the valid activationcode!</div>');
} }
//activate user:
if(isset($_GET['send'])) { if(isset($_GET['send'])) {
$statement = $pdo->prepare("UPDATE users SET activated = 1, activationcode = NULL, activationcode_time = NULL WHERE id = :userid"); $statement = $pdo->prepare("UPDATE users SET activated = 1, activationcode = NULL, activationcode_time = NULL WHERE id = :userid");
$result = $statement->execute(array('userid'=> $userid )); $result = $statement->execute(array('userid'=> $userid ));
if($result) { if($result) { //if successfull: die & go to start.php via update.php
die('Activated. Going to <a href="start.php">start</a> now.<meta http-equiv="refresh" content="1; URL=update.php?page=start.php">'); die('Activated. Going to <a href="start.php">start</a> now.<meta http-equiv="refresh" content="1; URL=update.php?page=start.php">');
} }
} }