Example #1
0
function clearUser()
{
    if (isset($_POST['user']) && $_POST['user'] !== null && $_POST['user'] !== '') {
        $username = $_POST['user'];
        // lookup userid from db
        //echo "received Username: "******"") {
            // if user/password exists, check it, otherwise add new user
            if (usernameExists($username)) {
                $userId = getUserId($username);
                $pass = getPass($userId);
                // get pass from db
                if ($_POST['pass'] === $pass) {
                    return "user cleared.";
                } else {
                    return "invalid combination.";
                }
            } else {
                if (addUser($username, $_POST['pass'])) {
                    return "user cleared.";
                } else {
                    return "error creating new user.";
                }
            }
        } else {
            return "password cannot be empty.";
        }
    } else {
        return "username cannot be empty.";
    }
}
Example #2
0
/**
 * This file is a part of MyWebSQL package
 *
 * @file:      modules/usermanager.php
 * @author     Samnan ur Rehman
 * @copyright  (c) 2008-2014 Samnan ur Rehman
 * @web        http://mywebsql.net
 * @license    http://mywebsql.net/license
 */
function processRequest(&$db)
{
    $action = v($_REQUEST["id"]);
    include BASE_PATH . "/lib/usermanager.php";
    $legacyServer = Session::get('db', 'version') < 5;
    $editor = new userManager($db, $legacyServer);
    $message = '';
    if ($action != '') {
        if ($action == "add") {
            $result = addUser($db, v($_REQUEST["query"]), $editor);
        } else {
            if ($action == "delete") {
                $result = deleteUser($db, v($_REQUEST["query"]), $editor);
            } else {
                if ($action == "update") {
                    $result = updateUser($db, v($_REQUEST["query"]), $editor);
                }
            }
        }
        if ($result) {
            $db->flush('PRIVILEGES', true);
            $message = __('The command executed successfully');
        } else {
            $message = __('Error occurred while executing the query');
        }
    }
    displayUserForm($db, $editor, $message, $action);
}
Example #3
0
 public function __construct($userName, $userEmail, $userPassword)
 {
     $this->userName = $userName;
     $this->userEmail = $userEmail;
     $this->userPassword = $userPassword;
     addUser($this->userName, $this->userEmail, $this->userPassword, $DBConnect);
 }
Example #4
0
function wsOnMessage($clientID, $message, $messageLength, $binary)
{
    global $users;
    $message = explode(' ', $message);
    $command = array_shift($message);
    if ($command == 'J') {
        if (isUser($clientID)) {
            wsClose($clientID);
            return;
        }
        $name = trim($message[0]);
        if ($name == '') {
            wsClose($clientID);
            return;
        }
        if (nameTaken($name)) {
            wsClose($clientID);
            return;
        }
        addUser($clientID, $name);
    } else {
        if ($messageLength == 0 || !isUser($clientID)) {
            wsClose($clientID);
            return;
        } else {
            if ($command == 'D') {
                $c = $users[$clientID];
                // Update client parameters
                $c->ang = $message[0];
                $c->pos[0] = $message[1];
                $c->pos[1] = $message[2];
                $c->vel[0] = $message[3];
                $c->vel[1] = $message[4];
                // Let other clients know that new data is available
                foreach ($users as $userID => $data) {
                    if ($userID != $clientID) {
                        $users[$userID]->queue[$clientID] = 1;
                    }
                }
                $data = '';
                // Send updates back to the client
                foreach ($c->queue as $userID => $one) {
                    if ($one) {
                        $u = $users[$userID];
                        $data .= ' ' . $u->name . ' ' . $u->ang . ' ' . $u->pos[0] . ' ' . $u->pos[1] . ' ' . $u->vel[0] . ' ' . $u->vel[1];
                        $c->queue[$userID] = 0;
                    }
                }
                wsSend($clientID, 'D' . $data);
            } elseif ($command == 'Q') {
                removeUser($clientID);
            } else {
                wsClose($clientID);
            }
        }
    }
}
Example #5
0
function A()
{
    try {
        addUser("wyq");
        UpdateUser("sss");
    } catch (Exception $e) {
        // echo $e->getLine();
        throw $e;
        // echo $e->getMessage();
    }
}
Example #6
0
function newUser($ip, $nick, $password, $email, $name, $surname, $age, $gender)
{
    if (strcmp($gender, 'female') != 0 and strcmp($gender, 'male') != 0) {
        $gender = null;
    }
    $hashedPassword = hash("sha256", $password, false);
    if (addUser($nick, $hashedPassword, $email, $name, $surname, $age, $gender)) {
        addAction($nick, $email, $ip, 'register');
        return true;
    }
    return false;
}
Example #7
0
/**
 * drop users from active_users.json
 * @param array &$arr
 * @param array $users
 * @return 
 *
 */
function dropFromSearch(&$arr, $users, $chat)
{
    foreach ($users as $user) {
        $id = $user;
        $obj = new stdClass();
        $obj->mmr = $arr->{$id};
        $obj->chat = $chat;
        $obj->online = true;
        $obj->visited = time();
        addUser($id, $obj);
        unset($arr->{$user});
        $arr->count -= 1;
    }
    return $arr;
}
Example #8
0
function start()
{
    if (!empty($_POST['nom'])) {
        addUser();
        $tableauPeople = getPeople();
        require '../views/list.php';
    } elseif (!isset($_GET['id'])) {
        // charge la page list
        $tableauPeople = getPeople();
        require '../views/list.php';
    } else {
        // avec l'id charge la page show
        $data = loadData();
        require '../views/show.php';
    }
}
function addRecordsOfficer($db, $credentials)
{
    $limit = $checkDepartmentLimit;
    $role = "";
    $active = "";
    if ($limit == 0) {
        $role = "primary";
        $active = "true";
    } else {
        $role = "back-up";
        $active = "false";
    }
    addUser($db, $credentials);
    $insert = "insert into records_officer(username,role,active) values ('" . $credentials[1] . "','" . $role . "','" . $active . "')";
    $update = $db->query($insert);
}
Example #10
0
function controller_reg_index()
{
    view_reg();
    if (!empty($_POST['login']) and !empty($_POST['passw'])) {
        $name = $_POST['login'];
        $res = mysqli_query(connect(), "SELECT id FROM users WHERE name = '{$name}'");
        $row = mysqli_fetch_row($res);
        $count = $row[0];
        close_bd();
        if (!preg_match("/^[a-zA-Z0-9]+\$/", $_POST['login'])) {
            echo "Логин может состоять только из букв английского алфавита и цифр";
        } elseif (strlen($_POST['login']) < 3 or strlen($_POST['login']) > 30) {
            echo "Логин должен быть не меньше 3-х символов и не больше 30";
        } elseif (!empty($count)) {
            echo "Пользователь с таким логином уже существует в базе данных";
        } else {
            addUser();
        }
    }
}
Example #11
0
function start()
{
    if (!empty($_POST)) {
        if (!isset($_POST['id'])) {
            addUser($_POST);
            $fla = flash("Ajout reussie");
        } else {
            editUser($_POST);
            $fla = flash("Edition reussie");
        }
        $people = getPeople();
        require '../views/list.php';
        return;
    }
    if (!isset($_GET['id']) && !isset($_GET['page'])) {
        $people = getPeople();
        return require '../views/list.php';
    }
    if (isset($_GET['page']) && $_GET['page'] === 'add') {
        return require '../views/add.php';
    }
    if (isset($_GET['page']) && $_GET['page'] === 'list') {
        $people = getPeople();
        return require '../views/list.php';
    }
    if (isset($_GET['page']) && $_GET['page'] === 'edit') {
        if (!isset($_GET['id'])) {
            die('Nope, ou est ID ?');
        }
        $id = $_GET['id'];
        $editable = ORM::for_table('users')->find_one($id);
        return require '../views/edit.php';
    }
    if (isset($_GET['id'])) {
        $user = getUser();
        $message = getMessages($_GET['id']);
        require '../views/show.php';
    }
}
Example #12
0
        }
        $result = dbQuery("UPDATE [db]users SET status = -1 WHERE user_id = {$uid}");
        if (!$result) {
            $msg = "Database Error: {$ax['usr_not_deleted']}";
            break;
        }
        $msg = $ax['usr_deleted'];
    } while (false);
    return $msg;
}
//Control logic
if ($privs >= 4) {
    //manager or admin
    $msg = '';
    if (isset($_POST['addExe'])) {
        $msg = addUser();
    } elseif (isset($_POST['updExe'])) {
        $msg = updateUser();
    } elseif (isset($_GET['delExe'])) {
        $msg = deleteUser();
    }
    echo "<p class='error'>{$msg}</p>\n\t\t<div class='scrollBoxAd'>\n\t\t<div class='centerBox'>\n";
    if ($editUser != 'y' or isset($_POST["back"])) {
        showUsers();
    } else {
        editUser($uid);
    }
    echo "</div>\n</div>\n";
} else {
    echo "<p class='error'>{$ax['no_way']}</p>\n";
}
Example #13
0
$method = $_SERVER['REQUEST_METHOD'];
//get the path to decide what happens
$path = explode('/', ltrim($_SERVER['PATH_INFO'], "/"));
//gets the data into array
$data = $_REQUEST;
//do relevant stuff with path[1]
switch ($path[0]) {
    case "users":
        switch ($method) {
            case "GET":
                $data["username"] = $path[1];
                $results = getUser($data);
                break;
            case "PUT":
                $data["username"] = $path[1];
                $results = addUser($data);
                break;
            case "PATCH":
                $data["username"] = $path[1];
                $results = editUser($data);
                break;
            default:
                $results["meta"] = methodNotAllowed($method, $path);
        }
        break;
    case "goals":
        switch ($method) {
            case "GET":
                $results = getGoals($data);
                break;
            case "POST":
Example #14
0
}
$dbh = null;
$dbh = resetPDO($dbh);
$method = $_GET['r'];
switch ($method) {
    case 'selectUser':
        echo selectUser();
        break;
    case 'selectMates':
        echo selectMates();
        break;
    case 'selectTop3':
        echo selectTop3();
        break;
    case 'addUser':
        echo addUser();
        break;
    case 'addParticipation':
        echo addParticipation();
        break;
    case 'updateUser':
        echo updateUser();
        break;
    case 'updateShare':
        echo updateShare();
        break;
    default:
        $error = array("error" => "Undefined function.");
        echo json_encode($error);
        break;
}
Example #15
0
            <title>Guillaume Tell</title>
            <link rel="stylesheet" media="screen" type="text/css" title="Design" href="style.css" />
            <script type="text/javascript" src="jquery-1.6.2.min.js"></script>
            <script type="text/javascript" src="toto.js"></script>
            <script src="jquery.metadata.js" type="text/javascript"></script>
            <script src="jquery.validate.js" type="text/javascript"></script>

            <meta http-equiv="refresh" content="50;url=index.php">
        </head>

        <body>

            <div class="triche">
                <?php 
    // on enregiste les réponses de l'utilisateur.
    $id_user = addUser();
    // Boucle qui survole toutes les questions
    foreach ($questions as $id_question => $question) {
        $reponse = $_POST['question_' . $id_question];
        // echo "Q".$id_question." : ".$reponse."\n"; // debug
        if ($reponse) {
            saveAnswer($id_question, $reponse, $id_user);
        }
    }
    // on obtient les réponses de l'utilisateur dans un tableau
    $query = "SELECT * from reponse where id_utilisateur=" . $id_user;
    $result = $db->query($query);
    $userAnswers = $db->getAssocArrays($result);
    // on affiche une page avec la correction
    $reponsesJustes = 0;
    $reponsesFausses = 0;
Example #16
0
        header('Location: /users.php');
    }
    //Apply Bulk Action
    if ($_POST['action'] == 'applyBulk') {
        //Delete
        if ($_POST['bulkAction'] == 'delete') {
            foreach ($_POST['chk'] as $thisUser) {
                echo $thisUser;
                deleteUser($thisUser);
            }
            header('Location: /users.php');
        }
    }
    //Add User
    if ($_POST['action'] == 'addUser') {
        $result = addUser($_POST['username'], $_POST['email'], $_POST['password'], $_POST['avatar'], $_POST['steamid']);
        if ($result == FALSE) {
            //Couldn't add user
            echo 'nope';
        } else {
            //Add User
            header('Location: /users.php');
        }
    }
}
//Functions
//Delete User
function deleteUser($userID)
{
    $thisUser = User::find_by_userid($userID);
    $thisUser->delete();
Example #17
0
File: editTest.php Project: g7o/sqw
     search($connection, "SELECT * FROM users WHERE username LIKE '%{$textInput}%'", "users");
     break;
 case 13:
     search($connection, "SELECT * FROM users WHERE mail LIKE '%{$textInput}%'", "users");
     break;
 case 14:
     changePassword($connection, $textInput, $password);
     break;
 case 15:
     setActive($connection, $textInput);
     break;
 case 16:
     upgradeAccount($connection, $textInput);
     break;
 case 17:
     addUser($connection, $firstname, $sirname, $username, $sex, $password, $tel, $mail, $geb, $plz, $country, $city, $street, $housenr, $picture, $isActivated, $isRetailer, $maximum);
     break;
 case 18:
     editUser($connection, $username, $mail);
     break;
 case 19:
     contactUser($connection, $firstname, $mail);
     break;
 case 20:
     delete($connection, "DELETE FROM notice WHERE ID='{$textInput}'", "notice", "ID", $textInput);
     break;
 case 21:
     search($connection, "SELECT * FROM notice WHERE title LIKE '%{$textInput}%' OR category LIKE '%{$textInput}%' OR UserID LIKE '%{$textInput}%'", "notice");
     break;
 case 22:
     search($connection, "SELECT * FROM notice WHERE title LIKE '%{$textInput}%'", "notice");
Example #18
0
     $error = "You're missing a field?";
 } else {
     if (empty($_POST['username']) || empty($_POST['password']) || empty($_POST['confirm']) || empty($_POST['Email'])) {
         $error = "You're missing a field?";
     } else {
         if ($_POST['password'] != $_POST['confirm']) {
             $error = "The password and it's confirmation were not the same!";
         } else {
             if (!preg_match($emailRegex, $_POST['Email'])) {
                 $error = "Invalid email provided.";
             } else {
                 //User and pass to var.
                 $user = $_POST['username'];
                 $email = $_POST['Email'];
                 $pass = $_POST['password'];
                 $complete = addUser($user, $email, $pass);
                 if ($complete != "DUPE") {
                     addAPIKey($user);
                     //$complete[] = "Your API key: " . htmlentities(addAPIKey($user)) . "<br/>This can be retrieved later.";
                     header('Refresh: 15; URL=https://profiles.ac3-servers.eu/');
                     echo "<body><h3>You will be redirected...</h3>";
                     echo "<ul>";
                     foreach ($complete as $val) {
                         echo "<li>{$val}</li>";
                     }
                     echo "</ul>";
                     exit;
                     return;
                 } else {
                     $error = "That username/email has already been used! Please try another.";
                 }
function addStudent($leerling_gegevens)
{
    require ROOT_PATH . "includes/database_connect.php";
    $db->beginTransaction();
    addUser($leerling_gegevens, $db);
    //vind gebruikers_id doormiddel van emailadres.
    try {
        $checkGebruikerId = $db->prepare("\n            SELECT gebruiker_id\n            FROM gebruiker\n            WHERE emailadres = ?");
        $checkGebruikerId->bindParam(1, $leerling_gegevens["emailadres"]);
        $checkGebruikerId->execute();
    } catch (Exception $e) {
        $_SESSION['message'] = "Email adres kon niet worden gecontroleerd.";
        $db->rollBack();
        header('Location: ' . $_SERVER['REQUEST_URI']);
        exit;
    }
    $checkGebruikerId = $checkGebruikerId->fetch(PDO::FETCH_ASSOC);
    $gebruiker_id = $checkGebruikerId['gebruiker_id'];
    //vind klas doormiddel van klas_id.
    try {
        $checkKlasId = $db->prepare("\n            SELECT klas_id\n            FROM klas\n            WHERE klas = ?");
        $checkKlasId->bindParam(1, $leerling_gegevens["klas"]);
        $checkKlasId->execute();
    } catch (Exception $e) {
        $_SESSION['message'] = "Klas id kan niet worden gecontroleerd.";
        $db->rollBack();
        header('Location: ' . $_SERVER['REQUEST_URI']);
        exit;
    }
    $checkKlasId = $checkKlasId->fetch(PDO::FETCH_ASSOC);
    $klas_id = $checkKlasId['klas_id'];
    // $gebruiker_id bevat id van de leraar zodat de afkorting kan worden toegevoegd.
    try {
        $addLeerling_Id = $db->prepare("\n            INSERT INTO leerling (\n                gebruiker_id,\n                leerling_id,\n                klas_id\n            )\n            VALUES (?, ?, ?) ");
        $addLeerling_Id->bindParam(1, $gebruiker_id);
        $addLeerling_Id->bindParam(2, $leerling_gegevens["leerling_id"]);
        $addLeerling_Id->bindParam(3, $klas_id);
        $addLeerling_Id->execute();
        $_SESSION['message-success'] = "Leerling is toegevoegd!";
    } catch (Exception $e) {
        $_SESSION['message'] = "Leerling kon niet worden toegevoegd aan de database.";
        $db->rollBack();
        header('Location: ' . $_SERVER['REQUEST_URI']);
        exit;
    }
    $db->commit();
}
function addDeliveryMan($db, $deliveryManInfo)
{
    $response = addUser($db, $deliveryManInfo);
    if ($response->getType() != Response::SUCCESS) {
        return $response;
    }
    $query = '  INSERT INTO 
                    restaurant_delivery_staff(
                        user_id,
                        restaurant_id
                    )
                VALUES(
                    :user_id,
                    :restaurant_id
                )';
    try {
        $statement = $db->prepare($query);
        $statement->bindValue(':user_id', $response->getData(), PDO::PARAM_INT);
        $statement->bindValue(':restaurant_id', $deliveryManInfo->restaurant_id, PDO::PARAM_INT);
        $statement->execute();
        if ($statement->rowCount() >= 1) {
            $userId = $db->lastInsertId();
            if ($response->getType() == Response::SUCCESS) {
                return new SuccessResponse("User created.", $userId);
            } else {
                return $response;
            }
        }
        return new ErrorResponse('User could not be registered.');
    } catch (PDOException $ex) {
        return new ExceptionResponse('PDOException was caught.', $ex);
    }
}
Example #21
0
\$SETTINGS = array(
\t'allow_register' => true
);
EOT
);
            // load config file
            $MYSQL = array('hostname' => $hostname, 'database' => $database, 'username' => $username, 'password' => $password, 'prefix' => $prefix);
            // create account
            try {
                if (userExists($adminusername)) {
                    if (!isUserPasswordCorrect($adminusername, $adminpassword1)) {
                        setError('Der Admin-Benutzer existiert bereits, hat aber ein anderes Passwort!');
                        $error = true;
                    }
                } else {
                    if (!addUser($adminusername, $adminpassword1, $lastname)) {
                        setError('Fehler beim Anlegen des Admin-Accounts!');
                        $error = true;
                    }
                }
                if (!$error) {
                    $id = isUserPasswordCorrect($adminusername, $adminpassword1);
                    if (!setUserGroup($id, 'admin')) {
                        setError('Der Admin-Account konnte der Admin-Gruppe nicht zugewiesen werden!');
                        $error = true;
                    }
                }
            } catch (Exception $e) {
                setError('Fehler: ' . $e->getMessage());
                $error = true;
            }
                 $gegevens[$values]["account_activated"] = 0;
                 //account is nog niet geactiveerd, dit wordt pas gedaan als gebruiker eerste keer inlogt.
                 $gegevens[$values]["generated_password"] = generate_random_password();
                 $gegevens[$values]["wachtwoord"] = password_hash($gegevens[$values]["generated_password"], PASSWORD_BCRYPT);
                 $gegevens[$values]["email_code"] = md5($gegevens[$values]["voornaam"] + microtime());
             }
             $emailcheck = $gegevens[$values]["emailadres"];
             if (!$emailcheck) {
                 $_SESSION['message'] = 'Voer een geldig e-mailadres in';
             } else {
                 //checken of email en student_id uniek zijn
                 foreach ($gegevens as $leerling_gegevens) {
                     if (checkIfUserExists($leerling_gegevens['emailadres']) === FALSE) {
                         //email adres niet in gebruik, dus gebruiker kan worden toegevoegd.
                         // gegevens inserten
                         addUser($leerling_gegevens);
                         addStudent($leerling_gegevens["emailadres"], $leerling_gegevens["leerling_id"], $leerling_gegevens["klas"]);
                         //wachtwoord mailen naar gebruiker
                         $mail_content = createTempPasswordMail($leerling_gegevens);
                         sendMail($mail_content);
                     } else {
                         //email adres in gebruik gebruiker wordt op de hoogte gesteld dat dit email adres bezet is.
                         $_SESSION['message'] = "Email adres " . $leerling_gegevens['emailadres'] . " is al in gebruik";
                     }
                 }
             }
         }
     }
 }
 if (isset($_POST["submit_bewerk_leerling"])) {
     if ($_POST['voornaam'] == "" or $_POST['achternaam'] == "" or $_POST['leerling_id'] == "" or $_POST['emailadres'] == "") {
Example #23
0
$newUsernameErr = $newPasswdErr = "";
$newUsername = $newPassword = $newEmail = "";
$newPrivilege = 0;
$errMsg = $successLogin = "";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $newUsername = $_POST["newUsername"];
    $newPassword = $_POST["newPassword"];
    $newPrivilege = $_POST["privilege"];
    $newEmail = $_POST["newEmail"];
    if (empty($_POST["newUsername"])) {
        $newUsernameErr = "You have to fill in this field.";
    }
    if (empty($_POST["newUsername"])) {
        $newPasswdErr = "You have to fill in this field";
    }
    if (addUser($newUsername, $newPassword, $newPrivilege, $newEmail)) {
        $successLogin = "******";
    }
}
?>
<div id="layout">
    <a href="#menu" id="menuLink" class="menu-link">
        <!-- Hamburger icon -->
        <span></span>
    </a>

    <?php 
generateMenu();
?>

    <div id="main">
Example #24
0
    echo '{"result":1,"users":[';
    //start of json object
    while ($row) {
        echo json_encode($row);
        //convert the result array to json object
        $row = $obj->fetch();
        if ($row) {
            echo ",";
            //if there are more rows, add comma
        }
    }
    echo "]}";
    //end of json array and object
}
switch ($cmd) {
    case 1:
        addUser($_REQUEST['user_name'], $_REQUEST['user_id'], $_REQUEST['user_pass'], $_REQUEST['user_type']);
        break;
    case 2:
        updateUser($_REQUEST['user_id'], $_REQUEST['user_name'], $_REQUEST['user_pass'], $_REQUEST['user_type']);
        break;
    case 3:
        delete($_REQUEST['user_id']);
        break;
    case 4:
        searchUser();
        break;
    default:
        # code...
        break;
}
Example #25
0
        stExec($stH, array($user['id']));
        $deleted = $stH->rowCount();
        if (!$deleted) {
            $msg = "Database Error: {$ax['usr_not_deleted']}";
            break;
        }
        $msg = $ax['usr_deleted'];
    } while (false);
    return $msg;
}
//Control logic
if ($privs >= 4) {
    //manager or admin
    $msg = '';
    if (isset($_POST['addExe'])) {
        $msg = addUser($user);
    } elseif (isset($_POST['updExe'])) {
        $msg = updateUser($user);
    } elseif (isset($_GET['delExe'])) {
        $msg = deleteUser($user);
    }
    echo "<p class='error'>{$msg}</p>\n\t\t<div class='scrollBoxAd'>\n\t\t<div class='centerBox'>\n";
    if (!$mode or isset($_POST["back"])) {
        showUsers();
        //no add / no edit
    } else {
        editUser($user);
        //add or edit
    }
    echo "</div>\n</div>\n";
} else {
Example #26
0
<?php

if (!isset($_SESSION)) {
    session_start();
}
if (isset($_SESSION['user'])) {
    if (isset($_POST['user'])) {
        require_once $_SERVER['DOCUMENT_ROOT'] . '/libs/twitter.php';
        addUser($_POST['user']);
    }
} else {
    header('Location: ../../index.php');
}
<?php

require_once '../../library/config.php';
require_once '../library/functions.php';
checkUser();
$action = isset($_GET['action']) ? $_GET['action'] : '';
switch ($action) {
    case 'add':
        addUser();
        break;
    case 'modify':
        modifyUser();
        break;
    case 'delete':
        deleteUser();
        break;
    default:
        // if action is not defined or unknown
        // move to main user page
        header('Location: index.php');
}
function addUser()
{
    $userName = $_POST['txtUserName'];
    $password = $_POST['txtPassword'];
    /*
    // the password must be at least 6 characters long and is 
    // a mix of alphabet & numbers
    if(strlen($password) < 6 || !preg_match('/[a-z]/i', $password) ||
    !preg_match('/[0-9]/', $password)) {
      //bad password
Example #28
0
<?php

include_once 'database/connection.php';
include_once 'database/users.php';
try {
    $user = getName_findUserByUsername($_POST['name']);
    if (!isset($user)) {
        header('Location: ' . $_SERVER['HTTP_REFERER']);
        die;
    }
    if (strlen($_POST['password']) < 7) {
        header('Location: ' . $_SERVER['HTTP_REFERER']);
        die;
    }
    /*if(!filter_var($_POST['email'],FILTER_VALIDATE_EMAIL)){
    			header('Location: ' . $_SERVER['HTTP_REFERER']);
    			die();
    		}*/
} catch (PDOException $e) {
    die($e->getMessage());
}
try {
    addUser($_POST['name'], $_POST['email'], $_POST['password']);
} catch (PDOException $e) {
    die($e->getMessage());
}
header('Location: index.php');
Example #29
0
    }
    $_SESSION[RegCodes::USED_USERNAME] = 2;
    return false;
}
function addUser($mysqli, $email, $pwd)
{
    $crypto = new Crypto();
    $salt = $crypto->generateSalt(10);
    $hash = $crypto->generateHash($pwd, $salt);
    $sql = "INSERT INTO users(email, hash, salt, nbrAttempts) \n\t\t\tVALUES('" . $email . "', '" . $hash . "', '" . $salt . "', '0')";
    $mysqli->multi_query($sql);
    $_SESSION['isLoggedIn'] = 1;
    $_SESSION['username'] = $email;
    redirect("https://127.0.0.1/searchView.php");
}
$token = $_POST['token'];
if ($token == session_id()) {
    $email = $_POST['username'];
    $pwd = $_POST['password'];
    $db = new Database();
    $mysqli = $db->openConnection();
    $usernameAvailable = isUsernameFree($mysqli, $email);
    if ($usernameAvailable) {
        addUser($mysqli, $email, $pwd);
    } else {
        redirect("https://127.0.0.1/registerView.php");
    }
    $db->closeConnection($mysqli);
} else {
    redirect("https://127.0.0.1/index.php");
}
Example #30
0
            }
        }
    } else {
        //还没提交过信息
        if (!$oprtype) {
            //显示提交页面
            //为了统一入口,此处使用跳转,而是直接将页面读取到echo出去
            //echo "<script>window.location.href='./userinfo.html?openid=".$openid."'; </script>";
            $memcache->delete($user_q_memkey);
            //显示第一个页面前,将缓存中该用户残存的提交信息清除
            echo file_get_contents('userinfo.html');
            exit;
        } else {
            if ($oprtype == 'adduser') {
                //提交
                $insert_id = @addUser();
                //从第一题开始显示
                echo getOneQuestionPage(1);
                exit;
            }
        }
    }
}
/**
 * 添加新用户,并更新到缓存
 */
function addUser()
{
    global $memcache, $actcls;
    $u_data = array();
    //用户信息