Example #1
0
include 'includes/function.php';
loggedIn();
if ($_POST['to_email'] != "") {
    // Passed variable
    $user = trim($_POST['to_email']);
    // Numeric value is passed so check to be sure that is it.
    if (!preg_match("/^[0-9]{1,10}\$/", $user)) {
        die("User not found.");
    }
    $pub_connection = mysql_connect("localhost", $db_user_public, $db_user_pass) or die("Error with database connection.  Please try again.");
    mysql_select_db($db_name, $pub_connection) or die("Error selecting database.");
    /** Be sure the ID exists. */
    $check_sql = mressf("SELECT email,pub_key FROM users WHERE id = '%d'", $user);
    // Execute query
    $sql_result = mysql_query($check_sql, $pub_connection) or die("Error retrieving user." . mysql_error());
    $i = mysql_fetch_object($sql_result);
    // Pub certificate
    $pub_print = "{$i->pub_key}";
    // Check for results
    if (mysql_num_rows($sql_result) == "0") {
        echo "User not found.";
        exit;
    } else {
        echo "<b>Fingerprint for the above user is:</b> <br />";
        // Split into readable chunks of four
        print chunk_split(sha1_thumbprint($pub_print), 4);
        exit;
    }
} else {
    die("No email address was provided.");
}
Example #2
0
 $_SESSION['s_pub'] = "";
 $_SESSION['s_authed'] = "";
 $_SESSION['s_phone'] = "";
 $_SESSION['s_delivery'] = "";
 $_SESSION['s_fprint'] = "";
 // Session variables to be used throughout the login session
 $_SESSION['s_id'] = $id;
 $_SESSION['s_delivery'] = $delivery;
 $_SESSION['s_email'] = $username;
 $_SESSION['s_pass'] = $priv_pass;
 $_SESSION['s_priv_tmp'] = $priv_key;
 $_SESSION['s_pub'] = $pub;
 $_SESSION['s_phone'] = $priv_phone_no;
 $_SESSION['s_authed'] = "USER_AUTHENTICATED";
 // SHA1 fingerprint
 $fprint = sha1_thumbprint($pub);
 $fprint = chunk_split($fprint, 4);
 $_SESSION['s_fprint'] = $fprint;
 // If the user uses SMS then we prepare the code to be sent to that address
 if ($_SESSION['s_delivery'] == "s") {
     $priv_sms = $priv_tmp[3];
     $_SESSION['s_sms_gateway'] = "{$priv_phone_no}" . "@" . "{$priv_sms}";
 }
 // Set initial login time
 // $t_check_timeout = date("YmdHi");
 //$_SESSION['s_check_timeout_1'] = "";
 //$_SESSION['s_check_timeout_1'] = $t_check_timeout;
 //$_SESSION['s_timeout'] = "";
 //$_SESSION['s_timeout'] = $timeout;
 $_SESSION['s_preauth'] = "HAS_PREAUTH";
 // Redirect to the login screen