PonyMirrors/ponepaste
1
0
Fork 0
mirror of https://github.com/Neetpone/ponepaste.git synced 2025-03-12 06:30:07 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

More misc updates

Browse source
This commit is contained in:
Floorb 2021-07-16 10:02:16 -04:00
parent 8b4ef628e2
commit 0e5b5748a3
3 changed files with 25 additions and 46 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
api/index.php
View file

@ -49,6 +49,6 @@ $sql_details = array(
require('public.pastes.php');
echo json_encode(
SSP::simple($_GET, $sql_details, $table, $primaryKey, $columns, $columns2), JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES);
mysqli_close('$con');
?>
SSP::simple($_GET, $sql_details, $table, $primaryKey, $columns, $columns2),
JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES
);

50
login.php
View file

@ -88,47 +88,33 @@ if (isset($_GET['resend'])) {
}
if (isset($_GET['forgot'])) {
if (isset($_POST['email'])) {
$email = trim($_POST['email']);
$query = "SELECT * FROM users WHERE email_id='$email'";
$result = mysqli_query($con, $query);
if (mysqli_num_rows($result) > 0) {
// Username found
while ($row = mysqli_fetch_array($result)) {
$username = $row['username'];
$db_email_id = $row['email_id'];
$db_platform = $row['platform'];
$db_password = Trim($row['password']);
$db_verified = $row['verified'];
$db_picture = $row['picture'];
$db_date = $row['date'];
$db_ip = $row['ip'];
$db_id = $row['id'];
}
if (!empty($_POST['email'])) {
$query = $conn->prepare('SELECT id, username FROM users WHERE email_id = ?');
$query->execute([trim($_POST['email'])]);
if ($row = $query->fetch()) {
$username = $row['username'];
$new_pass = uniqid(rand(), true);
$new_pass_hash = password_hash($new_pass, PASSWORD_DEFAULT);
$query = "UPDATE users SET password='$new_pass_hash' WHERE username='$username'";
mysqli_query($con, $query);
if (mysqli_error($con)) {
$error = "Unable to access database.";
} else {
$success = $lang['pass_change']; //"Password changed successfully and sent to your email address.";
$sent_mail = $email;
$subject = "$site_name Password Reset";
$body = "<br />
$conn->prepare('UPDATE users SET password = ? WHERE id = ?')
->execute([$new_pass_hash, $row['id']]);
$success = $lang['pass_change']; //"Password changed successfully and sent to your email address.";
$sent_mail = $email;
$subject = "$site_name Password Reset";
$body = "<br />
Hello $username , <br /><br />
Your password has been reset: $new_pass <br /> <br />
You can now login and change your password. <br />
";
if ($mail_type == '1') {
default_mail($admin_mail, $admin_name, $sent_mail, $subject, $body);
} else {
smtp_mail($smtp_host, $smtp_port, $smtp_auth, $smtp_user, $smtp_pass, $smtp_sec, $admin_mail, $admin_name, $sent_mail, $subject, $body);
}
if ($mail_type == '1') {
default_mail($admin_mail, $admin_name, $sent_mail, $subject, $body);
} else {
smtp_mail($smtp_host, $smtp_port, $smtp_auth, $smtp_user, $smtp_pass, $smtp_sec, $admin_mail, $admin_name, $sent_mail, $subject, $body);
}
} else {

15
report.php
View file

@ -19,15 +19,8 @@ if (isset($_SESSION['token'])) {
$p_pastereport = Trim(htmlspecialchars($_POST['reppasteid']));
$p_reporttime = gmmktime(date("H"), date("i"), date("s"), date("n"), date("j"), date("Y"));
$p_reasonrep = preg_replace("/[^0-9]/", "", $p_reasonrep);
//Sec
$p_reasonrep = mysqli_real_escape_string($con, $p_reasonrep);
$p_memreport = mysqli_real_escape_string($con, $p_memreport);
$p_pastereport = mysqli_real_escape_string($con, $p_pastereport);
$reported = "INSERT INTO user_reports (m_report,p_report,t_report,rep_reason) VALUES
('$p_memreport','$p_pastereport ','$p_reporttime','$p_reasonrep')";
if ($con->query($reported) === true) {
$repmes = "Paste has been reported.";
} else {
$repmes = "Reporting failed";
}
$conn->prepare('INSERT INTO user_reports (m_report, p_report, t_report, rep_reason) VALUES (?, ?, ?, ?)')
->execute([$p_memreport, $p_pastereport, $p_reporttime, $p_reasonrep]);
$repmes = "Paste has been reported.";