PonyMirrors/ponepaste
1
0
Fork 0
mirror of https://github.com/Neetpone/ponepaste.git synced 2025-03-12 06:30:07 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Reformat login.php so I can read it

Browse source
This commit is contained in:
Floorb 2021-07-11 12:50:24 -04:00
parent 9668228914
commit 11ef37f1f2
1 changed files with 99 additions and 102 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

201
login.php
View file

@ -6,7 +6,7 @@
* modify it under the terms of the GNU General Public License * modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 3 * as published by the Free Software Foundation; either version 3
* of the License, or (at your option) any later version. * of the License, or (at your option) any later version.
* *
* This program is distributed in the hope that it will be useful, * This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of * but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
@ -20,34 +20,32 @@ require_once('includes/password.php');
require_once('mail/mail.php'); require_once('mail/mail.php');
// Current Date & User IP // Current Date & User IP
$date = date('jS F Y'); $date = date('jS F Y');
$ip = $_SERVER['REMOTE_ADDR']; $ip = $_SERVER['REMOTE_ADDR'];
// Mail // Mail
$mail_type = "1"; $mail_type = "1";
// Check if already logged in // Check if already logged in
if (isset($_SESSION['token'])) { if (isset($_SESSION['token'])) {
header("Location: ./"); header("Location: ./");
} }
$admin_mail = $email; $admin_mail = $email;
$admin_name = $site_name; $admin_name = $site_name;
// Email information // Email information
$email_info_rows = $conn->query("SELECT * FROM mail WHERE id='1'"); $email_info_rows = $conn->query("SELECT * FROM mail LIMIT 1");
while ($row = $email_info_rows->fetch()) { while ($row = $email_info_rows->fetch()) {
$verification = Trim($row['verification']); $verification = Trim($row['verification']);
$smtp_host = Trim($row['smtp_host']); $smtp_host = Trim($row['smtp_host']);
$smtp_user = Trim($row['smtp_username']); $smtp_user = Trim($row['smtp_username']);
$smtp_pass = Trim($row['smtp_password']); $smtp_pass = Trim($row['smtp_password']);
$smtp_port = Trim($row['smtp_port']); $smtp_port = Trim($row['smtp_port']);
$smtp_protocol = Trim($row['protocol']); $smtp_protocol = Trim($row['protocol']);
$smtp_auth = Trim($row['auth']); $smtp_auth = Trim($row['auth']);
$smtp_sec = Trim($row['socket']); $smtp_sec = Trim($row['socket']);
} }
$mail_type = $smtp_protocol; $mail_type = $smtp_protocol;
@ -58,28 +56,28 @@ updatePageViews($conn);
if (isset($_GET['resend'])) { if (isset($_GET['resend'])) {
if (isset($_POST['email'])) { if (isset($_POST['email'])) {
$email = htmlentities(trim($_POST['email'])); $email = htmlentities(trim($_POST['email']));
$statement = $conn->prepare("SELECT * FROM users WHERE email_id=?"); $statement = $conn->prepare("SELECT * FROM users WHERE email_id = ?");
$statement->execute([$email]); $statement->execute([$email]);
if ($statement->fetchColumn() > 0) { if ($statement->fetchColumn() > 0) {
// Username found // Username found
foreach ($statement as $index=>$row) { foreach ($statement as $index => $row) {
$username = $row['username']; $username = $row['username'];
$db_email_id = $row['email_id']; $db_email_id = $row['email_id'];
$db_platform = $row['platform']; $db_platform = $row['platform'];
$db_password = Trim($row['password']); $db_password = Trim($row['password']);
$db_verified = $row['verified']; $db_verified = $row['verified'];
$db_picture = $row['picture']; $db_picture = $row['picture'];
$db_date = $row['date']; $db_date = $row['date'];
$db_ip = $row['ip']; $db_ip = $row['ip'];
$db_id = $row['id']; $db_id = $row['id'];
} }
if ($db_verified == '0') { if ($db_verified == '0') {
$protocol = paste_protocol(); $protocol = paste_protocol();
$verify_url = $protocol . $_SERVER['HTTP_HOST'] . rtrim(dirname($_SERVER['PHP_SELF']), '/\\') . "/verify.php?username=$username&code=" . Md5('4et4$55765' . $db_email_id . 'd94ereg'); $verify_url = $protocol . $_SERVER['HTTP_HOST'] . rtrim(dirname($_SERVER['PHP_SELF']), '/\\') . "/verify.php?username=$username&code=" . Md5('4et4$55765' . $db_email_id . 'd94ereg');
$sent_mail = $email; $sent_mail = $email;
$subject = $lang['mail_acc_con']; // "$site_name Account Confirmation"; $subject = $lang['mail_acc_con']; // "$site_name Account Confirmation";
$body = " $body = "
Hello $db_full_name, Please verify your account by clicking the link below.<br /><br /> Hello $db_full_name, Please verify your account by clicking the link below.<br /><br />
<a href='$verify_url' target='_self'>$verify_url</a> <br /> <br /> <a href='$verify_url' target='_self'>$verify_url</a> <br /> <br />
@ -104,37 +102,37 @@ if (isset($_GET['resend'])) {
} }
} }
if (isset($_GET['forgot'])) { if (isset($_GET['forgot'])) {
if (isset($_POST['email'])) { if (isset($_POST['email'])) {
$email = htmlentities(trim($_POST['email'])); $email = htmlentities(trim($_POST['email']));
$query = "SELECT * FROM users WHERE email_id='$email'"; $query = "SELECT * FROM users WHERE email_id='$email'";
$result = mysqli_query($con, $query); $result = mysqli_query($con, $query);
if (mysqli_num_rows($result) > 0) { if (mysqli_num_rows($result) > 0) {
// Username found // Username found
while ($row = mysqli_fetch_array($result)) { while ($row = mysqli_fetch_array($result)) {
$username = $row['username']; $username = $row['username'];
$db_email_id = $row['email_id']; $db_email_id = $row['email_id'];
$db_platform = $row['platform']; $db_platform = $row['platform'];
$db_password = Trim($row['password']); $db_password = Trim($row['password']);
$db_verified = $row['verified']; $db_verified = $row['verified'];
$db_picture = $row['picture']; $db_picture = $row['picture'];
$db_date = $row['date']; $db_date = $row['date'];
$db_ip = $row['ip']; $db_ip = $row['ip'];
$db_id = $row['id']; $db_id = $row['id'];
} }
$new_pass = uniqid(rand(), true); $new_pass = uniqid(rand(), true);
$new_pass_hash = password_hash($new_pass, PASSWORD_DEFAULT); $new_pass_hash = password_hash($new_pass, PASSWORD_DEFAULT);
$query = "UPDATE users SET password='$new_pass_hash' WHERE username='$username'"; $query = "UPDATE users SET password='$new_pass_hash' WHERE username='$username'";
mysqli_query($con, $query); mysqli_query($con, $query);
if (mysqli_error($con)) { if (mysqli_error($con)) {
$error = "Unable to access database."; $error = "Unable to access database.";
} else { } else {
$success = $lang['pass_change']; //"Password changed successfully and sent to your email address."; $success = $lang['pass_change']; //"Password changed successfully and sent to your email address.";
$sent_mail = $email; $sent_mail = $email;
$subject = "$site_name Password Reset"; $subject = "$site_name Password Reset";
$body = "<br /> $body = "<br />
Hello $username , <br /><br /> Hello $username , <br /><br />
Your password has been reset: $new_pass <br /> <br /> Your password has been reset: $new_pass <br /> <br />
@ -146,16 +144,16 @@ if (isset($_GET['forgot'])) {
} else { } else {
smtp_mail($smtp_host, $smtp_port, $smtp_auth, $smtp_user, $smtp_pass, $smtp_sec, $admin_mail, $admin_name, $sent_mail, $subject, $body); smtp_mail($smtp_host, $smtp_port, $smtp_auth, $smtp_user, $smtp_pass, $smtp_sec, $admin_mail, $admin_name, $sent_mail, $subject, $body);
} }
} }
} else { } else {
$error = $lang['email_not']; //"Email not found"; $error = $lang['email_not']; //"Email not found";
} }
} }
} }
if ($_SERVER['REQUEST_METHOD'] === 'POST') { if ($_SERVER['REQUEST_METHOD'] === 'POST') {
// Check if logged in // Check if logged in
if (isset($_SESSION['token'])) { if (isset($_SESSION['token'])) {
@ -166,32 +164,32 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$username = htmlentities(trim($_POST['username'])); $username = htmlentities(trim($_POST['username']));
$password = $_POST['password']; $password = $_POST['password'];
if ($username != null && $password != null) { if ($username != null && $password != null) {
$query = $conn->prepare("SELECT * FROM users WHERE username=?"); $query = $conn->prepare("SELECT * FROM users WHERE username=?");
$query->execute([$username]); $query->execute([$username]);
if ($query->fetchColumn() > 0) { if ($query->fetchColumn() > 0) {
// Username found // Username found
while ($row = $query->fetch()) { while ($row = $query->fetch()) {
$db_oauth_uid = $row['oauth_uid']; $db_oauth_uid = $row['oauth_uid'];
$db_email_id = $row['email_id']; $db_email_id = $row['email_id'];
$db_full_name = $row['full_name']; $db_full_name = $row['full_name'];
$db_platform = $row['platform']; $db_platform = $row['platform'];
$db_password = $row['password']; $db_password = $row['password'];
$db_verified = $row['verified']; $db_verified = $row['verified'];
$db_picture = $row['picture']; $db_picture = $row['picture'];
$db_date = $row['date']; $db_date = $row['date'];
$db_ip = $row['ip']; $db_ip = $row['ip'];
$db_id = $row['id']; $db_id = $row['id'];
} }
if (password_verify($password, $db_password)) { if (password_verify($password, $db_password)) {
if ($db_verified == "1") { if ($db_verified == "1") {
// Login successful // Login successful
$_SESSION['token'] = Md5($db_id . $username); $_SESSION['token'] = Md5($db_id . $username);
$_SESSION['oauth_uid'] = $db_oauth_uid; $_SESSION['oauth_uid'] = $db_oauth_uid;
$_SESSION['username'] = $username; $_SESSION['username'] = $username;
header('Location: ' . $_SERVER['HTTP_REFERER']); header('Location: ' . $_SERVER['HTTP_REFERER']);
} elseif ($db_verified == "2") { } elseif ($db_verified == "2") {
// User is banned // User is banned
$error = $lang['banned']; $error = $lang['banned'];
@ -202,7 +200,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
} else { } else {
// Password wrong // Password wrong
$error = $lang['incorrect']; $error = $lang['incorrect'];
} }
} else { } else {
// Username not found // Username not found
@ -212,68 +210,68 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$error = $lang['missingfields']; //"All fields must be filled out."; $error = $lang['missingfields']; //"All fields must be filled out.";
} }
} }
} }
} }
// Register process // Register process
if (isset($_POST['signup'])) { if (isset($_POST['signup'])) {
$username = htmlentities(trim($_POST['username'], ENT_QUOTES)); $username = htmlentities(trim($_POST['username'], ENT_QUOTES));
$password = password_hash($_POST['password'], PASSWORD_DEFAULT); $password = password_hash($_POST['password'], PASSWORD_DEFAULT);
$email = htmlentities(trim($_POST['email'], ENT_QUOTES)); $email = htmlentities(trim($_POST['email'], ENT_QUOTES));
$chara_max = 25; //characters for max input $chara_max = 25; //characters for max input
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) { if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
$error = $lang['email_invalid']; // "Your email address seems to be invalid."; $error = $lang['email_invalid']; // "Your email address seems to be invalid.";
}else{ } else {
if(strlen($username)>$chara_max){ if (strlen($username) > $chara_max) {
$error = $lang['maxnamelimit']; // "Username already taken."; $error = $lang['maxnamelimit']; // "Username already taken.";
}else{ } else {
if ($username != null && $password != null && $email != null) { if ($username != null && $password != null && $email != null) {
$res = isValidUsername($username); $res = isValidUsername($username);
if ($res == '1') { if ($res == '1') {
$query = "SELECT * FROM users WHERE username='$username'"; $query = "SELECT * FROM users WHERE username='$username'";
$result = mysqli_query($con, $query); $result = mysqli_query($con, $query);
if (mysqli_num_rows($result) > 0) { if (mysqli_num_rows($result) > 0) {
$error = $lang['userexists']; // "Username already taken."; $error = $lang['userexists']; // "Username already taken.";
} else { } else {
$query = "SELECT * FROM users WHERE email_id='$email'"; $query = "SELECT * FROM users WHERE email_id='$email'";
$result = mysqli_query($con, $query); $result = mysqli_query($con, $query);
if (mysqli_num_rows($result) > 0) { if (mysqli_num_rows($result) > 0) {
$error = $lang['emailexists']; // "Email already registered."; $error = $lang['emailexists']; // "Email already registered.";
} else { } else {
if ($verification == 'disabled') { if ($verification == 'disabled') {
$query = "INSERT INTO users (oauth_uid,username,email_id,platform,password,verified,picture,date,ip,badge) VALUES ('0','$username','$email','Direct','$password','1','NONE','$date','$ip','0')"; $query = "INSERT INTO users (oauth_uid,username,email_id,platform,password,verified,picture,date,ip,badge) VALUES ('0','$username','$email','Direct','$password','1','NONE','$date','$ip','0')";
} else { } else {
$query = "INSERT INTO users (oauth_uid,username,email_id,platform,password,verified,picture,date,ip,badge) VALUES ('0','$username','$email','Direct','$password','0','NONE','$date','$ip','0')"; $query = "INSERT INTO users (oauth_uid,username,email_id,platform,password,verified,picture,date,ip,badge) VALUES ('0','$username','$email','Direct','$password','0','NONE','$date','$ip','0')";
} }
mysqli_query($con, $query); mysqli_query($con, $query);
if (mysqli_error($con)) if (mysqli_error($con))
$error = "Invalid input dectected"; $error = "Invalid input dectected";
else { else {
if ($verification == 'disabled') { if ($verification == 'disabled') {
$success = $lang['registered']; // "Your account was successfully registered."; $success = $lang['registered']; // "Your account was successfully registered.";
} else { } else {
$success = $lang['registered']; // "Your account was successfully registered."; $success = $lang['registered']; // "Your account was successfully registered.";
$protocol = paste_protocol(); $protocol = paste_protocol();
$verify_url = $protocol . $_SERVER['HTTP_HOST'] . rtrim(dirname($_SERVER['PHP_SELF']), '/\\') . "/verify.php?username=$username&code=" . Md5('4et4$55765' . $email . 'd94ereg'); $verify_url = $protocol . $_SERVER['HTTP_HOST'] . rtrim(dirname($_SERVER['PHP_SELF']), '/\\') . "/verify.php?username=$username&code=" . Md5('4et4$55765' . $email . 'd94ereg');
$sent_mail = $email; $sent_mail = $email;
$subject = $lang['mail_acc_con']; // "$site_name Account Confirmation"; $subject = $lang['mail_acc_con']; // "$site_name Account Confirmation";
$body = " $body = "
Hello $username, Your $site_name account has been created. Please verify your account by clicking the link below.<br /><br /> Hello $username, Your $site_name account has been created. Please verify your account by clicking the link below.<br /><br />
<a href='$verify_url' target='_self'>$verify_url</a> <br /> <br /> <a href='$verify_url' target='_self'>$verify_url</a> <br /> <br />
After confirming your account you can log in using your username: <b>$username</b> and the password you used when signing up. After confirming your account you can log in using your username: <b>$username</b> and the password you used when signing up.
"; ";
if ($mail_type == '1') { if ($mail_type == '1') {
default_mail($admin_mail, $admin_name, $sent_mail, $subject, $body); default_mail($admin_mail, $admin_name, $sent_mail, $subject, $body);
} else { } else {
smtp_mail($smtp_host, $smtp_port, $smtp_auth, $smtp_user, $smtp_pass, $smtp_sec, $admin_mail, $admin_name, $sent_mail, $subject, $body); smtp_mail($smtp_host, $smtp_port, $smtp_auth, $smtp_user, $smtp_pass, $smtp_sec, $admin_mail, $admin_name, $sent_mail, $subject, $body);
} }
} }
} }
} }
@ -292,4 +290,3 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
require_once('theme/' . $default_theme . '/header.php'); require_once('theme/' . $default_theme . '/header.php');
require_once('theme/' . $default_theme . '/login.php'); require_once('theme/' . $default_theme . '/login.php');
require_once('theme/' . $default_theme . '/footer.php'); require_once('theme/' . $default_theme . '/footer.php');
?>