Store in GIT

2026-06-17 15:46:26 +02:00
parent 47150cc7ca
commit 876ad89e72
134 changed files with 31034 additions and 0 deletions
@@ -0,0 +1,69 @@
+<?php
+   	require('../../../inc/connect.php');
+	require('../../../inc/crypt.php');
+
+	$username = $_POST['username'];
+	$email = $_POST['email'];
+	$password1 = $_POST['password1'];
+	$password2 = $_POST['password2'];
+	$device = $_POST['device'];
+
+	//Validate Device ID
+	if(strlen($device) != 6)
+	{
+		error("login", "Device ID invalid");
+	}
+
+	$sql = "SELECT `id` FROM `device` WHERE `dev_id`='" . $device . "' AND `user`=0";
+	$query = ExecQuery($mysqli, $sql);
+
+	if($query->num_rows < 1)
+	{
+		error("login", "Device ID invalid");
+	}
+
+	//Validate email
+	if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
+	    error("login", "Invalid email address");
+	}
+
+	$sql = "SELECT `id` FROM `user` WHERE `email`='" . $email . "' AND verified=1";
+	$query = ExecQuery($mysqli, $sql);
+
+	if($query->num_rows >= 1)
+	{
+		error("login", "Email address is already in use.");
+	}
+
+	//Validate username
+	$sql = "SELECT `id` FROM `user` WHERE `username`='" . $username . "'";
+	$query = ExecQuery($mysqli, $sql);
+
+	if($query->num_rows >= 1)
+	{
+		error("login", "Username is already in use.");
+	}
+
+	//Validate password
+	if($password1 != $password2)
+	{
+		error("login", "Passwords do not match");
+	}
+
+	$password_hash = password_hash($password1, PASSWORD_BCRYPT);
+
+	$code = $email . "~" . $device . "~";
+	$code .= RandomString(96 - strlen($code));
+	$code = str_rot13($code);
+
+	$sql = "INSERT INTO user (`username`, `password`, `email`, `code`) VALUES ('$username', '$password_hash', '$email', '$code')";
+	ExecQuery($mysqli, $sql);
+
+	$msg = "Hello " . $username . ",\n\n";
+	$msg .= "Please verify your LiPaccount by clicking the link below.\n";
+	$msg .= "<a href='http://lipa.kvewijk.nl/manage/php/session/verify.php?code=" . urlencode($code) . "'>Verify</a>";
+
+	sendMail($email, "Verify LiPaccount", $msg);
+
+	success("login", "An email has been sent to " . $email . " for verification");
+?>