56 lines
1.4 KiB
PHP
56 lines
1.4 KiB
PHP
<?php
|
|
header('Content-Type: application/json');
|
|
require("../../inc/connect.php");
|
|
require("../session.php");
|
|
|
|
$session = $_GET['session'];
|
|
$device = $_GET['device'];
|
|
|
|
if($session == "")
|
|
{
|
|
JError("no session");
|
|
}
|
|
if($device == "")
|
|
{
|
|
JError("no device");
|
|
}
|
|
if(strlen($device) != 6)
|
|
{
|
|
JError("device id invalid");
|
|
}
|
|
|
|
//check session
|
|
verify_session($mysqli, $session);
|
|
|
|
//verify device
|
|
$sql = "SELECT `id` FROM `device` WHERE `dev_id`='" . $device . "' AND `user`=0";
|
|
$query = ExecQuery($mysqli, $sql);
|
|
|
|
if($query->num_rows < 1)
|
|
{
|
|
JError("device id invalid");
|
|
}
|
|
|
|
//get email address and username
|
|
$sql = "SELECT `username`, `email` FROM `user` WHERE `id`=$user";
|
|
$query = ExecQuery($mysqli, $sql);
|
|
|
|
$result = $query->fetch_assoc();
|
|
$email = $result['email'];
|
|
$username = $result['username'];
|
|
|
|
$code = $email . "~" . $device . "~";
|
|
$code .= RandomString(96 - strlen($code));
|
|
$code = str_rot13($code);
|
|
|
|
$sql = "UPDATE `user` SET `code`='$code' WHERE `id`=$user";
|
|
ExecQuery($mysqli, $sql);
|
|
|
|
$msg = "Hello " . $username . ",\n\n";
|
|
$msg .= "Please verify your new device by clicking the link below.\n";
|
|
$msg .= "<a href='http://lipa.kvewijk.nl/manage/php/session/verify.php?code=" . urlencode($code) . "'>Verify</a>";
|
|
|
|
sendMail($email, "Verify Device", $msg);
|
|
|
|
JSuccess("true");
|
|
?>
|