| 1 | 1 |
deleted file mode 100644 |
| ... | ... |
@@ -1,104 +0,0 @@ |
| 1 |
-<?php |
|
| 2 |
-/** |
|
| 3 |
- * Copyright (C) 2021 Double Bastion LLC |
|
| 4 |
- * |
|
| 5 |
- * This file is part of Roundpin, which is licensed under the |
|
| 6 |
- * GNU Affero General Public License Version 3.0. The license terms |
|
| 7 |
- * are detailed in the "LICENSE.txt" file located in the root directory. |
|
| 8 |
- */ |
|
| 9 |
- |
|
| 10 |
-session_start(); |
|
| 11 |
- |
|
| 12 |
-if (isset($_POST['s_ajax_call']) && ($_POST['s_ajax_call'] == $_SESSION['validate_s_access'])) {
|
|
| 13 |
- |
|
| 14 |
- define('ACCESSCONST', TRUE);
|
|
| 15 |
- |
|
| 16 |
- require('db-connect.php');
|
|
| 17 |
- |
|
| 18 |
- $username = $_POST['username']; |
|
| 19 |
- $currentEmail = $_POST['current_email']; |
|
| 20 |
- $newEmail = $_POST['new_email']; |
|
| 21 |
- |
|
| 22 |
- // Get the email address of the current user from the 'app_users' table |
|
| 23 |
- $queryemail = $mysqli->query("SELECT id, username, emailaddress, enabled FROM app_users WHERE username = '$username' AND enabled = 1");
|
|
| 24 |
- $emailfromdb = $queryemail->fetch_row(); |
|
| 25 |
- $fetchedemailfromdb = $emailfromdb[2]; |
|
| 26 |
- |
|
| 27 |
- // Check if there is any other user with the same email address as the new email address |
|
| 28 |
- $getemails = $mysqli->query("SELECT emailaddress FROM app_users");
|
|
| 29 |
- |
|
| 30 |
- $duplicateemail = 0; |
|
| 31 |
- |
|
| 32 |
- while ($row = $getemails->fetch_row()) {
|
|
| 33 |
- |
|
| 34 |
- if ($newEmail == $row[0]) {
|
|
| 35 |
- $duplicateemail = 1; |
|
| 36 |
- break; |
|
| 37 |
- } |
|
| 38 |
- } |
|
| 39 |
- |
|
| 40 |
- |
|
| 41 |
- if ($fetchedemailfromdb == $currentEmail) {
|
|
| 42 |
- |
|
| 43 |
- if ($duplicateemail == 0) {
|
|
| 44 |
- |
|
| 45 |
- /** |
|
| 46 |
- * Send the verification email |
|
| 47 |
- */ |
|
| 48 |
- |
|
| 49 |
- // Generate a random string to be used as the termination of the verification link |
|
| 50 |
- function random_str($length, $keyspace = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ') {
|
|
| 51 |
- $pieces = []; |
|
| 52 |
- $max = mb_strlen($keyspace, '8bit') - 1; |
|
| 53 |
- |
|
| 54 |
- for ($i = 0; $i < $length; ++$i) {
|
|
| 55 |
- $pieces []= $keyspace[random_int(0, $max)]; |
|
| 56 |
- } |
|
| 57 |
- return implode('', $pieces);
|
|
| 58 |
- } |
|
| 59 |
- |
|
| 60 |
- $token = random_str(55); |
|
| 61 |
- |
|
| 62 |
- // Enter the new token in the database |
|
| 63 |
- $entertokenquery = $mysqli->query("UPDATE app_users SET token = '$token' WHERE username = '$username' AND registered = 1 AND enabled = 1");
|
|
| 64 |
- |
|
| 65 |
- // Create the verification email |
|
| 66 |
- $verificationLink = $_SERVER['REQUEST_SCHEME'] . "://" . $_SERVER['HTTP_HOST'] . "/change-email-verification.php?token=" . $token . "&newemail=" . $newEmail; |
|
| 67 |
- |
|
| 68 |
- $domaininit = explode(".", $_SERVER['HTTP_HOST']);
|
|
| 69 |
- array_shift($domaininit); |
|
| 70 |
- $domain = implode(".", $domaininit);
|
|
| 71 |
- |
|
| 72 |
- $headers = "MIME-Version: 1.0" . "\r\n"; |
|
| 73 |
- $headers .= "Content-type: text/html; charset=UTF-8" . "\r\n"; |
|
| 74 |
- |
|
| 75 |
- $headers .= "From: " . "no-reply@" . $domain . "\r\n"; |
|
| 76 |
- |
|
| 77 |
- $subject = "Roundpin email address verification"; |
|
| 78 |
- |
|
| 79 |
- $message = "Hello, <br><br> |
|
| 80 |
- We have received your email address change request. To change your current Roundpin email address, please verify your address by clicking on |
|
| 81 |
- the link from below: <br><br> |
|
| 82 |
- <a href='".$verificationLink."'>".$verificationLink."</a><br><br> |
|
| 83 |
- Alternatively, you can copy the link and paste it in the address bar of your browser.<br><br> |
|
| 84 |
- After email address verification, your new email address will be assigned to your Roundpin account and saved to the database.<br><br> |
|
| 85 |
- Thank you,<br> |
|
| 86 |
- Roundpin<br> |
|
| 87 |
- Host: '" . $_SERVER['HTTP_HOST'] . "'"; |
|
| 88 |
- |
|
| 89 |
- // Send the verification email |
|
| 90 |
- mail($newEmail, $subject, $message, $headers); |
|
| 91 |
- |
|
| 92 |
- $emailchangemessage = "An email has been sent to your new email address. Please click on the link included in the received email to change your Roundpin user email address."; |
|
| 93 |
- |
|
| 94 |
- } else { $emailchangemessage = "The new email address is already used by another Roundpin user. Please, choose a different email address!"; }
|
|
| 95 |
- |
|
| 96 |
- } else { $emailchangemessage = "The email address you have entered in the 'Current Email' field doesn't match your current email address!"; }
|
|
| 97 |
- |
|
| 98 |
- echo json_encode($emailchangemessage); |
|
| 99 |
- |
|
| 100 |
-} else {
|
|
| 101 |
- header("Location: roundpin-login.php");
|
|
| 102 |
-} |
|
| 103 |
- |
|
| 104 |
-?> |
|
| 105 | 0 |
\ No newline at end of file |
| 1 | 1 |
new file mode 100644 |
| ... | ... |
@@ -0,0 +1,104 @@ |
| 1 |
+<?php |
|
| 2 |
+/** |
|
| 3 |
+ * Copyright (C) 2021 Double Bastion LLC |
|
| 4 |
+ * |
|
| 5 |
+ * This file is part of Roundpin, which is licensed under the |
|
| 6 |
+ * GNU Affero General Public License Version 3.0. The license terms |
|
| 7 |
+ * are detailed in the "LICENSE.txt" file located in the root directory. |
|
| 8 |
+ */ |
|
| 9 |
+ |
|
| 10 |
+session_start(); |
|
| 11 |
+ |
|
| 12 |
+if (isset($_POST['s_ajax_call']) && ($_POST['s_ajax_call'] == $_SESSION['validate_s_access'])) {
|
|
| 13 |
+ |
|
| 14 |
+ define('ACCESSCONST', TRUE);
|
|
| 15 |
+ |
|
| 16 |
+ require('db-connect.php');
|
|
| 17 |
+ |
|
| 18 |
+ $username = $_POST['username']; |
|
| 19 |
+ $currentEmail = $_POST['current_email']; |
|
| 20 |
+ $newEmail = $_POST['new_email']; |
|
| 21 |
+ |
|
| 22 |
+ // Get the email address of the current user from the 'app_users' table |
|
| 23 |
+ $queryemail = $mysqli->query("SELECT id, username, emailaddress, enabled FROM app_users WHERE username = '$username' AND enabled = 1");
|
|
| 24 |
+ $emailfromdb = $queryemail->fetch_row(); |
|
| 25 |
+ $fetchedemailfromdb = $emailfromdb[2]; |
|
| 26 |
+ |
|
| 27 |
+ // Check if there is any other user with the same email address as the new email address |
|
| 28 |
+ $getemails = $mysqli->query("SELECT emailaddress FROM app_users");
|
|
| 29 |
+ |
|
| 30 |
+ $duplicateemail = 0; |
|
| 31 |
+ |
|
| 32 |
+ while ($row = $getemails->fetch_row()) {
|
|
| 33 |
+ |
|
| 34 |
+ if ($newEmail == $row[0]) {
|
|
| 35 |
+ $duplicateemail = 1; |
|
| 36 |
+ break; |
|
| 37 |
+ } |
|
| 38 |
+ } |
|
| 39 |
+ |
|
| 40 |
+ |
|
| 41 |
+ if ($fetchedemailfromdb == $currentEmail) {
|
|
| 42 |
+ |
|
| 43 |
+ if ($duplicateemail == 0) {
|
|
| 44 |
+ |
|
| 45 |
+ /** |
|
| 46 |
+ * Send the verification email |
|
| 47 |
+ */ |
|
| 48 |
+ |
|
| 49 |
+ // Generate a random string to be used as the termination of the verification link |
|
| 50 |
+ function random_str($length, $keyspace = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ') {
|
|
| 51 |
+ $pieces = []; |
|
| 52 |
+ $max = mb_strlen($keyspace, '8bit') - 1; |
|
| 53 |
+ |
|
| 54 |
+ for ($i = 0; $i < $length; ++$i) {
|
|
| 55 |
+ $pieces []= $keyspace[random_int(0, $max)]; |
|
| 56 |
+ } |
|
| 57 |
+ return implode('', $pieces);
|
|
| 58 |
+ } |
|
| 59 |
+ |
|
| 60 |
+ $token = random_str(55); |
|
| 61 |
+ |
|
| 62 |
+ // Enter the new token in the database |
|
| 63 |
+ $entertokenquery = $mysqli->query("UPDATE app_users SET token = '$token' WHERE username = '$username' AND registered = 1 AND enabled = 1");
|
|
| 64 |
+ |
|
| 65 |
+ // Create the verification email |
|
| 66 |
+ $verificationLink = $_SERVER['REQUEST_SCHEME'] . "://" . $_SERVER['HTTP_HOST'] . "/change-email-verification.php?token=" . $token . "&newemail=" . $newEmail; |
|
| 67 |
+ |
|
| 68 |
+ $domaininit = explode(".", $_SERVER['HTTP_HOST']);
|
|
| 69 |
+ array_shift($domaininit); |
|
| 70 |
+ $domain = implode(".", $domaininit);
|
|
| 71 |
+ |
|
| 72 |
+ $headers = "MIME-Version: 1.0" . "\r\n"; |
|
| 73 |
+ $headers .= "Content-type: text/html; charset=UTF-8" . "\r\n"; |
|
| 74 |
+ |
|
| 75 |
+ $headers .= "From: " . "no-reply@" . $domain . "\r\n"; |
|
| 76 |
+ |
|
| 77 |
+ $subject = "Roundpin email address verification"; |
|
| 78 |
+ |
|
| 79 |
+ $message = "Hello, <br><br> |
|
| 80 |
+ We have received your email address change request. To change your current Roundpin email address, please verify your address by clicking on |
|
| 81 |
+ the link from below: <br><br> |
|
| 82 |
+ <a href='".$verificationLink."'>".$verificationLink."</a><br><br> |
|
| 83 |
+ Alternatively, you can copy the link and paste it in the address bar of your browser.<br><br> |
|
| 84 |
+ After email address verification, your new email address will be assigned to your Roundpin account and saved to the database.<br><br> |
|
| 85 |
+ Thank you,<br> |
|
| 86 |
+ Roundpin<br> |
|
| 87 |
+ Host: '" . $_SERVER['HTTP_HOST'] . "'"; |
|
| 88 |
+ |
|
| 89 |
+ // Send the verification email |
|
| 90 |
+ mail($newEmail, $subject, $message, $headers); |
|
| 91 |
+ |
|
| 92 |
+ $emailchangemessage = "An email has been sent to your new email address. Please click on the link included in the received email to change your Roundpin user email address."; |
|
| 93 |
+ |
|
| 94 |
+ } else { $emailchangemessage = "The new email address is already used by another Roundpin user. Please, choose a different email address!"; }
|
|
| 95 |
+ |
|
| 96 |
+ } else { $emailchangemessage = "The email address you have entered in the 'Current Email' field doesn't match your current email address!"; }
|
|
| 97 |
+ |
|
| 98 |
+ echo json_encode($emailchangemessage); |
|
| 99 |
+ |
|
| 100 |
+} else {
|
|
| 101 |
+ header("Location: roundpin-login.php");
|
|
| 102 |
+} |
|
| 103 |
+ |
|
| 104 |
+?> |
|
| 0 | 105 |
\ No newline at end of file |