Project

General

Profile

« Previous | Next » 

Revision 1810

Added by Dietmar about 12 years ago

! account signup check that display_name is unique in whole system
(prevents from User-faking)
! add POST Request to admintools

View differences:

branches/2.8.x/CHANGELOG
13 13 

  		




  14
  14
  
    

  		




  15
  15
  
    

  		




  
  16
  
    
09 Nov-2012 Build 1810 Dietmar Woellbrink (Luisehahne)


  		




  
  17
  
    
! account signup check that display_name is unique in whole system


  		




  
  18
  
    
  (prevents from User-faking)


  		




  
  19
  
    
! add POST Request to admintools 


  		




  16
  20
  
    
07 Nov-2012 Build 1809 Dietmar Woellbrink (Luisehahne)


  		




  17
  21
  
    
! remove login_ip after 60days set in /admin/start/index.php


  		




  18
  22
  
    
! add confirm_code and confirm_timeout fields in users table in /install/save.php


  		












  

    
      branches/2.8.x/wb/admin/interface/version.php
    
  





  51
  51
  
    

  		




  52
  52
  
    
// check if defined to avoid errors during installation (redirect to admin panel fails if PHP error/warnings are enabled)


  		




  53
  53
  
    
if(!defined('VERSION')) define('VERSION', '2.8.3');


  		




  54
  
  
    
if(!defined('REVISION')) define('REVISION', '1809');


  		




  
  54
  
    
if(!defined('REVISION')) define('REVISION', '1810');


  		




  55
  55
  
    
if(!defined('SP')) define('SP', '');


  		












  

    
      branches/2.8.x/wb/admin/admintools/tool.php
    
  





  28
  28
  
    

  		




  29
  29
  
    
require_once(WB_PATH.'/framework/functions.php');


  		




  30
  30
  
    

  		




  31
  
  
    
$toolDir = (isset($_GET['tool']) && (trim($_GET['tool']) != '') ? trim($_GET['tool']) : '');


  		




  
  31
  
    
$toolDir = (isset($_POST['tool']) && (trim($_POST['tool']) != '') ? trim($_POST['tool']) : '');


  		




  
  32
  
    
$toolDir = (isset($_GET['tool']) && (trim($_GET['tool']) != '') ? trim($_GET['tool']) : $toolDir);


  		




  32
  33
  
    
$doSave  = (isset($_POST['save_settings']) || (isset($_POST['action']) && strtolower($_POST['action']) == 'save'));


  		




  33
  34
  
    

  		




  34
  35
  
    
// test for valid tool name


  		












  

    
      branches/2.8.x/wb/admin/admintools/index.php
    
  





  37
  37
  
    
// Insert tools into tool list


  		




  38
  38
  
    
$template->set_block('main_block', 'tool_list_block', 'tool_list');


  		




  39
  39
  
    
$template->set_var('TOOL_NAME', '');


  		




  
  40
  
    
$template->set_var('tool_list', $TEXT['NONE'].' '.$TEXT['MODULE_PERMISSIONS']);


  		




  40
  41
  
    
$template->set_var('TOOL_DIR', '');


  		




  41
  42
  
    
$template->set_var('TOOL_DESCRIPTION', '');


  		




  42
  43
  
    
$template->set_var('NO_CONTENT', '');


  		












  

    
      branches/2.8.x/wb/account/save_signup.php
    
  





  117
  117
  
    
		msgQueue::add($MESSAGE['LOGIN_USERNAME_BLANK']);


  		




  118
  118
  
    
	}


  		




  119
  119
  
    

  		




  
  120
  
    
// check that display_name is unique in whoole system (prevents from User-faking)


  		




  
  121
  
    
    	$sql  = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.'users` ';


  		




  
  122
  
    
    	$sql .= 'WHERE `user_id` <> '.(int)$admin->get_user_id().' AND `display_name` LIKE "'.$wb->get_session('DISPLAY_NAME').'"';


  		




  
  123
  
    
    	if( ($iFoundUser = intval($database->get_one($sql))) > 0 ){


  		




  
  124
  
    
            msgQueue::add($MESSAGE['USERS_USERNAME_TAKEN'].' ('.$TEXT['DISPLAY_NAME'].')');


  		




  
  125
  
    
            $_SESSION['DISPLAY_NAME'] = '';


  		




  
  126
  
    
       } else {


  		




  
  127
  
    
            if($wb->get_session('DISPLAY_NAME') == '') {


  		




  
  128
  
    
        	   msgQueue::add($MESSAGE['GENERIC_FILL_IN_ALL'].' ('.$TEXT['DISPLAY_NAME'].')');


  		




  
  129
  
    
            }


  		




  
  130
  
    
       }


  		




  
  131
  
    

  		




  120
  132
  
    
	if($wb->get_session('EMAIL') != "") {


  		




  121
  133
  
    
		// Check if the email already exists


  		




  122
  134
  
    
		$sql = 'SELECT `user_id` FROM `'.TABLE_PREFIX.'users` WHERE `email` = \''.$_SESSION['EMAIL'].'\'';


  		




  ......




  133
  145
  
    
		msgQueue::add($MESSAGE['SIGNUP_NO_EMAIL']);


  		




  134
  146
  
    
	}


  		




  135
  147
  
    

  		




  136
  
  
    
	if($wb->get_session('DISPLAY_NAME') == "") {


  		




  137
  
  
    
//		$aErrorMsg[] = $MESSAGE['GENERIC_FILL_IN_ALL'];


  		




  138
  
  
    
		msgQueue::add($MESSAGE['GENERIC_FILL_IN_ALL'].' ('.$TEXT['DISPLAY_NAME'].')');


  		




  139
  
  
    
	}


  		




  
  148
  
    
//	if($wb->get_session('DISPLAY_NAME') == "") {


  		




  
  149
  
    
////		$aErrorMsg[] = $MESSAGE['GENERIC_FILL_IN_ALL'];


  		




  
  150
  
    
//		msgQueue::add($MESSAGE['GENERIC_FILL_IN_ALL'].' ('.$TEXT['DISPLAY_NAME'].')');


  		




  
  151
  
    
//	}


  		




  140
  152
  
    

  		




  141
  153
  
    
	if(CONFIRMED_REGISTRATION) {


  		




  142
  154
  
    
		$iMinPassLength = 6;


  		












Also available in:  Unified diff