Changeset 1060 in ExiteCMS for trunk/setuser.php

Timestamp:

11/05/07 21:36:09 (5 years ago)

Author:

hverton

Message:

Added a feature to handle invalid member email addresses. Once a user has been marked to have an invalid address, a login will redirect to the edit_profile module and the user will be prompted to correct the address. If this doesn't happen within 90 days, the user account will be deactivated and will disappear from the member lists. The account is not deleted or disabled, a login will reactivate the account again (and the 90 day countdown timer will start again).

File:

• trunk/setuser.php (modified) (2 diffs)

trunk/setuser.php

@@ -18 +18 @@
 // temp storage for template variables
 $variables = array();
+
+// set the redirect url (set in theme_cleanup)
+if (isset($_COOKIE['last_url'])) {
+    $variables['url'] = $_COOKIE['last_url'];
+} elseif (empty($_SERVER['HTTP_REFERER'])) {
+    $variables['url'] = BASEDIR."index.php";
+} else {
+    $variables['url'] = substr(strstr($_SERVER['HTTP_REFERER'], ":"), strlen($_SERVER['HTTP_HOST'])+3);
+}
 
 if (isset($_REQUEST['logout']) && $_REQUEST['logout'] == "yes") {
@@ -46 +55 @@
             $user_pass = (preg_match("/^[0-9a-z]{32}$/", $cookie_vars['1']) ? $cookie_vars['1'] : "");
             $user_name = preg_replace(array("/\=/","/\#/","/\sOR\s/"), "", stripinput($user));
-            if (!dbcount("(user_id)", "users", "user_name='$user_name' AND user_password='".$user_pass."'")) {
-                $message = "<b>".$locale['196']."</b><br /><br />\n";
-            } else {
+            $result = dbquery("SELECT * FROM ".$db_prefix."users WHERE user_name='".$user_name."' AND user_password='".$user_pass."'");
+            if ($data = dbarray($result)) {
+                if ($data['user_bad_email'] != 0) {
+                    $variables['url'] = BASEDIR."edit_profile.php?check=email&value=".(90 - intval((time() - $data['user_bad_email']) / 86400));
+                }
                 $result = dbquery("DELETE FROM ".$db_prefix."online WHERE online_user='0' AND online_ip='".USER_IP."'");
                 $message = "<b>".$locale['193'].$user."</b><br /><br />\n";
+            } else {
+                $message = "<b>".$locale['196']."</b><br /><br />\n";
             }
         }