kompot
/
publiccode.si
5
3
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

first validation of input

lektura
max.mehl 2017-03-22 01:07:43 +01:00
parent f49c2d44af
commit f11d92b7e1
1 changed files with 71 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

115
static/cgi/sign.php
View File

@ -6,64 +6,91 @@ $error = 0; // error status
$db = "../userdata/signatures.json";
// Get info from form
$name = $_GET['name'];
$email = $_GET['email'];
$country = $_GET['country'];
$zip = $_GET['zip'];
$perm = $_GET['permission'];
$action = isset($_GET['action']) ? $_GET['action'] : false;
if(empty($action)) {
echo "No action defined.";
exit(1);
} else if ($action === "sign") {
$name = isset($_GET['name']) ? $_GET['name'] : false;
$email = isset($_GET['email']) ? $_GET['email'] : false;
$country = isset($_GET['country']) ? $_GET['country'] : false;
$zip = isset($_GET['zip']) ? $_GET['zip'] : false;
$perm = isset($_GET['permission']) ? $_GET['permission'] : false;
// Check for missing required fields
if(empty($name) || empty($email) || empty($perm)) {
echo "At least one required variable is empty.";
exit(1);
}
} else if ($action === "confirm") {
$code = isset($_GET['code']) ? $_GET['code'] : false;
// Check for missing required fields
if(empty($code)) {
echo "Confirmation code is missing.";
exit(1);
}
} else {
echo "Invalid action.";
exit(1);
}
// Validate input
// Create a random string for email verification
$code = rand(1000000000,9999999999) . uniqid();
// Read database
if (! file_exists($db)) {
touch($db);
}
$file = file_get_contents($db, true);
$data = json_decode($file, true);
unset($file);
// Test whether email is a duplicate
$total = count($data);
for ($row = 0; $row <= $total; $row++) {
if ($email === $data[$row]['email']) {
echo "email $email already exists!";
$error = 1;
break 1;
} else {
return null;
/// SIGNING ///
if ($action === "sign") {
// Test whether email is a duplicate
$total = count($data);
for ($row = 0; $row < $total; $row++) {
if ($email === $data[$row]['email']) {
echo "email $email already exists!";
$error = 1;
break 1;
}
}
}
if ($error === 0) { // only make entry if no error happened
// Take sequential ID
$id = $total;
if ($error === 0) { // only make entry if no error happened
// Take sequential ID
$id = $total;
// Create a random string for email verification
$code = rand(1000000000,9999999999) . uniqid();
// Append new signature to array
$newsig = array("id" => $id,
"name" => $name,
"email" => $email,
"country" => $country,
"zip" => $zip,
"perm" => $perm,
"code" => $code);
$data[] = $newsig; // newsig is a separated variable for debugging purposes
// Append new signature to array
$newsig = array("id" => $id,
"name" => $name,
"email" => $email,
"country" => $country,
"zip" => $zip,
"perm" => $perm,
"code" => $code);
$data[] = $newsig; // newsig is a separated variable for debugging purposes
// Encode to JSON again and write to file
$allsig = json_encode($data, JSON_PRETTY_PRINT);
file_put_contents($db, $allsig, LOCK_EX);
unset($allsig);
// Send email asking for confirmation
$to = $email;
$subject = "One step left to sign the \"Public Money - Public Code\" letter";
$message = "Thank you for signing the open \"Public Money - Public Code\" letter! \r\n\r\n" .
"In order to confirm your signature, please visit following link:\r\n http://pmpc-test.mehl.mx/cgi/sign.php?action=confirm&code=$code \r\n\r\n" .
"If your confirmation succeeds, your signature will appear on the website within the next few hours.";
$headers = "From: noreply@mehl.mx" . "\r\n" .
"Message-ID: <confirmation-$code@fsfe.org>" . "\r\n" .
"X-Mailer: PHP/" . phpversion();
// Encode to JSON again and write to file
$allsig = json_encode($data, JSON_PRETTY_PRINT);
file_put_contents($db, $allsig, LOCK_EX);
unset($allsig);
// Send email asking for confirmation
$to = $email;
$subject = "One step left to sign the \"Public Money - Public Code\" letter";
$message = "Thank you for signing the open \"Public Money - Public Code\" letter! \r\n\r\n" .
"In order to confirm your signature, please visit following link:\r\n http://pmpc-test.mehl.mx/cgi/sign.php?action=confirm&code=$code \r\n\r\n" .
"If your confirmation succeeds, your signature will appear on the website within the next few hours.";
$headers = "From: noreply@mehl.mx" . "\r\n" .
"Message-ID: <confirmation-$code@fsfe.org>" . "\r\n" .
"X-Mailer: PHP/" . phpversion();
mail($to, $subject, $message, $headers);
mail($to, $subject, $message, $headers);
}
}
echo "<pre>";