瀏覽代碼

Updated user create functions and signuppage

tags/1week
kenn408k 6 年之前
父節點
當前提交
938497f7fc
共有 3 個檔案被更改,包括 38 行新增5 行删除
  1. 21
    2
      classes/alter.class.php
  2. 10
    0
      classes/get.class.php
  3. 7
    3
      content/signup.php

+ 21
- 2
classes/alter.class.php 查看文件

61
         header('Location: ' . Config::$sys_url . '?page=eventadmin');
61
         header('Location: ' . Config::$sys_url . '?page=eventadmin');
62
         die("Error, please enable browser redirects.");
62
         die("Error, please enable browser redirects.");
63
     }
63
     }
64
-
65
-    public static function addUser($username, $password, $realname, $mail, $level) {
64
+    
65
+    public static function addUser($username, $password, $realname, $mail, $level) {  
66
+        if (Get::checkExists($username)) { // check if user exists
67
+            // ERROR USER EXISTS
68
+            die();
69
+        }
70
+        
71
+        // lets check the variables
72
+        
73
+        if (strlen($username) < 3) { die(); }
74
+        elseif (strlen($password) < 5) { die(); }
75
+        elseif (strlen($realname) < 5) { die(); }
76
+        elseif (strlen($mail) < 5) { die(); }
77
+        // Now we know everything contains something.
78
+        // Time to sanitize!
79
+        
80
+        $username = filter_var($username, FILTER_SANITIZE_STRING);
81
+        $realname = filter_var($realname, FILTER_SANITIZE_STRING);
82
+        $mail = filter_var($mail, FILTER_SANITIZE_EMAIL);
83
+        // Gr8, we are sanitized. We dont sanitize password, as we hash it anyway using argon2
84
+        
66
         $db = new DBClass();
85
         $db = new DBClass();
67
         $sql = "INSERT INTO `users` (`id`, `realname`, `username`, `password`, `email`, `level`) VALUES (NULL, '$realname', '$username', '" . User::hashPass($password) . "', '$mail', '$level');";
86
         $sql = "INSERT INTO `users` (`id`, `realname`, `username`, `password`, `email`, `level`) VALUES (NULL, '$realname', '$username', '" . User::hashPass($password) . "', '$mail', '$level');";
68
         return $db->query($sql);
87
         return $db->query($sql);

+ 10
- 0
classes/get.class.php 查看文件

78
         $sql = "SELECT * FROM `events` ORDER BY `id` DESC LIMIT 5";
78
         $sql = "SELECT * FROM `events` ORDER BY `id` DESC LIMIT 5";
79
         return $db->fetchAll($db->query($sql));
79
         return $db->fetchAll($db->query($sql));
80
     }
80
     }
81
+    
82
+    
83
+    /* Login and user functions */
81
 
84
 
85
+    public static function checkExists($name) {
86
+        // Checks if username already is in db, if not return false, if it exists return true
87
+        $db = new DBClass();
88
+        $sql = "SELECT * FROM `" . Config::$db_tableusers . "` WHERE `username` = '$name'";
89
+        if ($db->numRows($db->query($sql)) != 1) { return false; } else { return true; }
90
+    }
91
+    
82
 }
92
 }

+ 7
- 3
content/signup.php 查看文件

6
 $setup['description'] = "Opret dig som bruger hos Odense Track";
6
 $setup['description'] = "Opret dig som bruger hos Odense Track";
7
 
7
 
8
 Design::header($setup, 0);
8
 Design::header($setup, 0);
9
+
10
+if (isset($_POST['username'])) {
11
+    Alter::addUser($_POST['username'],$_POST['password'],$_POST['realname'],$_POST['mail'],25);
12
+}
9
 ?>
13
 ?>
10
 
14
 
11
 <div class="page">
15
 <div class="page">
14
     <br />
18
     <br />
15
 
19
 
16
     <div class="contactform">
20
     <div class="contactform">
17
-        <form method="POST" action="?page=contact">
21
+        <form method="POST" action="?page=signup">
18
             <div class="form-control">
22
             <div class="form-control">
19
                 <label>Brugernavn: </label>
23
                 <label>Brugernavn: </label>
20
-                <input class="inputfield"  type="text" name="name" placeholder="Brugernavn" required minlength="5" />
24
+                <input class="inputfield"  type="text" name="username" placeholder="Brugernavn" required minlength="3" />
21
             </div>
25
             </div>
22
             <div class="form-control">
26
             <div class="form-control">
23
                 <label>Password: </label>
27
                 <label>Password: </label>
25
             </div>
29
             </div>
26
             <div class="form-control">
30
             <div class="form-control">
27
                 <label>Fuldt navn: </label>
31
                 <label>Fuldt navn: </label>
28
-                <input class="inputfield"  type="password" name="fullname" placeholder="Fuldt navn" required minlength="5" />
32
+                <input class="inputfield"  type="text" name="realname" placeholder="Fuldt navn" required minlength="5" />
29
             </div>
33
             </div>
30
             
34
             
31
             <div class="form-control">
35
             <div class="form-control">

Loading…
取消
儲存