|
@@ -31,31 +31,40 @@
|
|
|
|
|
|
|
|
if (filter_input(INPUT_POST, "mail")){
|
|
if (filter_input(INPUT_POST, "mail")){
|
|
|
$mail = filter_input(INPUT_POST, 'mail');
|
|
$mail = filter_input(INPUT_POST, 'mail');
|
|
|
- // TODO: Validate mail
|
|
|
|
|
|
|
+ if (!filter_var($mail, FILTER_VALIDATE_EMAIL)){
|
|
|
|
|
+ return -1;
|
|
|
|
|
+ }
|
|
|
$s = $db->prepare('UPDATE player SET mail = :mail WHERE uid = :uid;');
|
|
$s = $db->prepare('UPDATE player SET mail = :mail WHERE uid = :uid;');
|
|
|
$s->bindValue(':uid', $player);
|
|
$s->bindValue(':uid', $player);
|
|
|
$s->bindValue(':mail', $mail);
|
|
$s->bindValue(':mail', $mail);
|
|
|
if(!$s->execute()){
|
|
if(!$s->execute()){
|
|
|
- return -1;
|
|
|
|
|
|
|
+ return -2;
|
|
|
}
|
|
}
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
if (filter_input(INPUT_POST, "pass")){
|
|
if (filter_input(INPUT_POST, "pass")){
|
|
|
$pass = sha1(filter_input(INPUT_POST, 'pass'));
|
|
$pass = sha1(filter_input(INPUT_POST, 'pass'));
|
|
|
$currentPass = sha1(filter_input(INPUT_POST, 'currentPass'));
|
|
$currentPass = sha1(filter_input(INPUT_POST, 'currentPass'));
|
|
|
- // TODO: Validate current
|
|
|
|
|
|
|
+ $s = $db->prepare('SELECT COUNT(uid) AS count FROM player WHERE uid = :uid AND password = :currentPass;');
|
|
|
|
|
+ $s->bindValue(':uid', $player);
|
|
|
|
|
+ $s->bindValue(':currentPass', $currentPass);
|
|
|
|
|
+ $q = $s->execute();
|
|
|
|
|
+ $r = $q->fetchArray(SQLITE3_ASSOC);
|
|
|
|
|
+ if ($r["count"] != 1){
|
|
|
|
|
+ return -3;
|
|
|
|
|
+ }
|
|
|
$s = $db->prepare('UPDATE player SET password = :pass WHERE uid = :uid AND password = :currentPass;');
|
|
$s = $db->prepare('UPDATE player SET password = :pass WHERE uid = :uid AND password = :currentPass;');
|
|
|
$s->bindValue(':uid', $player);
|
|
$s->bindValue(':uid', $player);
|
|
|
$s->bindValue(':pass', $mail);
|
|
$s->bindValue(':pass', $mail);
|
|
|
$s->bindValue(':currentPass', $currentPass);
|
|
$s->bindValue(':currentPass', $currentPass);
|
|
|
if(!$s->execute()){
|
|
if(!$s->execute()){
|
|
|
- return -2;
|
|
|
|
|
|
|
+ return -4;
|
|
|
}
|
|
}
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
if (filter_input(INPUT_POST, "api")){
|
|
if (filter_input(INPUT_POST, "api")){
|
|
|
$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
|
|
$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
|
|
|
- $charactersLength =16;
|
|
|
|
|
|
|
+ $charactersLength = 16;
|
|
|
$api = '';
|
|
$api = '';
|
|
|
for ($i = 0; $i < $length; $i++) {
|
|
for ($i = 0; $i < $length; $i++) {
|
|
|
$api .= $characters[rand(0, $charactersLength - 1)];
|
|
$api .= $characters[rand(0, $charactersLength - 1)];
|
|
@@ -64,7 +73,7 @@
|
|
|
$s->bindValue(':uid', $player);
|
|
$s->bindValue(':uid', $player);
|
|
|
$s->bindValue(':api', $api);
|
|
$s->bindValue(':api', $api);
|
|
|
if(!$s->execute()){
|
|
if(!$s->execute()){
|
|
|
- return -3;
|
|
|
|
|
|
|
+ return -5;
|
|
|
}
|
|
}
|
|
|
$response = $api;
|
|
$response = $api;
|
|
|
}
|
|
}
|