lapervenche/ZwiiCampus
1
0
Fork 0
forked from ZwiiCMS-Team/ZwiiCampus
Code Pull Requests Activity

suscribe WIP

Browse Source
This commit is contained in:
Fred Tempez 2023-11-16 15:51:10 +01:00
parent 7c64b168ab
commit c21baf80ef
1 changed files with 12 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
module/suscribe/suscribe.php
View File

@ -260,7 +260,6 @@ class suscribe extends common
} }
// Si tout est ok // Si tout est ok
if ($check === true) { if ($check === true) {
$auth = uniqid();
// Enregistrement temporaire du compte // Enregistrement temporaire du compte
$this->setData([ $this->setData([
'module', 'module',
@ -304,7 +303,7 @@ class suscribe extends common
// Mail de confirmation à l'utilisateur // Mail de confirmation à l'utilisateur
// forger le lien de vérification // forger le lien de vérification
$validateLink = helper::baseUrl(true) . $this->getUrl() . '/validate/' . $userId . '/' . $auth; $validateLink = helper::baseUrl(true) . $this->getUrl() . '/validate/' . $userId . '/' . $_SESSION['csrf'];
// Envoi // Envoi
$sentMailtoUser = false; $sentMailtoUser = false;
if ($check === true) { if ($check === true) {
@ -346,27 +345,30 @@ class suscribe extends common
$csrf = $this->getUrl(3); $csrf = $this->getUrl(3);
$userId = $this->getUrl(2); $userId = $this->getUrl(2);
// Validité // Validité
if (time() - $this->getData(['user', $userId, 'timer']) <= (60 * $this->getdata(['module', $this->getUrl(0), 'config', 'pageTimeOut']))) { if (time() - $this->getData(['module', $this->getUrl(0), 'user', $userId, 'timer']) <= (60 * $this->getdata(['module', $this->getUrl(0), 'config', 'pageTimeOut']))) {
$check = false; $check = false;
$notification = 'Le lien n\'est plus valide'; $notification = 'Le lien n\'est plus valide';
} }
if (($csrf !== $this->getData(['user', $userId, 'auth']))) { if (($csrf !== $_SESSION['csrf'])) {
$check = false; $check = false;
$notification = 'Identifiant ou mot de passe inconnu'; $notification = 'Identifiant ou mot de passe inconnu';
} }
if ($check) { if ($check) {
$this->setData([ $this->setData([
'user', 'user',
$userId, $userId,
[ [
'firstname' => $this->getData(['user', $userId, 'firstname']), 'firstname' => $this->getData(['module', $this->getUrl(0), 'user', $userId, 'firstname']),
'lastname' => $this->getData(['user', $userId, 'lastname']), 'lastname' => $this->getData(['module', $this->getUrl(0), 'user', $userId, 'lastname']),
'mail' => $this->getData(['user', $userId, 'mail']), 'mail' => $this->getData(['module', $this->getUrl(0), 'user', $userId, 'mail']),
'password' => $this->getData(['user', $userId, 'password']), 'password' => $this->getData(['module', $this->getUrl(0), 'user', $userId, 'password']),
'group' => $this->getdata(['module', $this->getUrl(0), 'config', 'state']) === true ? self::STATUS_VALIDATED : self::GROUP_MEMBER, 'group' => self::GROUP_MEMBER,
'profil' => 1, 'profil' => 1,
'forgot' => 0, 'forgot' => 0,
'timer' => $this->getData(['user', $userId, 'timer']) 'pseudo' => $userId,
'signature' => 1,
'language' => self::$siteContent,
] ]
]); ]);
} }