Initial revision

account.php

@@ -0,0 +1,197 @@
+<?
+
+/*
+ *  Account Login / Logout Handler for AppDB
+ *
+ */
+
+include("path.php");
+include(BASE."include/"."incl.php");
+
+//set http header to not cache
+header("Pragma: no-cache");
+header("Cache-control: no-cache");
+
+//check command and process
+do_account($cmd);
+
+//process according to $cmd from URL
+function do_account($cmd = null)
+{
+    global $ext_username, $ext_password, $ext_password2, $ext_realname, $ext_email;
+
+	if (! $cmd) return 0;
+	switch($cmd)
+	{
+
+		case "new":
+			apidb_header("New Account");
+			include(BASE."include/"."form_new.php");
+			apidb_footer();
+			exit;
+
+		case "do_new":
+			cmd_do_new();
+			exit;
+
+		case "login":
+			apidb_header("Login");
+			include(BASE."include/"."form_login.php");
+			apidb_footer();
+			exit;
+
+		case "do_login":
+			cmd_do_login();
+			exit;
+
+		case "send_passwd":
+			cmd_send_passwd();
+			exit;
+
+		case "logout":
+			apidb_session_destroy();
+			addmsg("You are successfully logged out.", "green");
+			redirect(apidb_fullurl("index.php"));
+			exit;
+	}
+	//not valid command, display error page
+	errorpage("Internal Error","This module was called with incorrect parameters");
+	exit;
+}
+
+//retry
+function retry($cmd, $msg)
+{
+    addmsg($msg, "red");
+    do_account($cmd);
+}
+
+//create new account
+function cmd_do_new()
+{
+    global $ext_username, $ext_password, $ext_password2, $ext_realname, $ext_email;
+    global $current;
+
+    if(ereg("^.+@.+\\..+$", $ext_username))
+	{
+	    $ext_username = "";
+	    retry("new", "Invalid Username, must not contain special characters");
+	    return;
+	}
+    if(strlen($ext_username) < 3)
+	{
+	    $ext_username = "";
+	    retry("new", "Username must be at least 3 characters");
+	    return;
+	}
+    if(strlen($ext_password) < 5)
+	{
+	    retry("new", "Password must be at least 5 characters");
+	    return;
+	}
+    if($ext_password != $ext_password2)
+	{
+	    retry("new", "Passwords don't match");
+	    return;
+	}
+    if(strlen($ext_realname) == 0)
+	{
+	    retry("new", "You don't have a Real name?");
+	    return;
+	}
+    if(!ereg("^.+@.+\\..+$", $ext_email))
+	{
+	    $ext_email = "";
+	    retry("new", "Invalid email address");
+	    return;
+	}
+
+    $user = new User();
+
+    if($user->exists($ext_username))
+	{
+	    $ext_username = "";
+	    retry("new", "That username is already in use");
+	    return;
+	}
+
+    $result = $user->create($ext_username, $ext_password, $ext_realname, $ext_email);
+
+    if($result == null)
+	{
+	    $user->login($ext_username, $ext_password);
+	    addmsg("Account created! ($ext_username)", "green");
+	    redirect(apidb_fullurl());
+	}
+    else
+	retry("new", "Failed to create account: $result");
+}
+
+//email lost password
+function cmd_send_passwd()
+{
+    global $ext_username;
+
+    $user = new User();
+    
+    $userid = $user->lookup_userid($ext_username);
+    $passwd = generate_passwd();
+    
+    if ($userid)
+    {	
+	if ($user->update($userid, $passwd))
+	{
+	
+            $msg =  "Application DB Lost Password\n";
+            $msg .= "----------------------------\n";
+            $msg .= "We have received a request that you lost your password.\n";
+            $msg .= "We will create a new password for you. You can then change\n";
+            $msg .= "your password at the Preferences screen.\n\n";
+            $msg .= "Your new password is: ".$passwd."\n\n";
+    	
+	    if (mail($user->lookup_email($userid), '[AppDB] Lost Password', $msg))
+	    {
+	        addmsg("Your new password has been emailed to you.", "green");
+	    }
+	    else
+	    {
+	        addmsg("Your password has changed, but we could not email it to you. Contact Support!", "red");
+	    }
+	}
+	else
+	{
+	    addmsg("Internal Error, we could not update your password.", "red");
+	}
+    }
+    else
+    {
+        addmsg("Sorry, that username [$ext_username] does not exist.", "red");
+    }
+    
+    redirect(apidb_fullurl("account.php?cmd=login"));
+}
+
+//on login handler
+function cmd_do_login()
+{
+    global $ext_username, $ext_password;
+    global $ext_referer;
+    global $current;
+
+    $user = new User();
+    $result = $user->login($ext_username, $ext_password);
+
+    if($result == null)
+	{
+	    $current = $user;
+	    addmsg("You are successfully logged in.", "green");
+	    redirect(apidb_fullurl("index.php"));    	    
+	}
+    else
+	{
+	    retry("login","Login failed ($result)");
+	    $current = 0;
+	}
+}
+
+?>