Advertisement
Guest User

Untitled

a guest
Nov 24th, 2014
167
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.57 KB | None | 0 0
  1. // POST
  2. case 'UpdateEmailStart':
  3. $newEmail = $_POST['NuovaEmail'];
  4. $confirmNewEmail = $_POST['ConfermaNuovaEmail'];
  5. if ($newEmail == $confirmNewEmail) {
  6. if (strlen($newEmail) > 0) {
  7. if (strlen($newEmail) <= 32) {
  8. if (validateEmail($newEmail)) {
  9. if (checkUsedEmail($newEmail)) {
  10. $userID = decrypt($_SESSION[$controlPanel['sessionName'].'_UserID'], $cryptKey['cpCoding']);
  11. $SQL = "SELECT `updateEmailTime` FROM `users` WHERE `ID` = '".$userID."';";
  12. $result = mysqli_query($db['stream'], $SQL);
  13. $resultNumber = mysqli_num_rows($result);
  14. if ($resultNumber > 0) {
  15. $resultFetch = mysqli_fetch_assoc($result);
  16. if ($resultFetch['updateEmailTime'] < time() - EMAIL_UPDATE_VALID_HOURS or is_null($resultFetch['updateEmailTime'])) {
  17. $updateEmailKey = fGetCryptKey();
  18. $SQL = "UPDATE `users` SET `updateEmailKey` = '".$updateEmailKey."', `updateEmailTime` = '".time()."' WHERE `ID` = '".$userID."';";
  19. $result = mysqli_query($db['stream'], $SQL);
  20. $updateEmailConfirmLink = 'http://panel.fenixgames.it/actions.php?Azione=UpdateEmailEnd&Utente='.$userID.'&NuovaEmail='.urlencode($newEmail).'&CodiceUpdateEmail='.$updateEmailKey;
  21. $updateEmailCancelLink = 'http://panel.fenixgames.it/actions.php?Azione=UpdateEmailCancel&Utente='.$userID.'&CodiceUpdateEmail='.$updateEmailKey;
  22. $headers = "MIME-Version: 1.0"."\r\n";
  23. $headers .= "Content-Type: text/html; charset=iso-8859-1"."\r\n";
  24. $headers .= "From: FenixGames <noreply@fenixgames.it>"."\r\n";
  25. $headers .= "Date: ".date('r', time());
  26. $message = '
  27. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  28. <html xmlns="http://www.w3.org/1999/xhtml">
  29. <head>
  30. <meta name="viewport" content="width=device-width" />
  31. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
  32. <title>Cambio Email di FenixGames</title>
  33. </head>
  34. <body style="-webkit-font-smoothing: antialiased; -webkit-text-size-adjust: none; width: 100%; height: 100%;">
  35. <table style="width: 100%; padding: 20px;">
  36. <tr>
  37. <td>
  38. <div class="content">
  39. <table>
  40. <tr>
  41. <td>
  42. <p>Gentile Utente di FenixGames,</p>
  43. <p> tramite un click sul pulsante Conferma potrai effettuare il cambiamento dell\'indirizzo email del tuo account entro '.EMAIL_UPDATE_VALID_HOURS.' '.(EMAIL_UPDATE_VALID_HOURS == 1 ? 'ora' : 'ore').' dall\'arrivo di questa email.</p>
  44. <p>Se non sei stato tu a cambiare l\'indirizzo o vuoi annullare la richiesta, puoi cliccare sul pulsante Annulla.</p>
  45. <table>
  46. <tr>
  47. <td>
  48. <p><a href="'.$updateEmailConfirmLink.'" style="text-decoration: none; color: #FFF; background-color: #30CC00; border: solid #30CC00; border-width: 10px 20px; line-height: 2; font-weight: bold; margin-right: 10px; text-align: center; cursor: pointer; display: inline-block; border-radius: 25px;">Conferma</a></p>
  49. </td>
  50. <td>
  51. <p><a href="'.$updateEmailCancelLink.'" style="text-decoration: none; color: #FFF; background-color: #CC0800; border: solid #CC0800; border-width: 10px 20px; line-height: 2; font-weight: bold; margin-right: 10px; text-align: center; cursor: pointer; display: inline-block; border-radius: 25px;">Annulla</a></p>
  52. </td>
  53. </tr>
  54. </table>
  55. </td>
  56. </tr>
  57. </table>
  58. </div>
  59. </td>
  60. </tr>
  61. </table>
  62. </body>
  63. </html>
  64. ';
  65. mail($newEmail, 'Cambio Email di FenixGames', $message, $headers);
  66. die(header('location:index.php?Pagina=InformazioniAccount&SuccessoEmail=0'));
  67. } else {
  68. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=6'));
  69. }
  70. } else {
  71. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=5'));
  72. }
  73. } else {
  74. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=4'));
  75. }
  76. } else {
  77. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=3'));
  78. }
  79. } else {
  80. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=2'));
  81. }
  82. } else {
  83. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=1'));
  84. }
  85. } else {
  86. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=0'));
  87. }
  88. break;
  89.  
  90. // GET
  91. case 'UpdateEmailEnd':
  92. $userID = $_GET['Utente'];
  93. $newEmail = $_GET['NuovaEmail'];
  94. $updateEmailKey = $_GET['CodiceUpdateEmail'];
  95. $SQL = "SELECT `updateEmailKey`, `updateEmailTime` FROM `users` WHERE `ID` = '".$userID."';";
  96. $result = mysqli_query($db['stream'], $SQL);
  97. $resultNumber = mysqli_num_rows($result);
  98. if ($resultNumber > 0) {
  99. $resultFetch = mysqli_fetch_assoc($result);
  100. if ($resultFetch['updateEmailKey'] == $updateEmailKey) {
  101. if ($resultFetch['updateEmailTime'] >= time() - EMAIL_UPDATE_VALID_HOURS) {
  102. $SQL = "UPDATE `users` SET `email` = '".$newEmail."' WHERE `ID` = '".$userID."';";
  103. $result = mysqli_query($db['stream'], $SQL);
  104. die(header('location:index.php?Pagina=InformazioniAccount&SuccessoEmail=1'));
  105. } else {
  106. $SQL = "UPDATE `users` SET `updateEmailKey` = NULL, `updateEmailTime` = NULL WHERE `ID` = '".$userID."';";
  107. $result = mysqli_query($db['stream'], $SQL);
  108. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=8'));
  109. }
  110. } else {
  111. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=7'));
  112. }
  113. } else {
  114. die(header('location:index.php?Pagina=InformazioniAccount&SuccessoEmail=5'));
  115. }
  116. break;
  117.  
  118. // GET
  119. case 'UpdateEmailCancel':
  120. $userID = $_GET['Utente'];
  121. $updateEmailKey = $_GET['CodiceUpdateEmail'];
  122. $SQL = "SELECT `updateEmailKey` FROM `users` WHERE `ID` = '".$userID."';";
  123. $resultNumber = mysqli_num_rows($result);
  124. if ($resultNumber > 0) {
  125. $resultFetch = mysqli_fetch_assoc($result);
  126. if ($resultFetch['updateEmailKey'] == $updateEmailKey) {
  127. $SQL = "UPDATE `users` SET `updateEmailKey` = NULL, `updateEmailTime` = NULL WHERE `ID` = '".$userID."';";
  128. $result = mysqli_query($db['stream'], $SQL);
  129. die(header('location:index.php?Pagina=InformazioniAccount&SuccessoEmail=2'));
  130. } else {
  131. die(header('location:index.php?Pagina=InformazioniAccount&ErroreEmail=7'));
  132. }
  133. } else {
  134. die(header('location:index.php?Pagina=InformazioniAccount&SuccessoEmail=5'));
  135. }
  136. break;
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement