/[LeafOK_CVS]/fenglin/bbs/reg_user_service.php
ViewVC logotype

Diff of /fenglin/bbs/reg_user_service.php

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.1 by sysadm, Mon Mar 31 14:13:22 2025 UTC Revision 1.5 by sysadm, Thu Apr 10 10:22:44 2025 UTC
# Line 10  Line 10 
10    
11          $data = json_decode(file_get_contents("php://input"), true);          $data = json_decode(file_get_contents("php://input"), true);
12    
13          $username = (isset($data["username"]) ? $data["username"] : "");          $username = (isset($data["username"]) ? trim($data["username"]) : "");
14          $nickname = (isset($data["nickname"]) ? $data["nickname"] : "");          $nickname = (isset($data["nickname"]) ? trim($data["nickname"]) : "");
15          $realname = (isset($data["realname"]) ? trim($data["realname"]) : "");          $realname = (isset($data["realname"]) ? trim($data["realname"]) : "");
16          $gender = (isset($data["gender"]) ? $data["gender"] : "");          $gender = (isset($data["gender"]) ? $data["gender"] : "");
17          $gender_public = (isset($data["gender_public"]) && $data["gender_public"] == "1" ? 1 : 0);          $gender_public = (isset($data["gender_public"]) && $data["gender_public"] == "1" ? 1 : 0);
18          $email = (isset($data["email"]) ? $data["email"] : "");          $email = (isset($data["email"]) ? trim($data["email"]) : "");
19          $year = (isset($data["year"]) ? intval($data["year"]) : 0);          $year = (isset($data["year"]) ? intval($data["year"]) : 0);
20          $month = (isset($data["month"]) ? intval($data["month"]) : 0);          $month = (isset($data["month"]) ? intval($data["month"]) : 0);
21          $day = (isset($data["day"]) ? intval($data["day"]) : 0);          $day = (isset($data["day"]) ? intval($data["day"]) : 0);
22          $qq = (isset($data["qq"]) ? $data["qq"] : "");          $qq = (isset($data["qq"]) ? trim($data["qq"]) : "");
23          $agreement = (isset($data["agreement"]) && $data["agreement"] == "1");          $agreement = (isset($data["agreement"]) && $data["agreement"] == "1");
24          $vn_str = (isset($data["vn_str"]) ? $data["vn_str"] : "");          $vn_str = (isset($data["vn_str"]) ? trim($data["vn_str"]) : "");
25    
26          $result_set = array(          $result_set = array(
27                  "return" => array(                  "return" => array(
# Line 130  Line 130 
130                  ));                  ));
131          }          }
132    
133          if ((!isset($_SESSION["BBS_reg_vn_str"])) || $_SESSION["BBS_reg_vn_str"] == "" || VN_check($_SESSION["BBS_reg_vn_str"], $vn_str) != 0)          if ((!isset($_SESSION["BBS_vn_str"])) || $_SESSION["BBS_vn_str"] == "" || strcasecmp($_SESSION["BBS_vn_str"], $vn_str) != 0)
134          {          {
135                  $result_set["return"]["code"] = -1;                  $result_set["return"]["code"] = -1;
136                  array_push($result_set["return"]["errorFields"], array(                  array_push($result_set["return"]["errorFields"], array(
# Line 145  Line 145 
145                  exit(json_encode($result_set));                  exit(json_encode($result_set));
146          }          }
147    
148            // Secure SQL statement
149            $nickname = mysqli_real_escape_string($db_conn, $nickname);
150            $realname = mysqli_real_escape_string($db_conn, $realname);
151            
152          // Begin transaction          // Begin transaction
153          $rs = mysqli_query($db_conn, "SET autocommit=0");          $rs = mysqli_query($db_conn, "SET autocommit=0");
154          if ($rs == false)          if ($rs == false)
# Line 167  Line 171 
171          }          }
172    
173          // Check availability of username and nickname          // Check availability of username and nickname
174          $sql = "SELECT UID FROM user_list WHERE username = '" .          $sql = "SELECT UID FROM user_list WHERE username = '$username'";
                         mysqli_real_escape_string($db_conn, $username) . "'";  
175                    
176          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
177          if ($rs == false)          if ($rs == false)
# Line 190  Line 193 
193          }          }
194          mysqli_free_result($rs);          mysqli_free_result($rs);
195    
196          $sql = "SELECT UID FROM user_nickname WHERE nickname = '" .          $sql = "SELECT UID FROM user_nickname WHERE nickname = '$nickname'";
                         mysqli_real_escape_string($db_conn, $nickname) . "'";  
197    
198          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
199          if ($rs == false)          if ($rs == false)
# Line 213  Line 215 
215          }          }
216          mysqli_free_result($rs);          mysqli_free_result($rs);
217                    
218          $sql = "SELECT UID FROM user_pubinfo WHERE email = '" .          $sql = "SELECT UID FROM user_pubinfo WHERE email = '$email'";
                         mysqli_real_escape_string($db_conn, $email) . "'";  
219                    
220          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
221          if ($rs == false)          if ($rs == false)
# Line 259  Line 260 
260    
261          $uid = mysqli_insert_id($db_conn);          $uid = mysqli_insert_id($db_conn);
262    
263          $sql = "INSERT INTO user_reginfo(UID, name, birthday, signup_dt, signup_ip) VALUES($uid, '" .          $sql = "INSERT INTO user_reginfo(UID, name, birthday, signup_dt, signup_ip)
264                          mysqli_real_escape_string($db_conn, $realname) . "', '$year-$month-$day', NOW(), '".                          VALUES($uid, '$realname', '$year-$month-$day', NOW(), '".
265                          client_addr() . "')";                          client_addr() . "')";
266    
267          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
# Line 273  Line 274 
274                  exit(json_encode($result_set));                  exit(json_encode($result_set));
275          }          }
276    
277          $sql = "INSERT INTO user_pubinfo(UID, nickname, email, gender, gender_pub, qq, last_login_dt) VALUES($uid, '" .          $sql = "INSERT INTO user_pubinfo(UID, nickname, email, gender, gender_pub, qq, last_login_dt)
278                          mysqli_real_escape_string($db_conn, $nickname) . "', '$email', '$gender', $gender_public, '$qq', NOW())";                          VALUES($uid, '$nickname', '$email', '$gender', $gender_public, '$qq', NOW())";
279    
280          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
281          if ($rs == false)          if ($rs == false)
# Line 286  Line 287 
287                  exit(json_encode($result_set));                  exit(json_encode($result_set));
288          }          }
289    
290          $sql = "INSERT INTO user_nickname(UID, nickname, begin_dt, begin_reason) VALUES($uid, '" .          $sql = "INSERT INTO user_nickname(UID, nickname, begin_dt, begin_reason)
291                          mysqli_real_escape_string($db_conn, $nickname) . "', NOW(), 'R')";                          VALUES($uid, '$nickname', NOW(), 'R')";
292    
293          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
294          if ($rs == false)          if ($rs == false)
# Line 333  Line 334 
334                  exit(json_encode($result_set));                  exit(json_encode($result_set));
335          }          }
336    
337          $_SESSION["BBS_reg_vn_str"] == "";          $_SESSION["BBS_vn_str"] = "";
338    
339          mysqli_close($db_conn);          mysqli_close($db_conn);
340          exit(json_encode($result_set));          exit(json_encode($result_set));

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
webmaster@leafok.com
 ViewVC Help
Powered by ViewVC 1.3.0-beta1