| 6 |
require_once "../lib/db_open.inc.php"; |
require_once "../lib/db_open.inc.php"; |
| 7 |
require_once "../lib/send_mail.inc.php"; |
require_once "../lib/send_mail.inc.php"; |
| 8 |
require_once "./session_init.inc.php"; |
require_once "./session_init.inc.php"; |
| 9 |
require_once "./reg_check.inc.php"; |
require_once "./user_reg_check.inc.php"; |
| 10 |
|
|
| 11 |
$data = json_decode(file_get_contents("php://input"), true); |
$data = json_decode(file_get_contents("php://input"), true); |
| 12 |
|
|
| 34 |
header("Content-Type:application/json; charset=utf-8"); |
header("Content-Type:application/json; charset=utf-8"); |
| 35 |
|
|
| 36 |
// Validate input data |
// Validate input data |
| 37 |
if (!preg_match("/^[A-Za-z][A-Za-z0-9]{4,11}$/", $username)) |
if (!preg_match("/^[A-Za-z][A-Za-z0-9_]{4,11}$/", $username)) |
| 38 |
{ |
{ |
| 39 |
$result_set["return"]["code"] = -1; |
$result_set["return"]["code"] = -1; |
| 40 |
array_push($result_set["return"]["errorFields"], array( |
array_push($result_set["return"]["errorFields"], array( |
| 148 |
// Secure SQL statement |
// Secure SQL statement |
| 149 |
$nickname = mysqli_real_escape_string($db_conn, $nickname); |
$nickname = mysqli_real_escape_string($db_conn, $nickname); |
| 150 |
$realname = mysqli_real_escape_string($db_conn, $realname); |
$realname = mysqli_real_escape_string($db_conn, $realname); |
| 151 |
|
|
| 152 |
// Begin transaction |
// Begin transaction |
| 153 |
$rs = mysqli_query($db_conn, "SET autocommit=0"); |
$rs = mysqli_query($db_conn, "SET autocommit=0"); |
| 154 |
if ($rs == false) |
if ($rs == false) |
| 159 |
mysqli_close($db_conn); |
mysqli_close($db_conn); |
| 160 |
exit(json_encode($result_set)); |
exit(json_encode($result_set)); |
| 161 |
} |
} |
| 162 |
|
|
| 163 |
$rs = mysqli_query($db_conn, "BEGIN"); |
$rs = mysqli_query($db_conn, "BEGIN"); |
| 164 |
if ($rs == false) |
if ($rs == false) |
| 165 |
{ |
{ |
| 172 |
|
|
| 173 |
// Check availability of username and nickname |
// Check availability of username and nickname |
| 174 |
$sql = "SELECT UID FROM user_list WHERE username = '$username' FOR UPDATE"; |
$sql = "SELECT UID FROM user_list WHERE username = '$username' FOR UPDATE"; |
| 175 |
|
|
| 176 |
$rs = mysqli_query($db_conn, $sql); |
$rs = mysqli_query($db_conn, $sql); |
| 177 |
if ($rs == false) |
if ($rs == false) |
| 178 |
{ |
{ |
| 214 |
)); |
)); |
| 215 |
} |
} |
| 216 |
mysqli_free_result($rs); |
mysqli_free_result($rs); |
| 217 |
|
|
| 218 |
$sql = "SELECT UID FROM user_pubinfo WHERE email = '$email' FOR UPDATE"; |
$sql = "SELECT UID FROM user_pubinfo WHERE email = '$email' FOR UPDATE"; |
| 219 |
|
|
| 220 |
$rs = mysqli_query($db_conn, $sql); |
$rs = mysqli_query($db_conn, $sql); |
| 221 |
if ($rs == false) |
if ($rs == false) |
| 222 |
{ |
{ |
| 338 |
|
|
| 339 |
mysqli_close($db_conn); |
mysqli_close($db_conn); |
| 340 |
exit(json_encode($result_set)); |
exit(json_encode($result_set)); |
|
?> |
|