File "verify.php"

Full Path: /home/cananyalcin/public_html/core/module/client/verify.php
File size: 5.57 KB
MIME-type: text/x-php
Charset: utf-8

<?php

$title .= $languageArray["verify.title"];

if( $_SESSION["neira_userlogin"] != 1  && ( $settings["sms_verify"] == 1 || $settings["mail_verify"] == 1  || $user["client_type"] == 1)  ){
    header("Location:".site_url('logout'));
    die;
  }
  

  if(!route(1)){
    if($settings["sms_verify"] == 2 && $user["sms_verify"] != 2){
        header("Location:".site_url('verify/sms'));
    }
    if($settings["mail_verify"] == 2 && $user["mail_verify"] != 2 ){
        header("Location:".site_url('verify/mail')); 
    }
  }

  $search = $conn->prepare("SELECT * FROM verify_log WHERE token=:token && type=:type");
   $search->execute(array("token"=>route(1),"type"=>1 ));

if(route(1) == "mail" && $user["mail_verify"] != 2){
        $verify = true;

}elseif(route(1) == "sms" && $user["sms_verify"] != 2){
        $verify = false;
}

if(route(1) == "mail" && $_POST && $user["mail_verify"] != 2):
    

    $captcha        = $_POST['g-recaptcha-response'];
    $googlesecret   = $settings["recaptcha_secret"];
    $captcha_control= robot("https://www.google.com/recaptcha/api/siteverify?secret=$googlesecret&response=" . $captcha . "&remoteip=" . $_SERVER['REMOTE_ADDR']);
    $captcha_control= json_decode($captcha_control);
      if( $settings["recaptcha"] == 2 && $captcha_control->success == false ):
        $error      = 1;
        $errorText  = $languageArray["error.resetpassword.recaptcha"];
      else:
  
        $token   = CreateApiKey($_POST);
        $token .=  substr(md5(microtime()),rand(0,26),5);
        
          $send = sendMail(["subject"=>"Verify your account.","body"=>"Your verification link : ".site_url('verify/'.$token),"mail"=>$row["email"]]);
  
        if( $send ):  

          $insert = $conn->prepare("INSERT INTO verify_log SET client_id=:c_id, token=:token, type=:type, verify=:verify ");
          $insert->execute(array("c_id"=>$user["client_id"],"token"=>$token,"type"=>1,"verify"=>"mail" ));
          $success    = 1;
          $successText= $languageArray["error.verify.success"];
         else:
          $error      = 1;
          $errorText  = $languageArray["error.verify.fail"];
        endif;
  
      endif;
  

elseif(route(1) == "sms" && $_POST && $user["sms_verify"] != 2):

    $captcha        = $_POST['g-recaptcha-response'];
    $googlesecret   = $settings["recaptcha_secret"];
    $captcha_control= robot("https://www.google.com/recaptcha/api/siteverify?secret=$googlesecret&response=" . $captcha . "&remoteip=" . $_SERVER['REMOTE_ADDR']);
    $captcha_control= json_decode($captcha_control);
      if( $settings["recaptcha"] == 2 && $captcha_control->success == false ):
        $error      = 1;
        $errorText  = $languageArray["error.resetpassword.recaptcha"];
      else:

        $token   = CreateApiKey($_POST);
        $token .=  substr(md5(microtime()),rand(0,26),5);
     
      $send = SMSUser($user["telephone"],"Your verification link : ".site_url('verify/'.$token));

        if( $send ):  

          $insert = $conn->prepare("INSERT INTO verify_log SET client_id=:c_id, token=:token, type=:type, verify=:verify ");
          $insert->execute(array("c_id"=>$user["client_id"],"token"=>$token,"type"=>1,"verify"=>"sms" ));

          $success    = 1;
          $successText= $languageArray["error.verify.success"];
         else:
          $error      = 1;
          $errorText  = 'Unsuccessful'.$languageArray["error.verify.fail"];
        endif;
  
      endif;
  
elseif(route(1) == "edit" && $_POST):
    
    if($_POST["telephone"]):
    
        $phone = htmlspecialchars($_POST["telephone"]);
    
        if( empty($phone) ){
            $error      = 1;
            $errorText  = $languageArray["error.verify.empty"];
        }elseif( userdata_check("telephone",$phone) ){
            $error      = 1;
            $errorText  = $languageArray["error.signup.telephone.used"];
        }else{    
            $update = $conn->prepare("UPDATE clients SET telephone=:telephone WHERE client_id=:id ");
            $update = $update->execute(array("id"=>$user["client_id"],"telephone"=>$phone));
            header("Location:".site_url("verify"));
        }
        
    endif;

    if($_POST["email"]):
    
        $email = htmlspecialchars($_POST["email"]);
        
        if(empty($email)){
            $error      = 1;
            $errorText  = $languageArray["error.verify.empty"]; 
        }elseif( !email_check($email) ){
            $error      = 1;
            $errorText  = $languageArray["error.signup.email"];
        }elseif( userdata_check("email",$email) ){
            $error      = 1;
            $errorText  = $languageArray["error.signup.email.used"];
        }else{
            $update = $conn->prepare("UPDATE clients SET email=:email WHERE client_id=:id ");
            $update = $update->execute(array("id"=>$user["client_id"],"email"=>$email));
            header("Location:".site_url("verify"));
        }
        
    endif;
    
elseif(route(1) && $search->rowCount()):
    $search      = $search->fetch(PDO::FETCH_ASSOC);


    if($search["verify"] == "sms"){
        $update = $conn->prepare("UPDATE clients SET sms_verify=:sms_verify WHERE client_id=:id ");
        $update = $update->execute(array("id"=>$search["client_id"],"sms_verify"=>2));   
    }elseif($search["verify"] == "mail"){
        $update = $conn->prepare("UPDATE clients SET mail_verify=:mail_verify WHERE client_id=:id ");
        $update = $update->execute(array("id"=>$search["client_id"],"mail_verify"=>2));   
    }
    
    $update = $conn->prepare("UPDATE verify_log SET type=:type WHERE token=:token ");
    $update->execute(array("type"=>2,"token"=>route(1) ));
    
    header("Location:".site_url());

endif;