only allow E-Mail-Verification when in appropriate state
This commit is contained in:
11
database.php
11
database.php
@@ -172,8 +172,8 @@ class mxDatabase
|
|||||||
* as members
|
* as members
|
||||||
*/
|
*/
|
||||||
function getUserForApproval($admin_token) {
|
function getUserForApproval($admin_token) {
|
||||||
$sql = "SELECT COUNT(*) FROM registrations WHERE admin_token = '" . $admin_token
|
$sql = "SELECT COUNT(*) FROM registrations WHERE admin_token = '" . $admin_token . "'"
|
||||||
. "' AND state = " . RegisterState::PendingAdminVerify . " LIMIT 1;";
|
. " AND state = " . RegisterState::PendingAdminVerify . " LIMIT 1;";
|
||||||
$res = $db->query($sql);
|
$res = $db->query($sql);
|
||||||
$first_name = NULL; $last_name = NULL; $username = NULL; $note = NULL; $email = NULL;
|
$first_name = NULL; $last_name = NULL; $username = NULL; $note = NULL; $email = NULL;
|
||||||
|
|
||||||
@@ -197,14 +197,15 @@ class mxDatabase
|
|||||||
* as members
|
* as members
|
||||||
*/
|
*/
|
||||||
function getUserForVerify($verify_token) {
|
function getUserForVerify($verify_token) {
|
||||||
$sql = "SELECT COUNT(*) FROM registrations WHERE verify_token = '" . $verify_token
|
$sql = "SELECT COUNT(*) FROM registrations WHERE verify_token = '" . $verify_token . "'"
|
||||||
. "' AND state = " . RegisterState::PendingAdminVerify . " LIMIT 1;";
|
. " AND state = " . RegisterState::PendingEmailVerify . " LIMIT 1;";
|
||||||
$res = $db->query($sql);
|
$res = $db->query($sql);
|
||||||
$first_name = NULL; $last_name = NULL; $username = NULL; $note = NULL; $email = NULL;
|
$first_name = NULL; $last_name = NULL; $username = NULL; $note = NULL; $email = NULL;
|
||||||
|
|
||||||
if ($res->fetchColumn() > 0) {
|
if ($res->fetchColumn() > 0) {
|
||||||
$sql = "SELECT first_name, last_name, note, email, admin_token FROM registrations "
|
$sql = "SELECT first_name, last_name, note, email, admin_token FROM registrations "
|
||||||
. " WHERE verify_token = '" . $token . "' LIMIT 1;";
|
. " WHERE verify_token = '" . $token . "'"
|
||||||
|
. " AND state = " . RegisterState::PendingEmailVerify . " LIMIT 1;";
|
||||||
foreach ($db->query($sql) as $row) {
|
foreach ($db->query($sql) as $row) {
|
||||||
// will only be executed once
|
// will only be executed once
|
||||||
return $row;
|
return $row;
|
||||||
|
|||||||
Reference in New Issue
Block a user