diff --git a/Assets/functions.php b/Assets/functions.php index 09e89ad..2d4d724 100644 --- a/Assets/functions.php +++ b/Assets/functions.php @@ -490,4 +490,39 @@ function createValidationCode($bdd, $user, $ttlMinutes = 60) } return false; +} + +function updateUserPassword($bdd, $user, $hashPassword) +{ + $stmt = mysqli_prepare( + $bdd, + "UPDATE utilisateurs SET password = ? WHERE username = ?" + ); + + mysqli_stmt_bind_param($stmt, "ss", $hashPassword, $user); + mysqli_stmt_execute($stmt); + + $success = mysqli_stmt_affected_rows($stmt) >= 0; + + mysqli_stmt_close($stmt); + + return $success; +} + +function getUserFromCode($bdd, $code) +{ + $stmt = mysqli_prepare( + $bdd, + "SELECT utilisateur FROM codes WHERE code = ? LIMIT 1" + ); + + mysqli_stmt_bind_param($stmt, "s", $code); + mysqli_stmt_execute($stmt); + + $result = mysqli_stmt_get_result($stmt); + $row = mysqli_fetch_assoc($result); + + mysqli_stmt_close($stmt); + + return $row ? $row['utilisateur'] : null; } \ No newline at end of file diff --git a/Assets/sendMail.php b/Assets/sendMail.php index 5bd6c2e..9e94ba9 100644 --- a/Assets/sendMail.php +++ b/Assets/sendMail.php @@ -12,7 +12,7 @@ $message = ["
L'utilisateur {user} a demandé la création de son compte.
Le mail de validation sera envoyé à l'adresse : {mail}Sinon, vous pouvez simplement ignorer ce message
Des bisous
"," @@ -36,17 +36,17 @@ if(isset($_GET['type'])){ if($type == 0){ $user = $_GET['user']; - $email = $_GET['email']; + $email = urldecode($_GET['email']); $sendto = "blemaire@apeimbge.fr"; $message[0] = str_replace("{user}", $user, $message[0]); - $message[0] = str_replace('{mail}', $email, $message[0]); + $message[0] = str_replace('{email}', $email, $message[0]); }else{ $user = $_GET['user']; $email = $_GET['email']; $sendto = $email; $validationCode = createValidationCode($bdd, $user, 10080); - $message[1] = str_replace("{lien}", "http://172.17.0.224/validate.php?code=" . $validationCode["code"], $message[1]); + $message[1] = str_replace("{lien}", "http://172.17.0.54/intranetv2/createPassword.php?code=" . $validationCode["code"], $message[1]); $message[1] = str_replace("{user}", $user, $message[1]); $message[1] = str_replace("{email}", $email, $message[1]); } diff --git a/activate.php b/activate.php index ed8c6df..054ed19 100644 --- a/activate.php +++ b/activate.php @@ -1,24 +1,95 @@ + - + ++ Veuillez ne pas faire la demande plusieurs fois. +
+ +