PastonBin/oauth/facebook.php

118 lines
4.2 KiB
PHP
Raw Normal View History

2017-06-17 19:22:17 +02:00
<?php
/*
* Paste <https://github.com/jordansamuel/PASTE>
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 3
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License in GPL.txt for more details.
*/
session_start();
require_once('facebook/facebook.php');
require_once('../config.php');
// Current Date & User IP
$date = date('jS F Y');
$ip = $_SERVER['REMOTE_ADDR'];
// Database Connection
$con = mysqli_connect($dbhost, $dbuser, $dbpassword, $dbname);
if (mysqli_connect_errno()) {
die("Unable connect to database");
}
$facebook = new Facebook(array(
'appId' => FB_APP_ID,
'secret' => FB_APP_SECRET
));
$user = $facebook->getUser();
if ($user) {
try {
// Proceed knowing you have a logged in user who's authenticated.
$user_profile = $facebook->api('/me');
}
catch (FacebookApiException $e) {
$user = null;
}
if (!empty($user_profile)) {
# User info ok? Let's print it (Here we will be adding the login and registering routines)
$client_name = $user_profile['name'];
$client_id = $user_profile['id'];
$client_email = $user_profile['email'];
$client_pic = $user_profile['picture'];
$client_plat = 'Facebook';
if (!empty($user_profile)) {
$query = mysqli_query($con, "SELECT * FROM users WHERE oauth_uid='$client_id'");
if (mysqli_num_rows($query) > 0) {
$query = "SELECT * FROM users WHERE oauth_uid='$client_id'";
$result = mysqli_query($con, $query);
while ($row = mysqli_fetch_array($result)) {
$user_username = $row['username'];
$db_verified = $row['verified'];
}
if ($db_verified == "2") {
die("Your account has been banned.");
} else {
$_SESSION['username'] = $user_username;
$_SESSION['token'] = Md5($db_id . $username);
$_SESSION['oauth_uid'] = $client_id;
$_SESSION['pic'] = $client_pic;
$old_user = 1;
header("Location: .");
exit();
}
} else {
$new_user = 1;
#user not present.
$query = "SELECT @last_id := MAX(id) FROM users";
$result = mysqli_query($con, $query);
while ($row = mysqli_fetch_array($result)) {
$last_id = $row['@last_id := MAX(id)'];
}
if ($last_id == "" || $last_id == null) {
$username = "User1";
} else {
$last_id = $last_id + 1;
$username = "User$last_id";
}
$_SESSION['username'] = $username;
$_SESSION['oauth_uid'] = $client_id;
$_SESSION['token'] = Md5($db_id . $username);
$query = "INSERT INTO users (oauth_uid,username,email_id,full_name,platform,password,verified,picture,date,ip) VALUES ('$client_id','$username','$client_email','$client_name','$client_plat','$password','1','$client_pic','$date','$ip')";
mysqli_query($con, $query);
header("Location: oauth.php?new_user");
exit();
}
}
} else {
# For testing purposes, if there was an error, let's kill the script
die("There was an error.");
}
} else {
if (isset($_GET['login'])) {
# There's no active session, let's generate one
$login_url = $facebook->getLoginUrl(array(
'scope' => 'email'
));
header("Location: " . $login_url);
exit();
}
}
?>