mirror of https://github.com/xevidos/codiad.git
145 lines
4.1 KiB
PHP
Executable File
145 lines
4.1 KiB
PHP
Executable File
<?php
|
|
|
|
/*
|
|
* Copyright (c) Codiad & Kent Safranski (codiad.com), distributed
|
|
* as-is and without warranty under the MIT License. See
|
|
* [root]/license.txt for more. This information must remain intact.
|
|
*/
|
|
|
|
require_once('../../common.php');
|
|
require_once('class.user.php');
|
|
|
|
if (!isset($_GET['action'])) {
|
|
die(formatJSEND("error", "Missing parameter"));
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Verify Session or Key
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
if ($_GET['action']!='authenticate') {
|
|
checkSession();
|
|
}
|
|
|
|
$User = new User();
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Authenticate
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
if ($_GET['action']=='authenticate') {
|
|
if (!isset($_POST['username']) || !isset($_POST['password'])) {
|
|
die(formatJSEND("error", "Missing username or password"));
|
|
}
|
|
|
|
$User->username = $_POST['username'];
|
|
$User->password = $_POST['password'];
|
|
|
|
// check if the asked languages exist and is registered in languages/code.php
|
|
require_once '../../languages/code.php';
|
|
if (isset($languages[ $_POST['language'] ])) {
|
|
$User->lang = $_POST['language'];
|
|
} else {
|
|
$User->lang = 'en';
|
|
}
|
|
|
|
// theme
|
|
$User->theme = $_POST['theme'];
|
|
|
|
$User->Authenticate();
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Logout
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
if ($_GET['action']=='logout') {
|
|
|
|
logout();
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Create User
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
if ($_GET['action']=='create') {
|
|
if (checkAccess()) {
|
|
if (!isset($_POST['username']) || !isset($_POST['password'])) {
|
|
die(formatJSEND("error", "Missing username or password"));
|
|
}
|
|
|
|
$User->username = User::CleanUsername($_POST['username']);
|
|
$User->password = $_POST['password'];
|
|
$User->Create();
|
|
}
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Delete User
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
if ($_GET['action']=='delete') {
|
|
if (checkAccess()) {
|
|
if (!isset($_GET['username'])) {
|
|
die(formatJSEND("error", "Missing username"));
|
|
}
|
|
|
|
$User->username = $_GET['username'];
|
|
$User->Delete();
|
|
}
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Change Password
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
if ($_GET['action']=='password') {
|
|
if (!isset($_POST['username']) || !isset($_POST['password'])) {
|
|
die(formatJSEND("error", "Missing username or password"));
|
|
}
|
|
|
|
if (checkAccess() || $_POST['username'] == $_SESSION['user']) {
|
|
$User->username = $_POST['username'];
|
|
$User->password = $_POST['password'];
|
|
$User->Password();
|
|
}
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Change Project
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
if ($_GET['action']=='project') {
|
|
if (!isset($_GET['project'])) {
|
|
die(formatJSEND("error", "Missing project"));
|
|
}
|
|
|
|
$User->username = $_SESSION['user'];
|
|
$User->project = $_GET['project'];
|
|
$User->Project();
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Search Users
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
if ( $_GET['action'] == 'search_users' ) {
|
|
|
|
if ( ! isset( $_GET['search_term'] ) ) {
|
|
|
|
die( formatJSEND( "error", "Missing search term" ) );
|
|
}
|
|
search_users( $_GET['search_term'], "exit", true );
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Verify User Account
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
if ($_GET['action']=='verify') {
|
|
|
|
$User->username = $_SESSION['user'];
|
|
//$User->Verify();
|
|
checkSession();
|
|
}
|