From 3873cad7baf5d2f63b4399b7bfb0ec4d7d66adb9 Mon Sep 17 00:00:00 2001 From: Connor Thomson Date: Sat, 19 Sep 2026 17:02:13 -0700 Subject: Add signup and other stuff --- signup/content.html | 45 ++++++++++++++++++++++ signup/index.php | 1 + signup/signup.php | 96 ++++++++++++++++++++++++++++++++++++++++++++++ signup/verify/content.html | 32 ++++++++++++++++ signup/verify/index.php | 1 + signup/verify/verify.php | 96 ++++++++++++++++++++++++++++++++++++++++++++++ 6 files changed, 271 insertions(+) create mode 100644 signup/content.html create mode 120000 signup/index.php create mode 100644 signup/signup.php create mode 100644 signup/verify/content.html create mode 120000 signup/verify/index.php create mode 100644 signup/verify/verify.php (limited to 'signup') diff --git a/signup/content.html b/signup/content.html new file mode 100644 index 0000000..83c9fe7 --- /dev/null +++ b/signup/content.html @@ -0,0 +1,45 @@ + + +

Create a GNUfault.org account

+
+

If you need any help, email me at <connor@gnufault.org>.

+
+
+
+ + +
+ +
+ + +
+ +
+ + +
+ +
+ + +
+ + +
diff --git a/signup/index.php b/signup/index.php new file mode 120000 index 0000000..1876f97 --- /dev/null +++ b/signup/index.php @@ -0,0 +1 @@ +../php/index.php \ No newline at end of file diff --git a/signup/signup.php b/signup/signup.php new file mode 100644 index 0000000..5ba3ca8 --- /dev/null +++ b/signup/signup.php @@ -0,0 +1,96 @@ +. + */ + +if ($_SERVER["REQUEST_METHOD"] == "POST") { + $username = $_POST['username']; + $password = $_POST['password']; + $confirmpassword = $_POST['confirmpassword']; + $email = $_POST['email']; + + if ($confirmpassword != $password) { + echo "Passwords do not match!"; + exit; + } + + $hashed_password = password_hash($password, PASSWORD_DEFAULT); + + $code = rand(1000, 9999); + + $host = '127.0.0.1'; + $db = 'gnufaultdb'; + $db_user = 'gnufaultdb_user'; + $pass = trim(file_get_contents('/etc/gnufault.d/password')); + + $charset = 'utf8mb4'; + $dsn = "mysql:host=$host;dbname=$db;charset=$charset"; + + $options = [ + PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, + PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, + PDO::ATTR_EMULATE_PREPARES => false, + ]; + + try { + $pdo = new PDO($dsn, $db_user, $pass, $options); + } catch (\PDOException $e) { + throw new \PDOException($e->getMessage(), (int)$e->getCode()); + } + + try { + $sql = "INSERT INTO users (username, email, password, verification_code) VALUES (:username, :email, :password, :code)"; + $stmt = $pdo->prepare($sql); + $stmt->execute([ + 'username' => $username, + 'email' => $email, + 'password' => $hashed_password, + 'code' => $code + ]); + + $user_id = $pdo->lastInsertId(); + + setcookie('user_id', (string)$user_id, [ + 'expires' => 2147483647, + 'path' => '/', + 'secure' => true, + 'httponly' => true, + 'samesite' => 'Strict' + ]); + } catch (\PDOException $e) { + if ($e->getCode() == 23000) { + echo "Error: Username or email is already taken."; + } else { + echo "Error: " . $e->getMessage(); + } + exit; + } + + $subject = "GNUfault.org Verification Code"; + + $headers = "From: noreply@gnufault.org" . "\r\n" . + "Reply-To: noreply@gnufault.org" . "\r\n" . + "X-Mailer: PHP/" . phpversion(); + + if (mail($email, $subject, $code, $headers)) { + header("Location: verify"); + } else { + echo "Failed to send"; + exit; + } +} +?> diff --git a/signup/verify/content.html b/signup/verify/content.html new file mode 100644 index 0000000..2ba116b --- /dev/null +++ b/signup/verify/content.html @@ -0,0 +1,32 @@ + + +

Verify your GNUfault.org account

+
+

To prevent spam, an email was sent to you with a 4-digit code from <noreply@gnufault.org>.

+

The email will most likely go to spam due to me using self-hosted email. If it does, please report it as not spam.

+

If you need any help, email me at <connor@gnufault.org> using the same email you signed up with.

+
+
+
+ + +
+ + +
diff --git a/signup/verify/index.php b/signup/verify/index.php new file mode 120000 index 0000000..3e5d98e --- /dev/null +++ b/signup/verify/index.php @@ -0,0 +1 @@ +../../php/index.php \ No newline at end of file diff --git a/signup/verify/verify.php b/signup/verify/verify.php new file mode 100644 index 0000000..e5e729f --- /dev/null +++ b/signup/verify/verify.php @@ -0,0 +1,96 @@ +. + */ + +if ($_SERVER["REQUEST_METHOD"] == "POST") { + $code = $_POST['code']; + $user_id = $_COOKIE['user_id'] ?? null; + + if (!$user_id) { + echo "Not logged in."; + exit; + } + + $host = '127.0.0.1'; + $db = 'gnufaultdb'; + $db_user = 'gnufaultdb_user'; + $pass = trim(file_get_contents('/etc/gnufault.d/password')); + + $charset = 'utf8mb4'; + $dsn = "mysql:host=$host;dbname=$db;charset=$charset"; + + $options = [ + PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, + PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, + PDO::ATTR_EMULATE_PREPARES => false, + ]; + + try { + $pdo = new PDO($dsn, $db_user, $pass, $options); + } catch (\PDOException $e) { + throw new \PDOException($e->getMessage(), (int)$e->getCode()); + } + + try { + $sql = "SELECT verification_code FROM users WHERE id = :id"; + $stmt = $pdo->prepare($sql); + + $stmt->execute(['id' => $user_id]); + + $user = $stmt->fetch(); + if (!$user) { + echo "User not found."; + exit; + } + + $real_code = $user['verification_code']; + } catch (\PDOException $e) { + echo "Error: " . $e->getMessage(); + exit; + } + + if ($real_code == '0001') { + echo "Account is already verifed"; + exit; + } + + if ($code != $real_code) { + echo "Code is not correct!"; + exit; + } + + try { + $sql = "UPDATE users SET verification_code = :code WHERE id = :id"; + $stmt = $pdo->prepare($sql); + + $stmt->execute([ + 'code' => '0001', + 'id' => $user_id + ]); + + if ($stmt->rowCount() == 0) { + echo "User not found."; + } + } catch (\PDOException $e) { + echo "Error: " . $e->getMessage(); + exit; + } + + header("Location: /signin"); +} +?> -- cgit v1.2.3