modules/jabber/save.php (a91f732) - webinterface.git

save.php

<?php

require_once('session/start.php');

require_once('jabberaccounts.php');

require_once('inc/security.php');

require_role(ROLE_CUSTOMER);

require_once("inc/debug.php");
global $debugmode;

if ($_GET['action'] == 'new')
{
  check_form_token('jabber_new_account');
  if (filter_input_username($_POST['local']) == '' ||
      $_POST['domain'] == '' ||
      $_POST['password'] == '')
  {
    input_error('Sie müssen alle Felder ausfüllen!');
  }
  else
  {
    create_jabber_account($_POST['local'], $_POST['domain'], stripslashes($_POST['password']));
    if (! $debugmode)
      header('Location: accounts.php');
  }
}
elseif ($_GET['action'] == 'chpass')
{
  check_form_token('jabber_chpass');
  get_jabberaccount_details($_POST['accountid']);
  if ($_POST['newpass'] == '' ||
      $_POST['newpass2'] == '' ||
      $_POST['newpass'] != $_POST['newpass2'] ||
      $_POST['accountid'] == '')
  {
    input_error('Bitte zweimal ein neues Passwort eingeben!');
  }
  else
  {
    change_jabber_password($_POST['accountid'], stripslashes($_POST['newpass']));
    if (! $debugmode)
      header('Location: accounts.php');
  }
}
elseif ($_GET['action'] == 'delete')
{
  $title = "Jabber-Account löschen";
  $section = 'jabber_accounts';
  
  $account = get_jabberaccount_details($_GET['account']);
  $account_string = filter_input_general( $account['local'].'@'.$account['domain'] );
  $sure = user_is_sure();
  if ($sure === NULL)
  {
    are_you_sure("action=delete&amp;account={$_GET['account']}", "Möchten Sie den Account »{$account_string}« wirklich löschen?");
  }
  elseif ($sure === true)
  {
    delete_jabber_account($account['id']);
    if (! $debugmode)
      header("Location: accounts.php");
  }
  elseif ($sure === false)
  {
    if (! $debugmode)
      header("Location: accounts.php");
  }

}
else
  system_failure("Unimplemented action");

output('');

webinterface.git

stripslashes und erlaube Anführungszeichen im Passwort