webinterface.git

@@ -28,6 +28,8 @@ if (isset($_REQUEST['customerno']) and isset($_REQUEST['token']))

         logger("modules/index/validate_token.php", "pwrecovery", "customer »{$customerno}« set a new password");

         set_customer_password($customerno, $_POST['password']);

         success_msg('Das Passwort wurde gesetzt!');

+        set_customer_verified($customerno);

+        set_customer_lastlogin($customerno);

         invalidate_customer_token($customerno);

         $_SESSION['role'] = ROLE_CUSTOMER;

         $_SESSION['customerinfo'] = get_customer_info($customerno);

@@ -40,7 +40,7 @@ function create_customer($data)

   $nachname = maybe_null($nachname);

   db_query("BEGIN");

-  db_query("INSERT INTO kundendaten.kunden (firma, nachname, vorname, anrede, erstellungsdatum) VALUES ({$firma}, {$nachname}, {$vorname}, {$anrede}, CURDATE())");

+  db_query("INSERT INTO kundendaten.kunden (firma, nachname, vorname, anrede, erstellungsdatum,status) VALUES ({$firma}, {$nachname}, {$vorname}, {$anrede}, CURDATE(), 3)");

   $customerno = mysql_insert_id();

   db_query("INSERT INTO kundendaten.kundenkontakt (typ, comment, wert, name, kundennr) VALUES ('email', 'extern', '{$email}', {$realname}, {$customerno})");

   db_query("COMMIT");

@@ -81,7 +81,10 @@ function get_user_info($username)

   $result = db_query("SELECT kunde AS customerno, username, uid, homedir, name

                       FROM system.v_useraccounts WHERE username='{$username}' OR uid='{$username}' LIMIT 1");

   if (mysql_num_rows($result) < 1)

+  {

+    logger("session/checkuser.php", "login", "error reading user's data: »{$username}«");

     system_failure('Das Auslesen Ihrer Benutzerdaten ist fehlgeschlagen. Bitte melden Sie dies einem Administrator');

+  }

   $val = @mysql_fetch_object($result);

   return array(

           'username'      => $val->username,

@@ -92,6 +95,19 @@ function get_user_info($username)

           );

 }

+function set_customer_verified($customerno)

+{

+  $customerno = (int) $customerno;

+  db_query("UPDATE kundendaten.kunden SET status=0 WHERE id={$customerno};");

+  logger("session/checkuser.php", "register", "set customer's status to 0.");

+}

+

+function set_customer_lastlogin($customerno)

+{

+  $customerno = (int) $customerno;

+  db_query("UPDATE kundendaten.kunden SET lastlogin=NOW() WHERE id={$customerno};");

+}

+

 function set_customer_password($customerno, $newpass)

 {

   $customerno = (int) $customerno;

@@ -43,6 +43,7 @@ if (isset($_POST['username']) && isset($_POST['password']))

     case ROLE_CUSTOMER:

       $info = get_customer_info($_POST['username']);

       $_SESSION['customerinfo'] = $info;

+      set_customer_lastlogin($info['customerno']);

       logger("session/start.php", "login", "logged in customer no »{$info['customerno']}«");

       break;

     }