webinterface.git

@@ -10,6 +10,7 @@

 RewriteEngine On

 RewriteRule ^go/(.*)$  dispatch.php?go=$1&%{QUERY_STRING}

+RewriteRule ^init(.*)$  dispatch.php?go=index/initialize_useraccount&token=$1&%{QUERY_STRING}

 #Order deny,allow

@@ -36,6 +36,18 @@ function validate_token($customerno, $token)

 }

+function get_uid_for_token($token) 

+{

+  expire_tokens();

+  $token = mysql_real_escape_string($token);

+  $result = db_query("SELECT uid FROM system.usertoken WHERE token='{$token}';");

+  if (mysql_num_rows($result) == 0) {

+    return NULL;

+  }

+  $data = mysql_fetch_assoc($result);

+  return $data['uid'];  

+}

+

 function validate_uid_token($uid, $token)

 {

   expire_tokens();

@@ -14,20 +14,21 @@ http://creativecommons.org/publicdomain/zero/1.0/

 Nevertheless, in case you use a significant part of this code, we ask (but not require, see the license) that you keep the authors' names in place and return your changes to the public. We would be especially happy if you tell us what you're going to do with this code.

 */

+require_once('newpass.php');

+require_once('inc/security.php');

+

 title("Passwort setzen");

 $show = 'token';

-if (isset($_REQUEST['uid']) and isset($_REQUEST['token']))

+if (isset($_REQUEST['token']))

 {

-  $uid = (int) $_REQUEST['uid'];

   $token = $_REQUEST['token'];

+  $uid = get_uid_for_token($token);

-  require_once('newpass.php');

-  require_once('inc/security.php');

-  if (validate_uid_token($uid, $token))

+  if ($uid != NULL && validate_uid_token($uid, $token))

   {

     $show = 'agb';

-    if ($_REQUEST['agb'] == '1') {

+    if (isset($_REQUEST['agb']) && $_REQUEST['agb'] == '1') {

       $show = 'password';

     }

     if (isset($_POST['password']))