]> andersk Git - sql-web.git/blob - signup.php
Fix CSRF vulnerabilities
[sql-web.git] / signup.php
1 <?php
2 /*
3         (c) 2005 Joe Presbrey
4 */
5
6 require_once('mitsql.cfg.php');
7 require_once('mitsql.lib.php');
8
9 if (!isSSL())
10         redirect('signup',true);
11
12 if (isLoggedIn()) {
13
14         redirect('index');
15
16 } else {
17         
18         if (is_null($SSLCred)) {
19                 $err[] = 'Please install a valid certificate.';
20         } else {
21                 if (isPost() && $LoginSSL->canSignup()) {
22                         if (empty($i_p1)) {
23                                 $err[] = 'Your password may not be blank.';
24                         } elseif ($i_p1 != $i_p2) {
25                                 $err[] = 'Your confirmation password does not match.';
26                         } else {
27                                 $u = new User($LoginSSL->getUserId());
28                                 $u->signup($i_p1);
29                 // TODO: missing function call, replace?
30                                 // $LoginSSL->refresh();
31                                 redirect('login', true);
32                         }
33                 } elseif (isPost()) {
34                         $err[] = 'You may not signup.';
35                 }
36         }
37 }
38
39 include 'tpl/signup.php';
40
41 ?>
This page took 0.369011 seconds and 5 git commands to generate.