Now MySQL_real_escaping mail text...

[mirrors/Kyberia-bloodline.git] / wwwroot / inc / eventz / verify.inc

diff --git a/wwwroot/inc/eventz/verify.inc b/wwwroot/inc/eventz/verify.inc
index c0a42932c504e0f3d209c5631d97882eff0d0499..6b335ebb53928b3170bee023e68fff45175ce9e3 100644 (file)
--- a/wwwroot/inc/eventz/verify.inc
+++ b/wwwroot/inc/eventz/verify.inc
@@ -1,5 +1,5 @@
-<?
-function verify() {
+<?php
+function verify(){
 
 global $db;
 $uvercode=mysql_real_escape_string($_POST['vc']);
@@ -8,7 +8,8 @@ $login=mysql_real_escape_string($_POST['login']);
 $kset=$db->query("select user_id from users where login='$login'");
 $kset->next();$userid=$kset->getString('user_id');
 
-$set=$db->query("select * from nodes where node_id='$userid' and node_parent=1836516");
+// XXX HARD CODED
+$set=$db->query("select * from nodes where node_id='$userid' and node_parent=".UNVERIFIED_REGISTRATIONS_NODE);
 if($set->getNumRows()!=1) {
          global $error;
          $error="User already verificated or invalid.";
@@ -20,31 +21,28 @@ $kset=$db->query("select hash from users where login='$login'");
 $kset->next();$vercode=$kset->getString('hash');
 
 if($uvercode!=$vercode) {
-global $error;
-$error="Wrong verification code or username";
-return false;
-}
-
-else {
+       global $error;
+       $error="Wrong verification code or username";
+       return false;
+} else {
 //  ouch!! this is gonna be dirty!!!!! will be revised later:-)
-$q="update nodes set node_parent=2091448, node_vector='00876611020914480$userid' where node_id='$userid'";
+// XXX hardcoded, rewrite
+$q="update nodes set node_parent=".REGISTRATION_REQUEST_NODE.", node_vector='0000010120914480$userid' where node_id='$userid'";
 $db->update($q);
-$q="update nodes set node_children_count=node_children_count+1 where node_id=2091448";
+$q="update nodes set node_children_count=node_children_count+1 where node_id=".REGISTRATION_REQUEST_NODE;
 $db->update($q);
 $q="update nodes set node_created=NOW() where node_id='$userid'";
 $db->update($q);
 $q="update nodes set node_system_access='public' where node_id='$userid'";
 $db->update($q);
-$q="update node_access set node_user_subchild_count=node_user_subchild_count+1 where node_id=2091448";
+$q="update node_access set node_user_subchild_count=node_user_subchild_count+1 where node_id=".REGISTRATION_REQUEST_NODE;
 $db->update($q);
 
 
 // and now the happy news:-))
-
-
 echo "<center>Verification successfull.<br><h3>from now on your registration is in the hands of kyberians</h3></center>";
-
-die();
+       die();
 }
+
 }
-?>
\ No newline at end of file
+?>