albino
/
tormon
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

check if subscription exists

This commit is contained in:
Al Beano 2016-09-02 23:45:32 +01:00
parent eeaca1c333
commit d1c7095ba4
2 changed files with 16 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tormon/e_exists.tt Normal file
View File

@ -0,0 +1,2 @@
<h1>Error</h1>
The email you entered is already signed up for subscriptions for this fingerprint. Please go back and try again.

18
tormon/tormon.fcgi
View File

@ -66,7 +66,6 @@ while ($request->Accept() <= 0) {
case "/" { case "/" {
my $tt = read_file("$Bin/index.tt"); my $tt = read_file("$Bin/index.tt");
$content = ${ $tmpl->render($tt, {version => $VERSION}) }; $content = ${ $tmpl->render($tt, {version => $VERSION}) };
$code = "\n"; # 200 OK
} }
case "/subscribe" { case "/subscribe" {
read STDIN, my $buf, $ENV{"CONTENT_LENGTH"}; read STDIN, my $buf, $ENV{"CONTENT_LENGTH"};
@ -92,9 +91,21 @@ while ($request->Accept() <= 0) {
last; last;
} }
# Check if this email/fp combo is already in db
my $sth = $dbh->prepare("select id from users where email=? and fp=?");
$sth->bind_param(1, $input{"email"});
$sth->bind_param(2, $input{"fp"});
$sth->execute;
my $href = $sth->fetchrow_hashref;
if ($sth->rows != 0) {
$content = read_file("$Bin/e_exists.tt");
last;
}
$sth->finish;
# Add the email to database # Add the email to database
my $secret = rand_string(); my $secret = rand_string();
my $sth = $dbh->prepare("insert into users (email, confirmed, fp, secret) $sth = $dbh->prepare("insert into users (email, confirmed, fp, secret)
values (?, 0, ?, ?);"); values (?, 0, ?, ?);");
$sth->bind_param(1, $input{"email"}); $sth->bind_param(1, $input{"email"});
$sth->bind_param(2, $input{"fp"}); $sth->bind_param(2, $input{"fp"});
@ -126,7 +137,6 @@ while ($request->Accept() <= 0) {
}); });
$content = read_file("$Bin/subscribe.tt"); $content = read_file("$Bin/subscribe.tt");
$code = "\n";
} }
case (/^\/confirm\?id=([0-9]+)&s=([a-z]{16})$/) { case (/^\/confirm\?id=([0-9]+)&s=([a-z]{16})$/) {
# limit scope or something # limit scope or something
@ -155,7 +165,6 @@ while ($request->Accept() <= 0) {
$content = read_file("$Bin/confirm.tt"); $content = read_file("$Bin/confirm.tt");
} }
$code = "\n";
} }
else { else {
my $tt = read_file("$Bin/error.tt"); my $tt = read_file("$Bin/error.tt");
@ -171,5 +180,6 @@ while ($request->Accept() <= 0) {
content => $content, content => $content,
}, },
); );
$code = "\n" unless defined $code;
print "Content-Type: text/html\n", $code, ${$html}; print "Content-Type: text/html\n", $code, ${$html};
} }