novabbs
/
rocksolid-light
3
0
Fork 1
Code Issues 22 Pull Requests Releases Wiki Activity

Do not allow custom email address to match another user's email address.

This commit is contained in:
Retro_Guy 2024-02-20 07:58:13 -07:00
parent 3d9c35f01a
commit b0a90c953d
2 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Rocksolid_Light/rocksolid/newsportal.php
View File

@ -2200,6 +2200,18 @@ function prune_dir_by_days($path, $days)
return true; return true;
} }
function check_registered_email_addresses($email)
{
global $config_dir;
$users = scandir($config_dir . "/userconfig");
foreach ($users as $user) {
if (strcmp(get_user_config($user, 'email'), $email) == 0) {
return $user;
}
}
return false;
}
function send_admin_message($admin, $from, $subject, $message) function send_admin_message($admin, $from, $subject, $message)
{ {
global $config_dir, $spooldir; global $config_dir, $spooldir;

14
Rocksolid_Light/spoolnews/user.php
View File

@ -205,6 +205,20 @@ if ($_POST['command'] != 'Configuration' && $_POST['command'] != 'SaveConfig') {
// Apply Config // Apply Config
if (isset($_POST['command']) && $_POST['command'] == 'SaveConfig') { if (isset($_POST['command']) && $_POST['command'] == 'SaveConfig') {
if ($OVERRIDES['disable_change_name'] != true) { if ($OVERRIDES['disable_change_name'] != true) {
// Check if email already exists in user database
if($founduser = check_registered_email_addresses(trim($_POST['display_email']))) {
// Email exists in database
$myemail = get_user_config($user, 'email');
if (strtolower($user) != strtolower($founduser)) {
// It's someone else's email
echo '<b>'.$_POST['display_email']."</b> is unavailable.<br />Please try again";
echo '<form target="' . $frame['content'] . '" method="post" action="user.php">';
echo '<input name="command" type="hidden" id="command" value="Configuration" readonly="readonly">';
echo "<input type='hidden' name='username' value='" . $_POST['username'] . "' />";
echo '<button class="np_button_link" type="submit">Return to Configuration</button>';
exit;
}
}
$user_config['display_name'] = $_POST['display_name']; $user_config['display_name'] = $_POST['display_name'];
$user_config['display_email'] = $_POST['display_email']; $user_config['display_email'] = $_POST['display_email'];
} }