Reply to thread

Message

<blockquote data-quote="Brandon" data-source="post: 390059" data-attributes="member: 28869">Hey there!On my hotel it seems that users can sign up with more than 1 account even though its disabled? I think it might actually be infinite...class.users:[CODE]&nbsp; &nbsp; final public function hasClones($ip)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; if($engine-&gt;num_rows(&quot;SELECT * FROM users WHERE ip_reg = '&quot; . $_SERVER['REMOTE_ADDR'] . &quot;'&quot;) == 1)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return false;&nbsp; &nbsp; }&nbsp; &nbsp; [/CODE]So the only thing I think it could be is register.php but I also changed this and It's not working :/regsubmit.php:[CODE]&lt;?php&nbsp; &nbsp; global $users, $core, $engine;&nbsp; &nbsp; &nbsp; &nbsp; $errors = array();&nbsp; &nbsp; $messages = array();&nbsp; &nbsp; &nbsp; &nbsp; if(empty($_POST[&quot;registrationBean_username&quot;]))&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_username&quot;] = &quot;&lt;br/&gt;Please enter a username!&quot;;&nbsp; &nbsp; elseif(strlen($_POST[&quot;registrationBean_username&quot;]) &gt; 25 || !ctype_alnum($_POST[&quot;registrationBean_username&quot;]))&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_username&quot;] = &quot;&lt;br/&gt;Please enter a valid username!&quot;;&nbsp; &nbsp; elseif($engine-&gt;num_rows(&quot;SELECT null FROM users WHERE username = '&quot; . $engine-&gt;secure($_POST[&quot;registrationBean_username&quot;]) . &quot;' LIMIT 1&quot;) != 0)&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_username&quot;] = &quot;That username is already taken!&quot;;&nbsp; &nbsp; elseif(!preg_match(&quot;/^\s*[a-zA-Z0-9,\s]+\s*$/&quot;, $_POST[&quot;registrationBean_username&quot;]))&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_username&quot;] = &quot;You cant use special characters!&quot;;&nbsp; &nbsp; &nbsp; &nbsp; if(empty($_POST[&quot;registrationBean_email&quot;]))&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_email&quot;] = &quot;&lt;br/&gt;Please enter an email address!&quot;;&nbsp; &nbsp; elseif(!preg_match(&quot;/^[a-z0-9_\.-]+@([a-z0-9]+([\-]+[a-z0-9]+)*\.)+[a-z]{2,7}$/i&quot;, $_POST[&quot;registrationBean_email&quot;]))&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_email&quot;] = &quot;&lt;br/&gt;Please enter a valid email address!&quot;;&nbsp; &nbsp; elseif($engine-&gt;num_rows(&quot;SELECT null FROM users WHERE mail = '&quot; . $engine-&gt;secure($_POST[&quot;registrationBean_email&quot;]) . &quot;' LIMIT 1&quot;) != 0)&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_email&quot;] = &quot;&lt;br/&gt;That email address is taken!&quot;;&nbsp; &nbsp; &nbsp; &nbsp; if(empty($_POST['registrationBean_password']))&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_password&quot;] = &quot;&lt;br/&gt;Please enter a password!&quot;;&nbsp; &nbsp; elseif(strlen($_POST['registrationBean_password']) &lt; 6)&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_password&quot;] = &quot;&lt;br/&gt;Please enter a password with more than 6 characters!&quot;;&nbsp; &nbsp; &nbsp; &nbsp; if(empty($_POST['registrationBean_password_confirm']))&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_password_confirm&quot;] = &quot;&lt;br/&gt;Please enter your password again!&quot;;&nbsp; &nbsp; elseif(!($_POST['registrationBean_password'] === $_POST['registrationBean_password_confirm']))&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_password_confirm&quot;] = &quot;&lt;br/&gt;Please enter a password with more than 6 characters!&quot;;&nbsp; &nbsp; &nbsp; &nbsp; if($_POST['registrationBean_termsOfServiceSelection'] != &quot;true&quot;)&nbsp; &nbsp; &nbsp; &nbsp; $errors[&quot;registration_termsofservice&quot;] = &quot;Please accept the terms of service.&quot;;&nbsp; &nbsp; &nbsp; &nbsp; $return = array(&nbsp; &nbsp; &nbsp; &nbsp; &quot;registrationErrors&quot; =&gt; $errors,&nbsp; &nbsp; &nbsp; &nbsp; &quot;registrationMessages&quot; =&gt; $messages);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(count($errors) == 0)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; if(isset($_SESSION['ref'])) // Use Session instead of form, incase input was changed&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $referrer = $engine-&gt;secure($_SESSION['ref']); // Secure Session&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($users-&gt;nameTaken($referrer)) // Recycled function, checks if the referrer exists&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(!$engine-&gt;num_rows(&quot;SELECT * FROM users WHERE username = '{$referrer}' AND ip_last = '{$_SERVER['REMOTE_ADDR']}' OR username = '{$referrer}' AND ip_reg = '{$_SERVER['REMOTE_ADDR']}'&quot;))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $credits = 5000; // Amount user gets from referring&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $engine-&gt;query(&quot;UPDATE users SET credits = credits + {$credits}, refs = refs + 1 WHERE username = '{$referrer}' LIMIT 1&quot;);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $users-&gt;addUser($engine-&gt;secure($_POST[&quot;registrationBean_username&quot;]),$core-&gt;hashed($_POST['registrationBean_password']),$_POST[&quot;registrationBean_email&quot;],$_CONFIG['hotel']['motto'],$_CONFIG['hotel']['credits'],$_CONFIG['hotel']['pixels'],1, $_CONFIG['hotel']['figure'], &quot;M&quot;, 12345);&nbsp; &nbsp; &nbsp; &nbsp; $users-&gt;turnOn($engine-&gt;secure($_POST[&quot;registrationBean_username&quot;]));&nbsp; &nbsp; &nbsp; &nbsp; $return['registrationCompletionRedirectUrl'] = &quot;{$_CONFIG['hotel']['url']}/me&quot;;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($engine-&gt;num_rows(&quot;SELECT * FROM users WHERE ip_reg = '&quot; . $_SERVER['REMOTE_ADDR'] . &quot;'&quot;) == 1)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $return['registrationCompletionRedirectUrl'] = &quot;{$_CONFIG['hotel']['url']}/clones&quot;;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; header('Content-type: application/json');&nbsp; &nbsp; echo json_encode($return);&nbsp; &nbsp; exit;?&gt;[/CODE]</blockquote>

[QUOTE="Brandon, post: 390059, member: 28869"] Hey there! On my hotel it seems that users can sign up with more than 1 account even though its disabled? I think it might actually be infinite... [B]class.users:[/B] [CODE] final public function hasClones($ip) { global $engine; if($engine->num_rows("SELECT * FROM users WHERE ip_reg = '" . $_SERVER['REMOTE_ADDR'] . "'") == 1) { return true; } return false; } [/CODE] So the only thing I think it could be is register.php but I also changed this and It's not working :/ [B]regsubmit.php:[/B] [CODE]<?php global $users, $core, $engine; $errors = array(); $messages = array(); if(empty($_POST["registrationBean_username"])) $errors["registration_username"] = " Please enter a username!"; elseif(strlen($_POST["registrationBean_username"]) > 25 || !ctype_alnum($_POST["registrationBean_username"])) $errors["registration_username"] = " Please enter a valid username!"; elseif($engine->num_rows("SELECT null FROM users WHERE username = '" . $engine->secure($_POST["registrationBean_username"]) . "' LIMIT 1") != 0) $errors["registration_username"] = "That username is already taken!"; elseif(!preg_match("/^\s*[a-zA-Z0-9,\s]+\s*$/", $_POST["registrationBean_username"])) $errors["registration_username"] = "You cant use special characters!"; if(empty($_POST["registrationBean_email"])) $errors["registration_email"] = " Please enter an email address!"; elseif(!preg_match("/^[a-z0-9_\.-]+@([a-z0-9]+([\-]+[a-z0-9]+)*\.)+[a-z]{2,7}$/i", $_POST["registrationBean_email"])) $errors["registration_email"] = " Please enter a valid email address!"; elseif($engine->num_rows("SELECT null FROM users WHERE mail = '" . $engine->secure($_POST["registrationBean_email"]) . "' LIMIT 1") != 0) $errors["registration_email"] = " That email address is taken!"; if(empty($_POST['registrationBean_password'])) $errors["registration_password"] = " Please enter a password!"; elseif(strlen($_POST['registrationBean_password']) < 6) $errors["registration_password"] = " Please enter a password with more than 6 characters!"; if(empty($_POST['registrationBean_password_confirm'])) $errors["registration_password_confirm"] = " Please enter your password again!"; elseif(!($_POST['registrationBean_password'] === $_POST['registrationBean_password_confirm'])) $errors["registration_password_confirm"] = " Please enter a password with more than 6 characters!"; if($_POST['registrationBean_termsOfServiceSelection'] != "true") $errors["registration_termsofservice"] = "Please accept the terms of service."; $return = array( "registrationErrors" => $errors, "registrationMessages" => $messages); if(count($errors) == 0) { if(isset($_SESSION['ref'])) // Use Session instead of form, incase input was changed { $referrer = $engine->secure($_SESSION['ref']); // Secure Session if($users->nameTaken($referrer)) // Recycled function, checks if the referrer exists { if(!$engine->num_rows("SELECT * FROM users WHERE username = '{$referrer}' AND ip_last = '{$_SERVER['REMOTE_ADDR']}' OR username = '{$referrer}' AND ip_reg = '{$_SERVER['REMOTE_ADDR']}'")) { $credits = 5000; // Amount user gets from referring $engine->query("UPDATE users SET credits = credits + {$credits}, refs = refs + 1 WHERE username = '{$referrer}' LIMIT 1"); } } } $users->addUser($engine->secure($_POST["registrationBean_username"]),$core->hashed($_POST['registrationBean_password']),$_POST["registrationBean_email"],$_CONFIG['hotel']['motto'],$_CONFIG['hotel']['credits'],$_CONFIG['hotel']['pixels'],1, $_CONFIG['hotel']['figure'], "M", 12345); $users->turnOn($engine->secure($_POST["registrationBean_username"])); $return['registrationCompletionRedirectUrl'] = "{$_CONFIG['hotel']['url']}/me"; if($engine->num_rows("SELECT * FROM users WHERE ip_reg = '" . $_SERVER['REMOTE_ADDR'] . "'") == 1) { $return['registrationCompletionRedirectUrl'] = "{$_CONFIG['hotel']['url']}/clones"; } } header('Content-type: application/json'); echo json_encode($return); exit; ?>[/CODE] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members