79 lines
2.3 KiB
PHP
79 lines
2.3 KiB
PHP
<?php
|
|
|
|
switch($_POST['act']){
|
|
case "addBot":
|
|
//verifier les variables "botName""botGame""botURL""email""botDescription"
|
|
|
|
$alerts="";
|
|
|
|
//botGame -> doit exister
|
|
if(!in_array($_POST['$arenas'],$arenas)){
|
|
erreur(404,"wrong post parameter");
|
|
}
|
|
|
|
//botname -> il ne doit pas y avoir un autre bot du même nom sur le même jeu
|
|
$rs=mysqli_query($lnMysql,
|
|
"SELECT 1
|
|
FROM bots
|
|
WHERE name='".mysqli_real_escape_string($lnMysql,htmlentities($_POST['botname']))."'
|
|
AND game='".mysqli_real_escape_string($lnMysql,$_POST['game'])."';");
|
|
if(mysqli_num_rows($rs) > 0){
|
|
$alerts.="Un bot existant pour ce je porte le même nom\n";
|
|
}
|
|
|
|
//BotUrl (doit retourner un code 200)
|
|
if(!preg_match("/^(http|https):\/\//", $_POST['botURL'])){
|
|
$alerts.="L'URL n'est pas valide\n";
|
|
}
|
|
|
|
//email => doit être valide
|
|
//only oner @
|
|
if(
|
|
(substr_count('@',$_POST['email']) <> 1)
|
|
|| (substr_count('.@',$_POST['email']) > 0)
|
|
|| (substr_count('@.',$_POST['email']) > 0)
|
|
|| (substr_count('..',$_POST['email']) > 0)
|
|
|| (substr_count('.',$_POST['email']) == 1)
|
|
){
|
|
$alerts.="L'email n'est pas valide\n";
|
|
}
|
|
|
|
//BotDescription=> a voir
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if($alerts <>""){
|
|
|
|
}else{
|
|
//enregistrer le bot et envoyer un email pour la validation
|
|
|
|
$secret=rand_str(8, '$-_.+!*\'(),ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890');
|
|
|
|
$rs=mysqli_query($lnMysql,
|
|
"INSERT INTO bots (name,game,url,description,active,date_inscription,validate_secret) VALUES
|
|
( '".mysqli_real_escape_string($lnMysql,htmlentities($_POST['botname']))."',
|
|
'".mysqli_real_escape_string($lnMysql,$_POST['botGame'])."',
|
|
'".mysqli_real_escape_string($lnMysql,htmlentities($_POST['botURL']))."',
|
|
'".mysqli_real_escape_string($lnMysql,
|
|
preg_replace('#^(http|https|mailto|ftp)://(([a-z0-9\/\.\?-_=#@:~])*)#i','<a href="$1://$2">$1://$2</a>'
|
|
,nl2br(htmlentities($_POST['botDescription'])))
|
|
)."',
|
|
'NOW(),
|
|
'".$secret."'"
|
|
);
|
|
|
|
require_once (__DIR__."/class.phpmailer.php");
|
|
|
|
}
|
|
|
|
|
|
echo "TODO";
|
|
break;
|
|
default:
|
|
error(500,"erf";)
|
|
break;
|
|
|
|
} |