boinc/html/user/am_query.php

<?php

require_once("../inc/db.inc");
require_once("../inc/xml.inc");
require_once("../inc/email.inc");

db_init();

$nonce = process_user_text($_GET["nonce"]);

xml_header();

function reply($x) {
    echo "<am_query_reply>
    $x
</am_query_reply>
";
    exit();
}

function error($x) {
    reply("<error>$x</error>");
}

function success($x) {
    reply("<success/>\n$x");
}

$tuser = lookup_tentative_user($nonce);

if (!$tuser) {
    error("nonce not found");
}

if (!$tuser->confirmed) {
    success("<confirmed>0</confirmed>");
}

$user = lookup_user_email_addr($tuser->email_addr);
if (!$user) {
    $user = lookup_user_munged_email($tuser->email_addr);
}
if ($user) {
    error("user record already exists");
}

$authenticator = random_string();
$cross_project_id = random_string();
$now = time();
$query = "insert into user (create_time, email_addr, authenticator, cross_project_id) values($now, '$tuser->email_addr', '$authenticator', '$cross_project_id')";
$result = mysql_query($query);
$user = lookup_user_auth($authenticator);

if (!$user) {
    error("couldn't create user record");
}
success("<account_key>$user->authenticator</account_key>");

?>