Change to use token.inc for email_change_notification

This commit is contained in:
Keith Uplinger 2018-04-23 14:21:01 -05:00
parent a1b03c8cf2
commit dbafb59b92
2 changed files with 8 additions and 2 deletions

View File

@ -95,18 +95,22 @@ function send_changed_email($user) {
$body_new = "";
$body_old = "";
$duration = TOKEN_DURATION_ONE_WEEK;
$token = create_token($user->id, TOKEN_TYPE_CHANGE_EMAIL, $duration);
$subject = PROJECT." email address change.";
//Body for the new email address to explain how quickly they can do another email change.
$body_new = "Your email address was changed from ".$user->previous_email_addr.
" to ".$user->email_addr." on ".date('F j \a\t g:i a T', $user->email_addr_change_time).
". You will not be able to change your email address again until ".date('F j \a\t g:i a T', $user->email_addr_change_time + 604800).
". You will not be able to change your email address again until ".date('F j \a\t g:i a T', $user->email_addr_change_time + $duration).
". If you need to undo this immediately, please look for an email from us at your ".$user->previous_email_addr." address.";
//We need to send a different version of the email to the old address.
$body_old = "Your email address has been changed. If you did not take this action,
then please click on the link below reverse this process and change your password.
".secure_url_base()."recover_email.php?id=".$user->id."&token=asdfasdfasdf";
".secure_url_base()."recover_email.php?id=".$user->id."&token=".$token";
return send_email($user, $subject, $body_new) && send_email($user, $subject, $body_old, null, $user->previous_email_addr);
}

View File

@ -21,9 +21,11 @@ require_once("../inc/util.inc");
// Constants for valid token types
define("TOKEN_TYPE_DELETE_ACCOUNT", "D");
define("TOKEN_TYPE_CHANGE_EMAIL", "E");
// Constants for token durations
define("TOKEN_DURATION_ONE_DAY", 86400);
define("TOKEN_DURATION_ONE_WEEK", 604800);
function create_token($userid, $type, $duration) {
$token = random_string();