mirror of https://github.com/BOINC/boinc.git
50 lines
1.0 KiB
PHP
50 lines
1.0 KiB
PHP
<?php
|
|
|
|
// RPC handler for account lookup
|
|
|
|
require_once("../inc/db.inc");
|
|
require_once("../inc/util.inc");
|
|
require_once("../inc/email.inc");
|
|
require_once("../inc/xml.inc");
|
|
|
|
function error() {
|
|
echo "<account_out>\n";
|
|
echo "<error_num>-161</error_num>\n";
|
|
echo "</account_out>\n";
|
|
exit();
|
|
}
|
|
|
|
db_init();
|
|
|
|
xml_header();
|
|
|
|
$email_addr = get_str("email_addr");
|
|
$passwd_hash = process_user_text(get_str("passwd_hash"));
|
|
|
|
$user = lookup_user_email_addr($email_addr);
|
|
if (!$user) {
|
|
error();
|
|
}
|
|
|
|
$auth_hash = md5($user->authenticator.$user->email_addr);
|
|
|
|
// if no password set, set password to account key
|
|
//
|
|
if (!strlen($user->passwd_hash)) {
|
|
$user->passwd_hash = $auth_hash;
|
|
mysql_query("update user set passwd_hash='$user->passwd_hash' where id=$user->id");
|
|
}
|
|
|
|
// if the given password hash matches (auth+email), accept it
|
|
//
|
|
if ($user->passwd_hash == $passwd_hash || $auth_hash == $passwd_hash) {
|
|
echo "<account_out>\n";
|
|
echo "<authenticator>$user->authenticator</authenticator>\n";
|
|
echo "</account_out>\n";
|
|
} else {
|
|
error();
|
|
}
|
|
|
|
?>
|
|
|