streams/Zotlabs/Module/Removeaccount.php

76 lines
1.7 KiB
PHP

<?php
namespace Zotlabs\Module;
use App;
use Zotlabs\Web\Controller;
class Removeaccount extends Controller {
function post() {
if (! local_channel()) {
return;
}
if ($_SESSION['delegate']) {
return;
}
if ((! x($_POST,'qxz_password')) || (! strlen(trim($_POST['qxz_password'])))) {
return;
}
if ((! x($_POST,'verify')) || (! strlen(trim($_POST['verify'])))) {
return;
}
if ($_POST['verify'] !== $_SESSION['remove_account_verify']) {
return;
}
$account = App::get_account();
$account_id = get_account_id();
if (! ($account && $account_id)) {
return;
}
$x = account_verify_password($account['account_email'],$_POST['qxz_password']);
if (! ($x && $x['account'])) {
return;
}
if ($account['account_password_changed'] > NULL_DATE) {
$d1 = datetime_convert('UTC','UTC','now - 48 hours');
if ($account['account_password_changed'] > d1) {
notice( t('Account removals are not allowed within 48 hours of changing the account password.') . EOL);
return;
}
}
account_remove($account_id);
}
function get() {
if (! local_channel()) {
goaway(z_root());
}
$hash = random_string();
$_SESSION['remove_account_verify'] = $hash;
$o .= replace_macros(get_markup_template('removeaccount.tpl'), [
'$basedir' => z_root(),
'$hash' => $hash,
'$title' => t('Remove This Account'),
'$desc' => [ t('WARNING: '), t('This account and all its channels will be completely removed from this server. '), t('This action is permanent and can not be undone!') ],
'$passwd' => t('Please enter your password for verification:'),
'$submit' => t('Remove Account')
]);
return $o;
}
}