mirror of
https://github.com/lkddi/nexusphp.git
synced 2026-04-14 12:30:49 +08:00
a80f53d4f4
If use Refresh, it will not work on some browser and some protocols (e.g. HTTP/2). So, change Refresh into Location. Signed-off-by: SPC <github@spcsky.com>
35 lines
1.6 KiB
PHP
35 lines
1.6 KiB
PHP
<?php
|
|
require_once("../include/bittorrent.php");
|
|
dbconn();
|
|
require_once(get_langfile_path());
|
|
loggedinorreturn();
|
|
$id = isset($_POST['id']) ? intval($_POST['id']) : (isset($_GET['id']) ? intval($_GET['id']) : die());
|
|
int_check($id,true);
|
|
if (($CURUSER['id'] != $id && !user_can('viewinvite')) || !is_valid_id($id))
|
|
stderr($lang_functions['std_sorry'],$lang_functions['std_permission_denied'], true, false);
|
|
$email = unesc(htmlspecialchars(trim($_POST["email"])));
|
|
if(!empty($_POST['conusr'])) {
|
|
// sql_query("UPDATE users SET status = 'confirmed', editsecret = '' WHERE id IN (" . implode(", ", $_POST['conusr']) . ") AND status='pending'");
|
|
\App\Models\User::query()->whereIn('id', $_POST['conusr'])
|
|
->where('status', 'pending')
|
|
->update(['status' => 'confirmed', 'editsecret' => ''])
|
|
;
|
|
} else {
|
|
stderr($lang_takeconfirm['std_sorry'],$lang_takeconfirm['std_no_buddy_to_confirm'].
|
|
"<a class=altlink href=invite.php?id={$CURUSER['id']}>".$lang_takeconfirm['std_here_to_go_back'],false);
|
|
}
|
|
$title = $SITENAME.$lang_takeconfirm['mail_title'];
|
|
$baseUrl = getSchemeAndHttpHost();
|
|
$body = <<<EOD
|
|
{$lang_takeconfirm['mail_content_1']}
|
|
<b><a href="javascript:void(null)" onclick="window.open('{$baseUrl}/login.php')">{$lang_takeconfirm['mail_here']}</a></b><br />
|
|
{$baseUrl}/login.php
|
|
{$lang_takeconfirm['mail_content_2']}
|
|
EOD;
|
|
|
|
//this mail is sent when the site is using admin(open/closed)/inviter(closed) confirmation and the admin/inviter confirmed the pending user
|
|
sent_mail($email,$SITENAME,$SITEEMAIL,$title,$body,"invite confirm",false,false,'');
|
|
|
|
header("Location: invite.php?id=".htmlspecialchars($CURUSER['id']));
|
|
?>
|