Graphictoria-Legacy/api/verify/checkUser.php

32 lines
1.0 KiB
PHP

<?php
exit('disabled');
// Check if everything exists and is valid
if (!isset($_GET['username'])) die("bad");
if (is_array($_GET['username'])) die("bad");
$username = $_GET['username'];
if (!isset($_GET['key'])) die("bad-key");
if (is_array($_GET['key'])) die("bad-key");
if ($_GET['key'] != "hhXPjR5dOEPKeIkktLfW2PRlQh8aAWDr") die("bad-key");
// Create database connection.
include_once $_SERVER['DOCUMENT_ROOT'].'/config.php';
try{
$dbcon = new PDO('mysql:host='.$db_host.';port='.$db_port.';dbname='.$db_name.'', $db_user, $db_passwd);
$dbcon->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_SILENT);
$dbcon->setAttribute(PDO::ATTR_EMULATE_PREPARES, false);
}catch (PDOExpection $e){
exit;
}
// Validate everything
$stmt = $dbcon->prepare("SELECT id, banned FROM users WHERE username=:uid;");
$stmt->bindParam(':uid', $username, PDO::PARAM_STR);
$stmt->execute();
$result = $stmt->fetch(PDO::FETCH_ASSOC);
if ($stmt->rowCount() == 0) echo 'not-found';
if ($result['banned'] > 0) echo 'banned';
$dbcon = null;
?>