diff --git a/api/v1/authorization.php b/api/v1/authorization.php index f7ee295..1dceb35 100644 --- a/api/v1/authorization.php +++ b/api/v1/authorization.php @@ -52,6 +52,7 @@ if ($stmt->rowCount() == 1) { $user = array( 'id' => $user_data['id'], 'username' => $user_data['username'], + 'email' => $user_data['email'], 'salesID' => $user_data['salesID'], 'partnerhierarchy' => $user_data['partnerhierarchy'], 'permission' => $permission, diff --git a/api/v1/get/authorization.php b/api/v1/get/authorization.php deleted file mode 100644 index 933746e..0000000 --- a/api/v1/get/authorization.php +++ /dev/null @@ -1,67 +0,0 @@ -prepare('SELECT id, username, password, salesID, partnerhierarchy, view, service, settings, lastlogin, userkey, language FROM users WHERE username = ?'); -//Excute Query -$stmt->execute([$username]); -// Check if username exists. Verify user exists then verify -if ($stmt->rowCount() == 1) { - $user_data = $stmt->fetch(); - $permission = userRights($user_data['view']); - $profile = getProfile($user_data['settings'],$permission); - $password = $user_credentials['password']; - - if (array_key_exists('resetkey', $user_credentials)){ - //Reset procedure - //STEP 1.A- Create resetkey - $headers = array('alg'=>'HS256','typ'=>'JWT'); - $payload = array('username'=>$user_data['username'], 'exp'=>(time() + 1800)); - $resetkey = generate_jwt($headers, $payload); - //STEP 1.B Store in DB - $sql = 'UPDATE users SET resetkey = ? WHERE id = ?'; - $stmt = $pdo->prepare($sql); - $stmt->execute([$resetkey,$user_data['id']]); - //STEP 2- Send to user - include_once './assets/mail/email_template_reset.php'; - send_mail($user_data['username'],$subject,$message,'',''); - - } else { //STANDARD LOGIN - if (password_verify($password, $user_data['password'])) { - - $token = createCommunicationToken($user_data['service']); - - $user = array( - 'id' => $user_data['id'], - 'username' => $user_data['username'], - 'salesID' => $user_data['salesID'], - 'partnerhierarchy' => $user_data['partnerhierarchy'], - 'permission' => $permission, - 'profile' => $profile, - 'service' => $user_data['service'], - 'userkey' => $user_data['userkey'], - 'language' => $user_data['language'], - 'token' => $token - ); - //Encrypt results - $messages = generate_payload($user); - //Send results - print_r($messages); - } else { - http_response_code(403); //Not authorized - } - } -} -else -{ - http_response_code(403);//Not authorized -} - -?> \ No newline at end of file diff --git a/api/v1/post/profile.php b/api/v1/post/profile.php index 6f7f537..03aa742 100644 --- a/api/v1/post/profile.php +++ b/api/v1/post/profile.php @@ -41,6 +41,6 @@ $owner_user = (($user_data['username'] == $username)? 1 : 0); $stmt->execute([$resetkey,$id]); //STEP 3 - Send to user include_once './assets/mail/email_template_reset.php'; - send_mail($user_data['username'],$subject,$message,'',''); + send_mail($user_data['email'],$subject,$message,'',''); } } diff --git a/api/v1/post/users.php b/api/v1/post/users.php index bbda606..73cc9ea 100644 --- a/api/v1/post/users.php +++ b/api/v1/post/users.php @@ -116,7 +116,7 @@ if ($permission == 3 || $permission == 4){ $stmt->execute([$resetkey,$id]); //STEP 3 - Send to user include_once './assets/mail/email_template_reset.php'; - send_mail($user_data['username'],$subject,$message,'',''); + send_mail($user_data['email'],$subject,$message,'',''); } $accounthierarchy = json_encode($account, JSON_UNESCAPED_UNICODE); @@ -236,7 +236,7 @@ elseif ($command == 'insert' && isAllowed('user',$profile,$permission,'C') === 1 $resetkey = generate_jwt($headers, $payload); //STEP 2- Send to user include_once './assets/mail/email_template_new.php'; - send_mail($post_content['username'],$subject,$message,'',''); + send_mail($post_content['email'],$subject,$message,'',''); } else { //Encrypt results $messages = generate_payload($exists); diff --git a/assets/functions.php b/assets/functions.php index 5ac830d..1b83f03 100644 --- a/assets/functions.php +++ b/assets/functions.php @@ -263,7 +263,7 @@ EOT; function template_footer($js_script = '') { $js_script = $js_script ? '' : ''; $lancode = $_SESSION['language'] ?? 'US'; - $user_mail = $_SESSION['username'] ?? ''; + $user_mail = $_SESSION['email'] ?? ''; $veliti_cim = ''; if (veliti_cim){ $veliti_cim = ''; diff --git a/login.php b/login.php index 3c126c6..5b605d4 100644 --- a/login.php +++ b/login.php @@ -60,6 +60,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') { $_SESSION['loggedin'] = true; $_SESSION['id'] = $responses->id; $_SESSION['username'] = $responses->username; + $_SESSION['email'] = $responses->email; $_SESSION['salesID'] = $responses->salesID; $_SESSION['partnerhierarchy'] = $responses->partnerhierarchy; //clean; $_SESSION['permission'] = $responses->permission;