blob: 777f640886148ea378dbd792f9f3efaab87a6914 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
<?php
require_once('includes/config.php');
//collect values from the url
$memberID = trim($_GET['x']);
$active = trim($_GET['y']);
//if id is number and the active token is not empty carry on
if(is_numeric($memberID) && !empty($active)){
//update users record set the active column to Yes where the memberID and active value match the ones provided in the array
$stmt = $db->prepare("UPDATE blog_members SET active = 'yes' WHERE memberID = :memberID AND active = :active");
$stmt->execute(array(
':memberID' => $memberID,
':active' => $active
));
//if the row was updated redirect the user
if($stmt->rowCount() == 1){
$stmt = $db->prepare("SELECT username FROM blog_members WHERE memberID = :memberID");
$stmt->execute(array(
':memberID' => $memberID,
));
$row = $stmt->fetch();
$username = $row['username'];
//redirect to login page
write_log('<span style="color:#00cc99; font-weight:bold;">Nouveau membre :</span> '.$username, $db);
header('Location: '.SITEURL.'/admin/login.php?action=active');
exit;
} else {
header('Location: '.SITEURL.'/admin/login.php?action=echec');
exit;
}
}
?>
|