validation.php

<?php

include_once('internal/Smarty.class.php');
$main_smarty = new Smarty;

include('config.php');
include(mnminclude.'html1.php');
include(mnminclude.'link.php');
include(mnminclude.'smartyvariables.php');

// Get values from the end user
$rcode = $db->escape(trim($_GET['code']));
$username = $db->escape(trim($_GET['uid']));

// Retrieve values from database
$user = ("SELECT user_email, user_pass, user_karma, user_lastlogin FROM ".table_users." WHERE user_login = '$username'");
global $db;
$result = $db->get_row($user);
if ($result) {
    if ($_GET['email']) {
        $decode = md5($_GET['email'].$result->user_karma.$username.pligg_hash().$main_smarty->get_config_vars('PLIGG_Visual_Name'));
    } else {
        $decode = md5($result->user_email.$result->user_karma.$username.pligg_hash().$main_smarty->get_config_vars('PLIGG_Visual_Name'));
    }
} else {
    $main_smarty->assign('error', $main_smarty->get_config_vars('PLIGG_Validation_No_Results'));
}

// Compare values
if ($rcode == $decode) {
    $lastlogin = $db->get_var("SELECT user_lastlogin FROM ".table_users." WHERE user_login = '$username'");
    if ($lastlogin == "0000-00-00 00:00:00") {
        $login_url = getmyurl("loginNoVar");
        $message = sprintf($main_smarty->get_config_vars('PLIGG_Validation_Message'), $login_url);
        $main_smarty->assign('message', $message);

        $sql = "UPDATE ".table_users." SET user_lastlogin = now() WHERE user_login='$username'";
        if (!@mysql_query($sql)) {
            $main_smarty->assign('error', $main_smarty->get_config_vars('PLIGG_Validation_Mysql_Error'));
        }
    } elseif ($_GET['email'] && $_GET['email'] != $result->user_email) {
        $login_url = getmyurl("loginNoVar");
        $message = sprintf($main_smarty->get_config_vars('PLIGG_Validation_Message'), $login_url);
        $main_smarty->assign('message', $message);

        $sql = "UPDATE ".table_users." SET user_email = '".mysql_real_escape_string($_GET['email'])."' WHERE user_login='$username'";
        if (!@mysql_query($sql)) {
            $main_smarty->assign('error', $main_smarty->get_config_vars('PLIGG_Validation_Mysql_Error'));
        }
    } else {
        $main_smarty->assign('error', $main_smarty->get_config_vars('PLIGG_Validation_Already_Activated'));
    }
} else {
    $main_smarty->assign('error', $main_smarty->get_config_vars('PLIGG_Validation_Invalid_Code'));
}

define('pagename', 'validation');
$main_smarty->assign('pagename', pagename);

do_sidebar($main_smarty);

$main_smarty->assign('tpl_center', $the_template.'/user_validation_center');
$main_smarty->display($the_template.'/pligg.tpl');