Lncvrt/xytrizas-uploading-service
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove display names

Browse Source
This commit is contained in:
Lncvrt committed 2025-03-02 13:44:57 -07:00
1 parent c754df44c3
commit b7271bf6d2
11 files changed
+17 -131
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

database.sql
-1
View File
@@ -80,7 +80,6 @@ CREATE TABLE `uploads` (
CREATE TABLE `users` (
`uid` int NOT NULL,
`username` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT NULL,
`display_name` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT NULL,
`password` varchar(60) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT NULL,
`email` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT NULL,
`discord_id` varchar(32) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT NULL,
webroot/api/changeDisplayname.php
-60
View File
@@ -1,60 +0,0 @@
<?php
require '../config/config.php';
require '../incl/main.php';
$old_displayname = $_POST['olddisplayname'] ?? '';
$new_displayname = $_POST['newdisplayname'] ?? '';
$username = $_POST['username'] ?? '';
$password = $_POST['password'] ??'';
if (empty($username) || empty($old_displayname) || empty($new_displayname) || empty($password)) {
http_response_code(400);
header('Content-Type: application/json');
die(json_encode(['success' => 'false', 'response' => 'Missing Username, Old Display Name, New Display Name, or Password']));
}
if (strlen($new_displayname) < 3 || strlen($new_displayname) > 32) {
http_response_code(400);
header('Content-Type: application/json');
die(json_encode(['success' => 'false', 'responsae' => 'New Display Name must be between 3 and 32 characters']));
}
$conn = new mysqli($dbservername, $dbusername, $dbpassword, $dbname);
if ($conn->connect_error) {
http_response_code(500);
header('Content-Type: application/json');
die(json_encode(['success' => 'false', 'response' => 'Unable to access database']));
}
$stmt = $conn->prepare("SELECT password FROM users WHERE username = ?");
$stmt->bind_param("s", $username);
$stmt->execute();
$result = $stmt->get_result();
if ($result->num_rows > 0) {
$user = $result->fetch_assoc();
if (!password_verify($password, $user['password'])) {
http_response_code(400);
header('Content-Type: application/json');
die(json_encode(['success' => 'false', 'response' => 'Password is incorrect']));
}
$stmt = $conn->prepare("UPDATE users SET display_name = ? WHERE username = ?");
$stmt->bind_param("ss", $new_displayname, $username);
$stmt->execute();
http_response_code(200);
header('Content-Type: application/json');
echo json_encode(['success' => 'true', 'response' => 'Display Name changed successfully']);
} else {
http_response_code(404);
header('Content-Type: application/json');
die(json_encode(['success' => 'false', 'response' => 'User not found']));
}
$stmt->close();
$conn->close();
?>
webroot/api/fetchFile.php
+1 -1
View File
@@ -103,7 +103,7 @@ $stmt->close();
$fileUrl = "https://files.upload.xytriza.com/{$file}";
$stmt = $conn->prepare("SELECT display_name, timezone FROM users WHERE uid = ?");
$stmt = $conn->prepare("SELECT username, timezone FROM users WHERE uid = ?");
$stmt->bind_param("s", $uid);
$stmt->execute();
$stmt->bind_result($username, $timezone);
webroot/api/getUserInfo.php
+1 -2
View File
@@ -64,7 +64,6 @@ if ($result->num_rows > 0) {
$info = [
'uid' => $userInfo['uid'],
'username' => $userInfo['username'],
'displayName' => $userInfo['display_name'] ?? $userInfo['username'],
'discordId' => $userInfo['discord_id'],
'role' => $role,
'registerTime' => $userInfo['register_time'],
@@ -73,7 +72,7 @@ if ($result->num_rows > 0) {
$response = [
'success' => true,
'response' => 'Information for user "' . $userInfo['display_name'] . '"',
'response' => 'Information for user "' . $userInfo['username'] . '"',
'userinfo' => $info,
];
webroot/api/registerAccount.php
+2 -10
View File
@@ -63,7 +63,6 @@ if ($conn->connect_error) {
}
$request_username = $_POST['username'] ?? '';
$request_displayname = (isset($_POST['displayname']) && !empty($_POST['displayname'])) ? $_POST['displayname'] : $request_username;
$request_password = $_POST['password'] ?? '';
$request_email = $_POST['email'] ?? '';
@@ -114,13 +113,6 @@ if (strlen($request_username) < 3 || strlen($request_username) > 32) {
exit;
}
if (strlen($request_displayname) < 3 || strlen($request_displayname) > 32) {
http_response_code(400);
header('Content-Type: application/json');
die(json_encode(['success' => 'false', 'response' => 'Display Name must be between 3 and 32 characters']));
exit;
}
function generateRandomString($length) {
$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
$randomString = '';
@@ -223,8 +215,8 @@ if ($result->num_rows > 0) {
echo json_encode($response);
}
$stmt = $conn->prepare("INSERT INTO users (username, display_name, password, email, api_key, emailconfirm, register_time) VALUES (?, ?, ?, ?, ?, ?, ?)");
$stmt->bind_param("ssssssi", $request_username, $request_displayname, $hashed_password, $request_email, $api_key, $emailconfirm, time());
$stmt = $conn->prepare("INSERT INTO users (username, password, email, api_key, emailconfirm, register_time) VALUES (?, ?, ?, ?, ?, ?)");
$stmt->bind_param("ssssssi", $request_username, $hashed_password, $request_email, $api_key, $emailconfirm, time());
$stmt->execute();
$response = [
webroot/dashboard/account.php
+3 -14
View File
@@ -16,15 +16,13 @@ if (!checkUserSession($conn)) {
$session = htmlspecialchars($_COOKIE['session']);
$stmt = $conn->prepare("SELECT uid, display_name, username, email, api_key, discord_id, role, discord_avatar FROM users WHERE session = ?");
$stmt = $conn->prepare("SELECT uid, username, email, api_key, discord_id, role, discord_avatar FROM users WHERE session = ?");
$stmt->bind_param("s", $session);
$stmt->execute();
$stmt->bind_result($uid, $displayname, $username, $email, $api_key, $discord_id, $role, $avatar);
$stmt->bind_result($uid, $username, $email, $api_key, $discord_id, $role, $avatar);
$stmt->fetch();
$stmt->close();
$displayname = htmlspecialchars($displayname, ENT_QUOTES, 'UTF-8') ?? $username;
$conn->close();
checkDiscordLink($discord_id);
@@ -69,7 +67,6 @@ $role_format = $role == 1 ? "Owner" : ($role == 2 ? "Admin" : ($role == 0 ? "Use
<div id="account-information" class="section">
<h2>Account Information</h2>
<p id="username"><strong>Username:</strong> <?php echo $username;?></p>
<p id="displayname"><strong>Display Name:</strong> <?php echo $displayname;?></p>
<p><strong>UID:</strong> <?php echo $uid;?></p>
<p><strong>Discord ID:</strong> <?php echo $discord_id;?></p>
<p><strong>Email:</strong> <em class="blur-on-hover"><?php echo $email;?></em></p>
@@ -90,7 +87,7 @@ $role_format = $role == 1 ? "Owner" : ($role == 2 ? "Admin" : ($role == 0 ? "Use
<input type="password" id="oldPassword" placeholder="Old Password">
<input type="password" id="newPassword" placeholder="New Password">
<input type="password" id="confirmPassword" placeholder="Confirm New Password">
<input type="hidden" id="username" value="<?php echo $displayname;?>">
<input type="hidden" id="username" value="<?php echo $username;?>">
<button type="submit">Change Password</button>
</form>
</div>
@@ -105,14 +102,6 @@ $role_format = $role == 1 ? "Owner" : ($role == 2 ? "Admin" : ($role == 0 ? "Use
<input type="password" id="usernamepassword" placeholder="Password">
<button type="submit">Change Username</button>
</form>
<h2>Change Display Name</h2>
<form id="displaynameChangeForm">
<input type="text" id="newDisplayname" placeholder="New Display Name">
<input type="hidden" id="oldDisplayname" value="<?php echo $displayname;?>">
<input type="hidden" id="username" value="<?php echo $username;?>">
<input type="password" id="displayusernamepassword" placeholder="Password">
<button type="submit">Change Display Name</button>
</form>
</div>
<div id="user-settings" class="section half-width">
webroot/dashboard/admin/users.php
-1
View File
@@ -108,7 +108,6 @@ function getRole($role) {
echo "<tr>";
echo "<td>" . (!empty($row['uid']) ? htmlspecialchars($row['uid']) : "N/A") . "</td>";
echo "<td>" . (!empty($row['username']) ? htmlspecialchars($row['username']) : "N/A") . "</td>";
echo "<td>" . (!empty($row['display_name']) ? htmlspecialchars($row['display_name']) : "N/A") . "</td>";
if ($row['role'] != 0 || $role != 1) {
echo "<td>Hidden</td>";
} else {
webroot/dashboard/assets/main.css
+7 -1
View File
@@ -424,11 +424,17 @@ input:checked~.icon-times {
.tool-box {
width: 6.67vw;
height: 6.67vw;
background-color: #333;
background-color: #3c076e;
border-radius: 0.42vw;
padding: 0.26vw;
text-align: center;
margin: 0.26vw;
transition: background-color 0.3s, transform 0.3s;
}
.tool-box:hover {
background-color: #370664;
transform: scale(1.05);
}
.tool-title {
webroot/dashboard/assets/main.js
+1 -37
View File
@@ -141,8 +141,7 @@ document.addEventListener('DOMContentLoaded', (event) => {
element1 = document.getElementById('passwordChangeForm');
element2 = document.getElementById('usernameChangeForm');
element3 = document.getElementById('displaynameChangeForm');
if (element1 && element2 && element3) {
if (element1 && element2) {
$(document).ready(function() {
$('#passwordChangeForm').on('submit', function(e) {
e.preventDefault();
@@ -209,41 +208,6 @@ document.addEventListener('DOMContentLoaded', (event) => {
}
});
});
$('#displaynameChangeForm').on('submit', function(e) {
e.preventDefault();
var oldUsername = $('#oldDisplayname').val();
var newUsername = $('#newDisplayname').val();
var username = $('#username').val();
var password = $('#displayusernamepassword').val();
$.ajax({
url: '/api/changeDisplayname.php',
type: 'POST',
data: {
olddisplayname: oldUsername,
newdisplayname: newUsername,
username: username,
password: password
},
success: function(data) {
response = data;
if (response.success) {
showSuccess(response.response);
$('#oldDisplayname').val(newUsername);
$('#displayname').html('<strong>Username:</strong> ').append(document.createTextNode(newUsername));
} else {
showError(response.response);
}
},
error: function(jqXHR) {
if (jqXHR.responseJSON && jqXHR.responseJSON.response) {
showError(jqXHR.responseJSON.response);
} else {
showError(jqXHR.responseText);
}
}
});
});
});
}
});
webroot/dashboard/index.php
+1 -1
View File
@@ -16,7 +16,7 @@ if (!checkUserSession($conn)) {
$session = htmlspecialchars($_COOKIE['session']);
$stmt = $conn->prepare("SELECT uid, display_name, email, api_key, role, discord_id FROM users WHERE session = ?");
$stmt = $conn->prepare("SELECT uid, username, email, api_key, role, discord_id FROM users WHERE session = ?");
$stmt->bind_param("s", $session);
$stmt->execute();
$stmt->bind_result($uid, $username, $email, $api_key, $role, $discord_id);
webroot/dashboard/register.php
+1 -3
View File
@@ -96,7 +96,6 @@ if (isset($_COOKIE['session'])) {
<p>Please create an account to continue</p>
<form id="loginForm">
<input type="text" id="email" placeholder="Email" required>
<input type="text" id="displayname" placeholder="Display Name (optional)">
<input type="text" id="username" placeholder="Username" required>
<input type="password" id="password" placeholder="Password" required>
<div class="cf-turnstile" data-sitekey="<?= $captcha_sitekey ?>" data-callback="javascriptCallback"></div>
@@ -127,14 +126,13 @@ if (isset($_COOKIE['session'])) {
event.preventDefault();
var email = $('#email').val();
var displayname = $('#displayname').val();
var username = $('#username').val();
var password = $('#password').val();
$.ajax({
type: "POST",
url: '../../api/registerAccount.php',
data: { email: email, displayname: displayname, username: username, password: password, captcha_token: captcha_token },
data: { email: email, username: username, password: password, captcha_token: captcha_token },
success: function (data, textStatus, xhr) {
console.log(data, xhr.status);
try {