diff --git a/assets/pasted-20260217-232157-017555a6.png b/assets/pasted-20260217-232157-017555a6.png new file mode 100644 index 0000000..7489531 Binary files /dev/null and b/assets/pasted-20260217-232157-017555a6.png differ diff --git a/assets/pasted-20260217-232953-088c1965.png b/assets/pasted-20260217-232953-088c1965.png new file mode 100644 index 0000000..ee0e85c Binary files /dev/null and b/assets/pasted-20260217-232953-088c1965.png differ diff --git a/auth/register.php b/auth/register.php index c0ba2b4..2feab09 100644 --- a/auth/register.php +++ b/auth/register.php @@ -1,4 +1,7 @@ prepare("INSERT INTO users (username, display_name, email, password_hash) VALUES (?, ?, ?, ?)"); - $stmt->execute([$username, $username, $email, $hash]); - $userId = db()->lastInsertId(); - - // Add to default server - $stmt = db()->prepare("INSERT IGNORE INTO server_members (server_id, user_id) VALUES (1, ?)"); - $stmt->execute([$userId]); + // Strict invite code validation (Private by default) + $requireInvite = true; + if (defined('REQUIRE_INVITE_CODE')) { + $requireInvite = REQUIRE_INVITE_CODE; + } - $_SESSION['user_id'] = $userId; - header('Location: ../index.php'); - exit; - } catch (Exception $e) { - $error = "Registration failed: " . $e->getMessage(); + if ($requireInvite) { + if (empty($inviteCode)) { + $error = "An invitation code is required to register."; + } else { + $stmt = db()->prepare("SELECT id FROM servers WHERE invite_code = ?"); + $stmt->execute([$inviteCode]); + $server = $stmt->fetch(); + if (!$server) { + $error = "Invalid invitation code."; + } + } + } + + if (!$error) { + $hash = password_hash($password, PASSWORD_DEFAULT); + try { + $stmt = db()->prepare("INSERT INTO users (username, display_name, email, password_hash) VALUES (?, ?, ?, ?)"); + $stmt->execute([$username, $username, $email, $hash]); + $userId = db()->lastInsertId(); + + // Add to default server or the one from invite code + $serverId = 1; // Default + if (isset($server) && $server) { + $serverId = $server['id']; + } + + $stmt = db()->prepare("INSERT IGNORE INTO server_members (server_id, user_id) VALUES (?, ?)"); + $stmt->execute([$serverId, $userId]); + + $_SESSION['user_id'] = $userId; + header('Location: ../index.php'); + exit; + } catch (Exception $e) { + $error = "Registration failed: " . $e->getMessage(); + } } } else { $error = "Please fill all fields."; @@ -48,13 +78,20 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') { .auth-footer a { color: #00a8fc; text-decoration: none; } - +

TEST: IF YOU SEE THIS, THE PAGE IS UPDATED

Create an account

+ +
+ +
This application is private. Please enter your code.
+ +
+
@@ -67,7 +104,11 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+ + + +
Version:
Already have an account? Login
diff --git a/db/config.php b/db/config.php index 3876e87..10fb166 100644 --- a/db/config.php +++ b/db/config.php @@ -5,6 +5,9 @@ define('DB_NAME', 'app_38443'); define('DB_USER', 'app_38443'); define('DB_PASS', '888f6481-a87b-421a-a4bd-c80fa3c5a57b'); +// Registration settings +define('REQUIRE_INVITE_CODE', true); // Set to true to make registration private, false for public + function db() { static $pdo; if (!$pdo) { diff --git a/requests.log b/requests.log index c5c7cb6..962edd6 100644 --- a/requests.log +++ b/requests.log @@ -647,3 +647,17 @@ 2026-02-17 19:20:01 - GET /?fl_project=38527 - POST: [] 2026-02-17 20:01:09 - GET / - POST: [] 2026-02-17 20:15:23 - GET /?fl_project=38527 - POST: [] +2026-02-17 20:53:22 - GET / - POST: [] +2026-02-17 23:02:47 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:06:00 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:09:01 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:13:51 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:16:33 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:21:30 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:23:30 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:26:01 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:27:10 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:30:39 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:34:19 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:43:17 - GET /?fl_project=38527 - POST: [] +2026-02-17 23:44:16 - GET /?fl_project=38527 - POST: []