FaceMagazine/fbl_common.php at master · Montandalar/FaceMagazine · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
<?php
require_once "vendor/autoload.php";

function commonHeader($pageName) {
    echo <<<EOT
    <!DOCTYPE html>
    <html>
    <head>
    <title>FaceMagazine - $pageName</title>
    <link rel="stylesheet" type="text/css" href="styles.css" media="screen">
    </head>
EOT;
}

function formLayout($fields) {
    foreach ($fields as $field) {
        foreach (["name", "friendly", "type", "required", "value"] as $key) {
            if (!array_key_exists($key, $field)) {
                $field[$key] = "";
            }
        }
        echo <<<EOT
<div>
  <label class="formLabel" for="$field[name]">$field[friendly]</label>
  <input type="$field[type]" name="$field[name]" value="$field[value]" required="$field[required]"/>
</div>

EOT;
    }
}

function db_connect(&$client) {
    $client = new MongoDB\Client("mongodb://localhost:27017");
}

function make_password($plaintext) {
    $salt = openssl_random_pseudo_bytes(8);
    $digest = openssl_digest($plaintext . $salt, "SHA256", TRUE);

    return [bin2hex($salt), bin2hex($digest)];
}

function check_password($plaintext, $salt, $digest) {
    $newdigest = openssl_digest($plaintext . $salt, "SHA256", TRUE);
    return $digest == $newdigest; // subject to timing attack - better to use
                                  //constant-time comparison
}

function add_user($client, $email, $fname, $scrname,
        $dob, $gender, $vis, $pw, $salt, $status, $location)
{
    $collection = $client->fbl->Members;
    print("collection=$collection");

    $result = $collection->insertOne([
        '_id' => $email,
        'full_name' => $fname,
        'screen_name' => $scrname,
        'date_of_birth' => $dob,
        'gender' => $gender,
        'visibility' => $vis,
        'password_sum' => $pw,
        'password_salt' => $salt,
        'status' => $status,
        'location' => $location
    ]);

}
?>