diff options
author | Malf Furious <m@lfurio.us> | 2016-05-21 21:44:53 -0400 |
---|---|---|
committer | Malf Furious <m@lfurio.us> | 2016-05-21 21:44:53 -0400 |
commit | 32e4e9606fb2ac95b236913fcc0a98a7ee23bccd (patch) | |
tree | 2bff633083dd9639b17fdfd2b39f0646c47ee90b /app | |
parent | 4778b9dedb1583ba1091da8d55d5ea6bf62f3202 (diff) | |
download | scrott-32e4e9606fb2ac95b236913fcc0a98a7ee23bccd.tar.gz scrott-32e4e9606fb2ac95b236913fcc0a98a7ee23bccd.zip |
Add MVC Deleteacct
This will prompt the user for their password if they opt to delete their
own account. This is to prevent malicious attempt by others to trick
users into having there accounts deleted by way of a XSS attack.
Diffstat (limited to 'app')
-rw-r--r-- | app/controller/deleteacct.control.php | 28 | ||||
-rw-r--r-- | app/model/deleteacct.mod.php | 15 | ||||
-rw-r--r-- | app/view/deleteacct/default.view.php | 13 |
3 files changed, 56 insertions, 0 deletions
diff --git a/app/controller/deleteacct.control.php b/app/controller/deleteacct.control.php new file mode 100644 index 0000000..176b7bf --- /dev/null +++ b/app/controller/deleteacct.control.php @@ -0,0 +1,28 @@ +<?php + +require_once "class/controller.class.php"; +require_once "model/deleteacct.mod.php"; + +/* + * Deleteacct is used to delete user accounts, requiring all requests to + * correctly enter the user's password + */ +class Deleteacct extends Controller +{ + /* + * Controller implementation + */ + function handle($argv) + { + $mod = new DeleteacctModel(); + $this->action_default($mod); + } + + function action_default($mod) + { + $mod->deflt(); + include "view/deleteacct/default.view.php"; + } +} + +?> diff --git a/app/model/deleteacct.mod.php b/app/model/deleteacct.mod.php new file mode 100644 index 0000000..ca01a0d --- /dev/null +++ b/app/model/deleteacct.mod.php @@ -0,0 +1,15 @@ +<?php + +require_once "model/common.mod.php"; + +class DeleteacctModel extends CommonModel +{ + /* + * Default action + */ + function deflt() + { + } +} + +?> diff --git a/app/view/deleteacct/default.view.php b/app/view/deleteacct/default.view.php new file mode 100644 index 0000000..b078861 --- /dev/null +++ b/app/view/deleteacct/default.view.php @@ -0,0 +1,13 @@ +<!DOCTYPE html> + +<html lang="en"> + <head> + <?php include "view/common/head.view.php"; ?> + <title>Scrott - Delete user account</title> + </head> + + <body> + <?php include "view/common/topp.view.php"; ?> + <?php include "view/common/foot.view.php"; ?> + </body> +</html> |