summaryrefslogtreecommitdiffstats
path: root/app
diff options
context:
space:
mode:
authorMalf Furious <m@lfurio.us>2016-05-21 21:44:53 -0400
committerMalf Furious <m@lfurio.us>2016-05-21 21:44:53 -0400
commit32e4e9606fb2ac95b236913fcc0a98a7ee23bccd (patch)
tree2bff633083dd9639b17fdfd2b39f0646c47ee90b /app
parent4778b9dedb1583ba1091da8d55d5ea6bf62f3202 (diff)
downloadscrott-32e4e9606fb2ac95b236913fcc0a98a7ee23bccd.tar.gz
scrott-32e4e9606fb2ac95b236913fcc0a98a7ee23bccd.zip
Add MVC Deleteacct
This will prompt the user for their password if they opt to delete their own account. This is to prevent malicious attempt by others to trick users into having there accounts deleted by way of a XSS attack.
Diffstat (limited to 'app')
-rw-r--r--app/controller/deleteacct.control.php28
-rw-r--r--app/model/deleteacct.mod.php15
-rw-r--r--app/view/deleteacct/default.view.php13
3 files changed, 56 insertions, 0 deletions
diff --git a/app/controller/deleteacct.control.php b/app/controller/deleteacct.control.php
new file mode 100644
index 0000000..176b7bf
--- /dev/null
+++ b/app/controller/deleteacct.control.php
@@ -0,0 +1,28 @@
+<?php
+
+require_once "class/controller.class.php";
+require_once "model/deleteacct.mod.php";
+
+/*
+ * Deleteacct is used to delete user accounts, requiring all requests to
+ * correctly enter the user's password
+ */
+class Deleteacct extends Controller
+{
+ /*
+ * Controller implementation
+ */
+ function handle($argv)
+ {
+ $mod = new DeleteacctModel();
+ $this->action_default($mod);
+ }
+
+ function action_default($mod)
+ {
+ $mod->deflt();
+ include "view/deleteacct/default.view.php";
+ }
+}
+
+?>
diff --git a/app/model/deleteacct.mod.php b/app/model/deleteacct.mod.php
new file mode 100644
index 0000000..ca01a0d
--- /dev/null
+++ b/app/model/deleteacct.mod.php
@@ -0,0 +1,15 @@
+<?php
+
+require_once "model/common.mod.php";
+
+class DeleteacctModel extends CommonModel
+{
+ /*
+ * Default action
+ */
+ function deflt()
+ {
+ }
+}
+
+?>
diff --git a/app/view/deleteacct/default.view.php b/app/view/deleteacct/default.view.php
new file mode 100644
index 0000000..b078861
--- /dev/null
+++ b/app/view/deleteacct/default.view.php
@@ -0,0 +1,13 @@
+<!DOCTYPE html>
+
+<html lang="en">
+ <head>
+ <?php include "view/common/head.view.php"; ?>
+ <title>Scrott - Delete user account</title>
+ </head>
+
+ <body>
+ <?php include "view/common/topp.view.php"; ?>
+ <?php include "view/common/foot.view.php"; ?>
+ </body>
+</html>