From 32e4e9606fb2ac95b236913fcc0a98a7ee23bccd Mon Sep 17 00:00:00 2001
From: Malf Furious <m@lfurio.us>
Date: Sat, 21 May 2016 21:44:53 -0400
Subject: Add MVC Deleteacct

This will prompt the user for their password if they opt to delete their
own account.  This is to prevent malicious attempt by others to trick
users into having there accounts deleted by way of a XSS attack.
---
 app/controller/deleteacct.control.php | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 app/controller/deleteacct.control.php

(limited to 'app/controller/deleteacct.control.php')

diff --git a/app/controller/deleteacct.control.php b/app/controller/deleteacct.control.php
new file mode 100644
index 0000000..176b7bf
--- /dev/null
+++ b/app/controller/deleteacct.control.php
@@ -0,0 +1,28 @@
+<?php
+
+require_once "class/controller.class.php";
+require_once "model/deleteacct.mod.php";
+
+/*
+ * Deleteacct is used to delete user accounts, requiring all requests to
+ * correctly enter the user's password
+ */
+class Deleteacct extends Controller
+{
+    /*
+     * Controller implementation
+     */
+    function handle($argv)
+    {
+        $mod = new DeleteacctModel();
+        $this->action_default($mod);
+    }
+
+    function action_default($mod)
+    {
+        $mod->deflt();
+        include "view/deleteacct/default.view.php";
+    }
+}
+
+?>
-- 
cgit v1.2.3