سلام
در حال انجام یک پروژه هستم و کمتر وقت می کنم که به انجمن سر بزنم اما جدیداً کمی وقتم آزاد شده می خواهم بجای گشت و گذار در فضای سایبر بیشتر وقت آموزش کنم تا انشاء الله زکات علم خودم را پرداخت کرده باشم.
همانطور که می دانید این آموزش مربوط به خیلی وقت پیش بوده تا حدودی یادم نمیاد چی نوشتم و دقیقاً حضور ذهن ندارم (این هم بخاطر درگیری با زندگی و پروژه جدید و بدی حافظه من در برنامه نویس البته خیلی ها به من شباهت دارند حداقل استثنا نیستم.) و مجبور شدم دوباره آموزش را مطالعه کنم.
در گام سوم توضيح دادم که اگر کاربر ايميل خود را فعال نکرده بود اکانتش فعال نمي شود. حال مي خواهم توضيح بدهم چگونه ايميل را بفرستيم و چطوري فعالش کنيم يا اصلاً چه راه هايي من انتخاب کردم برای فعال سازی اکانت.
اول توضیح بدهم که در این گام کمی کدهای گام سوم را دستکار خواهم کرد یکم با تابع های امنیتی آشنا می شویم، و کمی در مورد تابع ایمیل توضیح خواهم داد.
گام پنجم:
حال به ویرایش گام سوم می پردازیم و کدها را کمی ارتقاء می دهیم. از اینجا به بعد من فقط کدها رو ارتقاء می دهم تا کم کم به سطح امنیتی بالا برسد.
در خط 21 چنین آمده:
echo $msg = "<p class='msg'>Your Account is inactive, First of all reactive your account.</p>";
همانطور که یکی از دوستان اشاره کرد اکانت در هنگام ثبت نام غیر فعال است. حالا اول می خواهیم یک تابع برای کد فعال سازی بسازیم بخاطر همین آمدم در فایل functions.php یک تابع ساختم نام این تابع را mkActivation گذاشتم و کد تابع مانند زیر است:
حالا می خواهیم به دیتابیس یک جدول اضافه کنیم برای فعال سازی.
CREATE TABLE `test`.`users_act` (
`act_id` INT NOT NULL AUTO_INCREMENT PRIMARY KEY ,
`user_id` INT NOT NULL ,
`act_code` CHAR( 32 ) NOT NULL ,
`creation_date` INT NOT NULL
) ENGINE = MYISAM ;
تغییراتی در register.php از خط 28 به بعد دادم لطفا به این تغییرات توجه کنید:
<?php
include('functions.php');
if (isset($_POST['submitted'])){ //check mikone bebine form ersal shode ya na?
$dbc= mysqli_connect('localhost','root','','test');
$error = array(); //arraye khali baraye error misazim
if (!empty($_POST['username'])){ //check mikone bebine username por shode ast ya na?
$u = $_POST['username']; //agar por shode bood dakhele moteghayer rikhte shavad
}else{ //agar por nashode bood...
$error[] = 'You forgot to enter your username'; //payame ro dar arraye error beriz
}
if (!empty($_POST['email'])){ //check mikone bebine email por shode ast ya na?
$e = $_POST['email']; //agar por shode bood dakhele moteghayer rikhte shavad
}else{ //agar por nashode bood...
$error[] = 'You forgot to enter your email'; //payame ro dar arraye error beriz
}
if (!empty($_POST['pass'])){ //check mikone bebine password por shode ast ya na?
$p = $_POST['pass']; //agar por shode bood dakhele moteghayer rikhte shavad
}else{ //agar por nashode bood...
$error[] = 'You forgot to enter your password'; //payame ro dar arraye error beriz
}
if (!empty($_POST['verifypass'])){ //check mikone bebine verify password tayeediye por shode ast ya na?
if($_POST['verifypass']!=$_POST['pass']){ //agar password moshabeh ba verify shodash nabood
$error[] = 'Your both passwords are not matched.'; //khata ro dar error beriz
}
}else{ //agar por nashode bood...
$error[] = 'You forgot to enter your verify Password'; //payame ro dar arraye error beriz
}
if (empty($error)){
$now = time();
$q = "INSERT INTO users (username, email, password, creation_date,status ) VALUES ('$u', '$e', md5('$p'), $now, 0 )";
$r = @mysqli_query($dbc,$q); //Query ra ejra mikonad
$uid = @mysqli_insert_id($dbc); // be dast avardane shomare user_id query bala
$actCode = mkActivation($e); // sakhte yek code fa'al saaziye monhaser befard
$q = "INSERT INTO users_act (user_id, act_code, creation_date ) VALUES ('$uid', '$actCode', $now)";
$r = @mysqli_query($dbc,$q); //Query ra ejra mikonad
if ($r){//agar dorost bood
if(sendVerificationMail($u,$e,$actCode)){
echo $msg = "Registration done successfully. Thank you very much."; //namayeshe successful message.
}else{
echo $msg = "Your account has been created. But an error has been occured that activation link doesn't send."; //namayeshe successful message.ama az be anha gofte mishe email fa'al saazi ersal nashode dobare talash konand.
}
}else{
echo $msg = "<p>An uknown system error is occured. if this error persist please contact admin.</p>"; //namayeshe error message.
}
}else{
echo '<p class="error"> Below errors encounter:<br />';
foreach ($error as $val){//print each error in a new line.
echo " -$val<br/>\n";
}
echo '<br />Please try again</p>';
}
mysqli_close($dbc);
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Submit</title>
</head>
<body>
<form method="POST">
<p>Username:<input type="text" name="username" size="20" /></p>
<p>Email:<input type="text" name="email" size="20" /><br /></p>
<p>Password:<input type="password" name="pass" size="20" /></p>
<p>Verify Password:<input type="password" name="verifypass" size="20" />
<input type="hidden" name="submitted" value="1" />
<p><input type="submit" value="Submit" /></p>
</form>
</body>
</html>
اگر دقت کرده باشید در تغییرات من از یک تابع به نام mkActivation و sendVerificationMail استفاده کردم که این تابع ها را در فایل functions.php اضافه کردم و کدها را در اینجا با توضیح می آورم:
function mkActivation($string=""){ // be soorate kamelan ebtekari man oomadam ye tabe sakhtam ke baraye shoma ye activation code besaze
$key = array ('Q','q','W','w','r','R','T','t','z','Z','1','3',' 2','@','-','_','!'); //16ta charachter ro be soorate random entekhab kardam mitunid in ro bast bedid va tedad characterasho bishtar konid.
$randomString = NULL;
for($i=0;$i<5;$i++){ //mikhaym ba ye halghe ye reshteye random az characterhaye bala dorost konim kare kheyli asooniye man toole reshtero hamooontor ke mibinid 5 entekhab kardam
$rnd = rand(0,16); //in tabe karash sakhte adade random ast va hamoontor ke inja mibinid man be tabe goftam adadi beyne 0 ta 16 (bar migarde be tedade characterha dar moteghayere $key) behemoon bargarde.
$randomString .= $key[$rnd]; //dar inja oon adade moteghayero gozashtam too $key farzan $key['3'] baraye ma W ro bar migardoone.
}
return md5($string.$key[$rnd]);
}
function mkurl($dir){ //in tabe gharar ast ke url filetoon ro bargardoone ke shoma harbar lazem nabashe esme sitetoon ro dar script taghir bedahid.
define('DS',DIRECTORY_SEPARATOR); //in tabe ba tavajoh be system ameletoon slash joda konande ro vared mikonad baraye windows farzan 'home\land.php' baraye linux 'home/land.php' ama windows har do halat ro support mikonad banabarin mitavan faghat az forward slash estefade kard
$rootDir= dirname($_SERVER['REQUEST_URI']); //in file directory asliye function.php ro bar migardoone ke farzan agar localhost/test/function.php bashe faghat localhost/test ro bar khahad gardoond ama agar localhost bashe \ ya / barkhahad gardoond banabarin ba yek if slash e ezafi ra pak khaham kard.
if (substr(dirname($_SERVER['REQUEST_URI']),-1)==DS){
$url="http://".$_SERVER['HTTP_HOST'].'/'.$dir;
return $url; //dar akhar farzan agar $dir ke voroodiye in tabe hast index.php bashad, khorooji: localhost/index.php
}else{
$url="http://".$_SERVER['HTTP_HOST'].$rootDir.'/'.$dir;
return $url; //dar akhar farzan agar $dir ke voroodiye in tabe hast index.php bashad, khorooji: localhost/test/index.php farghe in ba balayee dashtane yek foldere ezafe dar url sitetoon hast.
}
}
function sendVerificationMail($username,$email,$act_code){
$act_addss = mkurl('activate.php'); //farzan baraye man http://localhost/login/actiavte.php ro bargardoond.
$link = $act_addss.'?mail='.$email.'&act_code='.$act_code; //be moteghayere act_address ke haviye yek addresse yek parametre get miferestim ke haviye activation code hast. ke ghalebash mesle rooberoost : localhost/login/activate.php?mail=pejman@yahoo.com&act_code=xyz123123123zfd
$subject = "Activating Account"; //in onvane name ast.
$body= "Hello {$username},<br />
I would like to inform your registration was completed successfully.
Just click on Your Activation link is below to Activate your account in order to use my website:<br />
<a href='{$link}'>$link</a>
"; //in ham matne name name ast.
$headers = "MIME-Version: 1.0\n";
$headers .= "Content-type: text/html; charset=utf-8\n";
$headers .= "X-Priority: 3\n";
$headers .= "X-MSMail-Priority: Normal\n";
$headers .= "X-Mailer: php\n";
$headers .= "From: \"EMAIL\" <noreply@{$_SERVER['HTTP_HOST']}>\n";
$headers .= "Return-Path: noreply@{$_SERVER['HTTP_HOST']}\n";
$headers .= "Return-Receipt-To: noreply@{$_SERVER['HTTP_HOST']}\n"; //in header, codehaye standardi hastan ke behtar ast dar balaye emaile khod begozarid ke be mail service provider begid ke bale in emaile ma farzan encoding utf-8 dare agar khast reply kone be folan email reply kone va ...
return mail($email,$subject,$body,$headers);//hamoontor ke mibinid be tartib emaile mokhatab, onvane email, matne email, va header ha ro vared mikonid (header be soorate ekhtiyariye), va dar natije TRUE ya FALSE bar migardanad!
}
خوب ببخشید بعلت ضیق وقت دیگر در توانم نیست بیشتر از این، این گام را توضیح بدهم اما این گام ادامه دارد. تا اینجا فقط ایمیل فعال سازی را فرستادیم با تابع ایمیل و نحوه ساخت یک کد امنیتی و روش آدرس دهی آشنا شدید. در نوشته بعدی که امیدوارم طی امروز و فردا آماده شود. می خواهیم نحوه فعال سازی از طریق لینک، و ارسال دوباره کد فعال سازی را یاد بگیریم.
در اینجا کدهای فایل ها خودم را بصورت HTML می گذارم که بتوانید راحت کپی و پیست کنید:
فایل register.php :
<?php
include('functions.php');
if (isset($_POST['submitted'])){ //check mikone bebine form ersal shode ya na?
$dbc= mysqli_connect('localhost','root','','test');
$error = array(); //arraye khali baraye error misazim
if (!empty($_POST['username'])){ //check mikone bebine username por shode ast ya na?
$u = $_POST['username']; //agar por shode bood dakhele moteghayer rikhte shavad
}else{ //agar por nashode bood...
$error[] = 'You forgot to enter your username'; //payame ro dar arraye error beriz
}
if (!empty($_POST['email'])){ //check mikone bebine email por shode ast ya na?
$e = $_POST['email']; //agar por shode bood dakhele moteghayer rikhte shavad
}else{ //agar por nashode bood...
$error[] = 'You forgot to enter your email'; //payame ro dar arraye error beriz
}
if (!empty($_POST['pass'])){ //check mikone bebine password por shode ast ya na?
$p = $_POST['pass']; //agar por shode bood dakhele moteghayer rikhte shavad
}else{ //agar por nashode bood...
$error[] = 'You forgot to enter your password'; //payame ro dar arraye error beriz
}
if (!empty($_POST['verifypass'])){ //check mikone bebine verify password tayeediye por shode ast ya na?
if($_POST['verifypass']!=$_POST['pass']){ //agar password moshabeh ba verify shodash nabood
$error[] = 'Your both passwords are not matched.'; //khata ro dar error beriz
}
}else{ //agar por nashode bood...
$error[] = 'You forgot to enter your verify Password'; //payame ro dar arraye error beriz
}
if (empty($error)){
$now = time();
$q = "INSERT INTO users (username, email, password, creation_date,status ) VALUES ('$u', '$e', md5('$p'), $now, 0 )";
$r = @mysqli_query($dbc,$q); //Query ra ejra mikonad
$uid = @mysqli_insert_id($dbc); // be dast avardane shomare user_id query bala
$actCode = mkActivation($e); // sakhte yek code fa'al saaziye monhaser befard
$q = "INSERT INTO users_act (user_id, act_code, creation_date ) VALUES ('$uid', '$actCode', $now)";
$r = @mysqli_query($dbc,$q); //Query ra ejra mikonad
if ($r){//agar dorost bood
if(sendVerificationMail($u,$e,$actCode)){
echo $msg = "Registration done successfully. Thank you very much."; //namayeshe successful message.
}else{
echo $msg = "Your account has been created. But an error has been occured that activation link doesn't send."; //namayeshe successful message.ama az be anha gofte mishe email fa'al saazi ersal nashode dobare talash konand.
}
}else{
echo $msg = "<p>An uknown system error is occured. if this error persist please contact admin.</p>"; //namayeshe error message.
}
}else{
echo '<p class="error"> Below errors encounter:<br />';
foreach ($error as $val){//print each error in a new line.
echo " -$val<br/>\n";
}
echo '<br />Please try again</p>';
}
mysqli_close($dbc);
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Submit</title>
</head>
<body>
<form method="POST">
<p>Username:<input type="text" name="username" size="20" /></p>
<p>Email:<input type="text" name="email" size="20" /><br /></p>
<p>Password:<input type="password" name="pass" size="20" /></p>
<p>Verify Password:<input type="password" name="verifypass" size="20" />
<input type="hidden" name="submitted" value="1" />
<p><input type="submit" value="Submit" /></p>
</form>
</body>
</html>
فایل functions.php:
function mkActivation($string=""){ // be soorate kamelan ebtekari man oomadam ye tabe sakhtam ke baraye shoma ye activation code besaze
$key = array ('Q','q','W','w','r','R','T','t','z','Z','1','3',' 2','@','-','_','!'); //16ta charachter ro be soorate random entekhab kardam mitunid in ro bast bedid va tedad characterasho bishtar konid.
$randomString = NULL;
for($i=0;$i<5;$i++){ //mikhaym ba ye halghe ye reshteye random az characterhaye bala dorost konim kare kheyli asooniye man toole reshtero hamooontor ke mibinid 5 entekhab kardam
$rnd = rand(0,16); //in tabe karash sakhte adade random ast va hamoontor ke inja mibinid man be tabe goftam adadi beyne 0 ta 16 (bar migarde be tedade characterha dar moteghayere $key) behemoon bargarde.
$randomString .= $key[$rnd]; //dar inja oon adade moteghayero gozashtam too $key farzan $key['3'] baraye ma W ro bar migardoone.
}
return md5($string.$key[$rnd]);
}
function mkurl($dir){ //in tabe gharar ast ke url filetoon ro bargardoone ke shoma harbar lazem nabashe esme sitetoon ro dar script taghir bedahid.
define('DS',DIRECTORY_SEPARATOR); //in tabe ba tavajoh be system ameletoon slash joda konande ro vared mikonad baraye windows farzan 'home\land.php' baraye linux 'home/land.php' ama windows har do halat ro support mikonad banabarin mitavan faghat az forward slash estefade kard
$rootDir= dirname($_SERVER['REQUEST_URI']); //in file directory asliye function.php ro bar migardoone ke farzan agar localhost/test/function.php bashe faghat localhost/test ro bar khahad gardoond ama agar localhost bashe \ ya / barkhahad gardoond banabarin ba yek if slash e ezafi ra pak khaham kard.
if (substr(dirname($_SERVER['REQUEST_URI']),-1)==DS){
$url="http://".$_SERVER['HTTP_HOST'].'/'.$dir;
return $url; //dar akhar farzan agar $dir ke voroodiye in tabe hast index.php bashad, khorooji: localhost/index.php
}else{
$url="http://".$_SERVER['HTTP_HOST'].$rootDir.'/'.$dir;
return $url; //dar akhar farzan agar $dir ke voroodiye in tabe hast index.php bashad, khorooji: localhost/test/index.php farghe in ba balayee dashtane yek foldere ezafe dar url sitetoon hast.
}
}
function sendVerificationMail($username,$email,$act_code){
$act_addss = mkurl('activate.php'); //farzan baraye man http://localhost/login/actiavte.php ro bargardoond.
$link = $act_addss.'?mail='.$email.'&act_code='.$act_code; //be moteghayere act_address ke haviye yek addresse yek parametre get miferestim ke haviye activation code hast. ke ghalebash mesle rooberoost : localhost/login/activate.php?mail=pejman@yahoo.com&act_code=xyz123123123zfd
$subject = "Activating Account"; //in onvane name ast.
$body= "Hello {$username},<br />
I would like to inform your registration was completed successfully.
Just click on Your Activation link is below to Activate your account in order to use my website:<br />
<a href='{$link}'>$link</a>
"; //in ham matne name name ast.
$headers = "MIME-Version: 1.0\n";
$headers .= "Content-type: text/html; charset=utf-8\n";
$headers .= "X-Priority: 3\n";
$headers .= "X-MSMail-Priority: Normal\n";
$headers .= "X-Mailer: php\n";
$headers .= "From: \"EMAIL\" <noreply@{$_SERVER['HTTP_HOST']}>\n";
$headers .= "Return-Path: noreply@{$_SERVER['HTTP_HOST']}\n";
$headers .= "Return-Receipt-To: noreply@{$_SERVER['HTTP_HOST']}\n"; //in header, codehaye standardi hastan ke behtar ast dar balaye emaile khod begozarid ke be mail service provider begid ke bale in emaile ma farzan encoding utf-8 dare agar khast reply kone be folan email reply kone va ...
return mail($email,$subject,$body,$headers);//hamoontor ke mibinid be tartib emaile mokhatab, onvane email, matne email, va header ha ro vared mikonid (header be soorate ekhtiyariye), va dar natije TRUE ya FALSE bar migardanad!
}
با آرزوی موفقیت