gnufm/nixtape/delete-profile.php

<?php

/* GNU FM -- a free network service for sharing your music listening habits

   Copyright (C) 2009 Free Software Foundation, Inc

   This program is free software: you can redistribute it and/or modify
   it under the terms of the GNU Affero General Public License as published by
   the Free Software Foundation, either version 3 of the License, or
   (at your option) any later version.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU Affero General Public License for more details.

   You should have received a copy of the GNU Affero General Public License
   along with this program.  If not, see <http://www.gnu.org/licenses/>.

*/

require_once('templating.php');
require_once('data/User.php');
require_once('utils/random_code_generator.php');

if ($logged_in == false) {
	displayError("Error", "Not logged in. You shouldn't be here.");
} else if (isset($_GET['code'])) {
	$adodb->Execute('DELETE FROM Delete_Request WHERE expires < ' . (int)(time()));

	$username = $this_user->name;
	$code = $_GET['code'];
	try {
		$res = $adodb->GetRow('SELECT * FROM Delete_Request WHERE username = ' . $adodb->qstr($username) . ' AND code = ' . $adodb->qstr($code));
	} catch (Exception $e) {
		exit;
	}
	if (!$res) {
		displayError("Error", "Invalid code.");
	} else {
		try {
			$adodb->Execute('DELETE FROM Scrobble_Sessions WHERE userid = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM Delete_Request WHERE username = ' . $adodb->qstr($username));
			$adodb->Execute('DELETE FROM Auth WHERE username = ' . $adodb->qstr($username));
			$adodb->Execute('DELETE FROM Group_Members WHERE member = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM Radio_Sessions WHERE username = ' . $adodb->qstr($username));
			$adodb->Execute('DELETE FROM Recovery_Request WHERE username = ' . $adodb->qstr($username));
			$adodb->Execute('DELETE FROM Scrobbles WHERE userid = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM User_Relationship_Flags WHERE uid1 = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM User_Relationship_Flags WHERE uid2 = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM User_Relationships WHERE uid1 = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM User_Relationships WHERE uid2 = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM Banned_Tracks WHERE userid = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM Loved_Tracks WHERE userid = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM Service_Connections WHERE userid = ' . $this_user->uniqueid);
			$adodb->Execute('DELETE FROM Users WHERE uniqueid = ' . $this_user->uniqueid);
		} catch (Exception $e) {
			displayError("Error", "Something went amiss.");
		}
		session_destroy();
		$smarty->display('account-deleted.tpl');
	}
} else {
	$code = generateCode();
	$username = $this_user->name;
	$email = $this_user->email;
	$expire = time() + 86400;
	$adodb->Execute('INSERT INTO Delete_Request (code, expires, username) VALUES (' . $adodb->qstr($code) . ', ' . $adodb->qstr($expire) . ',' . $adodb->qstr($username) . ')');
	$url = $base_url . '/delete-profile.php?code=' . $code;
	$content = "Hi!\n\nSomeone from the IP address " . $_SERVER['REMOTE_ADDR'] . " requested account deletion at " . $site_name . ".  To remove this account click: \n\n" . $url . "\n\n- The " . $site_name . " Team";
	$subject = $site_name . ' Account Delete Request - Action needed!';
	mail($email, $subject, $content);
	$smarty->display('delete-profile.tpl');
}