52 lines
1.0 KiB
PHP
52 lines
1.0 KiB
PHP
<?php
|
|
// MSIN-4290
|
|
session_start();
|
|
|
|
require_once "php/inc_fonctions.php";
|
|
// 1. Récupération du token
|
|
if (!isset($_GET['t']) || $_GET['t'] == '') {
|
|
die('TOKEN MANQUANT');
|
|
}
|
|
|
|
$strToken = $_GET['t'];
|
|
$strTokenHash = hash('sha256', $strToken);
|
|
|
|
// 2. IP
|
|
$strIp = $_SERVER['REMOTE_ADDR'] ?? '';
|
|
|
|
// 3. Recherche du token
|
|
$sql = "
|
|
SELECT
|
|
id,
|
|
token_hash,
|
|
qr_public_id,
|
|
com_id,
|
|
pec_id,
|
|
pec_id_original,
|
|
ach_id,
|
|
status,
|
|
token_enc
|
|
FROM qr_tokens
|
|
WHERE qr_public_id = '" . $objDatabase->fxEscape($strToken) . "'
|
|
LIMIT 1
|
|
";
|
|
|
|
$tabQr = $objDatabase->fxGetRow($sql);
|
|
|
|
if (!$tabQr) {
|
|
die('TOKEN INVALIDE');
|
|
}
|
|
|
|
// 4. Mise à jour IP + used_at
|
|
$sqlUpdate = "
|
|
UPDATE qr_tokens SET
|
|
adress_ip = '" . $strIp . "',
|
|
used_at = NOW()
|
|
WHERE id = " . intval($tabQr['id'])
|
|
;
|
|
|
|
?>
|
|
<script type="text/javascript">
|
|
document.location.href = '<?php echo $vDomaine . '/compte/mes_commandes?ref=' . base64_encode($tabQr["pec_id_original"]); ?>';
|
|
</script>
|