ID; $uuid = mysqli_real_escape_string($dbc,$uuid); $firstname = $xml3->FirstName; $firstname = mysqli_real_escape_string($dbc,$firstname); $lastname = $xml3->SurName; $lastname = mysqli_real_escape_string($dbc,$lastname); $nametest = substr($lastname,0,1); $avatarname = $firstname.$lastname; } else { header('Status: 204'); exit(); } $query = "SELECT * FROM $tablename WHERE uuid='$uuid' AND confirmtime IS NOT NULL"; $data = mysqli_query($dbc, $query); if(mysqli_num_rows($data)>0) { if($avatarname=='') { echo '' . '' . 'true' . ''; mysqli_close($dbc); exit(); } else if($nametest == "@") { $row = mysqli_fetch_array($data); if($row['avatarname']=='') { $query2 = "UPDATE $tablename SET avatarname='$avatarname' WHERE id=" . $row['id']; $data2 = mysqli_query($dbc, $query2); } } echo '' . '' . 'true' . ''; mysqli_close($dbc); exit(); } else { // uuid not found $token = substr(hash("sha1", $uuid, false),0,7); $query2 = "SELECT * FROM $tablename WHERE uuid='$uuid' LIMIT 1"; $data2 = mysqli_query($dbc, $query2); if(mysqli_num_rows($data2)==0) { $query3 = "INSERT INTO $tablename (token,uuid) VALUES ('" . $token . "','" . $uuid . "')"; $data3 = mysqli_query($dbc, $query3); } $getstring = base64_url_encode("t=" . $token); $authlink2 = $authlink . "?token=" . $getstring; echo '' . '' . 'false' . ''; mysqli_close($dbc); exit(); } if($nametest != "@") { echo '' . '' . 'true' . ''; mysqli_close($dbc); exit(); } if($nametest != "" ) { echo '' . '' . 'false' . ''; mysqli_close($dbc); exit(); } ?>