expvintl
26 lines
904 B
PHP
26 lines
904 B
PHP
<?php
|
|
if(empty($_POST["account_id"])||empty($_POST["upgrade_key"]))
|
|
{
|
|
http_response_code(400);
|
|
exit;
|
|
}
|
|
require "../src/include.php";
|
|
header("Content-Type: text/plain");
|
|
$license_res = $db->query("SELECT `privilege` FROM `accounts` WHERE `id`=? LIMIT 1", "s", $_POST["account_id"]);
|
|
if($license_res)
|
|
{
|
|
$upgrade_res = $db->query("SELECT `key`,`privilege_from`,`privilege_to` FROM `upgrades` WHERE `key`=? AND `used_by`='' LIMIT 1", "s", $_POST["upgrade_key"]);
|
|
if(!$upgrade_res)
|
|
{
|
|
die("invalid_or_used");
|
|
}
|
|
if($upgrade_res[0]["privilege_from"] != $license_res[0]["privilege"])
|
|
{
|
|
die("mismatch");
|
|
}
|
|
|
|
$db->query("UPDATE `upgrades` SET `used_by`=? WHERE `key`=?", "ss", $_POST["account_id"], $upgrade_res[0]["key"]);
|
|
$db->query("UPDATE `accounts` SET `privilege`=? WHERE `id`=?", "is", $upgrade_res[0]["privilege_to"], $_POST["account_id"]);
|
|
die("upgrade ".$upgrade_res[0]["privilege_to"]);
|
|
}
|