redonate/public_html/modules/confirm.php

<?php
/*
 * ReDonate is more free software. It is licensed under the WTFPL, which
 * allows you to do pretty much anything with it, without having to
 * ask permission. Commercial use is allowed, and no attribution is
 * required. We do politely request that you share your modifications
 * to benefit other developers, but you are under no enforced
 * obligation to do so :)
 * 
 * Please read the accompanying LICENSE document for the full WTFPL
 * licensing text.
 */

if(!isset($_APP)) { die("Unauthorized."); }

try
{
	$sSubscription = Subscription::CreateFromQuery("SELECT * FROM subscriptions WHERE `EmailAddress` = :EmailAddress AND `ConfirmationKey` = :ConfirmationKey AND `Confirmed` = 0",
		array(":EmailAddress" => $router->uParameters[1], ":ConfirmationKey" => $router->uParameters[2]), 0, true);
	$sSubscription->uIsConfirmed = true;
	$sSubscription->InsertIntoDatabase();
	
	$sLogEntry = new LogEntry(0);
	$sLogEntry->uType = LogEntry::SUBSCRIPTION_CONFIRMED;
	$sLogEntry->uIp = $_SERVER['REMOTE_ADDR'];
	$sLogEntry->uData = json_encode(array("email" => $router->uParameters[1]));
	$sLogEntry->uCampaignId = $sSubscription->sCampaignId;
	$sLogEntry->uDate = time();
	$sLogEntry->uSessionId = session_id();
	$sLogEntry->InsertIntoDatabase();
	
	flash_notice("Your subscription was successfully confirmed. Welcome on board!");
	redirect("/manage/{$sSubscription->sEmailAddress}/{$sSubscription->sSettingsKey}");
}
catch (NotFoundException $e)
{
	try
	{
		$sUser = User::CreateFromQuery("SELECT * FROM users WHERE `EmailAddress` = :EmailAddress AND `ActivationKey` = :ActivationKey AND `Activated` = 0", 
			array(":EmailAddress" => $router->uParameters[1], ":ActivationKey" => $router->uParameters[2]), 0, true);
		$sUser->uIsActivated = true;
		$sUser->InsertIntoDatabase();
		
		$sUser->Authenticate();
		
		flash_notice("Your account was successfully activated. Welcome on board!");
		redirect("/dashboard");
	}
	catch (NotFoundException $e)
	{
		/* No user or subscription with this e-mail address and verification key exists. Bail out.
		 * We'll throw a RouterException so that we only have to deal with 404s in one place. */
		throw new RouterException("Confirmation key not found.");
	}
}