Function checkPwAndActivationCode

scripts/Server/helpers.php:39–60

($db, $userName, $pw, $activationCode)

    }

    function checkPwAndActivationCode($db, $userName, $pw, $activationCode)
    {
        $success = false;

        if ($response = $db->query(
            "SELECT 
                u.PW_HASH as pwHash,
                u.SALT as salt,
                u.ACTIVATION_CODE as activationCode
            FROM user u
            WHERE u.NAME='".addslashes($userName)."'")) {

            $obj = $response->fetch_object();
            if (!$obj) {
                return false;
            }
            $pwHash = hash("sha256", $pw . $obj->salt);

            return $pwHash == $obj->pwHash && $obj->activationCode == $activationCode;
        }
        return false;
    }
?>