4 function lostpass_post(&$a) {
6 $email = notags(trim($_POST['login-name']));
8 goaway($a->get_baseurl());
10 $r = q("SELECT * FROM `user` WHERE ( `email` = '%s' OR `nickname` = '%s' ) LIMIT 1",
15 goaway($a->get_baseurl());
17 $username = $r[0]['username'];
19 $new_password = autoname(12) . mt_rand(100,9999);
20 $new_password_encoded = hash('whirlpool',$new_password);
22 $r = q("UPDATE `user` SET `pwdreset` = '%s' WHERE `uid` = %d LIMIT 1",
23 dbesc($new_password_encoded),
27 notice("Password reset request issued. Check your email.");
29 $email_tpl = load_view_file("view/lostpass_eml.tpl");
30 $email_tpl = replace_macros($email_tpl, array(
31 '$sitename' => $a->config['sitename'],
32 '$siteurl' => $a->get_baseurl(),
33 '$username' => $username,
35 '$reset_link' => $a->get_baseurl() . '/lostpass?verify=' . $new_password
38 $res = mail($email,"Password reset requested at {$a->config['sitename']}",$email_tpl,"From: Administrator@{$_SERVER[SERVER_NAME]}");
42 goaway($a->get_baseurl());
46 function lostpass_content(&$a) {
49 if(x($_GET,'verify')) {
50 $verify = $_GET['verify'];
51 $hash = hash('whirlpool', $verify);
53 $r = q("SELECT * FROM `user` WHERE `pwdreset` = '%s' LIMIT 1",
57 notice("Request could not be verified. (You may have previously submitted it.) Password reset failed." . EOL);
58 goaway($a->get_baseurl());
62 $username = $r[0]['username'];
63 $email = $r[0]['email'];
65 $new_password = autoname(6) . mt_rand(100,9999);
66 $new_password_encoded = hash('whirlpool',$new_password);
68 $r = q("UPDATE `user` SET `password` = '%s', `pwdreset` = '' WHERE `uid` = %d LIMIT 1",
69 dbesc($new_password_encoded),
73 $tpl = load_view_file('view/pwdreset.tpl');
74 $o .= replace_macros($tpl,array(
75 '$newpass' => $new_password,
76 '$baseurl' => $a->get_baseurl()
78 notice("Your password has been reset." . EOL);
82 $email_tpl = load_view_file("view/passchanged_eml.tpl");
83 $email_tpl = replace_macros($email_tpl, array(
84 '$sitename' => $a->config['sitename'],
85 '$siteurl' => $a->get_baseurl(),
86 '$username' => $username,
88 '$new_password' => $new_password,
91 $res = mail($email,"Your password has changed at {$a->config['sitename']}",$email_tpl,"From: Administrator@{$_SERVER[SERVER_NAME]}");
98 $tpl = load_view_file('view/lostpass.tpl');