Merge pull request #6137 from Alkarex/WebSub_fixes

[friendica.git] / mod / lostpass.php

diff --git a/mod/lostpass.php b/mod/lostpass.php
index ae94fbbbea72a4c7ed6437cf81a50bdbc3f0776e..42a1764bf93a4561cbcb7e1d266b31fa858d0314 100644 (file)
--- a/mod/lostpass.php
+++ b/mod/lostpass.php
@@ -11,6 +11,7 @@ use Friendica\Core\System;
 use Friendica\Database\DBA;
 use Friendica\Model\User;
 use Friendica\Util\DateTimeFormat;
+use Friendica\Util\Strings;
 
 require_once 'boot.php';
 require_once 'include/enotify.php';
@@ -18,7 +19,7 @@ require_once 'include/text.php';
 
 function lostpass_post(App $a)
 {
-       $loginame = notags(trim($_POST['login-name']));
+       $loginame = Strings::escapeTags(trim($_POST['login-name']));
        if (!$loginame) {
                $a->internalRedirect();
        }
@@ -30,7 +31,7 @@ function lostpass_post(App $a)
                $a->internalRedirect();
        }
 
-       $pwdreset_token = autoname(12) . mt_rand(1000, 9999);
+       $pwdreset_token = Strings::getRandomName(12) . mt_rand(1000, 9999);
 
        $fields = [
                'pwdreset' => $pwdreset_token,
@@ -44,7 +45,7 @@ function lostpass_post(App $a)
        $sitename = Config::get('config', 'sitename');
        $resetlink = System::baseUrl() . '/lostpass/' . $pwdreset_token;
 
-       $preamble = deindent(L10n::t('
+       $preamble = Strings::deindent(L10n::t('
                Dear %1$s,
                        A request was recently received at "%2$s" to reset your account
                password. In order to confirm this request, please select the verification link
@@ -55,7 +56,7 @@ function lostpass_post(App $a)
 
                Your password will not be changed unless we can verify that you
                issued this request.', $user['username'], $sitename));
-       $body = deindent(L10n::t('
+       $body = Strings::deindent(L10n::t('
                Follow this link soon to verify your identity:
 
                %1$s
@@ -150,13 +151,13 @@ function lostpass_generate_password($user)
                info("Your password has been reset." . EOL);
 
                $sitename = Config::get('config', 'sitename');
-               $preamble = deindent(L10n::t('
+               $preamble = Strings::deindent(L10n::t('
                        Dear %1$s,
                                Your password has been changed as requested. Please retain this
                        information for your records ' . "\x28" . 'or change your password immediately to
                        something that you will remember' . "\x29" . '.
                ', $user['username']));
-               $body = deindent(L10n::t('
+               $body = Strings::deindent(L10n::t('
                        Your login details are as follows:
 
                        Site Location:  %1$s