1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98
|
<?php
require_once('../Connections/conn_i.php');
if (isset($_GET["key"]) && isset($_GET["email"]) && isset($_GET["action"]) && ($_GET["action"]=="reset") && !isset($_POST["action"])){
$key = $_GET["key"];
$email = $_GET["email"];
$curDate = date("Y-m-d H:i:s");
$sel_query = "SELECT * FROM `password_reset_temp` WHERE `key`='".$key."' and `email`='".$email."'";
$query = mysqli_query($conn_i,$sel_query);
$row = mysqli_num_rows($query);
if ($row == ""){
$error .= '<h2>Invalid Link</h2>
<p>The link is invalid/expired. Either you did not copy the correct link from the email,
or you have already used the key in which case it is deactivated.</p>
<p><a href="https://www.test.com/forgot-password/index.php">Click here</a> to reset password.</p>';
} else {
$row = mysqli_fetch_assoc($query);
$expDate = $row['expDate'];
if ($expDate >= $curDate){
?>
<form method="POST" enctype="application/x-www-form-urlencoded" action="" name="update" id="update">
<table width="851" align="center" class="table">
<tr valign="baseline">
<td align="right" nowrap="nowrap" bgcolor="#FFFFFF"><strong>Mot de Passe:</strong></td>
<td bgcolor="#FFFFFF"><span id="sprypassword1">
<input name="pass1" type="password" id="pass1" size="32" />
<span class="passwordRequiredMsg">A value is required.</span><span class="passwordMinCharsMsg">Minimum number of characters not met.</span><span class="passwordInvalidStrengthMsg">The password doesn't meet the specified strength.</span></span></td>
</tr>
<tr valign="baseline">
<td align="right" nowrap="nowrap" bgcolor="#FFFFFF"><strong>Confirmer Mot de Passe:</strong></td>
<td bgcolor="#FFFFFF"><span id="spryconfirm1">
<input name="pass2" type="password" id="pass2" size="32" />
<span class="confirmRequiredMsg">A value is required.</span><span class="confirmInvalidMsg">The values don't match.</span></span></td>
<input type="hidden" name="action" value="update" />
<input type="hidden" name="email" value="<?php echo $email;?>"/>
</tr>
<tr valign="baseline">
<td align="right" nowrap="nowrap" bgcolor="#FFFFFF"> </td>
<td bgcolor="#FFFFFF"><img src="../images/warning.png" width="20" height="20" alt="warning" />Votre mot de passe doit:<br />
- contenir au minimum 8 caractères<br />
- contenir au minimum un chiffre<br />
- contenir au minimum une majuscule<br />
- contenir au minimum un caractère spécial</td>
</tr>
<tr valign="baseline">
<td align="right" nowrap="nowrap"> </td>
<td> </td>
</tr>
<tr valign="baseline">
<td align="right" nowrap="nowrap" bgcolor="#FFFFFF"> </td>
<td bgcolor="#FFFFFF"><input name="reset" id="reset" type="submit" class="button" value="Valider"/></td>
</tr>
</table>
<input type="hidden" name="MM_insert" value="form1" />
</form>
</div>
<p> </p>
<script type="text/javascript">
var sprypassword1 = new Spry.Widget.ValidationPassword("sprypassword1", {minChars:8, minAlphaChars:1, minNumbers:1, minUpperAlphaChars:1, minSpecialChars:1});
var spryconfirm1 = new Spry.Widget.ValidationConfirm("spryconfirm1", "pass1");
</script>
<?php
}else{
$error .= "<h2>Link Expired</h2>
<p>The link is expired. You are trying to use the expired link which as valid only 24 hours (1 days after request).<br /><br /></p>";
}
}
if($error!=""){
echo $error;
}
} // isset email key validate end
if(isset($_POST["email"]) && isset($_POST["action"]) && ($_POST["action"]=="update")){
$error="";
$pass1 = mysqli_real_escape_string($conn_i,$_POST["pass1"]);
$pass2 = mysqli_real_escape_string($conn_i,$_POST["pass2"]);
$email = $_POST["email"];
$curDate = date("Y-m-d H:i:s");
if($error!=""){
echo "<div class='error'>".$error."</div><br />";
}else{
//$pass1 = md5($pass1);
mysqli_query($conn_i,"UPDATE `log_connect` SET `password`='".$pass1."', `today_date`='".$curDate."' WHERE `email`='".$email."';");
mysqli_query($conn_i,"DELETE FROM `password_reset_temp` WHERE `email`='".$email."';");
echo '<div class="error"><p>Congratulations! Your password has been updated successfully.</p>
<p><a href="https://www.test.com/forgot-password/login.php">Click here</a> to Login.</p></div><br />';
}
}
?> |
Partager