phpBB2/includes/usercp_sendpasswd.php

   1 <?php
   2 /***************************************************************************
   3  *                           usercp_sendpasswd.php
   4  *                            -------------------
   5  *   begin                : Saturday, Feb 13, 2001
   6  *   copyright            : (C) 2001 The phpBB Group
   7  *   email                : support@phpbb.com
   8  *
   9  *   $Id: usercp_sendpasswd.php,v 1.6.2.13 2005/09/14 18:14:30 acydburn Exp $
  10  *
  11  *
  12  ***************************************************************************/
  13
  14 /***************************************************************************
  15  *
  16  *   This program is free software; you can redistribute it and/or modify
  17  *   it under the terms of the GNU General Public License as published by
  18  *   the Free Software Foundation; either version 2 of the License, or
  19  *   (at your option) any later version.
  20  *
  21  *
  22  ***************************************************************************/
  23
  24 if ( !defined('IN_PHPBB') )
  25 {
  26         die('Hacking attempt');
  27         exit;
  28 }
  29
  30 if ( isset($HTTP_POST_VARS['submit']) )
  31 {
  32         $username = ( !empty($HTTP_POST_VARS['username']) ) ? phpbb_clean_username($HTTP_POST_VARS['username']) : '';
  33         $email = ( !empty($HTTP_POST_VARS['email']) ) ? trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['email']))) : '';
  34
  35         $sql = "SELECT user_id, username, user_email, user_active, user_lang
  36                 FROM " . USERS_TABLE . "
  37                 WHERE user_email = '" . str_replace("\'", "''", $email) . "'
  38                         AND username = '" . str_replace("\'", "''", $username) . "'";
  39         if ( $result = $db->sql_query($sql) )
  40         {
  41                 if ( $row = $db->sql_fetchrow($result) )
  42                 {
  43                         if ( !$row['user_active'] )
  44                         {
  45                                 message_die(GENERAL_MESSAGE, $lang['No_send_account_inactive']);
  46                         }
  47
  48                         $username = $row['username'];
  49                         $user_id = $row['user_id'];
  50
  51                         $user_actkey = gen_rand_string(true);
  52                         $key_len = 54 - strlen($server_url);
  53                         $key_len = ($key_len > 6) ? $key_len : 6;
  54                         $user_actkey = substr($user_actkey, 0, $key_len);
  55                         $user_password = gen_rand_string(false);
  56
  57                         $sql = "UPDATE " . USERS_TABLE . "
  58                                 SET user_newpasswd = '" . md5($user_password) . "', user_actkey = '$user_actkey'
  59                                 WHERE user_id = " . $row['user_id'];
  60                         if ( !$db->sql_query($sql) )
  61                         {
  62                                 message_die(GENERAL_ERROR, 'Could not update new password information', '', __LINE__, __FILE__, $sql);
  63                         }
  64
  65                         include($phpbb_root_path . 'includes/emailer.'.$phpEx);
  66                         $emailer = new emailer($board_config['smtp_delivery']);
  67
  68                         $emailer->from($board_config['board_email']);
  69                         $emailer->replyto($board_config['board_email']);
  70
  71                         $emailer->use_template('user_activate_passwd', $row['user_lang']);
  72                         $emailer->email_address($row['user_email']);
  73                         $emailer->set_subject($lang['New_password_activation']);
  74
  75                         $emailer->assign_vars(array(
  76                                 'SITENAME' => $board_config['sitename'],
  77                                 'USERNAME' => $username,
  78                                 'PASSWORD' => $user_password,
  79                                 'EMAIL_SIG' => (!empty($board_config['board_email_sig'])) ? str_replace('<br />', "\n", "-- \n" . $board_config['board_email_sig']) : '',
  80
  81                                 'U_ACTIVATE' => $server_url . '?mode=activate&' . POST_USERS_URL . '=' . $user_id . '&act_key=' . $user_actkey)
  82                         );
  83                         $emailer->send();
  84                         $emailer->reset();
  85
  86                         $template->assign_vars(array(
  87                                 'META' => '<meta http-equiv="refresh" content="15;url=' . append_sid("index.$phpEx") . '">')
  88                         );
  89
  90                         $message = $lang['Password_updated'] . '<br /><br />' . sprintf($lang['Click_return_index'],  '<a href="' . append_sid("index.$phpEx") . '">', '</a>');
  91
  92                         message_die(GENERAL_MESSAGE, $message);
  93                 }
  94                 else
  95                 {
  96                         message_die(GENERAL_MESSAGE, $lang['No_email_match']);
  97                 }
  98         }
  99         else
 100         {
 101                 message_die(GENERAL_ERROR, 'Could not obtain user information for sendpassword', '', __LINE__, __FILE__, $sql);
 102         }
 103 }
 104 else
 105 {
 106         $username = '';
 107         $email = '';
 108 }
 109
 110 //
 111 // Output basic page
 112 //
 113 include($phpbb_root_path . 'includes/page_header.'.$phpEx);
 114
 115 $template->set_filenames(array(
 116         'body' => 'profile_send_pass.tpl')
 117 );
 118 make_jumpbox('viewforum.'.$phpEx);
 119
 120 $template->assign_vars(array(
 121         'USERNAME' => $username,
 122         'EMAIL' => $email,
 123
 124         'L_SEND_PASSWORD' => $lang['Send_password'],
 125         'L_ITEMS_REQUIRED' => $lang['Items_required'],
 126         'L_EMAIL_ADDRESS' => $lang['Email_address'],
 127         'L_SUBMIT' => $lang['Submit'],
 128         'L_RESET' => $lang['Reset'],
 129
 130         'S_HIDDEN_FIELDS' => '',
 131         'S_PROFILE_ACTION' => append_sid("profile.$phpEx?mode=sendpassword"))
 132 );
 133
 134 $template->pparse('body');
 135
 136 include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
 137
 138 ?>