- Added (clickable) placeholders to client messaging function. - Added chec...

ftimme

2012-05-30 2cb1563f63386b35a69e460051aa9b4a2851d104

 interface/web/login/password_reset.php

@@ -43,21 +43,28 @@

if(isset($_POST['username']) && $_POST['username'] != '' && $_POST['email'] != '' && $_POST['username'] != 'admin') {
   
   if(!preg_match("/^[\w\.\-\_]{1,64}$/", $_POST['username'])) die($app->lng('user_regex_error'));
   if(!preg_match("/^\w+[\w.-]*\w+@\w+[\w.-]*\w+\.[a-z]{2,10}$/i", $_POST['email'])) die($app->lng('email_error'));
	
   $username = $app->db->quote($_POST['username']);
   $email = $app->db->quote($_POST['email']);
   
   $client = $app->db->queryOneRecord("SELECT * FROM client WHERE username = '$username' && email = '$email'");
   $client = $app->db->queryOneRecord("SELECT * FROM client WHERE username = '$username' AND email = '$email'");
   
   if($client['client_id'] > 0) {
      $new_password = md5 (uniqid (rand()));
      $new_password = $app->db->quote($new_password);
      $new_password = $app->auth->get_random_password();
      $new_password_encrypted = $app->auth->crypt_password($new_password);
      $new_password_encrypted = $app->db->quote($new_password_encrypted);
		
      $username = $app->db->quote($client['username']);
      $app->db->query("UPDATE sys_user SET passwort = md5('$new_password') WHERE username = '$username'");
      $app->db->query("UPDATE client SET ´password´ = md5('$new_password') WHERE username = '$username'");
      $app->db->query("UPDATE sys_user SET passwort = '$new_password_encrypted' WHERE username = '$username'");
      $app->db->query("UPDATE client SET ´password´ = '$new_password_encrypted' WHERE username = '$username'");
      $app->tpl->setVar("message",$wb['pw_reset']);
      
      mail($client['email'],$wb['pw_reset_mail_title'],$wb['pw_reset_mail_msg'].$new_password);
      
      $app->plugin->raiseEvent('password_reset',true);
		
   } else {
      $app->tpl->setVar("message",$wb['pw_error']);
   }