cfoe
2012-08-07 759b5e3d3f5a39b5f9748dfd834317cdd3a6e075
interface/web/login/password_reset.php
@@ -52,18 +52,13 @@
   $client = $app->db->queryOneRecord("SELECT * FROM client WHERE username = '$username' AND email = '$email'");
   
   if($client['client_id'] > 0) {
      $new_password = md5 (uniqid (rand()));
      $salt="$1$";
      for ($n=0;$n<11;$n++) {
         $salt.=chr(mt_rand(64,126));
      }
      $salt.="$";
      $new_password_encrypted = crypt($new_password,$salt);
      $new_password = $app->auth->get_random_password();
      $new_password_encrypted = $app->auth->crypt_password($new_password);
      $new_password_encrypted = $app->db->quote($new_password_encrypted);
      
      $username = $app->db->quote($client['username']);
      $app->db->query("UPDATE sys_user SET passwort = '$new_password_encrypted' WHERE username = '$username'");
      $app->db->query("UPDATE client SET ´password´ = '$new_password_encrypted' WHERE username = '$username'");
      $app->db->query("UPDATE client SET password = '$new_password_encrypted' WHERE username = '$username'");
      $app->tpl->setVar("message",$wb['pw_reset']);
      
      mail($client['email'],$wb['pw_reset_mail_title'],$wb['pw_reset_mail_msg'].$new_password);