[Summary view] [Print] [Text view]

   1  <?php
   2  /***************************************************************************
   3   *                           usercp_sendpasswd.php
   4   *                            -------------------
   5   *   begin                : Saturday, Feb 13, 2001
   6   *   copyright            : (C) 2001 The phpBB Group
   7   *   email                : support@phpbb.com
   8   *
   9   *   $Id: usercp_sendpasswd.php 5204 2005-09-14 18:14:30Z acydburn $
  10   *
  11   *
  12   ***************************************************************************/
  13  
  14  /***************************************************************************
  15   *
  16   *   This program is free software; you can redistribute it and/or modify
  17   *   it under the terms of the GNU General Public License as published by
  18   *   the Free Software Foundation; either version 2 of the License, or
  19   *   (at your option) any later version.
  20   *
  21   *
  22   ***************************************************************************/
  23  
  24  if ( !defined('IN_PHPBB') )
  25  {
  26      die('Hacking attempt');
  27      exit;
  28  }
  29  
  30  if ( isset($HTTP_POST_VARS['submit']) )
  31  {
  32      $username = ( !empty($HTTP_POST_VARS['username']) ) ? phpbb_clean_username($HTTP_POST_VARS['username']) : '';
  33      $email = ( !empty($HTTP_POST_VARS['email']) ) ? trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['email']))) : '';
  34  
  35      $sql = "SELECT user_id, username, user_email, user_active, user_lang 
  36          FROM " . USERS_TABLE . " 
  37          WHERE user_email = '" . str_replace("\'", "''", $email) . "' 
  38              AND username = '" . str_replace("\'", "''", $username) . "'";
  39      if ( $result = $db->sql_query($sql) )
  40      {
  41          if ( $row = $db->sql_fetchrow($result) )
  42          {
  43              if ( !$row['user_active'] )
  44              {
  45                  message_die(GENERAL_MESSAGE, $lang['No_send_account_inactive']);
  46              }
  47  
  48              $username = $row['username'];
  49              $user_id = $row['user_id'];
  50  
  51              $user_actkey = gen_rand_string(true);
  52              $key_len = 54 - strlen($server_url);
  53              $key_len = ($key_len > 6) ? $key_len : 6;
  54              $user_actkey = substr($user_actkey, 0, $key_len);
  55              $user_password = gen_rand_string(false);
  56              
  57              $sql = "UPDATE " . USERS_TABLE . " 
  58                  SET user_newpasswd = '" . md5($user_password) . "', user_actkey = '$user_actkey'  
  59                  WHERE user_id = " . $row['user_id'];
  60              if ( !$db->sql_query($sql) )
  61              {
  62                  message_die(GENERAL_ERROR, 'Could not update new password information', '', __LINE__, __FILE__, $sql);
  63              }
  64  
  65              include($phpbb_root_path . 'includes/emailer.'.$phpEx);
  66              $emailer = new emailer($board_config['smtp_delivery']);
  67  
  68              $emailer->from($board_config['board_email']);
  69              $emailer->replyto($board_config['board_email']);
  70  
  71              $emailer->use_template('user_activate_passwd', $row['user_lang']);
  72              $emailer->email_address($row['user_email']);
  73              $emailer->set_subject($lang['New_password_activation']);
  74  
  75              $emailer->assign_vars(array(
  76                  'SITENAME' => $board_config['sitename'], 
  77                  'USERNAME' => $username,
  78                  'PASSWORD' => $user_password,
  79                  'EMAIL_SIG' => (!empty($board_config['board_email_sig'])) ? str_replace('<br />', "\n", "-- \n" . $board_config['board_email_sig']) : '', 
  80  
  81                  'U_ACTIVATE' => $server_url . '?mode=activate&' . POST_USERS_URL . '=' . $user_id . '&act_key=' . $user_actkey)
  82              );
  83              $emailer->send();
  84              $emailer->reset();
  85  
  86              $template->assign_vars(array(
  87                  'META' => '<meta http-equiv="refresh" content="15;url=' . append_sid("index.$phpEx") . '">')
  88              );
  89  
  90              $message = $lang['Password_updated'] . '<br /><br />' . sprintf($lang['Click_return_index'],  '<a href="' . append_sid("index.$phpEx") . '">', '</a>');
  91  
  92              message_die(GENERAL_MESSAGE, $message);
  93          }
  94          else
  95          {
  96              message_die(GENERAL_MESSAGE, $lang['No_email_match']);
  97          }
  98      }
  99      else
 100      {
 101          message_die(GENERAL_ERROR, 'Could not obtain user information for sendpassword', '', __LINE__, __FILE__, $sql);
 102      }
 103  }
 104  else
 105  {
 106      $username = '';
 107      $email = '';
 108  }
 109  
 110  //
 111  // Output basic page
 112  //
 113  include($phpbb_root_path . 'includes/page_header.'.$phpEx);
 114  
 115  $template->set_filenames(array(
 116      'body' => 'profile_send_pass.tpl')
 117  );
 118  make_jumpbox('viewforum.'.$phpEx);
 119  
 120  $template->assign_vars(array(
 121      'USERNAME' => $username,
 122      'EMAIL' => $email,
 123  
 124      'L_SEND_PASSWORD' => $lang['Send_password'], 
 125      'L_ITEMS_REQUIRED' => $lang['Items_required'],
 126      'L_EMAIL_ADDRESS' => $lang['Email_address'],
 127      'L_SUBMIT' => $lang['Submit'],
 128      'L_RESET' => $lang['Reset'],
 129      
 130      'S_HIDDEN_FIELDS' => '', 
 131      'S_PROFILE_ACTION' => append_sid("profile.$phpEx?mode=sendpassword"))
 132  );
 133  
 134  $template->pparse('body');
 135  
 136  include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
 137  
 138  ?>