user password recovery
Philip Häusler
11 years ago
parent
3cc147d235
commit
0c98f13eee
@ -0,0 +1,84 @@
|
||||
<?php
|
||||
|
||||
/**
|
||||
* User password recovery. (By email)
|
||||
*/
|
||||
function user_password_recovery_controller() {
|
||||
if (isset($_REQUEST['token'])) {
|
||||
$user_source = User_by_password_recovery_token($_REQUEST['token']);
|
||||
if ($user_source === false)
|
||||
engelsystem_error("Unable to load user.");
|
||||
if ($user_source == null) {
|
||||
error(_("Token is not correct."));
|
||||
redirect(page_link_to('login'));
|
||||
}
|
||||
|
||||
if (isset($_REQUEST['submit'])) {
|
||||
$ok = true;
|
||||
|
||||
if (isset($_REQUEST['password']) && strlen($_REQUEST['password']) >= MIN_PASSWORD_LENGTH) {
|
||||
if ($_REQUEST['password'] != $_REQUEST['password2']) {
|
||||
$ok = false;
|
||||
error(_("Your passwords don't match."));
|
||||
}
|
||||
} else {
|
||||
$ok = false;
|
||||
error(_("Your password is to short (please use at least 6 characters)."));
|
||||
}
|
||||
|
||||
if ($ok) {
|
||||
$result = set_password($user_source['UID'], $_REQUEST['password']);
|
||||
if ($result === false)
|
||||
engelsystem_error(_("Password could not be updated."));
|
||||
|
||||
success(_("Password saved."));
|
||||
redirect(page_link_to('login'));
|
||||
}
|
||||
}
|
||||
|
||||
return User_password_set_view();
|
||||
} else {
|
||||
if (isset($_REQUEST['submit'])) {
|
||||
$ok = true;
|
||||
|
||||
if (isset($_REQUEST['email']) && strlen(strip_request_item('email')) > 0) {
|
||||
$email = strip_request_item('email');
|
||||
if (check_email($email)) {
|
||||
$user_source = User_by_email($email);
|
||||
if ($user_source === false)
|
||||
engelsystem_error("Unable to load user.");
|
||||
if ($user_source == null) {
|
||||
$ok = false;
|
||||
$msg .= error(_("E-mail address is not correct."), true);
|
||||
}
|
||||
} else {
|
||||
$ok = false;
|
||||
$msg .= error(_("E-mail address is not correct."), true);
|
||||
}
|
||||
} else {
|
||||
$ok = false;
|
||||
$msg .= error(_("Please enter your e-mail."), true);
|
||||
}
|
||||
|
||||
if ($ok) {
|
||||
$token = User_generate_password_recovery_token($user_source);
|
||||
if ($token === false)
|
||||
engelsystem_error("Unable to generate password recovery token.");
|
||||
$result = engelsystem_email_to_user($user_source, _("Password recovery"), sprintf(_("Please visit %s to recover your password."), page_link_to_absolute('user_password_recovery') . '&token=' . $token));
|
||||
if ($result === false)
|
||||
engelsystem_error("Unable to send password recovery email.");
|
||||
|
||||
success(_("We sent an email containing your password recovery link."));
|
||||
redirect(page_link_to('login'));
|
||||
}
|
||||
}
|
||||
|
||||
return User_password_recovery_view();
|
||||
}
|
||||
}
|
||||
|
||||
function user_password_recovery_title() {
|
||||
return _("Password recovery");
|
||||
}
|
||||
|
||||
?>
|
||||
@ -0,0 +1,16 @@
|
||||
<?php
|
||||
|
||||
function engelsystem_email_to_user($user, $title, $message) {
|
||||
gettext_locale($user['Sprache']);
|
||||
|
||||
$message = sprintf(_("Hi %s,"), $user['Nick']) . "\n\n" . _("here is a message for you from the engelsystem:") . "\n\n" . $message . "\n\n" . _("This email is autogenerated and has not to be signed. You got this email because you are registered in the engelsystem.");
|
||||
|
||||
gettext_locale();
|
||||
return engelsystem_email($user['email'], $title, $message);
|
||||
}
|
||||
|
||||
function engelsystem_email($address, $title, $message) {
|
||||
return mail($address, $title, $message, "Content-Type: text/plain; charset=UTF-8\r\nFrom: Engelsystem <noreply@engelsystem.de>");
|
||||
}
|
||||
|
||||
?>
|
||||
Binary file not shown.
Loading…
Reference in New Issue