Prosellers Shell V2.0

Editing: 202-lost-pass.php

Cancel

<?php include_once(dirname( __FILE__ ) . '/202-config/connect.php');

if ($_SERVER['REQUEST_METHOD'] == 'POST') { 
	
	$mysql['user_name'] = $db->real_escape_string($_POST['user_name']);
	$mysql['user_email'] = $db->real_escape_string($_POST['user_email']);
	
	$user_sql = "SELECT user_id, install_hash FROM 202_users WHERE user_name='".$mysql['user_name']."' AND user_email='".$mysql['user_email']."'";
	$user_result = _mysqli_query($user_sql);
	$user_row = $user_result->fetch_assoc();
	
	if (!$user_row) { $error['user'] = 'Invalid username /email combination.'; }
	
	//i there isn't any error, give this user, a new password, and email it to them!
	if (!$error) {
		
		$mysql['user_id'] = $db->real_escape_string($user_row['user_id']);
		
		//generate random key
		$user_pass_key = "ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
		$user_pass_key = substr(str_shuffle($user_pass_key), 0, 40) . time();
		$mysql['user_pass_key'] = $db->real_escape_string($user_pass_key);

//set the user pass time
		$mysql['user_pass_time'] = time();
			
		//insert this verification key into the database, and the timestamp of inserting it
		$update_sql = "	UPDATE 	202_users 
							SET 		user_pass_key='" . $mysql['user_pass_key'] . "',
										user_pass_time='" . $mysql['user_pass_time'] . "'
							WHERE		user_id='".$mysql['user_id']."'";
		$update_result = _mysqli_query($update_sql);
			
		
		//now email the user the script to reset their email
		$to = $_POST['user_email'];
		$user_row['install_hash'];

$fields = array(
	        'to' => $to,
	        'path' => $_SERVER['SERVER_NAME'].get_absolute_url(),
	        'user' => $_POST['user_name'],
	        'key' => $mysql['user_pass_key']
	    );

$fields = http_build_query($fields);
	    $ch = curl_init();
	    curl_setopt($ch, CURLOPT_URL, 'https://my.tracking202.com/api/v2/p202/' . $user_row['install_hash'] . '/pass/send');
	    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
	    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
	    curl_setopt($ch, CURLOPT_POST, 1);
	    curl_setopt($ch, CURLOPT_POSTFIELDS, $fields);
	    $result = curl_exec($ch);
	    curl_close($ch);
	    $response = json_decode($result, true);

if (!isset($response['code']) && $response['code'] != 400) {
			$success = true;
		}
	}
	
	$html['user_name'] = htmlentities($_POST['user_name'], ENT_QUOTES, 'UTF-8');
	$html['user_email'] = htmlentities($_POST['user_email'], ENT_QUOTES, 'UTF-8');
	
} ?>

<?php info_top(); ?>

<?php if ($success == true) { ?>
	
		<center><small>An email has been sent with a link where you can change your password.</small></center>
	
	<?php } else { ?>
	<div class="row" style="position:absolute;left:1em;">
	<div class="main col-xs-4" style="left:5em;width:344px;box-shadow: 0 0 12px 0 rgba(0, 0, 0, 0.1), 0 10px 30px 0 rgba(0, 0, 0, 0.2);">
	  	<center><img src="202-img/prosper202.png"></center>
		<center><span class="infotext">Please enter your username and e-mail address.<br/>You will receive a new password via e-mail to <a href="<?php echo get_absolute_url();?>202-login.php">login</a> with.</span></center>
		<form class="form-signin form-horizontal" role="form" method="post" action="">
		      <div class="form-group <?php if ($error['user']) echo "has-error";?>">
		      <?php if ($error['user']) { ?>
			            <div class="tooltip right in login_tooltip"><div class="tooltip-arrow"></div>
			            <div class="tooltip-inner"><?php echo $error['user'];?></div></div>
		      <?php } ?>
		        	<input type="text" class="form-control first" name="user_name" placeholder="Username">
		        	<input type="text" class="form-control last" name="user_email" placeholder="Email">
		        	<p></p>
		        <button class="btn btn-lg btn-p202 btn-block" type="submit">Get New Password <span class="fui-arrow-right pull-right"></span></button>
		      </div>
	      </form>
	</div>
	</div>	
	<?php } ?>
<?php info_bottom(); ?>

Editing: 202-lost-pass.php

Upload Files

Create New

Change Permissions

Change Date

Rename Item

Confirm Delete