real_escape_string($_POST['user_name']);
$mysql['user_email'] = $db->real_escape_string($_POST['user_email']);
$user_sql = "SELECT user_id, install_hash FROM 202_users WHERE user_name='".$mysql['user_name']."' AND user_email='".$mysql['user_email']."'";
$user_result = _mysqli_query($user_sql);
$user_row = $user_result->fetch_assoc();
if (!$user_row) { $error['user'] = 'Invalid username /email combination.'; }
//i there isn't any error, give this user, a new password, and email it to them!
if (!$error) {
$mysql['user_id'] = $db->real_escape_string($user_row['user_id']);
//generate random key
$user_pass_key = "ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
$user_pass_key = substr(str_shuffle($user_pass_key), 0, 40) . time();
$mysql['user_pass_key'] = $db->real_escape_string($user_pass_key);
//set the user pass time
$mysql['user_pass_time'] = time();
//insert this verification key into the database, and the timestamp of inserting it
$update_sql = " UPDATE 202_users
SET user_pass_key='" . $mysql['user_pass_key'] . "',
user_pass_time='" . $mysql['user_pass_time'] . "'
WHERE user_id='".$mysql['user_id']."'";
$update_result = _mysqli_query($update_sql);
//now email the user the script to reset their email
$to = $_POST['user_email'];
$user_row['install_hash'];
$fields = array(
'to' => $to,
'path' => $_SERVER['SERVER_NAME'].get_absolute_url(),
'user' => $_POST['user_name'],
'key' => $mysql['user_pass_key']
);
$fields = http_build_query($fields);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://my.tracking202.com/api/v2/p202/' . $user_row['install_hash'] . '/pass/send');
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields);
$result = curl_exec($ch);
curl_close($ch);
$response = json_decode($result, true);
if (!isset($response['code']) && $response['code'] != 400) {
$success = true;
}
}
$html['user_name'] = htmlentities($_POST['user_name'], ENT_QUOTES, 'UTF-8');
$html['user_email'] = htmlentities($_POST['user_email'], ENT_QUOTES, 'UTF-8');
} ?>
An email has been sent with a link where you can change your password.
Please enter your username and e-mail address.
You will receive a new password via e-mail to login with.