real_escape_string($_GET['key']); $user_sql = "SELECT * FROM 202_users WHERE user_pass_key='".$mysql['user_pass_key']."'"; $user_result = _mysqli_query($user_sql); $user_row = $user_result->fetch_assoc(); if (!$user_row) { $error['user_pass_key'] = '

No key was found like that

'; } if (!$error) { //how many days ago was this code activated, this code will only work if the activation reset code is at least current within the last 3 days $date_today = time(); $days = (($date_today-$user_row['user_pass_time'])/86400); if ($days > 3) { $error['user_pass_key'] .= 'Sorry, this key has expired, they expire in three (3) days.'; } } //if the key is legit, make sure their new posted password is legit if (!$error and ($_SERVER['REQUEST_METHOD'] == "POST")) { //check tokens //if ($_POST['token'] != $_SESSION['token']) { $error['token'] = '

You must use our forms to submit data. 15)) { $error['user_pass'] .= '

Passwords must be 6 to 15 characters long

';} if ($_POST['user_pass'] != $_POST['verify_user_pass']) { $error['user_pass'] .= '

Your passwords did not match, please try again

'; } if (!$error) { $user_pass = salt_user_pass($_POST['user_pass']); $mysql['user_pass'] = $db->real_escape_string($user_pass); $mysql['user_id'] = $db->real_escape_string($user_row['user_id']); $user_sql = "UPDATE 202_users SET user_pass='".$mysql['user_pass']."', user_pass_time='0' WHERE user_id='".$mysql['user_id']."'"; $user_result = _mysqli_query($user_sql); $success = true; } } $html['user_name'] = htmlentities($user_row['user_name'], ENT_QUOTES, 'UTF-8'); //if password was changed successfully if ($success == true) { _die("Congratulations, your password has been reset.
You can now login with your new password."); } if ($error['user_pass_key']) { _die("".$error['user_pass_key'] ."
Please use the password retrieval tool to get a new password reset key."); } //else if none of the above, show the code to reset! ?>

Please create a new password and verify it to proceed.