43 lines
1.6 KiB
PHP
43 lines
1.6 KiB
PHP
<?php
|
|
require('connect.php');
|
|
require('pass.php');
|
|
|
|
$name = $_POST['name'];
|
|
|
|
$query = "SELECT * FROM `pass_forgot` WHERE `name`='$name'";
|
|
$result_temp = mysql_query($query, $connection) or die('Er is een fout opgetreden');
|
|
|
|
if(mysql_num_rows($result_temp)<1){ header("Location: ../login/forgot/?nouser=1"); }
|
|
else{
|
|
$result = mysql_fetch_assoc($result_temp);
|
|
$mail = $result['mail'];
|
|
|
|
if(!strlen($mail)>0){
|
|
$query = "UPDATE `pass_forgot` SET `pass_forgot`='1' WHERE `name`='$name'";
|
|
mysql_query($query, $connection) or die('Er is een fout opgetreden');
|
|
header("Location: ../login/forgot/?nomail=1");
|
|
}
|
|
else {
|
|
$characters = '123456789abcdefghijklmnpqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ';
|
|
$pass = '';
|
|
for ($i = 0; $i < 10; $i++) {
|
|
$pass .= $characters[rand(0, strlen($characters) - 1)];
|
|
}
|
|
$pass_hash = password_hash($pass, PASSWORD_BCRYPT);
|
|
|
|
$query = "UPDATE `login` SET pass='$pass_hash' WHERE `name`='$name'";
|
|
mysql_query($query, $connection) or die('Er is een fout opgetreden');
|
|
|
|
$query2 = "UPDATE `pass_forgot` SET `pass_forgot`='1' WHERE `name`='$name'";
|
|
mysql_query($query2, $connection) or die('Er is een fout opgetreden');
|
|
|
|
$headers = "From: Sondervick College <rooster@kennyboy.nl>\r\n";
|
|
$headers .= "Content-Type: text/html";
|
|
|
|
$message = "<html><body>Beste $name,<br><br>Uw wachtwoord is gewijzigd.<br>Uw nieuwe wachtwoord is nu:<h3>$pass</h3><br><br>De eerst volgende keer dat u inlogt zal u gevraagd worden uw wachtwoord te wijzigen.</body></html>";
|
|
|
|
mail($mail, 'Sondervick Wachtwoord', $message, $headers) or die("Error");
|
|
header("Location: ../login/");
|
|
}
|
|
}
|
|
?>
|