setpw.php

Go to the documentation of this file.

<?php


require_once 'Smarty.class.php';
require_once 'error.php';
require_once 'redirect.php';
require_once 'sql.php';
require_once 'util.php';

## parameters accepted by this php script


function setpw($smarty, $INPUT, $db) {
global $_SESSION, $debug_level;

$valid_input = array(
        "pw1"       => "/^.....+$/",
);      

## check user input 

# $INPUT = array_merge($_GET, $_POST);
# $errors = check_input($INPUT, $validation_info); 

if ($debug_level > 10) {
        print "<hr><pre>Input: ";
        print_r($INPUT);
        print "</pre><hr>";
}

#if (!empty($errors)) {
#       user_error("Missing or malformed input parameter(s): " . join($errors, ", "),
#               E_USER_ERROR); 
#}

## process buttons

# "OK" button pressed? 

$display_html_form = (isset($INPUT['b_ok'])) ? FALSE : TRUE;


# "Cancel" button pressed?

if (isset($INPUT['b_cancel'])) {
        return;
}


# stricter checks for user input (per item)

if (!$display_html_form) {

        $errors = check_input($INPUT, $valid_input, FALSE); 

        if ($INPUT['pw1'] != $INPUT['pw2']) {
                $errors[] = 'pw_mismatch';
        }

        if (!empty($errors)) {
                # user input was invalid, user must correct it
                $display_html_form = TRUE;
        } 
}

if ($display_html_form) {

        ## (re-)display the input form

        $tpl_vars = $INPUT;
        $tpl_vars['errors_info'] = $errors;
        do_template($smarty, 'setpw.tpl' , $tpl_vars);
        exit(0);

} else  {


        $param = array(
                "table" => "user",
                "tables" => "user",
                "login" => $_SESSION['user']['login'],
                "password" => "{SHA1}" . sha1($INPUT['password']),
                "data" => array (
                        "password" => "{SHA1}" .  sha1($INPUT['pw1'])
                        ),
                "cond" => "id = ". $_SESSION['user']['id'],
        );

        $ans = sql_query('check_pw', $param, $db);
        sleep(2);

        if (empty($ans)) {
                # wrong login / password, re-display HTML form

                $tpl_vars = $INPUT;
                $tpl_vars['errors_info'] = $errors;
                $tpl_vars['errors_info'][] = 'password';

                do_template($smarty, 'setpw.tpl' , $tpl_vars);
                sql_exit($db);
                exit(0);
        } else {
                sql_query('update', $param, $db);
        }
}

}


function send_reminder($smarty, $INPUT, $db) {

        $p = array('email' => trim($INPUT['email']));
        $ans = sql_query('get_uid', $p, $db);

        if(empty($ans)) {
                $tpl_var = array();
                $tpl_var['errors_info'] = array('email');

                do_template($smarty,'login.tpl', $tpl_var);
                exit(0);
        }

        foreach ($ans as $u) {

                $uid = $u['id'];

                # create random password and mail it to the user
 
                $passwd = set_random_pw($uid, $db);

                $user = get_item_owner("user", $uid, $db);
        
                $email_to = $user['degree_name'] . " ";
                $email_to .= $user['forename'] . " ";
                $email_to .= $user['surname'] . " ";
                $email_to .= "<" . $user['email'] . ">";

                $tpl_vars = array();
                $tpl_vars['user_info'] = $user; 
                $tpl_vars['user_info']['password'] = $passwd;   

                send_email($smarty,'msg_reminder.tpl',$tpl_vars, $email_to);
        }

        do_template($smarty,'reminder.tpl', $tpl_var);
        exit(0);
}

?>

---