include "php/ConnectionDB.php";
include "php/phpQuery.php";
$db = new ConnectionDB();
$html = '
';
$doc = phpQuery::newDocument($html);
$form = "Reimposta la password e accedi alla piattaforma
";
$data = base64_decode($_GET["data"]);
//prelevo l'invito
if(strstr($data,"reimpostapassword=")){
$reimpostapassword = explode("reimpostapassword=",$data);
$reimpostapassword = $reimpostapassword[1];
}else $boo_no_valid = true;
// SE HO CLICCATO SU SUBMIT
if(isset($_POST["submit"]) && !$boo_no_valid){
$boo = true;
$error = "";
if(!isset($_POST["password"])){
$boo = false;
$error .= "Non hai inserito la password";
}
if(strlen($_POST["password"]) < 8){
$boo = false;
$error .= "La password deve contenere almeno 8 caratteri
";
}
if($_POST["password"] != $_POST["ripeti_password"]){
$boo = false;
$error .= "Le password devono coincidere
";
}
if(!$boo){
$form .= $error;
$doc->find(".form")->html($form);
echo $doc->htmlOuter();
exit();
}
$db->connetti();
define("SALT","yuppydoo");
$pass_crypt = md5(SALT.$_POST["password"]);
// MODIFICO LA PASSWORD
$query = "UPDATE ".$codice_cliente."_account SET password = '".$pass_crypt."', invite_accepted = '1' WHERE email = '".$reimpostapassword."'";
$db->myQuery($query);
$db->disconnetti();
$param = array();
$param["username"] = $reimpostapassword;
$param["password"] = $_POST["password"];
include "plug-in/Account/php/Login.php";
include "php/PublicFunc.php";
$login = new Login();
$login->init();
$utente = $login->enterFromExternal($param);
$echo = "
";
echo $echo;
exit;
}
$boo_no_valid = false;
$err_no_valid = true;
$db->connetti();
$query = "SELECT user.nome as nome,
user.cognome as cognome,
account.email as email,
account.invite_accepted as invite_accepted
FROM ".$codice_cliente."_account as account,
".$codice_cliente."_user as user
WHERE account.email = user.account AND account.email = '".$reimpostapassword."'";
$result = $db->myQuery($query);
$rows = mysqli_fetch_array($result);
if(mysqli_num_rows($result) <= 0){
$boo_no_valid = true;
$err_no_valid = "Siamo spiacenti. Il link è scaduto o non è più valido!
";
}
if($boo_no_valid){
$doc->find(".form")->html($err_no_valid);
echo $doc->htmlOuter();
exit;
}
$doc->find(".form")->html($form);
echo $doc->htmlOuter();
?>