svbx/ForgotPassword.php at master · ckingbailey/svbx · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
<?php
include('SQLFunctions.php');
$link = f_sqlConnect();

$show = 'emailForm'; //which form step to show by default
if ($_SESSION['lockout'] == true && (mktime() > $_SESSION['lastTime'] + 900))
{
    $_SESSION['lockout'] = false;
    $_SESSION['badCount'] = 0;
}
if (isset($_POST['subStep']) && !isset($_GET['a']) && $_SESSION['lockout'] != true)
{
    switch($_POST['subStep'])
    {
        case 1:
            //we just submitted an email or username for verification
            $result = checkUNEmail($_POST['uname'],$_POST['email']);
            if ($result['status'] == false )
            {
                $error = true;
                $show = 'userNotFound';
            } else {
                $error = false;
                $show = 'securityForm';
                $securityUser = $result['userID'];
            }
        break;
        case 2:
            //we just submitted the security question for verification
            if ($_POST['userID'] != "" && $_POST['answer'] != "")
            {
                $result = checkSecAnswer($_POST['userID'],$_POST['answer']);
                if ($result == true)
                {
                    //answer was right
                    $error = false;
                    $show = 'successPage';
                    $passwordMessage = sendPasswordEmail($_POST['userID']);
                    $_SESSION['badCount'] = 0;
                } else {
                    //answer was wrong
                    $error = true;
                    $show = 'securityForm';
                    $securityUser = $_POST['userID'];
                    $_SESSION['badCount']++;
                }
            } else {
                $error = true;
                $show = 'securityForm';
            }
        break;
        case 3:
            //we are submitting a new password (only for encrypted)
            if ($_POST['userID'] == '' || $_POST['key'] == '') header("location: login.php");
            if (strcmp($_POST['pw0'],$_POST['pw1']) != 0 || trim($_POST['pw0']) == '')
            {
                $error = true;
                $show = 'recoverForm';
            } else {
                $error = false;
                $show = 'recoverSuccess';
                updateUserPassword($_POST['userID'],$_POST['pw0'],$_POST['key']);
            }
        break;
    }
} elseif (isset($_GET['a']) && $_GET['a'] == 'recover' && $_GET['email'] != "") {
    $show = 'invalidKey';
    $result = checkEmailKey($_GET['email'],urldecode(base64_decode($_GET['u'])));
    if ($result == false)
    {
        $error = true;
        $show = 'invalidKey';
    } elseif ($result['status'] == true) {
        $error = false;
        $show = 'recoverForm';
        $securityUser = $result['userID'];
    }
}
if ($_SESSION['badCount'] >= 3)
{
    $show = 'speedLimit';
    $_SESSION['lockout'] = true;
    $_SESSION['lastTime'] = '' ? mktime() : $_SESSION['lastTime'];
}
?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    <title>SVBX - Password Recovery</title>
    <link href="styles.css" rel="stylesheet" type="text/css">
  </head>
  <BODY>
    <div="background">
      <div class="index">
        <img src="/assets/img/vta_logo.png" alt="VTA - Solutions that move you" class="logo" />
        <h1 class="index-text">Silicon Valley Berryessa Extension Project</h1>
<?php
  switch($show) {
    case 'emailForm': ?>
    <h2>Password Recovery</h2>
    <p>You can use this form to recover your password if you have forgotten it.
    <br>Because your password is securely encrypted in our database, it is impossible to actually recover your password.
    <br>We will email you a link that will enable you to reset it securely.
    <br>Enter either your username or your email address below to get started.</p>
    <?php if ($error == true) { ?><span>You must enter either a username or password to continue.</span><?php } ?>
    <div class="container">
        <form action="<?= $_SERVER['PHP_SELF']; ?>" method="post" id="form">
        <div class="row">
            <div class="col-xs-5"><label for="uname">Username</label></div>
            <div class="col-xs-5"><input type="text" name="uname" id="uname" value="" maxlength="20"></div>
            <div class="w-100"></div>
            <div class="col-xs-10"><label>- OR -</label></div>
            <div class="w-100"></div>
            <div class="col-xs-5"><label for="email">Email</label></div>
            <div class="col-xs-5"><input type="text" name="email" id="email" value="" maxlength="255"></div>
            <div class="w-100"></div>
            <div class="col-xs-10">
                <input type="hidden" name="subStep" value="1" />
                <input type="submit" value="Submit" style="margin-left: 150px;" />
            </div>
        </div>
        </form>
    </div>
    <?php break; case 'securityForm': ?>
    <h2>Password Recovery</h2>
    <p>Please answer the security question below:</p>
    <?php if ($error == true) { ?><span>You must answer the security question correctly to receive your lost password.</span><?php } ?>
    <form action="<?= $_SERVER['PHP_SELF']; ?>" method="post">
        <label>Question:</label><?= getSecurityQuestion($securityUser); ?>
        <br><label for="answer">Answer</label><input type="text" name="answer" id="answer" value="" maxlength="255">
        <input type="hidden" name="subStep" value="2" />
        <input type="hidden" name="UserID" value="<?= $securityUser; ?>" />
        <input type="submit" value="Submit" />
        </form>

     <?php break; case 'userNotFound': ?>
     <br><h2>Password Recovery</h2>
     <br><p>The username or email you entered was not found in our database.<br />
     <br /><a href="?">Click here</a> to try again.</p><br>
     <?php break; case 'successPage': ?>
     <br><h2>Password Recovery</h2>
     <br><p>An email has been sent to you with instructions on how to reset your password.
     <strong>(Mail will not send unless you have an smtp server running locally.)</strong><br />
     <br /><a href="login.php">Return</a> to the login page. </p>
     <br><p>This is the message that would appear in the email:</p><br>
     <style='color:black'><?= $passwordMessage;?></style><br>
     <?php break; case 'recoverForm': ?>
    <h2>Password Recovery</h2>
    <p>Welcome back, <?= getUserName($securityUser=='' ? $_POST['userID'] : $securityUser); ?>.</p>
    <p>In the fields below, enter your new password.</p>
    <?php if ($error == true) { ?><span>The new passwords must match and must not be empty.</span><?php } ?>
    <form action="<?= $_SERVER['PHP_SELF']; ?>" method="post">
        <label for="pw0">New Password</label><input type="password" name="pw0" id="pw0" value="" maxlength="20">
        <label for="pw1">Confirm Password</label><input type="password" name="pw1" id="pw1" value="" maxlength="20">
        <input type="hidden" name="subStep" value="3" />
        <input type="hidden" name="UserID" value="<?= $securityUser=='' ? $_POST['userID'] : $securityUser; ?>" />
        <input type="hidden" name="key" value="<?= $_GET['email']=='' ? $_POST['key'] : $_GET['email']; ?>" />
        <input type="submit" value="Submit" style="margin-left: 150px;" />
        <p><?php echo $securityUser; ?></p>
        </form>
    <?php break; case 'invalidKey': ?>
    <h2>Invalid Key</h2>
    <p>The key that you entered was invalid. Either you did not copy the entire key from the email, you are trying to use the key after it has expired (1 hour after request), or you have already used the key in which case it is deactivated.<br /><br /><a href="login.php">Return</a> to the login page. </p>
    <?php break; case 'recoverSuccess': ?>
    <h2>Password Reset</h2>
    <p>Congratulations! your password has been reset successfully.</p><br /><br /><a href="login.php">Return</a> to the login page. </p>
    <?php break; case 'speedLimit': ?>
    <h2>Warning</h2>
    <p>You have answered the security question wrong too many times. You will be locked out for 15 minutes, after which you can try again.</p><br /><br /><a href="login.php">Return</a> to the login page. </p>
    <?php break; }
    ob_flush();
    mysqli_close($link); ?>
    </div>
    </div>
  </body>
</html>