Blog-informatif/reset.php at master · samir324/Blog-informatif · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135

<?php  include "includes/header.php"; ?>
<?php  include "includes/navigation.php"; ?>

<?php


    if(!isset($_GET['email']) && !isset($_GET['token'])){


header('location:index.php');

    }

$email=$_GET['email'];
$token = $_GET['token'];


if($stmt = mysqli_prepare($connection , "SELECT user_name , user_email , token from users where token= ?" )){

    mysqli_stmt_bind_param($stmt , 's' , $token );
    mysqli_stmt_execute($stmt);
    mysqli_stmt_bind_result($stmt , $username , $useremail , $token  );
    mysqli_stmt_fetch($stmt);
    mysqli_stmt_close($stmt);


//    if($_GET['token'] !== $token || $_GET['email'] !== $useremail ){

//     header('location: index.php');

//    }

if(isset($_POST['password']) && isset($_POST['confirmPassword'])){

    if($_POST['password'] == $_POST['confirmPassword']){
    $password = $_POST['password'];


    $password = password_hash($password , PASSWORD_BCRYPT , array('cost' => 12));

    if($stmt = mysqli_prepare($connection , "UPDATE users set token='' , user_password='{$password}' where user_email=?")){

     mysqli_stmt_bind_param($stmt , 's' , $email);
     mysqli_stmt_execute($stmt);

    if(mysqli_stmt_affected_rows($stmt) >= 1){

        header('location:login.php');

    }


    }

    }
}


}


?>


<!-- Navigation -->


<div class="container">


    <div class="container">
        <div class="row">
            <div class="col-md-4 col-md-offset-4">
                <div class="panel panel-default">
                    <div class="panel-body">
                        <div class="text-center">


                            <h3><i class="fa fa-lock fa-4x"></i></h3>
                            <h2 class="text-center">Reset Password</h2>
                            <p>You can reset your password here.</p>
                            <div class="panel-body">


                                <form id="register-form" role="form" autocomplete="off" class="form" method="post">

                                    <div class="form-group">
                                        <div class="input-group">
                                            <span class="input-group-addon"><i class="glyphicon glyphicon-user color-blue"></i></span>
                                            <input id="password" name="password" placeholder="Enter password" class="form-control"  type="password">
                                        </div>
                                    </div>

                                    <div class="form-group">
                                        <div class="input-group">
                                            <span class="input-group-addon"><i class="glyphicon glyphicon-ok color-blue"></i></span>
                                            <input id="confirmPassword" name="confirmPassword" placeholder="Confirm password" class="form-control"  type="password">
                                        </div>
                                    </div>

                                    <div class="form-group">
                                        <input name="resetPassword" class="btn btn-lg btn-primary btn-block" value="Reset Password" type="submit">
                                    </div>

                                    <input type="hidden" class="hide" name="token" id="token" value="">
                                </form>

                            </div><!-- Body-->

                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>


<hr>

<?php include "includes/footer.php";?>

</div> <!-- /.container -->