password.inc.php 1.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. <?php
  2. class password_controller extends controller{
  3. function view(){
  4. $form = array("email"=>"", "message"=>"", "form_aff"=>true);
  5. if (isset($_POST["_password"]))
  6. {
  7. if (!isset($_POST["email"]) || !is_string($_POST["email"]) || !$_POST["email"])
  8. {
  9. $form["message"] = "Adresse email invalide";
  10. }
  11. elseif (!isset($_POST["_captcha"]) || !isset($_SESSION["captcha"]) || $_POST["_captcha"] != $_SESSION["captcha"])
  12. {
  13. $form["message"] = "Code de sécurité Captcha invalide";
  14. $form["email"] = $_POST["email"];
  15. }
  16. else
  17. {
  18. $q_s = "SELECT `password` FROM account WHERE email='".mysql_real_escape_string($_POST["email"])."'";
  19. $q_r = mysql_query($q_s);
  20. unset($_SESSION["captcha"]);
  21. if (list($password)=mysql_fetch_row($q_r))
  22. {
  23. mail($_POST["email"], "Votre mot de passe sur le site D2P", "Votre mot de passe sur le site D2P est :\r\n * $password\r\n", "From: ".$this->params["email_from"]);
  24. $form["message"] = "Votre mot de passe vient de vous être renvoyé par email";
  25. $form["form_aff"] = false;
  26. }
  27. else
  28. {
  29. $form["message"] = "Adresse email invalide";
  30. $form["email"] = $_POST["email"];
  31. }
  32. }
  33. }
  34. //var_dump($form);
  35. $this->params['form'] = $form;
  36. }
  37. }