Invalid password configuration.';
}
$random_salt = hash('sha512', uniqid(openssl_random_pseudo_bytes(16), TRUE));
$password = hash('sha512', $password . $random_salt);
$date = date('Y/m/d H:i');
$token = $_SESSION['token'];
$querys = "SELECT * FROM tokens where token='".$token."' and used='".$useds."'";
$results = $mysqli->query($querys);
$row = $results->fetch_assoc();
$email=$row['email'];
$tokens=$row['token'];
$user_name=$row['user_name'];
$used=$row['used'];
If($userid == $user_name && $used != 1){
//$query = "SELECT * FROM Clients where Email ='".$email."' and Username ='".$userid."'";
//$result = $mysqli->query($query);
//$Admin = $result->fetch_assoc();
//$Username = $Admin['C_ID'];
$User_ID=0;
$query = "SELECT * FROM Clients where Email ='".$email."' and Username ='".$userid."'";
$result = $mysqli->query($query);
$Admin = $result->fetch_assoc();
if ($result->num_rows != 0) {
$Username = $Admin['C_ID'];
$accessds = $Admin['User_Access'];
$User_ID=1;
}else{
$query = "SELECT * FROM Master where Email ='".$email."' and Username ='".$userid."'";
$result = $mysqli->query($query);
$Admin = $result->fetch_assoc();
if ($result->num_rows != 0) {
$Username = $Admin['M_ID'];
$accessds = $Admin['User_Access'];
$User_ID=2;
}
}
if($Username != 0){
$se="1";
if($User_ID==1)
{
if (!$mysqli->query("UPDATE Clients SET Password ='$password', salt='$random_salt' WHERE Email ='".$email."' and Username ='".$userid."'")) {
header('Location: reset.php?error=Échec de mise à jour!');
exit();
}
}else if($User_ID==2){
if (!$mysqli->query("UPDATE Master SET Password ='$password', salt='$random_salt' WHERE Email ='".$email."' and Username ='".$userid."'")) {
header('Location: reset.php?error=Échec de mise à jour!');
exit();
}
}
$url = "http://". $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'];
$subject = "Mot de passe mis à jour";
$uri = 'http://'. $_SERVER['HTTP_HOST'] ;
$message = '
BonBoss.ca: Mot de passe mis à jour
Cher Client,
"'."Merci d'avoir choisi BonBoss.ca - Votre mot de passe a été mis à jour.".'"
';
$headers[] = 'MIME-Version: 1.0';
$headers[] = 'Content-type: text/html; charset=iso-8859-1';
$From="abdalla.bala@gmail.com";
// Additional headers
$headers[] = 'To: '.$email.'>';
$headers[] = 'From: Support <'.$From.'>';
$headers[] = 'Cc: abdalla.bala@gmail.com';
$headers[] = 'Bcc: abdalla.bala@gmail.com';
// Mail it
$mail =mail($email, $subject, $message, implode("\r\n", $headers));
if($mail)
{
if (!$mysqli->query("UPDATE tokens SET used='".$se."', update_date='".$date."' WHERE token='".$tokens."'")) {
}
header('Location: index.php?err=Votre mot de passe à été changé avec succès.');
exit();
}else
{
header('Location: reset.php?err=Lien invalide ou Mot de passe déjà modifié!');
exit();
}
}else
{
header('Location: reset.php?err=Lien invalide ou Mot de passe déjà modifié!');
exit();
}
}else
{
header('Location: reset.php?error=Lien invalide ou Mot de passe déjà modifié!');
exit();
}
}