<?php
// $Id: lost_password.lib.php 9973 2006-11-14 14:53:22Z pcool $
/*
==============================================================================
Dokeos - elearning and course management software
Copyright (c) 2004 Dokeos S.A.
Copyright (c) 2003 Ghent University (UGent)
Copyright (c) 2001 Universite catholique de Louvain (UCL)
Copyright (c) various contributors
For a full list of contributors, see "credits.txt".
The full license can be read in "license.txt".
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.
See the GNU General Public License for more details.
Contact: Dokeos, 181 rue Royale, B-1000 Brussels, Belgium, info@dokeos.com
==============================================================================
*/
/*** By Olivier Cauberghe, UGent ***/
//-----------------------------------------------------------------------------
function get_email_headers()
{
global $charset;
$emailHeaders = "From: \"".addslashes(get_setting('administratorSurname')." ".get_setting('administratorName'))."\" < ".get_setting('emailAdministrator').">\n";
$emailHeaders .= "Reply-To: ".get_setting('emailAdministrator')."\n";
$emailHeaders .= "X-Sender: ".get_setting('emailAdministrator')."\n";
$emailHeaders .= "X-Mailer: PHP / ".phpversion()."\n";
$emailHeaders .= "Content-Type: text/plain;\n\tcharset=\"".$charset."\"\n";
$emailHeaders .= "Mime-Version: 1.0";
return $emailHeaders;
}
/*** By Olivier Cauberghe, UGent ***/
//-----------------------------------------------------------------------------
function get_user_account_list($user, $reset = false)
{
global $rootWeb;
foreach ($user as $thisUser)
{
$secretword = get_secret_word($thisUser["email"]);
if ($reset)
$reset_link = "\tReset link : $rootWeb"."main/auth/lostPassword.php?reset=$secretword&id=$thisUser[uid]";
else
$reset_link = "\t".get_lang('Pass')." : $thisUser[password]";
$userAccountList[] = $thisUser["firstName"]." ".$thisUser["lastName"]."\n\n"."\t".get_lang('Username')." : ".$thisUser["loginName"]."\n"."$reset_link\n\n";
}
if ($userAccountList)
$userAccountList = implode("------------------------\n", $userAccountList);
return $userAccountList;
}
/*** By Olivier Cauberghe, UGent ***/
//-----------------------------------------------------------------------------
function send_password_to_user($user, $success_msg)
{
global $charset;
global $rootWeb;
$emailHeaders = get_email_headers(); // Email Headers
$emailSubject = "[".get_setting('siteName')."] ".get_lang('LoginRequest'); // SUBJECT
$userAccountList = get_user_account_list($user); // BODY
$emailBody = get_lang('YourAccountParam')." $rootWeb\n\n$userAccountList";
// SEND MESSAGE
$emailTo = $user[0]["email"];
if (@ api_send_mail($emailTo, $emailSubject, $emailBody, $emailHeaders))
return $success_msg;
else
return "< p > The system is unable to send you an e-mail.< br / > Please contact the ".Display :: encrypted_mailto_link(get_setting('emailAdministrator'), "Platform administrator").".< / p > ";
}
//-----------------------------------------------------------------------------
/*** By Olivier Cauberghe, UGent ***/
function handle_encrypted_password($user)
{
global $security_key;
global $charset;
global $rootWeb;
$emailHeaders = get_email_headers(); // Email Headers
$emailSubject = "[".get_setting('siteName')."] ".get_lang('LoginRequest'); // SUBJECT
$userAccountList = get_user_account_list($user, true); // BODY
$emailTo = $user[0]["email"];
$secretword = get_secret_word($emailTo);
$emailBody = get_lang("password_request")."\n\n\n".get_lang("YourAccountParam")." $rootWeb\n\n".$userAccountList;
if (@ api_send_mail($emailTo, $emailSubject, $emailBody, $emailHeaders))
return get_lang('YourPasswordHasBeenEmailed');
else
echo "< p > ", "The system is unable to send you an e-mail.< br / > ", "Please contact the ", Display::encrypted_mailto_link(get_setting('emailAdministrator'),"platform administrator"), ".< p > ";
return "";
}
//-----------------------------------------------------------------------------
function get_secret_word($add)
{
global $security_key;
return $secretword = md5($security_key.$add);
}
//-----------------------------------------------------------------------------
function reset_password($secret, $id)
{
global $your_password_has_been_reset,$userPasswordCrypted;
$tbl_user = Database::get_main_table(MAIN_USER_TABLE);
$sql = "SELECT user_id AS uid, lastname AS lastName, firstname AS firstName, username AS loginName, password, email FROM ".$tbl_user." WHERE user_id=$id";
$result = api_sql_query($sql,__FILE__,__LINE__);
if ($result & & mysql_num_rows($result))
$user[] = mysql_fetch_array($result);
else
return "Could not reset password.";
if (get_secret_word($user[0]["email"]) == $secret) // OK, secret word is good. Now change password and mail it.
{
$user[0]["password"] = api_generate_password();
$crypted = $user[0]["password"];
if( $userPasswordCrypted)
{
$crypted = md5($crypted);
}
api_sql_query("UPDATE ".$tbl_user." SET password='$crypted' WHERE user_id=$id");
return send_password_to_user($user, $your_password_has_been_reset);
}
else
return "Not allowed.";
}
?>
