forgot.php

<?php
/*
	Question2Answer by Gideon Greenspan and contributors
	http://www.question2answer.org/

	File: qa-include/qa-page-forgot.php
	Description: Controller for 'forgot my password' page


	This program is free software; you can redistribute it and/or
	modify it under the terms of the GNU General Public License
	as published by the Free Software Foundation; either version 2
	of the License, or (at your option) any later version.

	This program is distributed in the hope that it will be useful,
	but WITHOUT ANY WARRANTY; without even the implied warranty of
	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
	GNU General Public License for more details.

	More about this license: http://www.question2answer.org/license.php
*/

	if (!defined('QA_VERSION')) { // don't allow this page to be requested directly from browser
		header('Location: ../');
		exit;
	}

	require_once QA_INCLUDE_DIR.'db/users.php';
	require_once QA_INCLUDE_DIR.'app/captcha.php';


//	Check we're not using single-sign on integration and that we're not logged in

	if (QA_FINAL_EXTERNAL_USERS)
		qa_fatal_error('User login is handled by external code');

	if (qa_is_logged_in())
		qa_redirect('');


//	Start the 'I forgot my password' process, sending email if appropriate

	if (qa_clicked('doforgot')) {
		require_once QA_INCLUDE_DIR.'app/users-edit.php';

		$inemailhandle=qa_post_text('emailhandle');

		$errors=array();

		if (!qa_check_form_security_code('forgot', qa_post_text('code')))
			$errors['page']=qa_lang_html('misc/form_security_again');

		else {
			if (strpos($inemailhandle, '@')===false) { // handles can't contain @ symbols
				$matchusers=qa_db_user_find_by_handle($inemailhandle);
				$passemailhandle=!qa_opt('allow_login_email_only');

			} else {
				$matchusers=qa_db_user_find_by_email($inemailhandle);
				$passemailhandle=true;
			}

			if (count($matchusers)!=1) // if we get more than one match (should be impossible) also give an error
				$errors['emailhandle']=qa_lang('users/user_not_found');

			if (qa_opt('captcha_on_reset_password'))
				qa_captcha_validate_post($errors);

			if (empty($errors)) {
				$inuserid=$matchusers[0];
				qa_start_reset_user($inuserid);
				qa_redirect('reset', $passemailhandle ? array('e' => $inemailhandle) : null); // redirect to page where code is entered
			}
		}

	} else
		$inemailhandle=qa_get('e');


//	Prepare content for theme

	$qa_content=qa_content_prepare();

	$qa_content['title']=qa_lang_html('users/reset_title');
	$qa_content['error']=@$errors['page'];

	$qa_content['form']=array(
		'tags' => 'method="post" action="'.qa_self_html().'"',

		'style' => 'tall',

		'fields' => array(
			'email_handle' => array(
				'label' => qa_lang_html('users/email_handle_label'),
				'tags' => 'name="emailhandle" id="emailhandle"',
				'value' => qa_html(@$inemailhandle),
				'error' => qa_html(@$errors['emailhandle']),
				'note' => qa_lang_html('users/send_reset_note'),
			),
		),

		'buttons' => array(
			'send' => array(
				'label' => qa_lang_html('users/send_reset_button'),
			),
		),

		'hidden' => array(
			'doforgot' => '1',
			'code' => qa_get_form_security_code('forgot'),
		),
	);

	if (qa_opt('captcha_on_reset_password'))
		qa_set_up_captcha_field($qa_content, $qa_content['form']['fields'], @$errors);

	$qa_content['focusid']='emailhandle';


	return $qa_content;


/*
	Omit PHP closing tag to help avoid accidental output
*/