ResearchProject/reset.php at master · aleksiuno/ResearchProject · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
<?php
require 'db.php';
session_start();
/* Alert message variables*/
$_SESSION['message'] = null;
$show_alert = false;
/* Login check*/
$logged_in = false;
if(isset($_SESSION['logged_in'])  //if variable exists
  && $_SESSION['logged_in']==true //if variable is true
  && $_SESSION['active'] = 1){    //if account is active
  $logged_in = true;
}
//
if(isset($_GET['email'])
  && !empty($_GET['email'])
  AND isset($_GET['hash'])
  && !empty($_GET['hash'])){
    $email = $mysqli->escape_string($_GET['email']);
    $hash = $mysqli->escape_string($_GET['hash']);
    //Checking if email with existing hash exists
    $result = $mysqli->query("SELECT * FROM users WHERE email='$email' AND hash='$hash'");
    if ( $result->num_rows == 0 ) {
        $show_alert = true;
        $_SESSION['message'] = "You have entered invalid URL for password reset!";
    }
}
else {
    $show_alert = true;
    $_SESSION['message'] = "Sorry, verification failed, try again!";
}
?>
<!DOCTYPE html>
<html>

<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>TutorialDatabase</title>
    <link rel="stylesheet" href="assets/bootstrap/css/bootstrap.min.css">
    <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Nunito+Sans:400,600">
    <link rel="stylesheet" href="assets/fonts/font-awesome.min.css">
    <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Montserrat:300,400,600">
    <link rel="stylesheet" href="assets/css/Footer-Basic.css">
    <link rel="stylesheet" href="https://unpkg.com/@bootstrapstudio/bootstrap-better-nav/dist/bootstrap-better-nav.min.css">
    <link rel="stylesheet" href="assets/css/styles.css">
    <link rel="stylesheet" href="assets/css/TD-BS4-Simple-Contact-Form-1.css">
    <link rel="stylesheet" href="assets/css/TD-BS4-Simple-Contact-Form.css">
</head>
<?php
if ($_SERVER['REQUEST_METHOD'] == 'POST') {//Waits for website to POST details
    if ( $_POST['password'] == $_POST['passwordconfirm'] ) {//Checking if two passwords match
        $new_password = password_hash($_POST['password'], PASSWORD_BCRYPT);
        //$_POST['email'] and $_POST['hash'] variables received from hidden inputs
        $email = $mysqli->escape_string($_POST['email']);
        $hash = $mysqli->escape_string($_POST['hash']);
        //sql code to update user password
        $sql = "UPDATE users SET password='$new_password', hash='$hash' WHERE email='$email'";
        if($mysqli->query($sql)){//Tries to update database
          //If details successfully updated show message
          $show_alert = true;
          $_SESSION['message'] = "Your password has been reset successfully!";
        }
    }
    else {//If passwords do not match throw a message
        $show_alert = true;
        $_SESSION['message'] = "Two passwords you entered don't match, try again!";
    }
}
?>
<body>
    <section id="hero">
        <nav class="navbar navbar-light navbar-expand-md">
            <div class="container-fluid"><a class="navbar-brand" href="index.html" style="background-size:50%;height:130px;background-image:url(&quot;none&quot;);width:130px;padding:0;margin:0px 20px;"><img src="assets/img/Logo.svg" style="width:130px;"></a><button class="navbar-toggler"
                    data-toggle="collapse" data-target="#navcol-1"><span class="sr-only">Toggle navigation</span><span class="navbar-toggler-icon"></span></button>
                <div class="collapse navbar-collapse" id="navcol-1">
                    <ul class="nav navbar-nav ml-auto">
                      <li class="nav-item" role="presentation" style="margin:0;"><a class="nav-link active" href="database.php" style="padding:8px;margin:15px;font-size:20px;color:rgb(31,155,207);font-family:Montserrat, sans-serif;font-weight:600;">DATABASE</a></li>
                      <?php if(!$logged_in):?>
                        <li class="nav-item" role="presentation" style="margin:0;"><a class="nav-link active" href="signup.php" style="padding:8px;margin:15px;font-size:20px;color:#000000;font-family:Montserrat, sans-serif;font-weight:600;">SIGN UP</a></li>
                        <li class="nav-item" role="presentation" style="margin:0;"><a class="nav-link active" href="login.php" style="padding:8px;margin:15px;font-size:20px;color:#000000;font-family:Montserrat, sans-serif;font-weight:600;">LOGIN</a></li>
                      <?php endif;?>
                      <li class="nav-item" role="presentation" style="margin:0;"><a class="nav-link active" href="contactus.php" style="padding:8px;margin:15px;font-size:20px;color:#000000;font-family:Montserrat, sans-serif;font-weight:600;">CONTACT US</a></li>
                      <?php if($logged_in):?>
                        <li class="nav-item" role="presentation" style="margin:0;"><a class="nav-link active" href="profile.php" style="padding:8px;margin:15px;font-size:20px;color:#000000;font-family:Montserrat, sans-serif;font-weight:600;">PROFILE</a></li>
                      <?php endif;?>
                    </ul>
                </div>
            </div>
        </nav>
        <div class="jumbotron" style="background-color:rgb(244,238,238);">
            <h1 class="text-center" style="font-size:30px;margin:0px 0px 20px;"><strong>Reset password</strong><br></h1>
            <div id="horizontalline"><div><hr></div></div>
            <?php if($show_alert):?>
              <div class="alert alert-info" style="width:250px;margin:auto;">
                <a href="#" class="close" data-dismiss="alert" aria-label="close">&times;</a>
                <?= $_SESSION['message']?>
              </div>
            <?php endif;?>
            <form method="post">
                <p class="text-center" style="margin:16px 0px 0px;"></p>
                <p class="text-center" style="margin:16px 0px 0px;"><label class="d-block" style="margin:auto;">Enter New Password</label></p>
                <div class="d-flex" style="margin:auto;"><input class="form-control d-block" type="password" name="password" required="" placeholder="Password" style="margin:auto;width:250px;"></div>
                <p class="text-center" style="margin:16px 0px 0px;"><label class="d-block" style="margin:auto;">Confirm New Password</label></p>
                <div class="d-flex" style="margin:auto;"><input class="form-control d-block" type="password" name="passwordconfirm" required="" placeholder="Confirm Password" style="margin:auto;width:250px;"></div>
                <input type="hidden" name="email" value="<?= $email ?>">
                <input type="hidden" name="hash" value="<?= $hash ?>">
                <div class="d-block" style="margin:auto;width:200px;">
                    <p class="text-center" style="margin:0;"><button class="btn btn-primary" type="submit" style="margin:30px;">RESET</button></p>
                </div>
            </form>
            <div class="d-flex justify-content-center">
                <div>
                    <div></div>
                    <p class="text-center" style="margin:0;"></p>
                </div>
            </div>
        </div>
        <footer id="stickbottom" style="width:100%;">
            <p class="text-center">Copyright Darius Aleksiunas<br></p>
        </footer>
    </section>
    <script src="assets/js/jquery.min.js"></script>
    <script src="assets/bootstrap/js/bootstrap.min.js"></script>
    <script src="https://unpkg.com/@bootstrapstudio/bootstrap-better-nav/dist/bootstrap-better-nav.min.js"></script>
</body>

</html>