forked from kestasjk/webDiplomacy
/
logon.php
executable file
·198 lines (164 loc) · 8.55 KB
/
logon.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
<?php
/*
Copyright (C) 2004-2010 Kestas J. Kuliukas
This file is part of webDiplomacy.
webDiplomacy is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
webDiplomacy is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU Affero General Public License
along with webDiplomacy. If not, see <http://www.gnu.org/licenses/>.
*/
/**
* @package Base
* @subpackage Forms
*/
require_once('header.php');
// Log-offs and log-ons are handled within header; here the form is presented, and forgotten passwords recovered
libHTML::starthtml();
if( isset($_REQUEST['forgotPassword']) and $User->type['Guest'] )
{
print libHTML::pageTitle(l_t('Reset your password'),l_t('Resetting passwords using your e-mail account, in-case you forgot your password.'));
try
{
if ( $_REQUEST['forgotPassword'] == 1 )
{
print '<p>'.l_t('Enter your username here, and an e-mail will be sent to the address you registered with, with an '.
'activation link that will set a new password.').
'</p>
<form action="./logon.php?forgotPassword=2" method="post">
<ul class="formlist">
<li class="formlisttitle">'.l_t('Username').'</li>
<li class="formlistfield"><input type="text" tabindex="1" maxlength=30 size=15 name="forgotUsername"></li>
<li class="formlistdesc">'.l_t('The vDiplomacy username of the account which you can\'t log in to.').'</li>
<li><input type="submit" class="form-submit" value="'.l_t('Send code').'"></li>
</ul>
</form>
<a href="logon.php?resendUsername=1" class="light">'.l_t('Forgot your username? Recover it here.').'</a>';
}
elseif ( $_REQUEST['forgotPassword'] == 2 && isset($_REQUEST['forgotUsername']) )
{
try {
$forgottenUser = new User(0,$DB->escape($_REQUEST['forgotUsername']));
} catch(Exception $e) {
throw new Exception(l_t("Cannot find an account for the given username, please ".
"<a href='logon.php?forgotPassword=1' class='light'>go back</a> and check your spelling."));
}
require_once(l_r('objects/mailer.php'));
$Mailer = new Mailer();
$Mailer->Send(array($forgottenUser->email=>$forgottenUser->username), l_t('vDiplomacy forgotten password verification link'),
l_t("You can use this link to get a new password generated:")."<br>
".libAuth::email_validateURL($forgottenUser->email)."&forgotPassword=3<br><br>
".l_t("If you have any further problems contact the server's admin at %s.",Config::$adminEMail)."<br>");
print '<p>'.l_t('An e-mail has been sent with a verification link, which will allow you to have your password reset. '.
'If you can\'t find the e-mail in your inbox try your junk folder/spam-box.').'</p>';
}
elseif ( $_REQUEST['forgotPassword'] == 3 && isset($_REQUEST['emailToken']) )
{
$validatedEmail = libAuth::emailToken_email($_REQUEST['emailToken']);
if( $validatedEmail === false )
throw new Exception(l_t("Account not found"));
$validatedEmail = $DB->escape($validatedEmail);
$userID = User::findEmail($validatedEmail);
if( $userID == 0 )
throw new Exception(l_t("Account not found"));
$newPassword = base64_encode(rand(1000000000,2000000000));
$DB->sql_put("UPDATE wD_Users
SET password=UNHEX('".libAuth::pass_Hash($newPassword)."')
WHERE id=".$userID." LIMIT 1");
print '<p>'.l_t('Thanks for verifying your address, this is your new password, which you can '.
'change once you have logged back on:').'<br /><br />
<strong>'.$newPassword.'</strong></p>
<p><a href="logon.php" class="light">'.l_t('Back to log-on prompt').'</a></p>';
}
}
catch(Exception $e)
{
print '<p class="notice">'.$e->getMessage().'</p>';
}
print '</div>';
libHTML::footer();
}
if( isset($_REQUEST['resendUsername']) and $User->type['Guest'] )
{
print libHTML::pageTitle(l_t('Recover your username'),l_t('Resend your username to your e-mail account, in-case you forgot it.'));
try
{
if ( $_REQUEST['resendUsername'] == 1 )
{
print '<p>'.l_t('Enter your eMail address here, and an e-mail with the corresponding username will be sent.').'</p>
<form action="./logon.php?resendUsername=2" method="post">
<ul class="formlist">
<li class="formlisttitle">'.l_t('eMail').'</li>
<li class="formlistfield"><input type="text" tabindex="1" size=15 name="resendEMail"></li>
<li class="formlistdesc">'.l_t('The eMail address of the account which you forgot the username.').'</li>
<li><input type="submit" class="form-submit" value="'.l_t('Recover username').'"></li>
</ul>
</form>';
}
elseif ( $_REQUEST['resendUsername'] == 2 && isset($_REQUEST['resendEMail']) )
{
$eMail = $DB->escape($_REQUEST['resendEMail']);
list($username) = $DB->sql_row("SELECT username FROM wD_Users WHERE email='".$DB->escape($_REQUEST['resendEMail'])."'");
if ($username == '')
throw new Exception(l_t("Cannot find an account for the given eMail address. Please ".
"<a href='logon.php?resendUsername=1' class='light'>go back</a> and check your spelling."));
require_once(l_r('objects/mailer.php'));
$Mailer = new Mailer();
$Mailer->Send(array($eMail=>$username), l_t('vDiplomacy recover username.'),
l_t("The username linked to this eMail address is:")."<br>".$username."<br><br>".
l_t("If you have any further problems contact the server's mods at %s.",(isset(Config::$modEMail) ? Config::$modEMail : Config::$adminEMail))."<br>");
print '<p>'.l_t('An e-mail with your username has been sent to %s. ',$eMail).'<br>'.
l_t('If you can\'t find the e-mail in your inbox try your junk folder/spam-box.'.
"If you have any further problems contact the server's mods at %s.",(isset(Config::$modEMail) ? Config::$modEMail : Config::$adminEMail)).'</p>';
}
}
catch(Exception $e)
{
print '<p class="notice">'.$e->getMessage().'</p>';
}
print '</div>';
libHTML::footer();
}
if( ! $User->type['User'] ) {
print libHTML::pageTitle(l_t('Log on'),l_t('Enter your vDiplomacy account username and password to log into your account.'));
print '
<form action="./index.php" method="post">
<ul class="formlist">
<li class="formlisttitle">'.l_t('Username').'</li>
<li class="formlistfield"><input type="text" tabindex="1" maxlength=30 size=15 name="loginuser"></li>
<li class="formlistdesc">'.l_t('Your vDiplomacy username. If you don\'t have one please '.
'<a href="register.php" class="light">register</a>.').'</li>
<li class="formlisttitle">'.l_t('Password').'</li>
<li class="formlistfield"><input type="password" tabindex="2" maxlength=30 size=15 name="loginpass"></li>
<li class="formlistdesc">'.l_t('Your vDiplomacy password.').'</li>
<li class="formlisttitle">'.l_t('Remember me').'</li>
<li class="formlistfield"><input type="checkbox" /></li>
<li class="formlistdesc">'.l_t('Do you want to stay logged in permanently? '.
'If you are on a public computer you should not stay logged on permanently!').'</li>
<li><input type="submit" class="form-submit" value="'.l_t('Log on').'"></li>
</ul>
</form>
<div class="hr"></div>
<p><b>Troubleshooting:</b>
<ul>
<li>If you forgot your password, use the lost password finder <a href="logon.php?forgotPassword=1">here</a>.</li>
<li>If you forgot your username, use the username recovery <a href="logon.php?resendUsername=1">here</a>.</li>
<li>If you forgot both, first use the username recovery <a href="logon.php?resendUsername=1">here</a>, and than the lost password finder <a href="logon.php?forgotPassword=1">here</a>.</li>
<li>If you are still unable to log in, contact the mods here: <a href="mailto:'.(isset(Config::$modEMail) ? Config::$modEMail : Config::$adminEMail).'">'.(isset(Config::$modEMail) ? Config::$modEMail : Config::$adminEMail).'</a></li>
</ul>
</p>';
} else {
print libHTML::pageTitle('Log off','Log out of your vDiplomacy account, to prevent other users of this computer accessing it.');
print '<form action="./logon.php" method="get">
<p class="notice"><input type="hidden" name="logoff" value="on">
<input type="submit" class="form-submit" value="'.l_t('Log off').'"></p>
</form>';
}
print '</div>';
libHTML::footer();
?>