/
verify.php
55 lines (42 loc) · 1.9 KB
/
verify.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
<?php
# Mantis - a php based bugtracking system
# Copyright (C) 2000 - 2002 Kenzaburo Ito - kenito@300baud.org
# Copyright (C) 2002 - 2004 Mantis Team - mantisbt-dev@lists.sourceforge.net
# This program is distributed under the terms and conditions of the GPL
# See the README and LICENSE files for details
# --------------------------------------------------------
# $Id: verify.php,v 1.3 2004-10-25 19:45:04 marcelloscata Exp $
# --------------------------------------------------------
# ======================================================================
# Author: Marcello Scata' <marcelloscata at users.sourceforge.net> ITALY
# ======================================================================
require_once( 'core.php' );
# lost password feature disabled or reset password via email disabled -> stop here!
if( OFF == config_get( 'lost_password_feature' ) ||
OFF == config_get( 'send_reset_password' ) ) {
trigger_error( ERROR_LOST_PASSWORD_NOT_ENABLED, ERROR );
}
$f_user_id = gpc_get_string('id');
$f_confirm_hash = gpc_get_string('confirm_hash');
$t_calculated_confirm_hash = auth_generate_confirm_hash( $f_user_id );
if ( $f_confirm_hash != $t_calculated_confirm_hash ) {
trigger_error( ERROR_LOST_PASSWORD_CONFIRM_HASH_INVALID, ERROR );
}
auth_logout();
auth_set_cookies( $f_user_id, false );
user_reset_failed_login_count_to_zero( $f_user_id );
user_reset_lost_password_in_progress_count_to_zero( $f_user_id );
# fake login so the user can set their password
auth_attempt_script_login( user_get_field( $f_user_id, 'username' ) );
include ( dirname( __FILE__ ) . DIRECTORY_SEPARATOR . 'account_page.php' );
/*
html_page_top1();
html_page_top2();
echo '<br/>';
echo '<div align="center">';
echo lang_get( 'lost_password_confirm_hash_OK' ) . '<br/><br/>';
print_bracket_link( $t_redirect_url, lang_get( 'proceed' ) );
echo '</div>';
html_page_bottom1( __FILE__ );
*/
?>