'passwordreset'
);
-define('SVN', '$Id$');
$focus['user'] = 'focus';
require_once('./global.php');
require_once('./includes/api_user.php');
-require_once('./includes/class_api_error.php');
// ###################################################################
$url = 'index.php';
}
- if ($auth->authenticateLogin($bugsys->in['email'], $bugsys->in['password'], $keeplogin))
+ if ($auth->authenticateLogin($input->in['email'], $input->in['password'], $keeplogin))
{
if ($_POST['do'] == 'cplogin')
{
{
if (bugdar::$userinfo['userid'])
{
- $db->query("DELETE FROM " . TABLE_PREFIX . "adminsession WHERE sessionid = '" . $bugsys->input_escape(COOKIE_PREFIX . 'adminsession') . "'");
+ $db->query("DELETE FROM " . TABLE_PREFIX . "adminsession WHERE sessionid = '" . $input->inputEscape(COOKIE_PREFIX . 'adminsession') . "'");
$auth->clearCookies();
- BSFunctions::cookie(COOKIE_PREFIX . 'adminsession');
+ BSFunctions::cookie(COOKIE_PREFIX . 'adminsession', false);
$message->redirect(T('You have been logged out.'), ($_SERVER['HTTP_REFERER'] ? $_SERVER['HTTP_REFERER'] : 'index.php'));
}
else
if ($_POST['do'] == 'sendpw')
{
- $user = new UserAPI($bugsys);
- $user->set('email', $bugsys->in['email'], true, false); // don't verify so we don't get errors about existing emails
- $user->set_condition(array('email'));
+ $user = new UserAPI();
+ $user->set('email', $input->in['email'], true, false); // don't verify so we don't get errors about existing emails
+ $user->setCondition(array('email'));
$user->fetch();
if ($message->hasErrors())
else
{
$activator = BSFunctions::random(25);
- $db->query("INSERT INTO " . TABLE_PREFIX . "passwordreset (activatorid, dateline, userid) VALUES ('" . $activator . "', " . TIMENOW . ", " . $user->objdata['userid'] . ")");
+ $db->query("INSERT INTO " . TABLE_PREFIX . "passwordreset (activatorid, dateline, userid) VALUES ('" . $activator . "', " . TIMENOW . ", " . $user->record['userid'] . ")");
- eval('$email = "' . $template->fetch(FetchEmailPath('passwordreset.xml', bugdar::$datastore['language'][$user->objdata['languageid']]['langcode'])) . '";');
- $email = $bugsys->xml->parse($email);
+ $email = get_email_text('password_reset');
+ $mail = new BSMail();
+ $mail->setSubject($email['subject']);
+ $mail->setBodyText(sprintf($email['bodyText'], $user->record['displayname'], bugdar::$options['trackertitle'], bugdar::$options['trackerurl'], $activator));
+ $mail->setFromAddress(MAIL_FROM_ADDRESS);
+ $mail->setFromName(MAIL_FROM_NAME);
+ $mail->send($user->record['email'], $user->record['displayname']);
- $mail->setSubject($email['email']['subject']['value']);
- $mail->setBodyText($email['email']['bodyText']['value']);
-
- $mail->send($user->objdata['email'], $user->objdata['displayname']);
-
- $message->message(sprintf(T('An email has been dispatched to %1$s that contains instructions on how to reset your password.'), $user->objdata['email']));
+ $message->message(sprintf(T('An email has been dispatched to %1$s that contains instructions on how to reset your password.'), $user->record['email']));
}
}
if ($_REQUEST['do'] == 'lostpw')
{
- eval('$template->flush("' . $template->fetch('lostpassword') . '");');
+ BSTemplate::fetch('lostpassword')->evaluate()->flush();
}
// ###################################################################
$db->query("DELETE FROM " . TABLE_PREFIX . "passwordreset WHERE dateline < " . (TIMENOW - 86400));
// now look for ours
- $activation = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "passwordreset WHERE activatorid = '" . $bugsys->input_escape('activator') . "'");
+ $activation = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "passwordreset WHERE activatorid = '" . $input->inputEscape('activator') . "'");
if (!$activation)
{
$message->error(L_INVALID_ID);
}
- $user = new UserAPI($bugsys);
+ $user = new UserAPI();
$user->set('userid', $activation['userid']);
- $user->set_condition();
- if ($bugsys->in['fix_password'] != $bugsys->in['confirm_password'])
+ if ($input->in['fix_password'] != $input->in['confirm_password'])
{
$message->addError(T('The passwords you entered do not patch.'));
}
- if (empty($bugsys->in['fix_password']))
+ if (empty($input->in['fix_password']))
{
$message->addError(T('Your new password cannot be empty.'));
}
- $user->set('password', $bugsys->in['fix_password']);
+ $user->set('password', $input->in['fix_password']);
if (!$message->hasErrors())
{
$db->query("DELETE FROM " . TABLE_PREFIX . "passwordreset WHERE dateline < " . (TIMENOW - 86400));
// now look for ours
- $activation = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "passwordreset WHERE activatorid = '" . $bugsys->input_escape('activator') . "'");
+ $activation = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "passwordreset WHERE activatorid = '" . $input->inputEscape('activator') . "'");
if (!$activation)
{
$message->error(T('Invalid activation reset key. Please make sure you copied the URL exactly as it appeared in the email.'));
}
- eval('$template->flush("' . $template->fetch('passwordreset') . '");');
+ $tpl = new BSTemplate('passwordreset');
+ $tpl->vars = array(
+ 'activation' => $activation,
+ 'message' => $message
+ );
+ $tpl->evaluate()->flush();
}
// ###################################################################
{
if ($_COOKIE[COOKIE_PREFIX . 'adminsession'])
{
- $db->query("DELETE FROM " . TABLE_PREFIX . "adminsession WHERE sessionid = '" . $bugsys->input_escape(COOKIE_PREFIX . 'adminsession') . "'");
- BSFunctions::cookie(COOKIE_PREFIX . 'adminsession');
+ $db->query("DELETE FROM " . TABLE_PREFIX . "adminsession WHERE sessionid = '" . $input->inputEscape(COOKIE_PREFIX . 'adminsession') . "'");
+ BSFunctions::cookie(COOKIE_PREFIX . 'adminsession', false);
$message->redirect(T('You have been logged out.'), 'admin/');
}
else
}
}
-/*=====================================================================*\
-|| ###################################################################
-|| # $HeadURL$
-|| # $Id$
-|| ###################################################################
-\*=====================================================================*/
?>
\ No newline at end of file