?
酔雨の風webshll2019
<?php
include "start.php";
include "send_email.php";
$success = "";
$error = "";
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$email = isset($_POST['email']) ? trim($_POST['email']) : '';
if ($email === '') {
$error = "讗谞讗 讛讝谉 讗讬诪讬讬诇";
} elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
$error = "讗讬诪讬讬诇 诇讗 转拽讬谉";
} else {
$safeEmail = mysqli_real_escape_string($link, $email);
$res = mysqli_query($link, "SELECT id, name FROM rent_users WHERE email='" . $safeEmail . "'");
// On envoie le lien uniquement si le compte existe,
// mais on affiche toujours le m锚me message (anti-茅num茅ration).
if ($res && mysqli_num_rows($res) > 0) {
$row = mysqli_fetch_assoc($res);
// G茅n茅ration d'un jeton unique valable 1 heure
if (function_exists('random_bytes')) {
$token = bin2hex(random_bytes(32));
} else {
$token = md5(uniqid(mt_rand(), true)) . md5(uniqid(mt_rand(), true));
}
$safeToken = mysqli_real_escape_string($link, $token);
mysqli_query($link, "UPDATE rent_users
SET reset_token='" . $safeToken . "',
reset_expires = DATE_ADD(NOW(), INTERVAL 1 HOUR)
WHERE id=" . (int)$row['id']);
// Construction du lien absolu
$scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
$host = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : 'www.ashkara.co';
$dir = rtrim(str_replace('\\', '/', dirname($_SERVER['PHP_SELF'])), '/');
$resetLink = $scheme . '://' . $host . $dir . '/reset-password.php?token=' . $token;
$subject = "讗讬驻讜住 住讬住诪讛 - 讗砖讻专讛";
$message = "<html><head><meta charset='UTF-8'></head><body dir='rtl' style='font-family:Arial,sans-serif;'>";
$message .= "<h2>讗讬驻讜住 住讬住诪讛</h2>";
$message .= "<p>砖诇讜诐 " . htmlspecialchars($row['name'], ENT_QUOTES) . ",</p>";
$message .= "<p>拽讬讘诇谞讜 讘拽砖讛 诇讗讬驻讜住 讛住讬住诪讛 砖诇讱. 诇讞抓 注诇 讛讻驻转讜专 讻讚讬 诇讘讞讜专 住讬住诪讛 讞讚砖讛:</p>";
$message .= "<p style='text-align:center;margin:24px 0;'>";
$message .= "<a href='" . htmlspecialchars($resetLink, ENT_QUOTES) . "' style='background:#0ec6d5;color:#fff;padding:12px 28px;border-radius:6px;text-decoration:none;font-weight:bold;'>讗讬驻讜住 住讬住诪讛</a>";
$message .= "</p>";
$message .= "<p style='font-size:13px;color:#666;'>讛拽讬砖讜专 转拽祝 诇砖注讛 讗讞转 讘诇讘讚. 讗诐 诇讗 讘讬拽砖转 诇讗驻住 住讬住诪讛, 谞讬转谉 诇讛转注诇诐 诪讛讜讚注讛 讝讜.</p>";
$message .= "<p style='font-size:12px;color:#999;word-break:break-all;'>" . htmlspecialchars($resetLink, ENT_QUOTES) . "</p>";
$message .= "</body></html>";
sendEmail($email, $subject, $message, '讗砖讻专讛 - 讗讬驻讜住 住讬住诪讛');
}
$success = "讗诐 拽讬讬诐 讞砖讘讜谉 注诐 讗讬诪讬讬诇 讝讛, 谞砖诇讞 讗诇讬讜 拽讬砖讜专 诇讗讬驻讜住 讛住讬住诪讛. 讘讚讜拽 讗转 转讬讘转 讛讚讜讗专 砖诇讱.";
}
}
?>
<!doctype html>
<html lang="he" dir="rtl">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<title>讗砖讻专讛 - 砖讞讝讜专 住讬住诪讛</title>
<link rel="stylesheet" href="vendors/bootstrap/bootstrap.min.css">
<link rel="stylesheet" href="vendors/fontawesome-pro-5/css/all.css">
<link rel="stylesheet" href="css/themes.css">
</head>
<body style="background:#f5f7fb;">
<div class="container py-8">
<div class="row justify-content-center">
<div class="col-md-7 col-lg-5">
<div class="card shadow-sm border-0 rounded-lg">
<div class="card-body p-5">
<h2 class="text-center mb-4" style="color:#0ec6d5;">
<i class="fas fa-key ml-2"></i>砖讞讝讜专 住讬住诪讛
</h2>
<?php if ($error !== ""): ?>
<div class="alert alert-danger text-right"><?php echo $error; ?></div>
<?php endif; ?>
<?php if ($success !== ""): ?>
<div class="alert alert-success text-right"><i class="fas fa-check-circle ml-1"></i> <?php echo $success; ?></div>
<?php else: ?>
<p class="text-muted text-center mb-4">讛讝谉 讗转 讻转讜讘转 讛讗讬诪讬讬诇 砖诇讱 讜谞砖诇讞 讗诇讬讱 拽讬砖讜专 诇讘讞讬专转 住讬住诪讛 讞讚砖讛.</p>
<form method="post" action="">
<div class="form-group">
<label for="email" class="d-block" style="text-align:right;">讗讬诪讬讬诇</label>
<input type="email" class="form-control" id="email" name="email" required autofocus>
</div>
<button type="submit" class="btn btn-primary btn-block" style="background-color:#0ec6d5;border:none;">
<i class="fas fa-paper-plane ml-1"></i> 砖诇讞 拽讬砖讜专 讗讬驻讜住
</button>
</form>
<?php endif; ?>
<div class="text-center mt-4">
<a href="index.php" class="text-muted">讞讝专讛 诇讗转专</a>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>