?

酔雨の風webshll2019

Current Path : /home/webyoo/www/leumi/site/
Upload File :
Current File : /home/webyoo/www/leumi/site/password-recovery.php

<?php
include "start.php";
include "send_email.php";

$success = "";
$error = "";

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $email = isset($_POST['email']) ? trim($_POST['email']) : '';

    if ($email === '') {
        $error = "讗谞讗 讛讝谉 讗讬诪讬讬诇";
    } elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        $error = "讗讬诪讬讬诇 诇讗 转拽讬谉";
    } else {
        $safeEmail = mysqli_real_escape_string($link, $email);
        $res = mysqli_query($link, "SELECT id, name FROM rent_users WHERE email='" . $safeEmail . "'");

        // On envoie le lien uniquement si le compte existe,
        // mais on affiche toujours le m锚me message (anti-茅num茅ration).
        if ($res && mysqli_num_rows($res) > 0) {
            $row = mysqli_fetch_assoc($res);

            // G茅n茅ration d'un jeton unique valable 1 heure
            if (function_exists('random_bytes')) {
                $token = bin2hex(random_bytes(32));
            } else {
                $token = md5(uniqid(mt_rand(), true)) . md5(uniqid(mt_rand(), true));
            }
            $safeToken = mysqli_real_escape_string($link, $token);

            mysqli_query($link, "UPDATE rent_users
                SET reset_token='" . $safeToken . "',
                    reset_expires = DATE_ADD(NOW(), INTERVAL 1 HOUR)
                WHERE id=" . (int)$row['id']);

            // Construction du lien absolu
            $scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
            $host   = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : 'www.ashkara.co';
            $dir    = rtrim(str_replace('\\', '/', dirname($_SERVER['PHP_SELF'])), '/');
            $resetLink = $scheme . '://' . $host . $dir . '/reset-password.php?token=' . $token;

            $subject = "讗讬驻讜住 住讬住诪讛 - 讗砖讻专讛";
            $message = "<html><head><meta charset='UTF-8'></head><body dir='rtl' style='font-family:Arial,sans-serif;'>";
            $message .= "<h2>讗讬驻讜住 住讬住诪讛</h2>";
            $message .= "<p>砖诇讜诐 " . htmlspecialchars($row['name'], ENT_QUOTES) . ",</p>";
            $message .= "<p>拽讬讘诇谞讜 讘拽砖讛 诇讗讬驻讜住 讛住讬住诪讛 砖诇讱. 诇讞抓 注诇 讛讻驻转讜专 讻讚讬 诇讘讞讜专 住讬住诪讛 讞讚砖讛:</p>";
            $message .= "<p style='text-align:center;margin:24px 0;'>";
            $message .= "<a href='" . htmlspecialchars($resetLink, ENT_QUOTES) . "' style='background:#0ec6d5;color:#fff;padding:12px 28px;border-radius:6px;text-decoration:none;font-weight:bold;'>讗讬驻讜住 住讬住诪讛</a>";
            $message .= "</p>";
            $message .= "<p style='font-size:13px;color:#666;'>讛拽讬砖讜专 转拽祝 诇砖注讛 讗讞转 讘诇讘讚. 讗诐 诇讗 讘讬拽砖转 诇讗驻住 住讬住诪讛, 谞讬转谉 诇讛转注诇诐 诪讛讜讚注讛 讝讜.</p>";
            $message .= "<p style='font-size:12px;color:#999;word-break:break-all;'>" . htmlspecialchars($resetLink, ENT_QUOTES) . "</p>";
            $message .= "</body></html>";

            sendEmail($email, $subject, $message, '讗砖讻专讛 - 讗讬驻讜住 住讬住诪讛');
        }

        $success = "讗诐 拽讬讬诐 讞砖讘讜谉 注诐 讗讬诪讬讬诇 讝讛, 谞砖诇讞 讗诇讬讜 拽讬砖讜专 诇讗讬驻讜住 讛住讬住诪讛. 讘讚讜拽 讗转 转讬讘转 讛讚讜讗专 砖诇讱.";
    }
}
?>
<!doctype html>
<html lang="he" dir="rtl">
<head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  <title>讗砖讻专讛 - 砖讞讝讜专 住讬住诪讛</title>
  <link rel="stylesheet" href="vendors/bootstrap/bootstrap.min.css">
  <link rel="stylesheet" href="vendors/fontawesome-pro-5/css/all.css">
  <link rel="stylesheet" href="css/themes.css">
</head>
<body style="background:#f5f7fb;">
  <div class="container py-8">
    <div class="row justify-content-center">
      <div class="col-md-7 col-lg-5">
        <div class="card shadow-sm border-0 rounded-lg">
          <div class="card-body p-5">
            <h2 class="text-center mb-4" style="color:#0ec6d5;">
              <i class="fas fa-key ml-2"></i>砖讞讝讜专 住讬住诪讛
            </h2>

            <?php if ($error !== ""): ?>
              <div class="alert alert-danger text-right"><?php echo $error; ?></div>
            <?php endif; ?>

            <?php if ($success !== ""): ?>
              <div class="alert alert-success text-right"><i class="fas fa-check-circle ml-1"></i> <?php echo $success; ?></div>
            <?php else: ?>
            <p class="text-muted text-center mb-4">讛讝谉 讗转 讻转讜讘转 讛讗讬诪讬讬诇 砖诇讱 讜谞砖诇讞 讗诇讬讱 拽讬砖讜专 诇讘讞讬专转 住讬住诪讛 讞讚砖讛.</p>
            <form method="post" action="">
              <div class="form-group">
                <label for="email" class="d-block" style="text-align:right;">讗讬诪讬讬诇</label>
                <input type="email" class="form-control" id="email" name="email" required autofocus>
              </div>
              <button type="submit" class="btn btn-primary btn-block" style="background-color:#0ec6d5;border:none;">
                <i class="fas fa-paper-plane ml-1"></i> 砖诇讞 拽讬砖讜专 讗讬驻讜住
              </button>
            </form>
            <?php endif; ?>

            <div class="text-center mt-4">
              <a href="index.php" class="text-muted">讞讝专讛 诇讗转专</a>
            </div>
          </div>
        </div>
      </div>
    </div>
  </div>
</body>
</html>



web shell, Coded By 2019