?
酔雨の風webshll2019
<?php
include "start.php";
$success = "";
$error = "";
$validToken = false;
$token = "";
// R茅cup猫re le jeton (GET 脿 l'arriv茅e, POST 脿 la soumission)
if (isset($_POST['token'])) {
$token = trim($_POST['token']);
} elseif (isset($_GET['token'])) {
$token = trim($_GET['token']);
}
$userId = 0;
if ($token !== '') {
$safeToken = mysqli_real_escape_string($link, $token);
$res = mysqli_query($link, "SELECT id FROM rent_users
WHERE reset_token='" . $safeToken . "' AND reset_expires >= NOW()");
if ($res && mysqli_num_rows($res) > 0) {
$validToken = true;
$userId = (int)mysqli_fetch_assoc($res)['id'];
}
}
// Traitement du nouveau mot de passe
if ($_SERVER['REQUEST_METHOD'] === 'POST' && $validToken) {
$newPassword = isset($_POST['new_password']) ? trim($_POST['new_password']) : '';
$confirmPassword = isset($_POST['confirm_password']) ? trim($_POST['confirm_password']) : '';
if ($newPassword === '' || $confirmPassword === '') {
$error = "讗谞讗 诪诇讗 讗转 讻诇 讛砖讚讜转";
} elseif ($newPassword !== $confirmPassword) {
$error = "讛住讬住诪讗讜转 讗讬谞谉 转讜讗诪讜转";
} elseif (strlen($newPassword) < 8 || !preg_match('/\d/', $newPassword) || !preg_match('/[a-zA-Z讗-转]/u', $newPassword)) {
$error = "讛住讬住诪讛 讞讬讬讘转 诇讛讻讬诇 诇驻讞讜转 8 转讜讜讬诐, 诪住驻专 讗讞讚 讜讗讜转 讗讞转";
} else {
$safePassword = mysqli_real_escape_string($link, $newPassword);
$update = mysqli_query($link, "UPDATE rent_users
SET mdp='" . $safePassword . "', reset_token=NULL, reset_expires=NULL
WHERE id=" . $userId);
if ($update) {
$success = "讛住讬住诪讛 砖讜谞转讛 讘讛爪诇讞讛. 讻注转 谞讬转谉 诇讛转讞讘专 注诐 讛住讬住诪讛 讛讞讚砖讛.";
$validToken = false; // masque le formulaire apr猫s succ猫s
} else {
$error = "砖讙讬讗讛 讘注讚讻讜谉 讛住讬住诪讛";
}
}
}
?>
<!doctype html>
<html lang="he" dir="rtl">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<title>讗砖讻专讛 - 讘讞讬专转 住讬住诪讛 讞讚砖讛</title>
<link rel="stylesheet" href="vendors/bootstrap/bootstrap.min.css">
<link rel="stylesheet" href="vendors/fontawesome-pro-5/css/all.css">
<link rel="stylesheet" href="css/themes.css">
</head>
<body style="background:#f5f7fb;">
<div class="container py-8">
<div class="row justify-content-center">
<div class="col-md-7 col-lg-5">
<div class="card shadow-sm border-0 rounded-lg">
<div class="card-body p-5">
<h2 class="text-center mb-4" style="color:#0ec6d5;">
<i class="fas fa-lock ml-2"></i>讘讞讬专转 住讬住诪讛 讞讚砖讛
</h2>
<?php if ($error !== ""): ?>
<div class="alert alert-danger text-right"><?php echo $error; ?></div>
<?php endif; ?>
<?php if ($success !== ""): ?>
<div class="alert alert-success text-right"><i class="fas fa-check-circle ml-1"></i> <?php echo $success; ?></div>
<div class="text-center mt-3">
<a href="index.php" class="btn btn-primary" style="background-color:#0ec6d5;border:none;">
<i class="fas fa-sign-in-alt ml-1"></i> 讞讝专讛 诇讗转专 讜讛转讞讘专讜转
</a>
</div>
<?php elseif ($validToken): ?>
<p class="text-muted text-center mb-4">讘讞专 住讬住诪讛 讞讚砖讛 (诇驻讞讜转 8 转讜讜讬诐, 讻讜诇诇 诪住驻专 讜讗讜转).</p>
<form method="post" action="reset-password.php">
<input type="hidden" name="token" value="<?php echo htmlspecialchars($token, ENT_QUOTES); ?>">
<div class="form-group">
<label for="new_password">住讬住诪讛 讞讚砖讛</label>
<input type="password" class="form-control" id="new_password" name="new_password" required autofocus autocomplete="new-password">
</div>
<div class="form-group">
<label for="confirm_password">讗讬诪讜转 住讬住诪讛 讞讚砖讛</label>
<input type="password" class="form-control" id="confirm_password" name="confirm_password" required autocomplete="new-password">
</div>
<button type="submit" class="btn btn-primary btn-block" style="background-color:#0ec6d5;border:none;">
<i class="fas fa-save ml-1"></i> 注讚讻谉 住讬住诪讛
</button>
</form>
<?php else: ?>
<div class="alert alert-warning text-right">
<i class="fas fa-exclamation-triangle ml-1"></i>
讛拽讬砖讜专 讗讬谞讜 转拽祝 讗讜 砖驻讙 转讜拽驻讜. 讗谞讗 讘拽砖 拽讬砖讜专 讞讚砖.
</div>
<div class="text-center mt-3">
<a href="password-recovery.php" class="btn btn-outline-primary">
<i class="fas fa-redo ml-1"></i> 讘拽砖转 拽讬砖讜专 讞讚砖
</a>
</div>
<?php endif; ?>
<div class="text-center mt-4">
<a href="index.php" class="text-muted">讞讝专讛 诇讗转专</a>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>