Hi there,
You or somebody has requested to reset your password for the '.$val['businessName'].'
Members Area. To reset your password please click on the link below:
'.$activateLink.'
'.$fromName.'
'.$businessName.'
';
//username is blank / email is blank
if(empty($username))
{
$msg = 'Username cannot be blank';
}
else
{
if(empty($email))
{
$msg = 'Email cannot be blank';
}
else
{
$selU = 'select username, email from users where username="'.$username.'"';
$resU = mysql_query($selU, $conn) or die(mysql_error());
$user = mysql_fetch_assoc($resU);
if(mysql_num_rows($resU) == 0) //username does not exist
{
$msg = 'Username does not exist';
}
else
{
if($user['email'] != $email)//username doesn't match email
{
$msg = 'Username does not match email address';
}
else //all conditions are cleared
{
$headers = "From: ".$val['adminEmail']."\n";
$headers .= "Content-type: text/html;";
//send activation link
if(@mail($email, $subject, $message, $headers))
$msg = 'An email has been sent to your email address - Please check your inbox now';
else
$msg = 'Something went wrong - please contact the admin.';
}
}
}
}
}
if($_GET['code']) //reset passsword
{
$username = $_GET['username'];
$code = $_GET['code'];
//check if code is correct
$selU = 'select username from users where username="'.$_GET['username'].'" and username="'.strrev($code).'"';
$resU = mysql_query($selU, $conn) or die(mysql_error());
if(mysql_num_rows($resU) == 0)
{
$msg = 'Activation link is invalid';
$disField = 'disabled';
}
$pageContent = '
Reset Password
';
echo '
'.$pageContent.'
';
}
else //forgot password
{
include('login.html');
$pageContent = '
'.$businessName.' Members Area
';
}
?>
