1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / nc6d095 / betstrength.com / view /
Filename : new-password.php
back
<?php
global $now, $mainRoot, $db;
include "../admin/inc/config.php";

$passwordBox = $completedBox = $infoBox = false;

if(isset($_POST['reqPwdReset'])){
    $gcReq = $_POST['g-recaptcha-response'];
    $response = validateCaptcha($gcReq);
//    if ($response->success) {
    if (1==1) {
        if (!empty($_POST['subEmail'])) {
            $email = strtolower(trim(mysqli_real_escape_string($db, $_POST['subEmail'])));
        } else {
            $errs[] = $subEmailErr = "required";
        }
        if(isset($email) && count($errs) == 0){
            $chkUser = dbSelect('subscribers', "*", "email='$email'");
            if (mysqli_num_rows($chkUser) > 0) {
                $userData = mysqli_fetch_assoc($chkUser);
                $user = $userData['id'];
                $userID = $userData['userID'];
                $fName = $userData['fname'];
                $token = md5($userID);
                if(!cntRows('acct_tokens',"user=$user AND purpose='password' AND status='pending'") > 0) {
                    $q = dbInsert('acct_tokens', ['user' => $user, 'token' => $token, 'purpose' => 'password', 'dc' => $now]);
                }
                $body = "Kindly click the link below to set a new password for your account. You must <strong class='text-primary'>IGNORE</strong> this mail if you did not initiate this process.";
                $link = $mainRoot . "new-password/$userID/$token";
                $logoPath = "../assets/img/main/brand/logo.png";
                $subject = "Password Reset";
                require '../admin/vendor/PHPMailer/PHPMailerAutoload.php';
                include("../admin/inc/mail-temps/reset-pwd.php");
                $smsg = "Please check your email inbox for the password reset link you requested";
                $preventResubmission = true;
                $getEmailAddress = false;
                $emailSent = true;
                }
            else{
                $emsg = "no such account here";
            }
        }
    }
    else{
        $emsg = "kindly prove you're human";
    }
}

if(isset($_GET['u']) && isset($_GET['token'])) {
    $userID = $_GET['u'];
    $token = $_GET['token'];
    $userId = getDBValNoID('subscribers', "userID='$userID'", 'id');
    if ($userId > 0 && !empty($token)) {
        $tokenId = getDBValNoID('acct_tokens', "token='$token' AND purpose='password' AND status='pending'", 'id');
        if ($tokenId > 0) {
            $tokenStatus = getDBVal('acct_tokens', $tokenId, 'status');
            $tokenPurpose = getDBVal('acct_tokens', $tokenId, 'purpose');
            if ($tokenStatus == 'pending' && $tokenPurpose == 'password') {
                $userRow = getRows('subscribers', "*", "userID='$userID'");
                $userData = mysqli_fetch_array($userRow);
                $username = $userData['username'];
                $userID = $userData['userID'];
                $fName = $userData['fname'];
                $email = $userData['email'];
                $passwordBox = true;
            } else {
                $error = "You have already used this token";
                $infoBox = true;
            }
        } else {
            $emsg = "token is no longer valid for this action";
            $infoBox = true;
        }
    } else {
        $emsg = "invalid user/token encountered again";
    }
}

if(isset($_POST['updateSubPwd'])){
    if(isset($_POST['iAgree'])) {
        $gcReq = $_POST['g-recaptcha-response'];
        $response = validateCaptcha($gcReq);
        if ($response->success) {
            $password = trim(mysqli_real_escape_string($db, $_POST['password']));
            $password2 = trim(mysqli_real_escape_string($db, $_POST['password2']));
            if (empty($password)) {
                $errs[] = $passwordErr = "value expected";
            } elseif (empty($password2)) {
                $errs[] = $password2Err = "value expected";
            } else {
                if (strlen($password) < 6 || strlen($password2) < 6) {
                    $errs[] = $passwordErr = $password2Err = "";
                    $emsg = "minimum of 6 characters expected";
                } elseif ($password != $password2) {
                    $errs[] = $passwordMatchErr = "";
                    $emsg = "the two passwords do not match";
                }
            }
            if (count($errs) == 0) {
                $cryptPwd = md5($password2);
                $q = dbUpdate('subscribers', ['pwd' => $cryptPwd, 'du' => $now], "id=" . $userId);
                $q2 = dbUpdate('acct_tokens', ['status' => 'used', 'du' => $now], "id=" . $tokenId);
                if ($q && $q2) {
                    $body = "Kindly note that the password reset process you initiated was successful.";
                    $logoPath = "../assets/img/main/brand/logo.png";
                    $subject = "Password Reset Successful";
                    require '../admin/vendor/PHPMailer/PHPMailerAutoload.php';
                    include("../admin/inc/mail-temps/public-notification.php");
                    $smsg = "Well done $fName, you have successfully reset your password";
                    $preventResubmission = true;
                    $passwordBox = false;
                    $completedBox = true;
                }
            }
        } else {
            $emsg = "prove you are human";
        }
    }else{
        $emsg = "you must agree to the consent";
    }
}


const TITLE = "Password Reset";
const HEADER = "New Password";
#save unit



include "../inc/head.php";

?>

    <div class="content-wrapper">
        <?php include "../inc/header.php"; ?>
        <!-- /header -->

        <?php include "../inc/page-header.php"; ?>
        <!-- /section -->
        <section class="wrapper bg-light">
            <div class="container pb-14 pb-md-16">
                <div class="row">
                    <div class="col mt-n19">
                        <div class="card shadow-lg">
                            <div class="row gx-0 text-center justify-content-center">
                                <div class="col-lg-6">
                                    <div class="p-3 p-md-11 py-lg-13">
                                        <img src="<?= $mainRoot ?>assets/img/main/policy.png" alt="" class="d-inline-block img-fluid my-10" width="200">


                                        <?php if($passwordBox): ?>
                                            <p class="lead mb-6 text-center">Fields marked <strong class="text-danger">*</strong> are required. Kindly ensure you provide a strong password.</p>
                                            <form class="text-start mb-3" action="" method="post">
                                                <div class="mb-3">
                                                    <div class="form-floating">
                                                        <input type="password" name="password" id="password" placeholder="New Password" class="form-control" value="<?= $_POST['password'] ?? '' ?>">
                                                        <label for="password">New Password <span class="text-danger">*</span> <span class="text-info">minimum of 6 characters</span></label>
                                                    </div>
                                                    <span class="text-danger"><?= $passwordErr ?? "" ?></span>
                                                </div>
                                                <div class="mb-3">
                                                    <div class="form-floating">
                                                        <input type="password" name="password2" id="password2" placeholder="Confirm New Password" class="form-control" value="<?= $_POST['password2'] ?? '' ?>">
                                                        <label for="password2">Confirm New Password <span class="text-danger">*</span></label>
                                                    </div>
                                                    <span class="text-danger"><?= $password2Err ?? "" ?></span>
                                                </div>

                                                <div class="mb-3">
                                                    <div class="form-check">
                                                        <input class="form-check-input" type="checkbox" value="yes" name="iAgree" id="" <?php if(isset($_POST['iAgree']) && $_POST['iAgree'] == 'yes'){ echo 'checked'; } ?>>
                                                        <label class="form-check-label" for="">
                                                            By proceeding with this password reset, you confirm that you are the authorized user of this account. You acknowledge that resetting your password will revoke access to your account with the previous password. It is your responsibility to ensure that the new password is secure and kept confidential. <strong class="text-primary">Bet Strength</strong> will not be liable for any unauthorized access to your account due to password mismanagement. If you did not request this reset, please contact our support team immediately
                                                            <a href="mailto:support@betstrength.com" class="hover fw-bolder">support@betstrength.com</a>
                                                        </label>
                                                    </div>
                                                    <span class="text-danger"><?= $iAgreeErr ?? "" ?></span>
                                                </div>
                                                <div class="mb-3">
                                                    <div class="g-recaptcha"
                                                         data-sitekey="6Lfhc9YZAAAAACfi_i5vchCsiJsd3-pG7yKb4E0G" data-size="" data-theme="dark">
                                                    </div>
                                                </div>

                                                <button type="submit" name="updateSubPwd" class="btn btn-primary rounded-pill w-100 mb-2 action-btn submitButton">Reset</button>
                                            </form>
                                            <!-- /form -->
                                            <p class="mb-0">Don't have an account? <a href="<?= $mainRoot ?>register" class="hover">Register</a></p>
                                            <p class="mb-0">Haven't got verification mail? <a href="<?= $mainRoot ?>verification-request" class="hover">Make Request</a></p>
                                        <?php endif ?>

                                        <?php if($infoBox): ?>
                                            <p>Something went wrong. Please check the user ID and Token and try again</p>
                                            <p class="mb-1">
                                                <a class="hover" href="<?= $mainRoot ?>login">Login Now!</a>
                                            </p>
                                        <?php endif ?>

                                        <?php if($completedBox): ?>
                                            <p>Your password reset was successfully completed, please login below:</p>
                                            <p class="mb-1">
                                                <a class="hover" href="<?= $mainRoot ?>login">Login Now!</a>
                                            </p>
                                        <?php endif ?>
                                    </div>
                                    <!--/div -->
                                </div>
                                <!--/column -->
                            </div>
                            <!--/.row -->
                        </div>
                        <!-- /.card -->
                    </div>
                    <!-- /column -->
                </div>
                <!-- /.row -->
            </div>
            <!-- /.container -->
        </section>
        <!-- /section -->
    </div>
    <!-- /.content-wrapper -->

<?php
include "../inc/footer.php";
include "../inc/foot.php";
?>