1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / nc6d095 / www / member /
Filename : reset.php
back
<?php
session_start();
require('../admin/inc/config.php');
$reset = false;$used = false;
define ('TITLE', 'Password Reset');
if(isset($_GET['u']) && isset($_GET['d']) && isset($_GET['ref'])){
    $d = $_GET['d']; $u = $_GET['u']; $ref = $_GET['ref'];
    $staffId = getDBValNoID('members',"memberID='$u'",'id');
    $fName = getDBValNoID('members',"memberID='$u'",'fName');
    $email = getDBValNoID('members',"memberID='$u'",'email');
    $resetRefId = getDBValNoID('password_resets',"ref='$ref'",'id');
    if(getDBVal('password_resets',$resetRefId,'status') == 'used'){ $used = true; }
}else{
    exit();
}

if(isset($_POST['resetPwd'])){
    $newPwd = trim(mysqli_real_escape_string($db, $_POST['newPwd']));
    $newPwd2 = trim(mysqli_real_escape_string($db, $_POST['newPwd2']));
    if(empty($newPwd)){ array_push($errs, $newPwdErr = "You must enter your new password"); }
    if(empty($newPwd2)){ array_push($errs, $newPwd2Err = "You must confirm your new password"); }

    if($newPwd != $newPwd2){
        array_push($errs, $newPwd2Err = "The two password do not match, try again");
    }
    if(count($errs) == 0){
        $encryptedNew = md5($newPwd);
        $q = dbUpdate("members",['password'=>$encryptedNew,'du'=>$now],"id=".$staffId);
        if($q){
            $logoPath = "../assets/img/hscs/brand/logo.png";$fName = $fName;$subject = "Security Update";$destination = $u;
            $body = "A password reset was successfully executed on your account. Kindly contact the administrator if you did not initiate the request.";
            require '../admin/vendor/PHPMailer/PHPMailerAutoload.php';
            include("../admin/inc/mail-temps/notification.php");
            if(dbUpdate("password_resets",['status'=>'used','du'=>$now],"id=".$resetRefId)){
                $smsg = "Your password has been changed successfully."; $reset = true;
            }
        }
        else{
            $emsg = "Something went wrong. Please try again later";
        }
    }
}

include("../admin/inc/head.php");
?>


<body class="vh-100">
    <div class="authincation h-100">
        <div class="container h-100">
            <div class="row justify-content-center h-100 align-items-center">
                <div class="col-md-6">
                    <div class="authincation-content">
                        <div class="row no-gutters">
                            <div class="col-xl-12">
                                <div class="auth-form">
                                    <div class="d-flex justify-content-center">
                                        <?php include("../admin/inc/alerts.php"); ?>
                                    </div>
                                    <div class="text-center mb-3 pb-3 border-bottom">
                                        <img src="<?= $mainRoot; ?>assets/img/hscs/brand/logo.png" width="220" alt="">
                                    </div>
                                    <?php if($reset): ?>
                                    <div class="text-center">
                                        <p class="lead mb-5">Password reset was successful. Kindly login to your account via the link below</p>
                                        <a href="<?= $memberRoot ?>login" class="btn btn-outline-primary rounded-pill">Login</a>
                                    </div>
                                    <?php elseif($used): ?>
                                    <div class="text-center">
                                        <p class="lead mb-5">The reset link has been used. Kindly initiate another reset link to reset your password</p>
                                        <a href="<?= $memberRoot ?>forgot-pwd" class="btn btn-outline-primary rounded-pill">Reset Password</a>
                                    </div>
                                    <?php else: ?>
                                    <div class="text-center">
                                        <p class="lead mb-5">Kindly use the form below to reset your password</p>
                                    </div>
                                    <form action="" method="post">
                                        <div class="form-row">
                                            <div class="col-md-12">
                                                <div class="row">
                                                    <div class="form-group col-md-12">
                                                        <label>New Password</label>
                                                        <input type="password" class="form-control" name="newPwd" value="<?php if(isset($_POST['newPwd'])){ echo $_POST['newPwd']; } ?>">
                                                        <?php if(isset($newPwdErr)): ?><span class="bg-danger text-white px-2 rounded"><?= $newPwdErr; ?></span><?php endif ?>
                                                    </div>
                                                </div>
                                            </div>
                                        </div>
                                        <div class="form-row">
                                            <div class="col-md-12">
                                                <div class="row">
                                                    <div class="form-group col-md-12">
                                                        <label>New Password Again</label>
                                                        <input type="password" class="form-control" name="newPwd2" value="<?php if(isset($_POST['newPwd2'])){ echo $_POST['newPwd2']; } ?>">
                                                        <?php if(isset($newPwd2Err)): ?><span class="bg-danger text-white px-2 rounded"><?= $newPwd2Err; ?></span><?php endif ?>
                                                    </div>
                                                </div>
                                            </div>
                                        </div>
                                        <div class="form-row mt-3">
                                            <div class="col-md-12 text-center">
                                                <button type="submit" name="resetPwd" class="btn btn-primary mr-3">Update</button>
                                            </div>
                                        </div>
                                        <div class="new-account mt-3">
                                            <p>Don't have an account? <a class="text-primary" href="<?= $memberRoot ?>register">Sign up</a></p>
                                            <p>Already a member? <a class="text-primary" href="<?= $memberRoot ?>login">Sign in</a></p>
                                        </div>
                                    </form>
                                    <?php endif ?>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>


    <?php include("../admin/inc/foot.php"); ?>