1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / nc6d095 / www / staff /
Filename : forgot-pwd.php
back
<?php
session_start();
require('../admin/inc/config.php');

define ('TITLE', 'Password Reset');
$mailSent = false;

if(isset($_POST['sendEmail'])){
    #data cleaning & scrutinization
    $hdiEmail = trim(stripslashes(mysqli_real_escape_string($db, $_POST['hscsEmail'])));

    #data validation
    if(empty($hdiEmail)){ array_push($errs, $hdiEmailErr = "please enter valid HDI email address"); }

    #prevent duplicates
    if(!empty($hdiEmail)){
        $rowCnt = cntRows('team_members', "email='$hdiEmail'");
        if(!$rowCnt > 0){
            array_push($errs, $noInstanceErr = "");
            $emsg = "No such email address here. Try again";
        }else{
            $staffNo = getDBValNoID('team_members',"email='$hdiEmail'",'staffNo');
            $fName = getDBValNoID('team_members',"email='$hdiEmail'",'fName');
        }
    }
    #execute when errors have been solved
    if(count($errs) == 0){
        $ref = md5($staffNo.$now);
        $q = dbInsert('password_resets', ['user'=>$staffNo, 'ref'=>$ref, 'dc'=>$now]);
        $logoPath = "../assets/img/hscs/brand/logo.png";$subject = "Password Reset"; $link = $staffRoot."reset?d=rp&u=$staffNo&ref=$ref";$email = $hdiEmail;
        $body = "Kindly click the link below to reset your HDI account password if the request was initiated by you. If you did not initiate this request, kindly contact our site administrator.";
        require '../admin/vendor/PHPMailer/PHPMailerAutoload.php';
        include("../admin/inc/mail-temps/reset-pwd.php");
        if(!$mail->send()) {
            $emsg = 'MAILER error'.$mail->ErrorInfo;
        } else {
            $smsg = "A unique password reset link which is valid for a single usage has been sent to the email '$hdiEmail'. Kindly follow the instructions therein";
            $preventResubmission = true;
        }
    }
}

include("../admin/inc/head.php");
?>


<body class="vh-100">
    <div class="authincation h-100">
        <div class="container h-100">
            <div class="row justify-content-center h-100 align-items-center">
                <div class="col-md-6">
                    <div class="authincation-content">
                        <div class="row no-gutters">
                            <div class="col-xl-12">
                                <div class="auth-form">
                                    <div class="d-flex justify-content-center">
                                        <?php include("../admin/inc/alerts.php"); ?>
                                    </div>
                                    <div class="text-center mb-3 pb-3 border-bottom">
                                        <img src="<?= $mainRoot; ?>assets/img/hscs/brand/logo.png" width="220" alt="">
                                    </div>
                                    <?php if($mailSent): ?>
                                    <div class="text-center">
                                        <p class="lead mb-5">Your account has been verified. Kindly login using the credentials in your mailbox via the link below</p>
                                        <a href="<?= $staffRoot ?>login" class="btn btn-outline-primary rounded-pill">Login</a>
                                    </div>
                                    <?php else: ?>
                                    <div class="text-center">
                                        <p class="lead mb-5">Kindly enter your HDI email address below to continue</p>
                                    </div>
                                    <form action="" method="post">
                                        <div class="form-row">
                                            <div class="col-md-12">
                                                <div class="row">
                                                    <div class="form-group col-md-12">
                                                        <label>Email Address</label>
                                                        <input type="email" class="form-control" name="hscsEmail" value="<?php if(isset($_POST['hscsEmail'])){ echo $_POST['hscsEmail']; } ?>">
                                                        <?php if(isset($hdiEmailErr)): ?><span class="bg-danger text-white px-2 rounded"><?= $hdiEmailErr; ?></span><?php endif ?>
                                                    </div>
                                                </div>
                                            </div>
                                        </div>
                                        <div class="form-row mt-3">
                                            <div class="col-md-12 text-center">
                                                <button type="submit" name="sendEmail" class="btn btn-primary mr-3">Continue</button>
                                            </div>
                                        </div>
                                    </form>
                                    <?php endif ?>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>


    <?php include("../admin/inc/foot.php"); ?>