You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
61 lines
1.3 KiB
PHP
61 lines
1.3 KiB
PHP
<?php
|
|
|
|
$token = $_POST["token"];
|
|
|
|
$token_hash = hash("sha256", $token);
|
|
|
|
$mysqli = require __DIR__ . "/database.php";
|
|
|
|
$sql = "SELECT * FROM user
|
|
WHERE reset_token_hash = ?";
|
|
|
|
$stmt = $mysqli->prepare($sql);
|
|
|
|
$stmt->bind_param("s", $token_hash);
|
|
|
|
$stmt->execute();
|
|
|
|
$result = $stmt->get_result();
|
|
|
|
$user = $result->fetch_assoc();
|
|
|
|
if ($user === null) {
|
|
die("token not found");
|
|
}
|
|
|
|
if (strtotime($user["reset_token_expires_at"]) <= time()) {
|
|
die("token has expired");
|
|
}
|
|
|
|
if (strlen($_POST["password"]) < 8) {
|
|
die("Password must be at least 8 characters");
|
|
}
|
|
|
|
if ( ! preg_match("/[a-z]/i", $_POST["password"])) {
|
|
die("password must contain at least one letter");
|
|
}
|
|
|
|
if ( ! preg_match("/[0-9]/", $_POST["password"])) {
|
|
die("password must contain at least one number");
|
|
}
|
|
|
|
if ($_POST["password"] !== $_POST["password_confirmation"]) {
|
|
die("passwords must match");
|
|
}
|
|
|
|
$password_hash = password_hash($_POST["password"], PASSWORD_DEFAULT);
|
|
|
|
$sql = "UPDATE user
|
|
SET password_hash = ?,
|
|
reset_token_hash = NULL,
|
|
reset_token_expires_at = NULL
|
|
WHERE id = ?";
|
|
|
|
$stmt = $mysqli->prepare($sql);
|
|
|
|
$stmt->bind_param("ss", $password_hash, $user["id"]);
|
|
|
|
$stmt->execute();
|
|
|
|
echo " ~ * password updated . you can now enter -**";
|