<?php
/*
UserSpice 4
An Open Source PHP User Management System
by the UserSpice Team at http://UserSpice.com

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/
?>
<?php require_once 'init.php'; ?>
<?php require_once $abs_us_root.$us_url_root.'users/includes/header.php'; ?>
<?php require_once $abs_us_root.$us_url_root.'users/includes/navigation.php'; ?>
<?php if (!securePage($_SERVER['PHP_SELF'])){die();} ?>
<?php
$error_message = null;
$errors = array();
$email_sent=FALSE;

$token = Input::get('csrf');
if(Input::exists()){
	if(!Token::check($token)){
		die('Token doesn\'t match!');
	}
}

if (Input::get('forgotten_password')) {
	$email = Input::get('email');
	$fuser = new User($email);
	//validate the form
	$validate = new Validate();
	$validation = $validate->check($_POST,array('email' => array('display' => 'Email','valid_email' => true,'required' => true,),));

	if($validation->passed()){
		if($fuser->exists()){
			//send the email
			$options = array(
			  'fname' => $fuser->data()->fname,
			  'email' => rawurlencode($email),
			  'vericode' => $fuser->data()->vericode,
			);
			$subject = 'Password Reset';
			$encoded_email=rawurlencode($email);
			$body =  email_body('_email_template_forgot_password.php',$options);
			$email_sent=email($email,$subject,$body);
			if(!$email_sent){
				$errors[] = 'Email NOT sent due to error. Please contact site administrator.';
			}
		}else{
			$errors[] = 'That email does not exist in our database';
		}
	}else{
		//display the errors
		$errors = $validation->errors();
	}
}
?>
<?php
if ($user->isLoggedIn()) {
Redirect::to('account.php');
}
?>

<div id="page-wrapper">
<div class="container">
<?php

if($email_sent){
	require 'views/_forgot_password_sent.php';
}else{
	require 'views/_forgot_password.php';
}

?>
</div><!-- /.container-fluid -->
</div><!-- /#page-wrapper -->
<script src="https://www.google.com/recaptcha/api.js" async defer></script>
<!-- footer -->
<!-- footers -->
<?php require_once $abs_us_root.$us_url_root.'users/includes/page_footer.php'; // the final html footer copyright row + the external js calls ?>

<!-- Place any per-page javascript here -->

<?php require_once $abs_us_root.$us_url_root.'users/includes/html_footer.php'; // currently just the closing /body and /html ?>