<?php
date_default_timezone_set('Europe/Amsterdam');
include('../../db_connect.php');
include('../includes/page_load.php');
include('../php/check_locked.php');
session_start();
$conn = mysqli_connect($servername, $username, $password, $dbname);
$options = array('cost' => 11);
$addrip = $_SERVER['REMOTE_ADDR'];
$agent = $_SERVER['HTTP_USER_AGENT'];
$currenttime = time();
$locktime = time() + 3600;
$errormessage = $errorcaptchamsg = "";
$toggletype = $message2 = "";
$cls = array('','','','','','');
$error = array();

if(isset($_POST['login'])){
    if(isset($_POST['g-recaptcha-response'])){
        $captcha=$_POST['g-recaptcha-response'];
    }

    $testtype = mysqli_real_escape_string($conn, $_POST['selecttype']);
    $testtype = test_input($testtype);
    $testmail = mysqli_real_escape_string($conn, $_POST['email']);
    $testmail = test_input($testmail);

    if (!filter_var($testmail, FILTER_VALIDATE_EMAIL)) {
      $errormessage = "Invalid email format";
      $cls[0]  = 'class="errorclass"';
      $error[] = '1';
    }

    if(count($error)<1){
        $response=file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=SECRETKEY&response=".$captcha."&remoteip=".$_SERVER['REMOTE_ADDR']);
        if($response.success==false) {
            $errorcaptchamsg = "SPAMMER.";
        }else{
            $sql= "SELECT * FROM users WHERE Email = '$testmail'";
            $result = $con->query($sql);
            $resultcount = mysqli_num_rows($result);
            if ($resultcount == 0) {
                $errormessage = "No account with this email address has been found";
            }else{
                $row = mysqli_fetch_array($result, MYSQLI_BOTH);
                if($testtype == "nameinput"){
                    $message2 = "Someone has requested to receive the username for this email address: " . $row['Email'] . ". If you didn't request this please ignore this message. <br><br>" ;
                    $message2 .= "Your username is: " . $row['Username'] . "<br>";
                    $subject = "Username request - Crecketgaming";
                }else{
                    $message2 = "Someone has requested to receive the password for: " . $row['Username'] . ". If you didn't request this please ignore this message. <br><br>" ;
                    $message2 .= "Click <a href='http://crecketgaming.com/restorepassword.php?token=". $randomsalt . "&user=" . $row['Username'] . "''>here</a> or follow this url to enter a new password:<br>";
                    $message2 .= "<a>http://crecketgaming.com/restorepassword.php?token=". $randomsalt . "&user=" . $row['Username'] . "'</a>";
                    $subject = "Password request - Crecketgaming";
                }

                $headers .= 'From: <[email protected]>' . "\r\n";
                $headers .= "MIME-Version: 1.0\r\n";
                $headers .= "Content-Type: text/html; charset=ISO-8859-1\r\n";

                $message = "<html><body>";
                $message .= $message2;
                $message .= "<strong>Name: </strong>"  . $row['Username'] . "<br>";
                $message .= "<a href='http://crecketgaming.com/login'><p>Click here to return to the login page</p></a>";
                $message .= "</body></html>";

                mail($testmail, $subject, $message, $headers);
                $successmessage = "Mail sent.";

            }
        }
    }
}

function test_input($data) {
   $data = trim($data);
   $data = stripslashes($data);
   $data = htmlspecialchars($data);
   return $data;
}

?>