<?php
session_start();
date_default_timezone_set('Europe/Amsterdam');
include('../db_connect.php');
$conn = mysqli_connect($servername, $username, $password, $dbname);

if(!isset($_POST['login'], $_POST['form_token'], $_SESSION['form_token'])){
    $_SESSION[ "error_message" ] = 'Invalid Submission';
}elseif($_POST['form_token'] != $_SESSION['form_token']){
    $_SESSION[ "error_message" ] = 'Access denied';
}elseif($testtype !== "Username" || $testtype !== "Password"){
    $_SESSION[ "error_message" ] = "Wrong type to restore";
}elseif (!filter_var($testmail, FILTER_VALIDATE_EMAIL)) {
    $_SESSION[ "error_message" ] = "Invalid email format";
}elseif(isset($_POST['login'])){
    if(isset($_POST['g-recaptcha-response'])){
        $captcha=$_POST['g-recaptcha-response'];
    }

    $testtype = mysqli_real_escape_string($conn, $_POST['selecttype']);
    $testtype = test_input($testtype);
    $testmail = mysqli_real_escape_string($conn, $_POST['email']);
    $testmail = test_input($testmail);

        $response=file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=SECRETKEY&response=".$captcha."&remoteip=".$_SERVER['REMOTE_ADDR']);
        if($response.success==false) {
            $_SESSION[ "error_message" ] = "Failed captcha, hi bot";

        }else{
            $sql= "SELECT * FROM users WHERE Email = '$testmail'";
            $result = $con->query($sql);
            $resultcount = mysqli_num_rows($result);
            if ($resultcount == 0) {
                $_SESSION[ "error_message" ] = "No account with this email address has been found";

            }else{
                $row = mysqli_fetch_array($result, MYSQLI_BOTH);
                if($testtype == "nameinput"){
                    $message2 = "Someone has requested to receive the username for this email address: " . $row['Email'] . ". If you didn't request this please ignore this message. <br><br>" ;
                    $message2 .= "Your username is: " . $row['Username'] . "<br>";
                    $subject = "Username request - Crecketgaming";
                }else{
                    $message2 = "Someone has requested to receive the password for: " . $row['Username'] . ". If you didn't request this please ignore this message. <br><br>" ;
                    $message2 .= "Click <a href='http://crecketgaming.com/restorepassword.php?token=". $randomsalt . "&user=" . $row['Username'] . "''>here</a> or follow this url to enter a new password:<br>";
                    $message2 .= "<a>http://crecketgaming.com/restorepassword.php?token=". $randomsalt . "&user=" . $row['Username'] . "'</a>";
                    $subject = "Password request - Crecketgaming";
                }

                $headers .= 'From: <[email protected]>' . "\r\n";
                $headers .= "MIME-Version: 1.0\r\n";
                $headers .= "Content-Type: text/html; charset=ISO-8859-1\r\n";

                $message = "<html><body>";
                $message .= $message2;
                $message .= "<br><a href='http://crecketgaming.com/login'><p>Click here to return to the login page</p></a>";
                $message .= "</body></html>";

                mail($testmail, $subject, $message, $headers);
                $_SESSION[ "message_sent" ] = "message sent";
            }
        }
    }


function test_input($data) {
   $data = trim($data);
   $data = stripslashes($data);
   $data = htmlspecialchars($data);
   return $data;

}

 header("Location: forgotinfo.php");
?>