Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <body>
- <form id="forgotpwdreset" name="forgotpwdreset" method="post" action="" onsubmit="forgotpwdalert()"<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>
- <table border="0">
- <tr></tr>
- <tr></tr>
- <input type="hidden" name="email" value="<?php echo $email; ?>" />
- <input type="hidden" name="token" value="<?php echo $token; ?>" />
- Password must be at least 8 characters long and contain at least 1 number AND 1 capital letter.<br /><br />
- <tr>New Password: <align="center"><input required type="password" name="newpassword" id="newpassword" placeholder="" pattern="(?=.*d)(?=.*[A-Z]).{8,}"> <input type="checkbox" onclick="togglepassword()"> Show Password<br /><br />
- <tr></tr><br />
- <tr>Confirm Password: <align="center"><input required type="password" name="newpassword2" id="newpassword2" placeholder="" pattern="(?=.*d)(?=.*[A-Z]).{8,}" onchange="confirmpwd()"><br />
- <tr></tr><br />
- <tr>
- <tr></tr><br />
- <tr><align="center"><input type="submit" name="pwdresetsubmit" id="pwdresetsubmit" value="Reset Password" onclick="return confirmpwd()" />  
- <tr></tr><br />
- </table>
- <?php
- include 'insert.php';
- if(isset($_SESSION['ondashsession'])){
- $session = $_SESSION['ondashsession'];
- $sql = "SELECT * FROM ondash_idaccount WHERE ID = '$session'";
- $result = mysqli_query($dbcon, $sql) or die("Error");
- while($row = mysqli_fetch_assoc($result)){
- echo "You are already logged in, " . $row['firstname'] . "." . "<br />";
- }
- }else{
- if (isset($_POST['pwdresetsubmit'])) {
- $newpassword2 = $_POST['newpassword2'];
- $ipaddress = $_SERVER['REMOTE ADDR'];
- // Grab token and email that came from the email link
- $token = $_GET['token'];
- $email = $_GET['email'];
- //echo "Token: " . $token . "<br />" . "Email: " . $email; //returns correct info working properly.
- // select email address of user from the password_reset table
- $sqlnewpass = "SELECT * FROM password_resets WHERE token='$token' AND email='$email'";
- $results = mysqli_query($dbcon, $sqlnewpass);
- if (mysqli_num_rows($results) > 0 ){
- $row = mysqli_fetch_assoc($results);
- // print_r($row['email']); //returns correct result
- // print_r("# of rows: " . $numrows); //returns correct result
- //WORKS UP TO HERE...WORKS UP TO HERE...WORKS UP TO HERE...WORKS UP TO HERE...WORKS UP TO HERE...WORKS UP TO HERE...
- $sql2 = "UPDATE ondash_idaccount SET `password`=?, `ipaddress`=? WHERE `email`='$email'";
- $stmt2 = mysqli_stmt_init($dbcon);
- if(!mysqli_stmt_prepare($stmt2, $sql2)){
- echo "SQL error" . $dbcon->error;
- }else{
- $hashedpassword = password_hash($newpassword2, PASSWORD_DEFAULT);
- //var_dump($hashedpassword); //generating hash pwd works but not updating database
- mysqli_stmt_bind_param($stmt2, "ss", $hashedpassword, $ipaddress);
- mysqli_stmt_execute($stmt2);
- $stmt2->close();
- error_reporting(E_ALL);
- // echo "SQL 2 error" . $dbcon->error; //No errors reporting
- $UsedToken = 'UsedToken';
- "UPDATE password_resets SET `used`='$UsedToken', `ipaddress`='$ipaddress' WHERE `token`='$token' AND `email`='$email'";
- }
- }
- }
- ?>
Add Comment
Please, Sign In to add comment