<?php
include('../include/db-connect.php');
$value = $_POST['resetpw'];

$value = stripslashes($value);
$value = mysql_real_escape_string($value);

//User / Email check before anything else
$sql = "SELECT email,username FROM users WHERE username='$value' OR email='$value'";
$result=mysql_query($sql);
$count=mysql_num_rows($result);

if($count >= "1")
{
        while($row = mysql_fetch_array($result))
        {
                $emailAddress = $row['email'];
                $userName = $row['username'];
        }
        genPassword($userName,$emailAddress);




}else{ // Else no user / email found
        echo "FAIL! Value = $value, Count = $count\n";
}

function emailUser($userName,$emailAddress,$newPass)
{
//      echo "Emailing -> $emailAddress, User -> $userName Pass -> $newPass \n";
        require_once "Mail.php";
        $from = "iPhoneVideos <site@iphonevideos.ca>";
        $to = "$userName <$emailAddress>";
        $subject = "Password Reset For iPhoneVideos";
        $message = "Your password has been reset to $newPass\n Enjoy\n\n iPhone Video's";
        $host = "localhost";
        $smtpUsername = "site@iphonevideos.ca";
        $smtpPassword = "vagina";
        $headers = array ('From' => $from, 'To' => $to, 'Subject' => $subject);
                        $smtp = Mail::factory('smtp',
                        array ('host' => $host, 'auth' => true, 'username' => $smtpUsername, 'password' => $smtpPassword));
                        $mail = $smtp->send($to, $headers, $message);

        if(PEAR::isError($mail))
        {
                echo ("<p>" . $mail->getMessage() . "</p>");
        }else{
                echo ("<p>Message seccuessfully sent</p>");
        }

}
function genPassword($userName,$emailAddress) {
        $length = 8;
        $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLOMNPQRSTUVWXYZ';
        $newPass = '';
        for ($p = 0; $p < $length; $p++) {
                $newPass .= $characters[mt_rand(0, strlen($characters))];
        }
        $updatePass = md5($newPass);
        mysql_query("UPDATE users SET password='$updatePass'");
        emailUser($userName,$emailAddress,$newPass);
}

?>