Untitled

<?php
session_start();
require("mainconfig.php");
$msg_type = "nothing";

if (isset($_SESSION['user'])) {
	$sess_username = $_SESSION['user']['username'];
	$check_user = mysqli_query($db, "SELECT * FROM users WHERE username = '$sess_username'");
	$data_user = mysqli_fetch_assoc($check_user);
	if (mysqli_num_rows($check_user) == 0) {
		header("Location: ".$cfg_baseurl."logout.php");
	} else if ($data_user['status'] == "Suspended") {
		header("Location: ".$cfg_baseurl."logout.php");
	}
} else {

    if(isset($_POST['forgot'])) {
        $post_email = $_POST['email'];
        $password_baru = random(20);
        $md_pass   = md5($password_baru);

		$checkdb_user = mysqli_query($db, "SELECT * FROM users WHERE email = '$post_email'");
		$datadb_user = mysqli_fetch_assoc($checkdb_user);

		if (empty($post_email)) {
			$msg_type = "error";
			$msg_content = "<b>Gagal:</b> Mohon mengisi semua input.";
		} else if(mysqli_num_rows($checkdb_user) == 0) {
		    $msg_type = "error";
		    $msg_content = "<b>Gagal:</b> Akun dengan email $post_email tidak terdaftar";
		} else {
			$post_api = random(20);

			$to = $_POST['email'];
			$judul 	= "Reset Password $cfg_webname Anda";
			$dari	= "From: support@panelmedia.net \n";
			$dari	.= "Content-type: text/html \r\n";
			$pesan	= "
<html>
<head><meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
</head>
<body>
<p>Reset Password $cfg_webname Anda</p>
<p>Password baru anda adalah $password_baru, demi keamanan akun silahkan ganti kembali password anda di menu setting.</p>
<p><i> * Laporkan kepada admin apabila terjadi kesalahan / penyalahgunaan fiture forgot password</i></p>
</body>
</html>
";
            $insert_user = mail($to, $judul, $pesan, $dari);
            $md_pass = password_hash($md_pass, PASSWORD_DEFAULT);
			$insert_user = mysqli_query($db, "UPDATE users SET password = '$md_pass' WHERE email = '$post_email'");
			if ($insert_user == TRUE) {
				$msg_type = "success";
				$msg_content = "<b>Berhasil:</b> Password berhasil di reset, silahkan check email anda untuk menerima password baru";
			} else {
				$msg_type = "error";
				$msg_content = "<b>Gagal:</b> Error system.";
			}
		}
    }
}
include("lib/header.php");
?>

							<ul class="breadcrumb no-border no-radius b-b b-light pull-in m-b-md">
								<li><a href="<?php echo $cfg_baseurl; ?>"><i class="fa fa-home"></i> <?php echo $cfg_webname; ?></a>
								</li>
								<li class="active">Forgot Password</li>
							</ul>
							<div class="row">
								<div class="col-md-offset-3 col-md-6">
									<div class="panel panel-default">
										<div class="panel-heading">
											<h3 class="panel-title"><i class="fa fa-user"></i> Forgot</h3>
										</div>
										<div class="panel-body">
											<?php
											if ($msg_type == "success") {
											?>
											<div class="alert alert-success">
												<a href="#" class="close" data-dismiss="alert" aria-label="close">×</a>
												<i class="fa fa-check-circle"></i>
												<?php echo $msg_content; ?>
											</div>
											<?php
											} else if ($msg_type == "error") {
											?>
											<div class="alert alert-danger">
												<a href="#" class="close" data-dismiss="alert" aria-label="close">×</a>
												<i class="fa fa-times-circle"></i>
												<?php echo $msg_content; ?>
											</div>
											<?php
											}
											?>
											<form class="form-horizontal" role="form" method="POST">
											    <div class="form-group">
													<label class="col-md-2 control-label">Email</label>
													<div class="col-md-10">
														<input type="email" name="email" class="form-control" placeholder="Masukan email valid">
													</div>
												</div>
												<div class="form-group">
													<div class="col-md-offset-2 col-md-10">
														<button type="submit" class="btn btn-success btn-bordered waves-effect w-md waves-light" name="forgot">Submit</button>
													</div>
												</div>
											</form>
										</div>
									</div>
								</div>
							</div>

<?php
include("lib/footer.php");
?>