|
@@ -1,210 +0,0 @@
|
|
|
-<?php
|
|
|
-/* For licensing terms, see /dokeos_license.txt */
|
|
|
-
|
|
|
-/**
|
|
|
- * @deprecated by Ivan Tcholakov, 09-OCT-2009.
|
|
|
- * Get email headers
|
|
|
- *
|
|
|
- * @return string
|
|
|
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
|
|
|
- */
|
|
|
-/*
|
|
|
-function get_email_headers() {
|
|
|
- $emailHeaders = "From: \"".addslashes(api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS))."\" <".api_get_setting('emailAdministrator').">\n";
|
|
|
- $emailHeaders .= "Reply-To: ".api_get_setting('emailAdministrator')."\n";
|
|
|
- $emailHeaders .= "Return-Path: ".api_get_setting('emailAdministrator')."\n";
|
|
|
- $emailHeaders .= "X-Sender: ".api_get_setting('emailAdministrator')."\n";
|
|
|
- $emailHeaders .= "X-Mailer: PHP / ".phpversion()."\n";
|
|
|
- $emailHeaders .= "Content-Type: text/plain;\n\tcharset=\"".api_get_system_encoding()."\"\n";
|
|
|
- $emailHeaders .= "Mime-Version: 1.0";
|
|
|
- return $emailHeaders;
|
|
|
-}
|
|
|
-*/
|
|
|
-
|
|
|
-/**
|
|
|
- * Enter description here...
|
|
|
- *
|
|
|
- * @param unknown_type $user
|
|
|
- * @param boolean $reset
|
|
|
- * @param boolean $by_username
|
|
|
- * @return unknown
|
|
|
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
|
|
|
- */
|
|
|
-function get_user_account_list($user, $reset = false, $by_username = false) {
|
|
|
- global $_configuration;
|
|
|
- $portal_url = $_configuration['root_web'];
|
|
|
- if ($_configuration['multiple_access_urls']) {
|
|
|
- $access_url_id = api_get_current_access_url_id();
|
|
|
- if ($access_url_id != -1 ) {
|
|
|
- $url = api_get_access_url($access_url_id);
|
|
|
- $portal_url = $url['url'];
|
|
|
- }
|
|
|
- }
|
|
|
-
|
|
|
- if ($reset) {
|
|
|
-
|
|
|
- if ($by_username) {
|
|
|
-
|
|
|
- $secret_word = get_secret_word($user['email']);
|
|
|
- if ($reset) {
|
|
|
- $reset_link = $portal_url."main/auth/lostPassword.php?reset=".$secret_word."&id=".$user['uid'];
|
|
|
- } else {
|
|
|
- $reset_link = get_lang('Pass')." : $user[password]";
|
|
|
- }
|
|
|
- $user_account_list = get_lang('YourRegistrationData')." : \n".get_lang('UserName').' : '.$user['loginName']."\n".get_lang('ResetLink').' : '.$reset_link.'';
|
|
|
-
|
|
|
- if ($user_account_list) {
|
|
|
- $user_account_list = "\n------------------------\n" . $user_account_list;
|
|
|
- }
|
|
|
-
|
|
|
- } else {
|
|
|
-
|
|
|
- foreach ($user as $this_user) {
|
|
|
- $secret_word = get_secret_word($this_user['email']);
|
|
|
- if ($reset) {
|
|
|
- $reset_link = $portal_url."main/auth/lostPassword.php?reset=".$secret_word."&id=".$this_user['uid'];
|
|
|
- } else {
|
|
|
- $reset_link = get_lang('Pass')." : $this_user[password]";
|
|
|
- }
|
|
|
- $user_account_list[] = get_lang('YourRegistrationData')." : \n".get_lang('UserName').' : '.$this_user['loginName']."\n".get_lang('ResetLink').' : '.$reset_link.'';
|
|
|
- }
|
|
|
-
|
|
|
- if ($user_account_list) {
|
|
|
- $user_account_list = implode("\n------------------------\n", $user_account_list);
|
|
|
- }
|
|
|
- }
|
|
|
-
|
|
|
- } else {
|
|
|
-
|
|
|
- if (!$by_username) {
|
|
|
- $user = $user[0];
|
|
|
- }
|
|
|
- $reset_link = get_lang('Pass')." : $user[password]";
|
|
|
- $user_account_list = get_lang('YourRegistrationData')." : \n".get_lang('UserName').' : '.$user['loginName']."\n".$reset_link.'';
|
|
|
-
|
|
|
- }
|
|
|
- return $user_account_list;
|
|
|
-}
|
|
|
-
|
|
|
-/**
|
|
|
- * This function sends the actual password to the user
|
|
|
- *
|
|
|
- * @param unknown_type $user
|
|
|
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
|
|
|
- */
|
|
|
-function send_password_to_user($user, $by_username = false) {
|
|
|
-
|
|
|
- global $_configuration;
|
|
|
- /*
|
|
|
- $emailHeaders = get_email_headers(); // Email Headers
|
|
|
- */
|
|
|
- $email_subject = "[".api_get_setting('siteName')."] ".get_lang('LoginRequest'); // SUBJECT
|
|
|
-
|
|
|
- if ($by_username) { // Show only for lost password
|
|
|
- $user_account_list = get_user_account_list($user, false, $by_username); // BODY
|
|
|
- $email_to = $user['email'];
|
|
|
- } else {
|
|
|
- $user_account_list = get_user_account_list($user); // BODY
|
|
|
- $email_to = $user[0]['email'];
|
|
|
- }
|
|
|
-
|
|
|
- $portal_url = $_configuration['root_web'];
|
|
|
- if ($_configuration['multiple_access_urls']) {
|
|
|
- $access_url_id = api_get_current_access_url_id();
|
|
|
- if ($access_url_id != -1 ) {
|
|
|
- $url = api_get_access_url($access_url_id);
|
|
|
- $portal_url = $url['url'];
|
|
|
- }
|
|
|
- }
|
|
|
-
|
|
|
- $email_body = get_lang('YourAccountParam')." ".$portal_url."\n\n$user_account_list";
|
|
|
- // SEND MESSAGE
|
|
|
- $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
|
|
|
- $email_admin = api_get_setting('emailAdministrator');
|
|
|
-
|
|
|
- if (@api_mail('', $email_to, $email_subject, $email_body, $sender_name, $email_admin) == 1) {
|
|
|
- Display::display_confirmation_message(get_lang('YourPasswordHasBeenEmailed'));
|
|
|
- } else {
|
|
|
- $message = get_lang('SystemUnableToSendEmailContact').' '.Display :: encrypted_mailto_link(api_get_setting('emailAdministrator'), get_lang('PlatformAdmin')).".</p>";
|
|
|
- }
|
|
|
-}
|
|
|
-
|
|
|
-/**
|
|
|
- * Enter description here...
|
|
|
- *
|
|
|
- * @param unknown_type $user
|
|
|
- * @param bool $by_username
|
|
|
- * @return unknown
|
|
|
- *
|
|
|
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
|
|
|
- */
|
|
|
-function handle_encrypted_password($user, $by_username = false) {
|
|
|
-
|
|
|
- global $_configuration;
|
|
|
-
|
|
|
- /*
|
|
|
- $emailHeaders = get_email_headers(); // Email Headers
|
|
|
- */
|
|
|
- $email_subject = "[".api_get_setting('siteName')."] ".get_lang('LoginRequest'); // SUBJECT
|
|
|
-
|
|
|
- if ($by_username) { // Show only for lost password
|
|
|
- $user_account_list = get_user_account_list($user, true, $by_username); // BODY
|
|
|
- $email_to = $user['email'];
|
|
|
- } else {
|
|
|
- $user_account_list = get_user_account_list($user, true); // BODY
|
|
|
- $email_to = $user[0]['email'];
|
|
|
- }
|
|
|
-
|
|
|
- $secret_word = get_secret_word($email_to);
|
|
|
- $email_body = get_lang('DearUser')." :\n".get_lang('password_request')."\n\n";
|
|
|
- $email_body .= "-----------------------------------------------\n".$user_account_list."\n-----------------------------------------------\n\n";
|
|
|
- $email_body .= get_lang('PasswordEncryptedForSecurity');
|
|
|
- $email_body .= "\n\n".get_lang('Formula').",\n".get_lang('PlataformAdmin');
|
|
|
- $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
|
|
|
- $email_admin = api_get_setting('emailAdministrator');
|
|
|
-
|
|
|
- if (@api_mail('', $email_to, $email_subject, $email_body, $sender_name, $email_admin) == 1) {
|
|
|
- Display::display_confirmation_message(get_lang('YourPasswordHasBeenEmailed'));
|
|
|
- } else {
|
|
|
- $message = get_lang('SystemUnableToSendEmailContact').' '.Display :: encrypted_mailto_link(api_get_setting('emailAdministrator'), get_lang('PlatformAdmin')).".</p>";
|
|
|
- Display::display_error_message($message, false);
|
|
|
- }
|
|
|
-}
|
|
|
-
|
|
|
-/**
|
|
|
- * Enter description here...
|
|
|
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
|
|
|
- */
|
|
|
-function get_secret_word($add) {
|
|
|
- global $_configuration;
|
|
|
- return $secret_word = md5($_configuration['security_key'].$add);
|
|
|
-}
|
|
|
-
|
|
|
-/**
|
|
|
- * Enter description here...
|
|
|
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
|
|
|
- */
|
|
|
-function reset_password($secret, $id, $by_username = false) {
|
|
|
- $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
|
|
|
- $id = intval($id);
|
|
|
- $sql = "SELECT user_id AS uid, lastname AS lastName, firstname AS firstName, username AS loginName, password, email FROM ".$tbl_user." WHERE user_id=$id";
|
|
|
- $result = Database::query($sql);
|
|
|
- $num_rows = Database::num_rows($result);
|
|
|
-
|
|
|
- if ($result && $num_rows > 0) {
|
|
|
- $user = Database::fetch_array($result);
|
|
|
- } else {
|
|
|
- return 'Could not reset password.'; // TODO: This message has to be translated.
|
|
|
- }
|
|
|
-
|
|
|
- if (get_secret_word($user['email']) == $secret) { // OK, secret word is good. Now change password and mail it.
|
|
|
- $user['password'] = api_generate_password();
|
|
|
- $crypted = $user['password'];
|
|
|
- $crypted = api_get_encrypted_password($crypted);
|
|
|
- $sql = "UPDATE ".$tbl_user." SET password='$crypted' WHERE user_id=$id";
|
|
|
- $result = Database::query($sql);
|
|
|
- return send_password_to_user($user, $by_username);
|
|
|
- } else {
|
|
|
- return 'Not allowed.'; // TODO: This message has to be translated.
|
|
|
- }
|
|
|
-}
|