123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200 |
- <?php
- // $Id: lost_password.lib.php 18942 2009-03-10 23:42:21Z juliomontoya $
- /*
- ==============================================================================
- Dokeos - elearning and course management software
- Copyright (c) 2004 Dokeos S.A.
- Copyright (c) 2003 Ghent University (UGent)
- Copyright (c) 2001 Universite catholique de Louvain (UCL)
- Copyright (c) various contributors
- For a full list of contributors, see "credits.txt".
- The full license can be read in "license.txt".
- This program is free software; you can redistribute it and/or
- modify it under the terms of the GNU General Public License
- as published by the Free Software Foundation; either version 2
- of the License, or (at your option) any later version.
- See the GNU General Public License for more details.
- Contact: Dokeos, 181 rue Royale, B-1000 Brussels, Belgium, info@dokeos.com
- ==============================================================================
- */
- /**
- * Enter description here...
- *
- * @return unknown
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
- */
- function get_email_headers()
- {
- global $charset;
- $emailHeaders = "From: \"".addslashes(get_setting('administratorSurname')." ".get_setting('administratorName'))."\" <".get_setting('emailAdministrator').">\n";
- $emailHeaders .= "Reply-To: ".get_setting('emailAdministrator')."\n";
- $emailHeaders .= "Return-Path: ".get_setting('emailAdministrator')."\n";
- $emailHeaders .= "X-Sender: ".get_setting('emailAdministrator')."\n";
- $emailHeaders .= "X-Mailer: PHP / ".phpversion()."\n";
- $emailHeaders .= "Content-Type: text/plain;\n\tcharset=\"".$charset."\"\n";
- $emailHeaders .= "Mime-Version: 1.0";
- return $emailHeaders;
- }
- /**
- * Enter description here...
- *
- * @param unknown_type $user
- * @param unknown_type $reset
- * @return unknown
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
- */
- function get_user_account_list($user, $reset = false)
- {
- global $_configuration;
- $portal_url = $_configuration['root_web'];
- if ($_configuration['multiple_access_urls']==true) {
- $access_url_id = api_get_current_access_url_id();
- if ($access_url_id != -1 ){
- $url = api_get_access_url($access_url_id);
- $portal_url = $url['url'];
- }
- }
-
- foreach ($user as $thisUser) {
- $secretword = get_secret_word($thisUser["email"]);
- if ($reset) {
-
- $reset_link = $portal_url."main/auth/lostPassword.php?reset=".$secretword."&id=".$thisUser['uid'];
-
- }
- else
- {
- $reset_link = get_lang('Pass')." : $thisUser[password]";
- }
- $userAccountList[] = get_lang('YourRegistrationData')." : \n".get_lang('UserName').' : '.$thisUser["loginName"]."\n".get_lang('ResetLink').' : '.$reset_link.'';
- }
- if ($userAccountList)
- {
- $userAccountList = implode("\n------------------------\n", $userAccountList);
- }
- return $userAccountList;
- }
- /**
- * This function sends the actual password to the user
- *
- * @param unknown_type $user
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
- */
- function send_password_to_user($user)
- {
- global $charset;
- global $_configuration;
- $emailHeaders = get_email_headers(); // Email Headers
- $emailSubject = "[".get_setting('siteName')."] ".get_lang('LoginRequest'); // SUBJECT
- $userAccountList = get_user_account_list($user); // BODY
- $portal_url = $_configuration['root_web'];
- if ($_configuration['multiple_access_urls']==true) {
- $access_url_id = api_get_current_access_url_id();
- if ($access_url_id != -1 ){
- $url = api_get_access_url($access_url_id);
- $portal_url = $url['url'];
- }
- }
-
- $emailBody = get_lang('YourAccountParam')." ".$portal_url."\n\n$userAccountList";
- // SEND MESSAGE
- $emailTo = $user[0]["email"];
- $sender_name = get_setting('administratorName').' '.get_setting('administratorSurname');
- $email_admin = get_setting('emailAdministrator');
-
- if (@api_mail('', $emailTo, $emailSubject, $emailBody, $sender_name,$email_admin)==1)
- {
- Display::display_confirmation_message(get_lang('YourPasswordHasBeenEmailed'));
- }
- else
- {
- $message = get_lang('SystemUnableToSendEmailContact') . Display :: encrypted_mailto_link(get_setting('emailAdministrator'), get_lang('PlatformAdmin')).".</p>";
- Display::display_error_message($message, false);
- }
- }
- /**
- * Enter description here...
- *
- * @param unknown_type $user
- * @return unknown
- *
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
- */
- function handle_encrypted_password($user)
- {
- global $charset;
- global $_configuration;
- $emailHeaders = get_email_headers(); // Email Headers
- $emailSubject = "[".get_setting('siteName')."] ".get_lang('LoginRequest'); // SUBJECT
- $userAccountList = get_user_account_list($user, true); // BODY
- $emailTo = $user[0]["email"];
- $secretword = get_secret_word($emailTo);
- $emailBody = get_lang('DearUser')." :\n".get_lang("password_request")."\n\n";
- $emailBody .= "-----------------------------------------------\n".$userAccountList."\n-----------------------------------------------\n\n";
- $emailBody .=get_lang('PasswordEncryptedForSecurity');
- $emailBody .="\n\n".get_lang('Formula').",\n".get_lang('PlataformAdmin');
- $sender_name = get_setting('administratorName').' '.get_setting('administratorSurname');
- $email_admin = get_setting('emailAdministrator');
-
- if (@api_mail('', $emailTo, $emailSubject, $emailBody, $sender_name,$email_admin)==1)
- {
- Display::display_confirmation_message(get_lang('YourPasswordHasBeenEmailed'));
- }
- else
- {
- $message = get_lang('SystemUnableToSendEmailContact') . Display :: encrypted_mailto_link(get_setting('emailAdministrator'), get_lang('PlatformAdmin')).".</p>";
- Display::display_error_message($message, false);
- }
- }
- /**
- * Enter description here...
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
- */
- function get_secret_word($add)
- {
- global $_configuration;
- return $secretword = md5($_configuration['security_key'].$add);
- }
- /**
- * Enter description here...
- * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
- */
- function reset_password($secret, $id)
- {
- global $your_password_has_been_reset,$userPasswordCrypted;
- $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
- $id = (int) $id;
- $sql = "SELECT user_id AS uid, lastname AS lastName, firstname AS firstName, username AS loginName, password, email FROM ".$tbl_user." WHERE user_id=$id";
- $result = api_sql_query($sql,__FILE__,__LINE__);
- if ($result && mysql_num_rows($result))
- {
- $user[] = mysql_fetch_array($result);
- }
- else
- {
- return "Could not reset password.";
- }
- if (get_secret_word($user[0]["email"]) == $secret) // OK, secret word is good. Now change password and mail it.
- {
- $user[0]["password"] = api_generate_password();
- $crypted = $user[0]["password"];
- $crypted = api_get_encrypted_password($crypted);
- /*if( $userPasswordCrypted)
- {
- $crypted = md5($crypted);
- }*/
- api_sql_query("UPDATE ".$tbl_user." SET password='$crypted' WHERE user_id=$id");
- return send_password_to_user($user, $your_password_has_been_reset);
- }
- else
- {
- return "Not allowed.";
- }
- }
- ?>
|