lost_password.lib.php 7.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214
  1. <?php
  2. /* For licensing terms, see /license.txt */
  3. /**
  4. * Code
  5. * @package chamilo.auth
  6. */
  7. /**
  8. * @deprecated by Ivan Tcholakov, 09-OCT-2009.
  9. * Get email headers
  10. *
  11. * @return string
  12. * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
  13. */
  14. /*
  15. function get_email_headers() {
  16. $emailHeaders = "From: \"".addslashes(api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS))."\" <".api_get_setting('emailAdministrator').">\n";
  17. $emailHeaders .= "Reply-To: ".api_get_setting('emailAdministrator')."\n";
  18. $emailHeaders .= "Return-Path: ".api_get_setting('emailAdministrator')."\n";
  19. $emailHeaders .= "X-Sender: ".api_get_setting('emailAdministrator')."\n";
  20. $emailHeaders .= "X-Mailer: PHP / ".phpversion()."\n";
  21. $emailHeaders .= "Content-Type: text/plain;\n\tcharset=\"".api_get_system_encoding()."\"\n";
  22. $emailHeaders .= "Mime-Version: 1.0";
  23. return $emailHeaders;
  24. }
  25. */
  26. /**
  27. * Get list of user accounts with a reset link for each
  28. * @param unknown_type $user
  29. * @param boolean $reset
  30. * @param boolean $by_username
  31. * @return unknown
  32. * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
  33. */
  34. function get_user_account_list($user, $reset = false, $by_username = false) {
  35. global $_configuration;
  36. $portal_url = api_get_path(WEB_PATH);
  37. if ($_configuration['multiple_access_urls']) {
  38. $access_url_id = api_get_current_access_url_id();
  39. if ($access_url_id != -1 ) {
  40. $url = api_get_access_url($access_url_id);
  41. $portal_url = $url['url'];
  42. }
  43. }
  44. if ($reset) {
  45. if ($by_username) {
  46. $secret_word = get_secret_word($user['email']);
  47. if ($reset) {
  48. $reset_link = $portal_url."main/auth/lostPassword.php?reset=".$secret_word."&id=".$user['uid'];
  49. } else {
  50. $reset_link = get_lang('Pass')." : $user[password]";
  51. }
  52. $user_account_list = get_lang('YourRegistrationData')." : \n".get_lang('UserName').' : '.$user['loginName']."\n".get_lang('ResetLink').' : '.$reset_link.'';
  53. if ($user_account_list) {
  54. $user_account_list = "\n------------------------\n" . $user_account_list;
  55. }
  56. } else {
  57. foreach ($user as $this_user) {
  58. $secret_word = get_secret_word($this_user['email']);
  59. if ($reset) {
  60. $reset_link = $portal_url."main/auth/lostPassword.php?reset=".$secret_word."&id=".$this_user['uid'];
  61. } else {
  62. $reset_link = get_lang('Pass')." : $this_user[password]";
  63. }
  64. $user_account_list[] = get_lang('YourRegistrationData')." : \n".get_lang('UserName').' : '.$this_user['loginName']."\n".get_lang('ResetLink').' : '.$reset_link.'';
  65. }
  66. if ($user_account_list) {
  67. $user_account_list = implode("\n------------------------\n", $user_account_list);
  68. }
  69. }
  70. } else {
  71. if (!$by_username) {
  72. $user = $user[0];
  73. }
  74. $reset_link = get_lang('Pass')." : $user[password]";
  75. $user_account_list = get_lang('YourRegistrationData')." : \n".get_lang('UserName').' : '.$user['loginName']."\n".$reset_link.'';
  76. }
  77. return $user_account_list;
  78. }
  79. /**
  80. * This function sends the actual password to the user
  81. *
  82. * @param unknown_type $user
  83. * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
  84. */
  85. function send_password_to_user($user, $by_username = false) {
  86. global $_configuration;
  87. /*
  88. $emailHeaders = get_email_headers(); // Email Headers
  89. */
  90. $email_subject = "[".api_get_setting('siteName')."] ".get_lang('LoginRequest'); // SUBJECT
  91. if ($by_username) { // Show only for lost password
  92. $user_account_list = get_user_account_list($user, false, $by_username); // BODY
  93. $email_to = $user['email'];
  94. } else {
  95. $user_account_list = get_user_account_list($user); // BODY
  96. $email_to = $user[0]['email'];
  97. }
  98. $portal_url = $_configuration['root_web'];
  99. if ($_configuration['multiple_access_urls']) {
  100. $access_url_id = api_get_current_access_url_id();
  101. if ($access_url_id != -1 ) {
  102. $url = api_get_access_url($access_url_id);
  103. $portal_url = $url['url'];
  104. }
  105. }
  106. $email_body = get_lang('YourAccountParam')." ".$portal_url."\n\n$user_account_list \n\n";
  107. $emailBody .= get_lang('Formula').",\n".api_get_setting('administratorName')." ".api_get_setting('administratorSurname')."\n".get_lang('PlataformAdmin')." ".api_get_setting('siteName');
  108. // SEND MESSAGE
  109. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  110. $email_admin = api_get_setting('emailAdministrator');
  111. if (@api_mail('', $email_to, $email_subject, $email_body, $sender_name, $email_admin) == 1) {
  112. Display::display_confirmation_message(get_lang('YourPasswordHasBeenEmailed'));
  113. } else {
  114. $message = get_lang('SystemUnableToSendEmailContact').' '.Display :: encrypted_mailto_link(api_get_setting('emailAdministrator'), get_lang('PlatformAdmin')).".</p>";
  115. }
  116. }
  117. /**
  118. * Enter description here...
  119. *
  120. * @param unknown_type $user
  121. * @param bool $by_username
  122. * @return unknown
  123. *
  124. * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
  125. */
  126. function handle_encrypted_password($user, $by_username = false) {
  127. global $_configuration;
  128. /*
  129. $emailHeaders = get_email_headers(); // Email Headers
  130. */
  131. $email_subject = "[".api_get_setting('siteName')."] ".get_lang('LoginRequest'); // SUBJECT
  132. if ($by_username) { // Show only for lost password
  133. $user_account_list = get_user_account_list($user, true, $by_username); // BODY
  134. $email_to = $user['email'];
  135. } else {
  136. $user_account_list = get_user_account_list($user, true); // BODY
  137. $email_to = $user[0]['email'];
  138. }
  139. $secret_word = get_secret_word($email_to);
  140. $email_body = get_lang('DearUser')." :\n".get_lang('password_request')."\n\n";
  141. $email_body .= "-----------------------------------------------\n".$user_account_list."\n-----------------------------------------------\n\n";
  142. $email_body .= get_lang('PasswordEncryptedForSecurity');
  143. $emailBody .= " \n\n";
  144. $emailBody .= get_lang('Formula').",\n".api_get_setting('administratorName')." ".api_get_setting('administratorSurname')."\n".get_lang('PlataformAdmin')." ".api_get_setting('siteName');
  145. $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
  146. $email_admin = api_get_setting('emailAdministrator');
  147. if (@api_mail('', $email_to, $email_subject, $email_body, $sender_name, $email_admin) == 1) {
  148. Display::display_confirmation_message(get_lang('YourPasswordHasBeenEmailed'));
  149. } else {
  150. $message = get_lang('SystemUnableToSendEmailContact').' '.Display :: encrypted_mailto_link(api_get_setting('emailAdministrator'), get_lang('PlatformAdmin')).".</p>";
  151. Display::display_error_message($message, false);
  152. }
  153. }
  154. /**
  155. * Enter description here...
  156. * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
  157. */
  158. function get_secret_word($add) {
  159. global $_configuration;
  160. return $secret_word = md5($_configuration['security_key'].$add);
  161. }
  162. /**
  163. * Enter description here...
  164. * @author Olivier Cauberghe <olivier.cauberghe@UGent.be>, Ghent University
  165. */
  166. function reset_password($secret, $id, $by_username = false) {
  167. $tbl_user = Database::get_main_table(TABLE_MAIN_USER);
  168. $id = intval($id);
  169. $sql = "SELECT user_id AS uid, lastname AS lastName, firstname AS firstName, username AS loginName, password, email FROM ".$tbl_user." WHERE user_id=$id";
  170. $result = Database::query($sql);
  171. $num_rows = Database::num_rows($result);
  172. if ($result && $num_rows > 0) {
  173. $user = Database::fetch_array($result);
  174. } else {
  175. return 'Could not reset password.'; // TODO: This message has to be translated.
  176. }
  177. if (get_secret_word($user['email']) == $secret) { // OK, secret word is good. Now change password and mail it.
  178. $user['password'] = api_generate_password();
  179. $crypted = $user['password'];
  180. $crypted = api_get_encrypted_password($crypted);
  181. $sql = "UPDATE ".$tbl_user." SET password='$crypted' WHERE user_id=$id";
  182. $result = Database::query($sql);
  183. return send_password_to_user($user, $by_username);
  184. } else {
  185. return 'Not allowed.'; // TODO: This message has to be translated.
  186. }
  187. }