Mini Shell Moded By TiGER HeX

/mnt/volume_sfo2_01/50mmla/forgotPassword.php

<?php
include_once('includes/static/configure.php');
include_once('includes/static/util.php');
include_once('includes/static/dbcon.php');
include_once('includes/static/gdimg.php');
include_once('includes/static/sessions.php');
include_once('includes/appTop.php');

$html = "";
if(isset($_REQUEST['submit'])){
	if(!empty($_REQUEST['email'])){
	   $sql = "SELECT username,password,email FROM 50mm_users WHERE email ='".$_REQUEST['email']."'";
	}else if(!empty($_REQUEST['username'])){
	   $sql = "SELECT username,password,email FROM 50mm_users WHERE username ='".$_REQUEST['username']."'";
	}
	if( !($result = $db->sql_query($sql)) ){
	   $sql_error = $db->sql_error();
	   die($sql_error['message']);
	}
	if($db->sql_numrows($result) > 0){
		  $row = $db->sql_fetchrow($result);
		  $body = "Username: ".$row['username']."<br>"; 
		  $body.= "Password: ".$row['password']."<br>";
		  $headers  = "MIME-Version: 1.0\r\n";
		  $headers .= "Content-type: text/html; charset=iso-8859-1\r\n";
		  $headers .= "To: ".$row['email']." <".$row['email'].">\n"; 
		  $headers .= "From: ".SITE_TITLE." <".ADMIN_EMAIL.">\r\n";
		  $mresult = mail($row['email'],SITE_TITLE,$body,$headers);
		  if(!$mresult){
			 $html= "<div class=\"hilite\">An email has been sent to the email address that was used to register your account. <br>If you no longer have access to that email address then you must register a new account.<br><br>NOTE!! BE SURE THAT YOUR SPAM FILTER IS SET TO ACCEPT ALL EMAILS FROM 50mmLosAngeles.com! <br><br></div>";
		  }
	   $html= "<div class=\"hilite\">An email has been sent to the email address that was used to register your account. <br>If you no longer have access to that email address then you must register a new account.<br><br>NOTE!! BE SURE THAT YOUR SPAM FILTER IS SET TO ACCEPT ALL EMAILS FROM 50mmLosAngeles.com! <br><br></div>";
	}else{
       $html= "<div class=\"error\">The email or the username you've entered is invalid. This error could be because you miss-spelled your username or provided an incorrect email address or you entered BOTH your username and email address at the same time. Enter either your email address OR your Username and click submit.<br><br></div>";
	}

}
$pg_name = basename($_SERVER['PHP_SELF']);
include_once('includes/header.php');
?>
<?//content
$sql = "SELECT page_body FROM 50mm_pages WHERE page_name ='forgotPassword'";
if( !($result = $db->sql_query($sql)) ){
   $sql_error = $db->sql_error();
   die($sql_error['message']);
}
$row = $db->sql_fetchrow($result);
echo stripslashes($row['page_body']);
?>
<script>
function validateForgot(theForm,errDiv){
	visibleOff(errDiv);
   if((theForm['email'].value == "")&&(theForm['username'].value == "")){
     visibleOn(errDiv);
	 return false;
   }else{
     return true;
   }
}
</script>
<form action="<?echo $_SERVER['PHP_SELF']?>" method="post" enctype="multipart/form-data" onSubmit="return validateForgot(this,'errorForgotPassword');">
<table cellspacing="0" cellpadding="4" border="0">
  <tr>
    <td width="*">Username</td>
    <td><input type="text" name="username" class="field"></td>
  </tr>
  <tr>
  <td><center><br><h3>OR</h3><br></center></td>
  <tr>
  <tr>
    <td>Email</td>
    <td><input type="text" name="email" class="field"><br></td>
  </tr>
  <tr>
    <td>&nbsp;</td>
	<td>	  
	   <input name="submit" type="submit" class="button" value="Submit"><br>
	   <div id="errorForgotPassword" class="error" style="visibility:hidden;">You must enter a username OR an email address!</div>
	</td>
  </tr>
</table>
</form>
<?echo $html?>
<?
include_once('includes/footer.php');
include_once('includes/appBottom.php');
?>