If the account information is valid, a password reset email has been sent.

'; if ($uid <= 0 || $submittedEmail === '') { echo $genericMessage; } else { $email = $database->getUserField($uid, 'email', 0); $username = $database->getUserField($uid, 'username', 0); // Verifică dacă utilizatorul există și emailul corespunde if ( !is_string($email) || $email === '' || !is_string($username) || $username === '' || !hash_equals($email, $submittedEmail) ) { echo $genericMessage; } else { // Generate password and confirmation code $npw = $generator->generateRandStr(7); $cpw = $generator->generateRandStr(10); $database->addPassword($uid, $npw, $cpw); // Send password email $mailer->sendPassword($email, $uid, $username, $npw, $cpw); // Escape output to prevent XSS echo '

Password was sent to: ' . htmlspecialchars($submittedEmail, ENT_QUOTES, 'UTF-8') . '

'; } } // User clicked confirmation link from email } elseif (isset($_GET['cpw']) && isset($_GET['npw'])) { $uid = (int)$_GET['npw']; $cpw = preg_replace('#[^a-zA-Z0-9]#', '', $_GET['cpw']); if (!$database->resetPassword($uid, $cpw)) { echo '

The password has not been changed. Perhaps the activation code has already been used.

'; } else { echo '

The password has been successfully changed.

'; } // Display form } else { ?>

Before you can request a new password you have to enter the email address that has been used to register the account.

Afterwards you will receive an e-mail with a new password. The password will only work after confirming it, though.

Email

ok