mirror of
https://github.com/slawkens/myaac.git
synced 2025-10-30 23:46:24 +01:00
fe7ad61abe
* phpstan v1 + workflow * Fix intend * More fixes * Update phpstan.neon * phpstan level 2 * Move errors ignoring into phpstan.neon * phpstan level 3 * Don't ignore templates folder * Something from level 4 * Update phpstan.neon
549 lines
24 KiB
PHP
549 lines
24 KiB
PHP
<?php
|
|
/**
|
|
* Lost account
|
|
*
|
|
* @package MyAAC
|
|
* @author Gesior <jerzyskalski@wp.pl>
|
|
* @author Slawkens <slawkens@gmail.com>
|
|
* @copyright 2019 MyAAC
|
|
* @link https://my-aac.org
|
|
*/
|
|
defined('MYAAC') or die('Direct access not allowed!');
|
|
$title = 'Lost Account Interface';
|
|
|
|
if(!setting('core.mail_enabled'))
|
|
{
|
|
echo '<b>Account maker is not configured to send e-mails, you can\'t use Lost Account Interface. Contact with admin to get help.</b>';
|
|
return;
|
|
}
|
|
|
|
$action_type = isset($_REQUEST['action_type']) ? $_REQUEST['action_type'] : '';
|
|
if($action == '')
|
|
{
|
|
$twig->display('account.lost.form.html.twig');
|
|
}
|
|
else if($action == 'step1' && $action_type == '') {
|
|
$twig->display('account.lost.noaction.html.twig');
|
|
}
|
|
elseif($action == 'step1' && $action_type == 'email')
|
|
{
|
|
$nick = stripslashes($_REQUEST['nick']);
|
|
if(Validator::characterName($nick))
|
|
{
|
|
$player = new OTS_Player();
|
|
$account = new OTS_Account();
|
|
$player->find($nick);
|
|
if($player->isLoaded())
|
|
$account = $player->getAccount();
|
|
|
|
if($account->isLoaded())
|
|
{
|
|
if($account->getCustomField('email_next') < time())
|
|
echo 'Please enter e-mail to account with this character.<BR>
|
|
<form action="' . getLink('account/lost') . '?action=sendcode" method=post>
|
|
<input type=hidden name="character">
|
|
<table cellspacing=1 cellpadding=4 border=0 width=100%>
|
|
<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Please enter e-mail to account</B></TD></TR>
|
|
<TR><TD BGCOLOR="'.$config['darkborder'].'">
|
|
Character: <INPUT TYPE=text NAME="nick" VALUE="'.$nick.'" SIZE="40" readonly="readonly"><BR>
|
|
E-mail to account:<INPUT TYPE=text NAME="email" VALUE="" SIZE="40"><BR>
|
|
</TD></TR>
|
|
</TABLE>
|
|
<BR>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
' . $twig->render('buttons.submit.html.twig') . '</div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
else
|
|
{
|
|
$insec = (int)$account->getCustomField('email_next') - time();
|
|
$minutesleft = floor($insec / 60);
|
|
$secondsleft = $insec - ($minutesleft * 60);
|
|
$timeleft = $minutesleft.' minutes '.$secondsleft.' seconds';
|
|
echo 'Account of selected character (<b>'.$nick.'</b>) received e-mail in last '.ceil(setting('core.mail_lost_account_interval') / 60).' minutes. You must wait '.$timeleft.' before you can use Lost Account Interface again.';
|
|
}
|
|
}
|
|
else
|
|
echo 'Player or account of player <b>' . $nick . '</b> doesn\'t exist.';
|
|
}
|
|
else
|
|
echo 'Invalid player name format. If you have other characters on account try with other name.';
|
|
echo '<BR /><TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
<a href="' . getLink('account/lost') . '" border="0"><IMG SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" NAME="Back" ALT="Back" BORDER=0 WIDTH=120 HEIGHT=18></a></div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
elseif($action == 'sendcode')
|
|
{
|
|
$email = $_REQUEST['email'];
|
|
$nick = stripslashes($_REQUEST['nick']);
|
|
if(Validator::characterName($nick))
|
|
{
|
|
$player = new OTS_Player();
|
|
$account = new OTS_Account();
|
|
$player->find($nick);
|
|
if($player->isLoaded())
|
|
$account = $player->getAccount();
|
|
|
|
if($account->isLoaded())
|
|
{
|
|
if($account->getCustomField('email_next') < time())
|
|
{
|
|
if($account->getEMail() == $email)
|
|
{
|
|
$newcode = generateRandomString(30, true, false, true);
|
|
$mailBody = '
|
|
You asked to reset your ' . $config['lua']['serverName'] . ' password.<br/>
|
|
<p>Account name: '.$account->getName().'</p>
|
|
<br />
|
|
To do so, please click this link:
|
|
<p><a href="' . getLink('account/lost') . '?action=checkcode&code='.$newcode.'&character='.urlencode($nick).'">' . getLink('account/lost') . '?action=checkcode&code='.$newcode.'&character='.urlencode($nick).'</a></p>
|
|
<p>or open page: <i>' . getLink('account/lost') . '?action=checkcode</i> and in field "code" write <b>'.$newcode.'</b></p>
|
|
<br/>
|
|
<p>If you did not request a password change, you may ignore this message and your password will remain unchanged.';
|
|
|
|
$account_mail = $account->getCustomField('email');
|
|
if(_mail($account_mail, $config['lua']['serverName'].' - Recover your account', $mailBody))
|
|
{
|
|
$account->setCustomField('email_code', $newcode);
|
|
$account->setCustomField('email_next', (time() + setting('core.mail_lost_account_interval')));
|
|
echo '<br />Details about steps required to recover your account has been sent to <b>' . $account_mail . '</b>. You should receive this email within 15 minutes. Please check your inbox/spam directory.';
|
|
}
|
|
else
|
|
{
|
|
$account->setCustomField('email_next', (time() + 60));
|
|
echo '<br /><p class="error">An error occurred while sending email! Try again later or contact with admin. For Admin: More info can be found in system/logs/mailer-error.log</p>';
|
|
}
|
|
}
|
|
else
|
|
echo 'Invalid e-mail to account of character <b>'.$nick.'</b>. Try again.';
|
|
}
|
|
else
|
|
{
|
|
$insec = (int)$account->getCustomField('email_next') - time();
|
|
$minutesleft = floor($insec / 60);
|
|
$secondsleft = $insec - ($minutesleft * 60);
|
|
$timeleft = $minutesleft.' minutes '.$secondsleft.' seconds';
|
|
echo 'Account of selected character (<b>'.$nick.'</b>) received e-mail in last '.ceil(setting('core.mail_lost_account_interval') / 60).' minutes. You must wait '.$timeleft.' before you can use Lost Account Interface again.';
|
|
}
|
|
}
|
|
else
|
|
echo 'Player or account of player <b>'.$nick.'</b> doesn\'t exist.';
|
|
}
|
|
else
|
|
echo 'Invalid player name format. If you have other characters on account try with other name.';
|
|
echo '<BR /><TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
<a href="' . getLink('account/lost') . '?action=step1&action_type=email&nick='.urlencode($nick).'" border="0"><IMG SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" NAME="Back" ALT="Back" BORDER=0 WIDTH=120 HEIGHT=18></a></div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
elseif($action == 'step1' && $action_type == 'reckey')
|
|
{
|
|
$nick = stripslashes($_REQUEST['nick']);
|
|
if(Validator::characterName($nick))
|
|
{
|
|
$player = new OTS_Player();
|
|
$account = new OTS_Account();
|
|
$player->find($nick);
|
|
if($player->isLoaded())
|
|
$account = $player->getAccount();
|
|
if($account->isLoaded())
|
|
{
|
|
$account_key = $account->getCustomField('key');
|
|
if(!empty($account_key))
|
|
{
|
|
echo 'If you enter right recovery key you will see form to set new e-mail and password to account. To this e-mail will be send your new password and account name.<BR>
|
|
<FORM ACTION="' . getLink('account/lost') . '?action=step2" METHOD=post>
|
|
<TABLE CELLSPACING=1 CELLPADDING=4 BORDER=0 WIDTH=100%>
|
|
<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Please enter your recovery key</B></TD></TR>
|
|
<TR><TD BGCOLOR="'.$config['darkborder'].'">
|
|
Character name: <INPUT TYPE=text NAME="nick" VALUE="'.$nick.'" SIZE="40" readonly="readonly"><BR />
|
|
Recovery key: <INPUT TYPE=text NAME="key" VALUE="" SIZE="40"><BR>
|
|
</TD></TR>
|
|
</TABLE>
|
|
<BR>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
' . $twig->render('buttons.submit.html.twig') . '</div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
else
|
|
echo 'Account of this character has no recovery key!';
|
|
}
|
|
else
|
|
echo 'Player or account of player <b>'.$nick.'</b> doesn\'t exist.';
|
|
}
|
|
else
|
|
echo 'Invalid player name format. If you have other characters on account try with other name.';
|
|
echo '<BR /><TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
<a href="' . getLink('account/lost') . '" border="0"><IMG SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" NAME="Back" ALT="Back" BORDER=0 WIDTH=120 HEIGHT=18></a></div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
elseif($action == 'step2')
|
|
{
|
|
$rec_key = trim($_REQUEST['key']);
|
|
$nick = stripslashes($_REQUEST['nick']);
|
|
if(Validator::characterName($nick))
|
|
{
|
|
$player = new OTS_Player();
|
|
$account = new OTS_Account();
|
|
$player->find($nick);
|
|
if($player->isLoaded())
|
|
$account = $player->getAccount();
|
|
if($account->isLoaded())
|
|
{
|
|
$account_key = $account->getCustomField('key');
|
|
if(!empty($account_key))
|
|
{
|
|
if($account_key == $rec_key)
|
|
{
|
|
echo '<script type="text/javascript">
|
|
function validate_required(field,alerttxt)
|
|
{
|
|
with (field)
|
|
{
|
|
if (value==null||value==""||value==" ")
|
|
{alert(alerttxt);return false;}
|
|
else {return true}
|
|
}
|
|
}
|
|
function validate_email(field,alerttxt)
|
|
{
|
|
with (field)
|
|
{
|
|
apos=value.indexOf("@");
|
|
dotpos=value.lastIndexOf(".");
|
|
if (apos<1||dotpos-apos<2)
|
|
{alert(alerttxt);return false;}
|
|
else {return true;}
|
|
}
|
|
}
|
|
function validate_form(thisform)
|
|
{
|
|
with (thisform)
|
|
{
|
|
if (validate_required(email,"Please enter your e-mail!")==false)
|
|
{email.focus();return false;}
|
|
if (validate_email(email,"Invalid e-mail format!")==false)
|
|
{email.focus();return false;}
|
|
if (validate_required(passor,"Please enter password!")==false)
|
|
{passor.focus();return false;}
|
|
if (validate_required(passor2,"Please repeat password!")==false)
|
|
{passor2.focus();return false;}
|
|
if (passor2.value!=passor.value)
|
|
{alert(\'Repeated password is not equal to password!\');return false;}
|
|
}
|
|
}
|
|
</script>';
|
|
echo 'Set new password and e-mail to your account.<BR>
|
|
<FORM ACTION="' . getLink('account/lost') . '?action=step3" onsubmit="return validate_form(this)" METHOD=post>
|
|
<INPUT TYPE=hidden NAME="character" VALUE="">
|
|
<TABLE CELLSPACING=1 CELLPADDING=4 BORDER=0 WIDTH=100%>
|
|
<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Please enter new password and e-mail</B></TD></TR>
|
|
<TR><TD BGCOLOR="'.$config['darkborder'].'">
|
|
Account of character: <INPUT TYPE=text NAME="nick" VALUE="'.$nick.'" SIZE="40" readonly="readonly"><BR />
|
|
New password: <INPUT id="passor" TYPE=password NAME="passor" VALUE="" SIZE="40"><BR>
|
|
Repeat new password: <INPUT id="passor2" TYPE=password NAME="passor" VALUE="" SIZE="40"><BR>
|
|
New e-mail address: <INPUT id="email" TYPE=text NAME="email" VALUE="" SIZE="40"><BR>
|
|
<INPUT TYPE=hidden NAME="key" VALUE="'.$rec_key.'">
|
|
</TD></TR>
|
|
</TABLE>
|
|
<BR>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
' . $twig->render('buttons.submit.html.twig') . '</div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
else
|
|
echo 'Wrong recovery key!';
|
|
}
|
|
else
|
|
echo 'Account of this character has no recovery key!';
|
|
}
|
|
else
|
|
echo 'Player or account of player <b>'.$nick.'</b> doesn\'t exist.';
|
|
}
|
|
else
|
|
echo 'Invalid player name format. If you have other characters on account try with other name.';
|
|
echo '<BR /><TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
<a href="' . getLink('account/lost') . '?action=step1&action_type=reckey&nick='.urlencode($nick).'" border="0"><IMG SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" NAME="Back" ALT="Back" BORDER=0 WIDTH=120 HEIGHT=18></a></div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
elseif($action == 'step3')
|
|
{
|
|
$rec_key = trim($_REQUEST['key']);
|
|
$nick = stripslashes($_REQUEST['nick']);
|
|
$new_pass = trim($_REQUEST['passor']);
|
|
$new_email = trim($_REQUEST['email']);
|
|
if(Validator::characterName($nick))
|
|
{
|
|
$player = new OTS_Player();
|
|
$account = new OTS_Account();
|
|
$player->find($nick);
|
|
if($player->isLoaded())
|
|
$account = $player->getAccount();
|
|
if($account->isLoaded())
|
|
{
|
|
$account_key = $account->getCustomField('key');
|
|
if(!empty($account_key))
|
|
{
|
|
if($account_key == $rec_key)
|
|
{
|
|
if(Validator::password($new_pass))
|
|
{
|
|
if(Validator::email($new_email))
|
|
{
|
|
$account->setEMail($new_email);
|
|
|
|
$tmp_new_pass = $new_pass;
|
|
if(USE_ACCOUNT_SALT)
|
|
{
|
|
$salt = generateRandomString(10, false, true, true);
|
|
$tmp_new_pass = $salt . $new_pass;
|
|
}
|
|
|
|
$account->setPassword(encrypt($tmp_new_pass));
|
|
$account->save();
|
|
|
|
if(USE_ACCOUNT_SALT)
|
|
$account->setCustomField('salt', $salt);
|
|
|
|
echo 'Your account name, new password and new e-mail.<BR>
|
|
<FORM ACTION="' . getLink('account/manage') . '" onsubmit="return validate_form(this)" METHOD=post>
|
|
<INPUT TYPE=hidden NAME="character" VALUE="">
|
|
<TABLE CELLSPACING=1 CELLPADDING=4 BORDER=0 WIDTH=100%>
|
|
<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Your account name, new password and new e-mail</B></TD></TR>
|
|
<TR><TD BGCOLOR="'.$config['darkborder'].'">
|
|
Account name: <b>'.$account->getName().'</b><BR>
|
|
New password: <b>'.$new_pass.'</b><BR>
|
|
New e-mail address: <b>'.$new_email.'</b><BR>';
|
|
if($account->getCustomField('email_next') < time())
|
|
{
|
|
$mailBody = '
|
|
<h3>Your account name and new password!</h3>
|
|
<p>Changed password and e-mail to your account in Lost Account Interface on server <a href="'.BASE_URL.'"><b>'.$config['lua']['serverName'].'</b></a></p>
|
|
<p>Account name: <b>'.$account->getName().'</b></p>
|
|
<p>New password: <b>'.$new_pass.'</b></p>
|
|
<p>E-mail: <b>'.$new_email.'</b> (this e-mail)</p>
|
|
<br />
|
|
<p><u>It\'s automatic e-mail from OTS Lost Account System. Do not reply!</u></p>';
|
|
|
|
if(_mail($account->getCustomField('email'), $config['lua']['serverName']." - New password to your account", $mailBody))
|
|
{
|
|
echo '<br /><small>Sent e-mail with your account name and password to new e-mail. You should receive this e-mail in 15 minutes. You can login now with new password!</small>';
|
|
}
|
|
else
|
|
{
|
|
echo '<br /><p class="error">An error occurred while sending email! You will not receive e-mail with this informations. For Admin: More info can be found in system/logs/mailer-error.log</p>';
|
|
}
|
|
}
|
|
else
|
|
{
|
|
echo '<br /><small>You will not receive e-mail with this informations.</small>';
|
|
}
|
|
echo '<INPUT TYPE=hidden NAME="account_login" VALUE="'.$account->getId().'">
|
|
<INPUT TYPE=hidden NAME="password_login" VALUE="'.$new_pass.'">
|
|
</TD></TR></TABLE><BR>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
<INPUT TYPE=image NAME="Login" ALT="Login" SRC="'.$template_path.'/images/global/buttons/sbutton_login.gif" BORDER=0 WIDTH=120 HEIGHT=18></div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
else
|
|
echo Validator::getLastError();
|
|
}
|
|
else
|
|
echo Validator::getLastError();
|
|
}
|
|
else
|
|
echo 'Wrong recovery key!';
|
|
}
|
|
else
|
|
echo 'Account of this character has no recovery key!';
|
|
}
|
|
else
|
|
echo 'Player or account of player <b>'.$nick.'</b> doesn\'t exist.';
|
|
}
|
|
else
|
|
echo 'Invalid player name format. If you have other characters on account try with other name.';
|
|
echo '<BR /><TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
<a href="' . getLink('account/lost') . '?action=step1&action_type=reckey&nick='.urlencode($nick).'" border="0"><IMG SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" NAME="Back" ALT="Back" BORDER=0 WIDTH=120 HEIGHT=18></a></div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
elseif($action == 'checkcode')
|
|
{
|
|
$code = trim($_REQUEST['code']);
|
|
$character = stripslashes(trim($_REQUEST['character']));
|
|
if(empty($code) || empty($character))
|
|
echo 'Please enter code from e-mail and name of one character from account. Then press Submit.<BR>
|
|
<FORM ACTION="' . getLink('account/lost') . '?action=checkcode" METHOD=post>
|
|
<TABLE CELLSPACING=1 CELLPADDING=4 BORDER=0 WIDTH=100%>
|
|
<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Code & character name</B></TD></TR>
|
|
<TR><TD BGCOLOR="'.$config['darkborder'].'">
|
|
Your code: <INPUT TYPE=text NAME="code" VALUE="" SIZE="40")><BR />
|
|
Character: <INPUT TYPE=text NAME="character" VALUE="" SIZE="40")><BR />
|
|
</TD></TR>
|
|
</TABLE>
|
|
<BR>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
' . $twig->render('buttons.submit.html.twig') . '</div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
else
|
|
{
|
|
$player = new OTS_Player();
|
|
$account = new OTS_Account();
|
|
$player->find($character);
|
|
if($player->isLoaded())
|
|
$account = $player->getAccount();
|
|
if($account->isLoaded())
|
|
{
|
|
if($account->getCustomField('email_code') == $code)
|
|
{
|
|
echo '<script type="text/javascript">
|
|
function validate_required(field,alerttxt)
|
|
{
|
|
with (field)
|
|
{
|
|
if (value==null||value==""||value==" ")
|
|
{alert(alerttxt);return false;}
|
|
else {return true}
|
|
}
|
|
}
|
|
|
|
function validate_form(thisform)
|
|
{
|
|
with (thisform)
|
|
{
|
|
if (validate_required(passor,"Please enter password!")==false)
|
|
{passor.focus();return false;}
|
|
if (validate_required(passor2,"Please repeat password!")==false)
|
|
{passor2.focus();return false;}
|
|
if (passor2.value!=passor.value)
|
|
{alert(\'Repeated password is not equal to password!\');return false;}
|
|
}
|
|
}
|
|
</script>
|
|
Please enter new password to your account and repeat to make sure you remember password.<BR>
|
|
<FORM ACTION="' . getLink('account/lost') . '?action=setnewpassword" onsubmit="return validate_form(this)" METHOD=post>
|
|
<INPUT TYPE=hidden NAME="character" VALUE="'.$character.'">
|
|
<INPUT TYPE=hidden NAME="code" VALUE="'.$code.'">
|
|
<TABLE CELLSPACING=1 CELLPADDING=4 BORDER=0 WIDTH=100%>
|
|
<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Code & account name</B></TD></TR>
|
|
<TR><TD BGCOLOR="'.$config['darkborder'].'">
|
|
New password: <INPUT TYPE=password ID="passor" NAME="passor" VALUE="" SIZE="40")><BR />
|
|
Repeat new password: <INPUT TYPE=password ID="passor2" NAME="passor2" VALUE="" SIZE="40")><BR />
|
|
</TD></TR>
|
|
</TABLE>
|
|
<BR>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
' . $twig->render('buttons.submit.html.twig') . '</div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
else
|
|
$error= 'Wrong code to change password.';
|
|
}
|
|
else
|
|
$error = 'Account of this character or this character doesn\'t exist.';
|
|
}
|
|
if(!empty($error))
|
|
echo '<span style="color: red"><b>'.$error.'</b></span><br />Please enter code from e-mail and name of one character from account. Then press Submit.<BR>
|
|
<FORM ACTION="' . getLink('account/lost') . '?action=checkcode" METHOD=post>
|
|
<TABLE CELLSPACING=1 CELLPADDING=4 BORDER=0 WIDTH=100%>
|
|
<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Code & character name</B></TD></TR>
|
|
<TR><TD BGCOLOR="'.$config['darkborder'].'">
|
|
Your code: <INPUT TYPE=text NAME="code" VALUE="" SIZE="40")><BR />
|
|
Character: <INPUT TYPE=text NAME="character" VALUE="" SIZE="40")><BR />
|
|
</TD></TR>
|
|
</TABLE>
|
|
<BR>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
' . $twig->render('buttons.submit.html.twig') . '</div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
elseif($action == 'setnewpassword')
|
|
{
|
|
$newpassword = $_REQUEST['passor'];
|
|
$code = $_REQUEST['code'];
|
|
$character = stripslashes($_REQUEST['character']);
|
|
echo '';
|
|
if(empty($code) || empty($character) || empty($newpassword))
|
|
echo '<span style="color: red"><b>Error. Try again.</b></span><br />Please enter code from e-mail and name of one character from account. Then press Submit.<BR>
|
|
<BR><FORM ACTION="' . getLink('account/lost') . '?action=checkcode" METHOD=post>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
<INPUT TYPE=image NAME="Back" ALT="Back" SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" BORDER=0 WIDTH=120 HEIGHT=18></div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
else
|
|
{
|
|
$player = new OTS_Player();
|
|
$account = new OTS_Account();
|
|
$player->find($character);
|
|
if($player->isLoaded())
|
|
$account = $player->getAccount();
|
|
if($account->isLoaded())
|
|
{
|
|
if($account->getCustomField('email_code') == $code)
|
|
{
|
|
if(Validator::password($newpassword))
|
|
{
|
|
$tmp_new_pass = $newpassword;
|
|
if(USE_ACCOUNT_SALT)
|
|
{
|
|
$salt = generateRandomString(10, false, true, true);
|
|
$tmp_new_pass = $salt . $newpassword;
|
|
$account->setCustomField('salt', $salt);
|
|
}
|
|
|
|
$account->setPassword(encrypt($tmp_new_pass ));
|
|
$account->save();
|
|
$account->setCustomField('email_code', '');
|
|
echo 'New password to your account is below. Now you can login.<BR>
|
|
<INPUT TYPE=hidden NAME="character" VALUE="'.$character.'">
|
|
<TABLE CELLSPACING=1 CELLPADDING=4 BORDER=0 WIDTH=100%>
|
|
<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Changed password</B></TD></TR>
|
|
<TR><TD BGCOLOR="'.$config['darkborder'].'">
|
|
New password: <b>'.$newpassword.'</b><BR />
|
|
Account name: <i>(Already on your e-mail)</i><BR />';
|
|
|
|
$mailBody = '
|
|
<h3>Your account name and password!</h3>
|
|
<p>Changed password to your account in Lost Account Interface on server <a href="'.BASE_URL.'"><b>'.$config['lua']['serverName'].'</b></a></p>
|
|
<p>Account name: <b>'.$account->getName().'</b></p>
|
|
<p>New password: <b>'.$newpassword.'</b></p>
|
|
<br />
|
|
<p><u>It\'s automatic e-mail from OTS Lost Account System. Do not reply!</u></p>';
|
|
|
|
if(_mail($account->getCustomField('email'), $config['lua']['serverName']." - Your new password", $mailBody))
|
|
{
|
|
echo '<br /><small>New password work! Sent e-mail with your password and account name. You should receive this e-mail in 15 minutes. You can login now with new password!';
|
|
}
|
|
else
|
|
{
|
|
echo '<br /><p class="error">New password work! An error occurred while sending email! You will not receive e-mail with new password. For Admin: More info can be found in system/logs/mailer-error.log';
|
|
}
|
|
echo '</TD></TR>
|
|
</TABLE>
|
|
<BR>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
<FORM ACTION="' . getLink('account/manage') . '" METHOD=post>
|
|
<INPUT TYPE=image NAME="Login" ALT="Login" SRC="'.$template_path.'/images/global/buttons/sbutton_login.gif" BORDER=0 WIDTH=120 HEIGHT=18></div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|
|
else
|
|
$error= Validator::getLastError();
|
|
}
|
|
else
|
|
$error= 'Wrong code to change password.';
|
|
}
|
|
else
|
|
$error = 'Account of this character or this character doesn\'t exist.';
|
|
}
|
|
if(!empty($error))
|
|
echo '<span style="color: red"><b>'.$error.'</b></span><br />Please enter code from e-mail and name of one character from account. Then press Submit.<BR>
|
|
<FORM ACTION="' . getLink('account/lost') . '?action=checkcode" METHOD=post>
|
|
<TABLE CELLSPACING=1 CELLPADDING=4 BORDER=0 WIDTH=100%>
|
|
<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Code & character name</B></TD></TR>
|
|
<TR><TD BGCOLOR="'.$config['darkborder'].'">
|
|
Your code: <INPUT TYPE=text NAME="code" VALUE="" SIZE="40")><BR />
|
|
Character: <INPUT TYPE=text NAME="character" VALUE="" SIZE="40")><BR />
|
|
</TD></TR>
|
|
</TABLE>
|
|
<BR>
|
|
<TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
|
|
' . $twig->render('buttons.submit.html.twig') . '</div>
|
|
</TD></TR></FORM></TABLE></TABLE>';
|
|
}
|