MAINHACK

Viewing / Editing File: reset-passwordold.php

<?php 
include("functions.php");
$res = "";
if($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['submit'])){ 
if(!csrf_token_is_valid() || !csrf_token_is_recent()) {
$res = "<p class='alert alert-danger text-center ' role='alert'>Sorry, Token Authentication invalid.</p>";
}
else {

$code = sql_prep($_POST['code']);
$code = dirty_html($code);
$code = h($code);

$phone = sql_prep($_POST['phone']);
$phone = dirty_html($phone);
$phone = h($phone);

$randomString = generateRandomString(5); // Change the length as needed

$finalnumber = $code.''.$phone;

$sms_message = "Your new password is $randomString. Please do not share your code";

$sql = "SELECT * FROM barber_admin WHERE phone = '$phone'";
$result = mysqli_query($new, $sql);

if (mysqli_num_rows($result) > 0)
{
    //$reset_token = time() . md5($email);

$stmt_update_service = $con->prepare("UPDATE barber_admin SET reset_token = ?  WHERE phone = ?");
$stmt_update_service->execute(array($randomString,$phone));

$_SESSION['reset_code'] = $randomString;
$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://sms.arkesel.com/api/v2/sms/send',
    CURLOPT_HTTPHEADER => ['api-key: Y1B1a1VaYXBEc3lDVnFCZnZxam8'],
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_ENCODING => '',
    CURLOPT_MAXREDIRS => 10,
    CURLOPT_TIMEOUT => 0,
    CURLOPT_FOLLOWLOCATION => true,
    CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_POSTFIELDS => http_build_query([
        'sender' => 'SalonFriend',
        'message' => $sms_message,
        'recipients' => [$finalnumber]
    ]),
]);

$response = curl_exec($curl);
curl_close($curl);
if($response == true){
   header("Location : code-verity");
}

} else {

$res = "<p class='alert alert-danger text-center ' role='alert'>Sorry, your phone number do not exist or wrong</p>";
}
}
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
  
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">

<title>Reset Password | The Salon Friend</title>

<link rel="stylesheet" href="assets/vendor/bootstrap-icons/font/bootstrap-icons.css">

<link rel="stylesheet" href="assets/css/theme.min.css">
</head>

<div class="position-relative">
            
            <div class="card card-shadow card-login">
                
                
              <div class="row">
                <div class="col-md-7">
                  <div class="card-body">
                    
                   <form  method="POST">
                    <?php echo csrf_token_tag(); ?>
                      <div class="text-center">
                        <div class="mb-5">
                          <h3 class="card-title">Forgot password?</h3>
                          <p style="color:red">Please select your country and enter your phone number to reset your password..</p>
                        </div>
                        <?php echo $res;?>
                      </div>

<div class="mb-4">

<div class="row">
<div class="col-sm-6">
    <label class="form-label">Select  Country Code</label>
<select class="form-control" name="code" required>
  <option value=""> Select</option>
<?php
$so = mysqli_query($new,"SELECT * FROM  countries ");
 while($fetch = mysqli_fetch_array($so)){
?>
    <option value="<?php echo $fetch['dial'];?>"> <?php echo $fetch['name'];?> - <?php echo $fetch['dial'];?></option>
  <?php }?>

</select>
</div>

<div class="col-sm-6">
<div class="mb-8">
    <label class="form-label">Enter phone number</label>
 <input type="number" class="form-control form-control-lg" name="phone" id="resetPasswordSrEmail" tabindex="1"  required>
</div>
</div>
</div>

</div>

<div class="d-grid gap-4">
                        <button type="submit" name="submit" class="btn btn-primary btn-lg">Reset password</button>
                        <p class="card-text text-muted">Remember your password? <a class="link" href="index">Log in</a></p>
                      </div>
                    </form>
                    
                  </div>
                </div>
                
                  
                <div class="col-md-5 d-md-flex justify-content-center flex-column bg-soft-primary p-8 p-md-5" style="background-image: url(assets/svg/components/wave-pattern.svg);">
                  <h5 class="mb-4">The easiest way to manage your Salon and Spa:</h5>

<ul class="list-checked list-checked-primary list-py-2">
                    <li class="list-checked-item">Maintain Customer/Staff records</li>
                    <li class="list-checked-item">Generate customized reports</li>
                    <li class="list-checked-item">Calculate staff  commissions and many more advanced features</li>

<li class="list-checked-item">Run staff payroll with ease</li>

</ul>

<span class="d-block">
                    <a class="link link-pointer" href="#">Learn more</a>
                  </span>
                </div>
                
              </div>
              
            </div>

<figure class="position-absolute top-0 end-0 zi-n1 d-none d-sm-block mt-n7 me-n10" style="width: 4rem;">
              <img class="img-fluid" src="assets/svg/components/pointer-up.svg" alt="Image Description">
            </figure>

<figure class="position-absolute bottom-0 start-0 d-none d-sm-block ms-n10 mb-n10" style="width: 15rem;">
              <img class="img-fluid" src="assets/svg/components/curved-shape.svg" alt="Image Description">
            </figure>
            
          </div>
        </div>
      </div>
    </div>
    
  </main>

<script src="assets/vendor/bootstrap/dist/js/bootstrap.bundle.min.js"></script>

<script src="assets/js/theme.min.js"></script>

</body>
</html>

Cancel / Back

[ MAINHACK ]

Viewing / Editing File: reset-passwordold.php

Server Info

System Features

User Info