Gecko [ 167.86.127.34 ]

Name	Size	Permission
api	[ DIR ]	drwxr-xr-x
apps	[ DIR ]	drwxr-xr-x
assets	[ DIR ]	drwxr-xr-x
css	[ DIR ]	drwxr-xr-x
images	[ DIR ]	drwxr-xr-x
include	[ DIR ]	drwxr-xr-x
js	[ DIR ]	drwxr-xr-x
kb	[ DIR ]	drwxr-xr-x
pages	[ DIR ]	drwxr-xr-x
scp	[ DIR ]	drwxr-xr-x
account.php	4.94 KB	-rw-r--r--
ajax.php	1.8 KB	-rw-r--r--
avatar.php	1.06 KB	-rw-r--r--
bootstrap.php	14.98 KB	-rw-r--r--
captcha.php	611 B	-rw-r--r--
client.inc.php	2.91 KB	-rw-r--r--
file.php	2.33 KB	-rw-r--r--
index.php	2.28 KB	-rw-r--r--
login.php	5.55 KB	-rw-r--r--
logo.php	980 B	-rw-r--r--
logout.php	714 B	-rw-r--r--
main.inc.php	1.63 KB	-rw-r--r--
manage.php	2.36 KB	-rw-r--r--
offline.php	940 B	-rw-r--r--
open.php	2.97 KB	-rw-r--r--
profile.php	1.2 KB	-rw-r--r--
pwreset.php	2.95 KB	-rw-r--r--
secure.inc.php	1.14 KB	-rw-r--r--
tickets.php	5.77 KB	-rw-r--r--
view.php	1.55 KB	-rw-r--r--
web.config	2.15 KB	-rw-r--r--

Code Editor : pwreset.php

<?php

require_once('client.inc.php');
if(!defined('INCLUDE_DIR')) die('Fatal Error');
define('CLIENTINC_DIR',INCLUDE_DIR.'client/');
define('OSTCLIENTINC',TRUE); //make includes happy

require_once(INCLUDE_DIR.'class.client.php');

$inc = 'pwreset.request.php';
if($_POST) {
    if (!$ost->checkCSRFToken()) {
        Http::response(400, __('Valid CSRF Token Required'));
        exit;
    }
    switch ($_POST['do']) {
        case 'sendmail':
            if (($acct=ClientAccount::lookupByUsername($_POST['userid']))) {
                if (!$acct->isPasswdResetEnabled()) {
                    $banner = __('Password reset is not enabled for your account. Contact your administrator');
                }
                elseif ($acct->sendResetEmail()) {
                    $inc = 'pwreset.sent.php';
                }
                else
                    $banner = __('Unable to send reset email.')
                        .' '.__('Internal error occurred');
            }
            else
                $banner = sprintf(__('Unable to verify username %s'),
                    Format::htmlchars($_POST['userid']));
            break;
        case 'reset':
            $inc = 'pwreset.login.php';
            $errors = array();
            if ($client = UserAuthenticationBackend::processSignOn($errors)) {
                Http::redirect('index.php');
            }
            elseif (isset($errors['msg'])) {
                $banner = $errors['msg'];
            }
            break;
    }
}
elseif ($_GET['token']) {
    $banner = __('Re-enter your username or email');
    $inc = 'pwreset.login.php';
    $_config = new Config('pwreset');
    if (($id = $_config->get($_GET['token']))
            && ($acct = ClientAccount::lookup(array('user_id'=>substr($id,1))))) {
        if (!$acct->isConfirmed()) {
            $inc = 'register.confirmed.inc.php';
            $acct->confirm();
            // FIXME: The account has to be uncached in order for the lookup
            // in the ::processSignOn to detect the confirmation
            ModelInstanceManager::uncache($acct);
            // Log the user in
            if ($client = UserAuthenticationBackend::processSignOn($errors)) {
                if ($acct->hasPassword() && !$acct->get('backend')) {
                    $acct->cancelResetTokens();
                }
                // No password setup yet -- force one to be created
                else {
                    $_SESSION['_client']['reset-token'] = $_GET['token'];
                    $acct->forcePasswdReset();
                }
                Http::redirect('account.php?confirmed');
            }
        }
    }
    elseif ($id && ($user = User::lookup($id)))
        $inc = 'pwreset.create.php';
    else
        Http::redirect('index.php');
}
else {
    $banner = __('Enter your username or email address below');
}

$nav = new UserNav();
$nav->setActiveNav('status');
require CLIENTINC_DIR.'header.inc.php';
require CLIENTINC_DIR.$inc;
require CLIENTINC_DIR.'footer.inc.php';
?>

${this.title}

Code Editor : pwreset.php