Gecko [ 167.86.127.34 ]

Name	Size	Permission
apps	[ DIR ]	drwxr-xr-x
css	[ DIR ]	drwxr-xr-x
images	[ DIR ]	drwxr-xr-x
js	[ DIR ]	drwxr-xr-x
admin.inc.php	2.77 KB	-rw-r--r--
admin.php	70 B	-rw-r--r--
ajax.php	15.5 KB	-rw-r--r--
apikeys.php	5.44 KB	-rw-r--r--
audits.php	939 B	-rw-r--r--
autocron.php	2.32 KB	-rw-r--r--
banlist.php	7.15 KB	-rw-r--r--
canned.php	8.51 KB	-rw-r--r--
categories.php	7.2 KB	-rw-r--r--
dashboard.php	1.75 KB	-rw-r--r--
departments.php	13.45 KB	-rw-r--r--
directory.php	797 B	-rw-r--r--
emails.php	3.77 KB	-rw-r--r--
emailsettings.php	1.32 KB	-rw-r--r--
emailtest.php	5.49 KB	-rw-r--r--
export.php	757 B	-rw-r--r--
faq.php	6.7 KB	-rw-r--r--
filters.php	6.83 KB	-rw-r--r--
forms.php	6.82 KB	-rw-r--r--
helptopics.php	11.05 KB	-rw-r--r--
index.php	548 B	-rw-r--r--
kb.php	1.05 KB	-rw-r--r--
lists.php	8.39 KB	-rw-r--r--
login.php	3.7 KB	-rw-r--r--
logo.php	1.32 KB	-rw-r--r--
logout.php	1.12 KB	-rw-r--r--
logs.php	2.25 KB	-rw-r--r--
orgs.php	4.86 KB	-rw-r--r--
pages.php	6.75 KB	-rw-r--r--
plugins.php	2.05 KB	-rw-r--r--
profile.php	2.06 KB	-rw-r--r--
pwreset.php	2.99 KB	-rw-r--r--
queues.php	3.65 KB	-rw-r--r--
roles.php	5.84 KB	-rw-r--r--
schedules.php	2.49 KB	-rw-r--r--
settings.php	2 KB	-rw-r--r--
slas.php	6.07 KB	-rw-r--r--
staff.inc.php	4.83 KB	-rw-r--r--
staff.php	8.79 KB	-rw-r--r--
system.php	772 B	-rw-r--r--
tasks.php	9.96 KB	-rw-r--r--
teams.php	5.93 KB	-rw-r--r--
templates.php	9.04 KB	-rw-r--r--
tickets.php	23.35 KB	-rw-r--r--
upgrade.php	3.32 KB	-rw-r--r--
users.php	9.03 KB	-rw-r--r--

Code Editor : pwreset.php

<?php
/*********************************************************************
    pwreset.php

Handles step 2, 3 and 5 of password resetting
        1. Fail to login (2+ fail login attempts)
        2. Visit password reset form and enter username or email
        3. Receive an email with a link and follow it
        4. Visit password reset form again, with the link
        5. Enter the username or email address again and login
        6. Password change is now required, user changes password and
           continues on with the session

Peter Rotich <peter@osticket.com>
    Jared Hancock <jared@osticket.com>
    Copyright (c)  2006-2013 osTicket
    http://www.osticket.com

Released under the GNU General Public License WITHOUT ANY WARRANTY.
    See LICENSE.TXT for details.

vim: expandtab sw=4 ts=4 sts=4:
**********************************************************************/
require_once('../main.inc.php');
if(!defined('INCLUDE_DIR')) die('Fatal Error. Kwaheri!');

// Bootstrap gettext translations. Since no one is yet logged in, use the
// system or browser default
TextDomain::configureForUser();

require_once(INCLUDE_DIR.'class.staff.php');
require_once(INCLUDE_DIR.'class.csrf.php');

$tpl = 'pwreset.php';
if($_POST) {
    if (!$ost->checkCSRFToken()) {
        Http::response(400, __('Valid CSRF Token Required'));
        exit;
    }
    switch ($_POST['do']) {
        case 'sendmail':
            if (($staff=Staff::lookup($_POST['userid']))) {
                if (!$staff->hasPassword()) {
                    $msg = __('Unable to reset password. Contact your administrator');
                }
                elseif (!$staff->sendResetEmail()) {
                    $tpl = 'pwreset.sent.php';
                }
            }
            else
                $msg = sprintf(__('Unable to verify username %s'),
                    Format::htmlchars($_POST['userid']));
            break;
        case 'newpasswd':
            // TODO: Compare passwords
            $tpl = 'pwreset.login.php';
            $errors = array();
            if ($staff = StaffAuthenticationBackend::processSignOn($errors)) {
                $info = array('page' => 'index.php');
                Http::redirect($info['page']);
            }
            elseif (isset($errors['msg'])) {
                $msg = $errors['msg'];
            }
            break;
    }
}
elseif ($_GET['token']) {
    $msg = __('Please enter your username or email');
    $_config = new Config('pwreset');
    if (($id = $_config->get($_GET['token']))
            && ($staff = Staff::lookup($id)))
        // TODO: Detect staff confirmation (for welcome email)
        $tpl = 'pwreset.login.php';
    else
        header('Location: index.php');
}
elseif ($cfg->allowPasswordReset()) {
    $msg = __('Enter your username or email address below');
}
else {
    $_SESSION['_staff']['auth']['msg']=__('Password resets are disabled');
    return header('Location: index.php');
}
define("OSTSCPINC",TRUE); //Make includes happy!
include_once(INCLUDE_DIR.'staff/'. $tpl);

${this.title}

Code Editor : pwreset.php