/home/techb158/immovalet.ca/includes

Name	Size	Mode	Actions
db_connect.php	7824	0666	edit dl rm
db_connects.php	292	0666	edit dl rm
forgetpassword.php	4105	0666	edit dl rm
functions.php	16866	0666	edit dl rm
functions1.php	12247	0666	edit dl rm
logout.php	722	0666	edit dl rm
process_login.php	2203	0666	edit dl rm
psl-config.php	2196	0666	edit dl rm
psl-config 1.php	2107	0666	edit dl rm
psl-config3.php	2107	0666	edit dl rm
psl-configs.php	1674	0666	edit dl rm
register-client.php	7543	0666	edit dl rm
register.inc.php	3390	0666	edit dl rm
register.php	27274	0666	edit dl rm
registerclient.php	8859	0666	edit dl rm
requestsubmission.php	23523	0666	edit dl rm
reset.php	3984	0666	edit dl rm

Edit: /home/techb158/immovalet.ca/includes/forgetpassword.php (4105B)

<?php

include_once 'includes/db_connect.php';
include_once 'includes/psl-config.php';
sec_session_start();
$error_msg = "";

if(isset($_POST["submit"]) && $_POST["submit"]!="") 
	{
		
		$url = "http://". $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'];
		function getRandomStringd($length) 
		{
			
			
			$validCharacters = "ABCDEFGHIJKLMNPQRSTUXYVWZ123456789";
			$validCharNumber = strlen($validCharacters);
			$result = "";
		 
			for ($i = 0; $i < $length; $i++) {
				$index = mt_rand(0, $validCharNumber - 1);
				$result .= $validCharacters[$index];
			}
			return $result;
		}
		
		function mailresetlink($to,$token){
		//echo "".$to." ".$token."";
		$email="info@techbala.com";	 
		$subject = "BonBoss - Mot de passe oublié";
		$uri = 'http://'. $_SERVER['HTTP_HOST'] ;
		$message = '
		<html>
		<head>
		<title>BonBoss.ca : Mot de passe oublié</title>
		</head>
		<body>
		<p>Cher Client,</p><br>
		
		<p>Cliquez sur le lien donné pour réinitialiser votre mot de passe <a href="'.$uri.'/reset.php?token='.$token.'">Réinitialiser le mot de passe</a></p><br>
		<p>"'."Merci d'avoir choisi BonBoss.ca - une plate-forme.".'"</p><br>
		
		<footer>
		<p>Équipe de soutien</p><br>
		<a><img src="'.$uri.'/img/Bonboss_logo.png" class="stone-logo"></a>
		</footer>
		</body>
		</html>
		';
		$headers[] = 'MIME-Version: 1.0';
$headers[] = 'Content-type: text/html; charset=iso-8859-1';

// Additional headers
$headers[] = 'To:  '.$to.'>';
$headers[] = 'From: Support <'.$email.'>';
$headers[] = 'Cc: abdalla.bala@gmail.com';
$headers[] = 'Bcc: abdalla.bala@gmail.com';

// Mail it
$mail =mail($to, $subject, $message, implode("\r\n", $headers));

if($mail){
		header('Location: index.php?err=<h1>Avec succès</h1><br>Nous avons envoyé le lien de réinitialisation du mot de passe à votre courrier électronique!');		 
	exit(); 
		
		}else
		{
			header('Location: index.php?err=<h1>Attention</h1><br>Désolé, veuillez insérer toutes les informations!');		 
	exit(); 
				
		}
			
		}
		
		$Emails =$_POST['email'];
		$Names = $_POST['userid'];

$date = date('Y/m/d H:i');
	
		$query = "SELECT * FROM Clients where Email ='".$Emails."' and Username ='".$Names."'";	
		$result = $mysqli->query($query);	
		$Admin = $result->fetch_assoc();	
		if ($result->num_rows == 1) {
			//$C_ID = $Admin['C_ID'];
			$accessds = $Admin['User_Access'];
		 
        }else{
		$query = "SELECT * FROM Master where Email ='".$Emails."' and Username ='".$Names."'";	
		$result = $mysqli->query($query);	
		$Admin = $result->fetch_assoc();	
		if ($result->num_rows == 1) {
			$accessds = $Admin['User_Access'];
		 
        }
		}
		
	
	
	
		//$resultds = mysql_query("SELECT * FROM Users where Email ='".$Emails."' and Username ='".$Names."'");
		//$rowsR = mysql_num_rows($resultds);
		//$rowsd =mysql_fetch_array($resultds);
		//$accessd = $rowsd['User_Access '];		
		
		//if($rowsR != 0 && $accessd != 0)
		//{			
		////	echo "<h1>Successfully</h1><br><script type='text/javascript'>alert('".$Emails." ".$First_Names." ".$Last_Names."')</script>";
		//$token=getRandomStringd(10);
		//$q="insert into tokens (token,email,first_name,last_name, date) values ('".$token."','".$Emails."','".$First_Names."','".$Last_Names."','".$date."')";
		//mysql_query($q);
		//if(isset($Emails))mailresetlink($to,$token);
		//}else 
		
		if($accessds != "" && $accessds != 0)
		{
		
		$token=getRandomStringd(10);		
		
		if ($insert_stmt = $mysqli->prepare("INSERT INTO tokens (token,email,user_name, date) VALUES (?, ?, ?, ?)")) {
		$insert_stmt->bind_param('ssss',$token,$Emails,$Names,$date);
		
		// Execute the prepared query.
		if (! $insert_stmt->execute()) {
			header('Location: index.php?error=Une erreur se produit!');			
			exit();
		}else
		{
		$to = $_POST['email'];
		if(isset($Emails))mailresetlink($to,$token);
		
		header('Location: index.php?error=Succès!');
		exit();			
		}
		
		header('Location: index.php?error=Une erreur se produit!');
		exit();
		}
		}
}

BonBoss.ca : Mot de passe oublié

Cher Client,

Cliquez sur le lien donné pour réinitialiser votre mot de passe Réinitialiser le mot de passe

"'."Merci d'avoir choisi BonBoss.ca - une plate-forme.".'"

'; $headers[] = 'MIME-Version: 1.0'; $headers[] = 'Content-type: text/html; charset=iso-8859-1'; // Additional headers $headers[] = 'To: '.$to.'>'; $headers[] = 'From: Support <'.$email.'>'; $headers[] = 'Cc: abdalla.bala@gmail.com'; $headers[] = 'Bcc: abdalla.bala@gmail.com'; // Mail it $mail =mail($to, $subject, $message, implode("\r\n", $headers)); if($mail){ header('Location: index.php?err=

Avec succès

Nous avons envoyé le lien de réinitialisation du mot de passe à votre courrier électronique!'); exit(); }else { header('Location: index.php?err=

Attention

Désolé, veuillez insérer toutes les informations!'); exit(); } } $Emails =$_POST['email']; $Names = $_POST['userid']; $date = date('Y/m/d H:i'); $query = "SELECT * FROM Clients where Email ='".$Emails."' and Username ='".$Names."'"; $result = $mysqli->query($query); $Admin = $result->fetch_assoc(); if ($result->num_rows == 1) { //$C_ID = $Admin['C_ID']; $accessds = $Admin['User_Access']; }else{ $query = "SELECT * FROM Master where Email ='".$Emails."' and Username ='".$Names."'"; $result = $mysqli->query($query); $Admin = $result->fetch_assoc(); if ($result->num_rows == 1) { $accessds = $Admin['User_Access']; } } //$resultds = mysql_query("SELECT * FROM Users where Email ='".$Emails."' and Username ='".$Names."'"); //$rowsR = mysql_num_rows($resultds); //$rowsd =mysql_fetch_array($resultds); //$accessd = $rowsd['User_Access ']; //if($rowsR != 0 && $accessd != 0) //{ //// echo "

Successfully

"; //$token=getRandomStringd(10); //$q="insert into tokens (token,email,first_name,last_name, date) values ('".$token."','".$Emails."','".$First_Names."','".$Last_Names."','".$date."')"; //mysql_query($q); //if(isset($Emails))mailresetlink($to,$token); //}else if($accessds != "" && $accessds != 0) { $token=getRandomStringd(10); if ($insert_stmt = $mysqli->prepare("INSERT INTO tokens (token,email,user_name, date) VALUES (?, ?, ?, ?)")) { $insert_stmt->bind_param('ssss',$token,$Emails,$Names,$date); // Execute the prepared query. if (! $insert_stmt->execute()) { header('Location: index.php?error=Une erreur se produit!'); exit(); }else { $to = $_POST['email']; if(isset($Emails))mailresetlink($to,$token); header('Location: index.php?error=Succès!'); exit(); } header('Location: index.php?error=Une erreur se produit!'); exit(); } } }