<?php
define('_TITLE_', 'Wachtwoord Vergeten');
include ('header.php');


if (isset($_SESSION['Id'])) {
    echo "Je bent al ingelogd";
} else {
    
    /** DEBUG PARAM Disable this line when script is functional! */
    echo '<pre>'.print_r($param).'</pre>';
    /** END DEBUG PARAM */
    
    if (isset($param) && $param[1] == 'code' && isset($param[2])) {


        $pQuery = mysql_query("SELECT * FROM system_forgotpass WHERE uCode = '".mysql_real_escape_string($param[2])."'");


        if (mysql_num_rows($pQuery) == 0) {
            echo "De code was incorrect, als dit niet klopt neem dan contact met ons op!";
        } else {
            $pFetch = mysql_fetch_assoc($pQuery);
            $code = substr(md5(microtime()), 0, 10);


            mysql_query("UPDATE leden_leden SET uPass = '" . md5($code) . "' WHERE uId = '" . $pFetch['uName'] . "'");
            mysql_query("DELETE FROM system_forgotpass WHERE uId = '" . $pFetch['uId'] . "'");


            $uFetch = mysql_fetch_assoc(mysql_query("SELECT * FROM leden_leden WHERE uId = '" . $pFetch['uName'] . "'"));


            $subject = "Wachtwoord Vergeten " . _NAME_;
            $to = $uFetch['uMail'];
            $headers = 'From: ' . _NAME_ . ' <noreply@' . _ROOT2_ . '>' . "\r\n";
            $headers .= 'Reply-To: ' . _NAME_ . ' <noreply@' . _ROOT2_ . '>' . "\r\n";
            $headers .= 'X-Mailer: PHP/' . phpversion() . "\r\n";
            $headers .= 'MIME-Version: 1.0' . "\r\n";
            $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
            $bericht = 'Hallo, <br /><br />						
                Uw nieuwe wachtwoord op ' . _NAME_ . ' is:<br />						
                Wachtwoord: ' . $code . '<br />					
                U kunt <a href="' . _ROOT_ .
                'inloggen">hier</a> inloggen<br/ ><br />
                						Met Vriendelijke groeten<br />						
                                        Team ' . _NAME_;


            mail($to, $subject, $bericht, $headers);
            echo "Er is een mail gestuurd met daarin uw nieuwe wachtwoord";
        }
    } elseif (isset($_POST['code'])) {
        if (empty($_POST['naam']) || empty($_POST['mail'])) {
            echo "U hebt niet alle velden ingevuld<br />Klik <a href='javascript:history.go(-1)'>hier</a> om terug te gaan";
        } else {
            $pQuery = mysql_query("SELECT * FROM leden_leden WHERE uName = '" .
                mysql_real_escape_string($_POST['naam']) . "'");
            if (mysql_num_rows($pQuery) != 1) {
                echo "Deze gebruiker bestaat niet<br />Klik <a href='javascript:history.go(-1)'>hier</a> om terug te gaan";
            } else {
                $pFetch = mysql_fetch_assoc($pQuery);
                if ($pFetch['uMail'] != $_POST['mail']) {
                    echo "Dit Emailadres klopte niet";
                } else {
                    $code = substr(md5(microtime()), 0, 10);
                    mysql_query("INSERT INTO system_forgotpass (uPass, uName) VALUES('" . $code . "', '" . $pFetch['uId'] . "')");
                    $subject = "Wachtwoord Vergeten op " . _NAME_;
                    $to = $_POST['mail'];
                    $headers = 'From: ' . _NAME_ . ' <noreply@' . _ROOT2_ . '>' . "\r\n";
                    $headers .= 'Reply-To: ' . _NAME_ . ' <noreply@' . _ROOT2_ . '>' . "\r\n";
                    $headers .= 'X-Mailer: PHP/' . phpversion() . "\r\n";
                    $headers .= 'MIME-Version: 1.0' . "\r\n";
                    $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
                    $bericht = 'Hallo, <br /><br />								U hebt zojuist een nieuwe wachtwoord aangevraagd op ' .
                        _NAME_ . '<br />								Om dit te doen dient u op devolgende link te klikken:<br />								<a href="' .
                        _ROOT_ . 'wwvergeten/code/' . $code . '">' . _ROOT_ . 'wwvergeten/code/' . $code .
                        '</a><br /><br />								Met Vriendelijke groeten<br />								Team ' . _NAME_;
                    mail($to, $subject, $bericht, $headers);
                    echo "Succesvol aangevraagd<br />Er is een email gestuurd naar u bekijk u inbox/ en of u ongewenste mappen!";
                }
            }
        }
    } else { ?>		
    <form action="<?php echo _ROOT_; ?>wwvergeten" method="post">		
    <table>		
    <tr><td>Naam</td><td><input type="text" name="naam" /></td></tr>		<tr><td>E-Mail</td><td><input type="text" name="mail" /></td></tr>		<tr><td></td><td><input type="submit" name="code" value="Aanvragen" /></td></tr>		</table>		</form>		
    
    <?php
     }
}


include('footer.php'); 
?>