newznab-tmux-NNTmux/public/pages/forgottenpassword.php

<?php

use App\Models\User;
use nntmux\Captcha;
use App\Mail\PasswordReset;
use App\Mail\ForgottenPassword;
use Illuminate\Support\Facades\Mail;

if (User::isLoggedIn()) {
    header('Location: '.WWW_TOP.'/');
}

$action = $_REQUEST['action'] ?? 'view';

$captcha = new Captcha($page);
$email = $rssToken = $sent = $confirmed = '';

switch ($action) {
    case 'reset':
        if (! isset($_REQUEST['guid'])) {
            $page->smarty->assign('error', 'No reset code provided.');
            break;
        }

        $ret = User::getByPassResetGuid($_REQUEST['guid']);
        if (! $ret) {
            $page->smarty->assign('error', 'Bad reset code provided.');
            break;
        }

        //
        // reset the password, inform the user, send out the email
        //
        User::updatePassResetGuid($ret['id'], '');
        $newpass = User::generatePassword();
        User::updatePassword($ret['id'], $newpass);

        $to = $ret['email'];
        $onscreen = 'Your password has been reset to <strong>'.$newpass.'</strong> and sent to your e-mail address.';
        Mail::to($to)->send(new PasswordReset($ret['id'], $newpass));
        $page->smarty->assign('notice', $onscreen);
        $confirmed = true;
        break;

        break;
    case 'submit':

        if ($captcha->getError() === false) {
            $email = $_POST['email'] ?? '';
            $rssToken = $_POST['apikey'] ?? '';
            if (empty($email) && empty($rssToken)) {
                $page->smarty->assign('error', 'Missing parameter(email and/or apikey to send password reset');
            } else {
                //
                // Check users exists and send an email
                //
                $ret = ! empty($rssToken) ? User::getByRssToken($rssToken) : User::getByEmail($email);
                if ($ret === null) {
                    $page->smarty->assign('error', 'The email or apikey are not recognised.');
                    $sent = true;
                    break;
                }
                //
                // Generate a forgottenpassword guid, store it in the user table
                //
                $guid = md5(uniqid('', false));
                User::updatePassResetGuid($ret['id'], $guid);
                //
                // Send the email
                //
                $resetLink = $page->serverurl.'forgottenpassword?action=reset&guid='.$guid;
                Mail::to($ret['email'])->send(new ForgottenPassword($resetLink));
                $sent = true;
                break;
            }
            break;
        }
}
$page->smarty->assign(
    [
        'email'     => $email,
        'apikey'    => $rssToken,
        'confirmed' => $confirmed,
        'sent'      => $sent,
    ]
);

$page->title = 'Forgotten Password';
$page->meta_title = 'Forgotten Password';
$page->meta_keywords = 'forgotten,password,signup,registration';
$page->meta_description = 'Forgotten Password';

$page->content = $page->smarty->fetch('forgottenpassword.tpl');
$page->render();