1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / sathmcmy / public_html /
Filename : forgot_password.php
back
<?php include "inc/header.php"; ?>

<?php 

    $login= Session::get('cuslogin');
    
    if(isset($login)) {
        if($login == true) {
            header('Location:order.php');
        }
    }

?>

<?php 

    // if($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['recover'])) {

    //     // validate token
    //     if(empty($_POST['token_forgot_email'])) {
    //         header("Location: index.php");
    //     }

    //     if($_SESSION['token_forgot_email'] != $_POST['token_forgot_email']) {
    //         header("Location: index.php");
    //     }

    //     // $customLogin= $cmr->customerLogin($_POST);

    //     $email = trim($_POST['email']);
    //     $email = htmlspecialchars($email);
    //     $email = mysqli_real_escape_string($db->link, $email);

    //     // check if the email exists in the database.
    //     $sql        = "SELECT email FROM tbl_customer WHERE email='$email' LIMIT 1";

    //     $found_row  = mysqli_query($db->link, $sql);

    //     if($found_row->num_rows == 1) {

    //         $data  = $found_row->fetch_assoc()['email'];
    //         $token = bin2hex(random_bytes(32));

    //         // echo "The email is: ". $data;


    //         // add the email of which password is to be reset to the reset_password table
    //         $insert_query= "INSERT INTO reset_password(email, token) VALUES('$data', '$token')";



    //         // echo "Found";
    //     }

    //     // echo "<pre>";
    //     //     print_r($found_row);
    //     // echo "</pre>";

    // }

?>

    <!-- Login/ Register Details -->
    <section id="login" style="margin-top: .5rem; height: 50vh;">
        <div class="container login-container">
            <div class="sign-in">
                <?php 

                    // Error message diplay place or email submitted display place

                ?>
                <?php 

                    // Create token for CSRF protection
                    function token_forgot_email() {
                        $token= bin2hex(random_bytes(32));
                        $_SESSION['token_forgot_email'] = $token;
                        return $token;
                    }

                ?>

                <h2 class="py-2" id="email-heading">Email</h2>
                <p>We'll send an email with recovery link, so that you can change your password.</p>
                <form action="" method="post" class="sign-in-form" onsubmit="return submitForm(event)">
                    <input type="hidden" id="token_forgot_email" name="token_forgot_email" value="<?php echo token_forgot_email(); ?>">
                    <div class="form-group">
                        <input type="email" name="email" placeholder="Email" id="forgot_pass_email">
                    </div>
                    <input type="submit" name="recover" class="btn-pri" value="Submit">
                </form>
            </div>
        </div>
    </section>

    <!-- Footer -->
    <?php include "inc/footer.php"; ?>

    <script>

        const logo= document.getElementById("logo");

        logo.style.cursor= 'pointer';
        logo.addEventListener("click", () => {
            window.location.href= 'index.php';
        });


        function ValidateEmail(inputText) {
            var mailformat = /^w+([.-]?w+)*@w+([.-]?w+)*(.w{2,3})+$/;
            if(inputText.value.match(mailformat)) {
                return true;
            } else {
                return false;
            }
        }

        // check the submitted form
        function doCheck(event) {
            const email= document.getElementById("signInEmail");

            if(email.value == '' || email.value == null) {
                return false;
            } else {
                return true;
            }

            // validate email
            if(ValidateEmail(email.value)) {
                
                return true;
            } else {
                return false;
            }

        }

    </script>
    <script>
        // submitForm
        function submitForm(event) {

            Array.from(document.querySelectorAll(".loaderDiv")).forEach(el => el.remove());

            // document.querySelector(".empty_field").remove();
            // if(document.querySelector(".empty_field")) {
            //     document.querySelector(".empty_field").remove();
            // }

            // if(document.querySelector(".empty_field")) {
            //     document.querySelector(".empty_field").remove();
            // }

            const email= document.getElementById("forgot_pass_email");
            const token= document.getElementById("token_forgot_email");
            // console.log(token.value);

            // validate email
            if(email.value === '' || email.value === null) {

                Array.from(document.querySelectorAll(".empty_field")).forEach(el => el.remove());

                const errorDiv          = document.createElement("div");
                errorDiv.className      = 'empty_field';
                errorDiv.innerHTML      = "Email must not be empty.";
                errorDiv.style.color    = 'red';
                errorDiv.style.maxWidth = '1000px';
                errorDiv.style.margin   = 'auto';
                document.querySelector("#login").insertBefore(errorDiv, document.querySelector('.login-container'));
                return false;
            }
            // validate email


            // create element for gif loader
            const loaderDiv             = document.createElement("div");
            loaderDiv.className         = 'loaderDiv';
            loaderDiv.style.justifySelf = 'center';
            loaderDiv.innerHTML         = "<img src='images/Loader.gif' style='width: 100px;' />";
            document.querySelector(".sign-in").insertBefore(loaderDiv, document.querySelector('#email-heading'));

            // disabling the submit button after form submit
            document.querySelector(".btn-pri").setAttribute("disabled", true);


            // console.log(email.value);
            sendEmail(email.value, token.value);

            // clear email field
            email.value= '';

            event.preventDefault();
        }

        function sendEmail(email, token) {


            const Client= new XMLHttpRequest();

            Client.open("POST", "ajax_forgot_pass.php",  true);

            Client.setRequestHeader("Content-type", "application/x-www-form-urlencoded");

            Client.onload= function() {

                if(this.status  === 200 && this.readyState === 4)  {
                    const response= JSON.parse(this.responseText);
                    console.log(response);

                    if(response[1] === true) {
                        if(document.querySelector(".empty_field")) {
                            document.querySelector(".empty_field").remove();
                        }
                        document.querySelector(".sign-in").remove();

                        // document.querySelector(".empty_field").remove();
                        // document.querySelector(".loaderDiv").remove();

                        // Remove the loader div
                        // document.querySelector(".loaderDiv").remove();
                        
                        let myDiv             = document.createElement("div");
                        myDiv.innerHTML       = response[0];
                        myDiv.style.color     = 'green';
                        myDiv.style.fontSize  = '24px';
                        // myDiv.style.height    = '50vh';
                        myDiv.style.textAlign = "center";
                        myDiv.style.gridColumn= '1/ span 2';
                        document.querySelector(".login-container").insertBefore(myDiv, document.querySelector('.sign-in'));
                    }

                    if(response[0] === 'User not found') {
                        Array.from(document.querySelectorAll(".empty_field")).forEach(el => el.remove());

                        document.querySelector(".loaderDiv").style.color    = 'red';
                        document.querySelector(".loaderDiv").style.fontSize = '24px';
                        document.querySelector(".loaderDiv").innerHTML= response[0];
                        
                        document.querySelector(".btn-pri").removeAttribute("disabled");
                    }
                    
                }
                
            };


            // document.querySelector(".sign-in").remove();
            Client.send("email=" + email + "&token_forgot_email=" + token );

        }
    </script>
</body>
</html>