1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / sathmcmy / www /
Filename : ajax_forgot_pass.php
back
<?php 

    // Added part, for session security
    ini_set( 'session.cookie_httponly', 1 );
    ini_set( 'session.use_strict_mode', 1 );

    session_start();
    
    date_default_timezone_set('Asia/Kathmandu');

    // mailer files
    require "classes/PHPMailer/PHPMailer.php";
    require 'classes/PHPMailer/Exception.php';
    require 'classes/PHPMailer/SMTP.php';

    use PHPMailer\PHPMailer\PHPMailer;
    use PHPMailer\PHPMailer\Exception;
    use PHPMailer\PHPMailer\SMTP;
    
    include_once("lib/Database.php");

    $db= new Database();

    if($_SERVER['REQUEST_METHOD'] == 'POST') {

        // validate token
        if(empty($_POST['token_forgot_email'])) {
            exit;
            header("Location: index.php");
        }

        if($_SESSION['token_forgot_email'] != $_POST['token_forgot_email']) {
            exit;
            header("Location: index.php");
        }

        $email = trim($_POST['email']);
        $email = htmlspecialchars($email);
        $email = mysqli_real_escape_string($db->link, $email);

        // check if the email exists in the database.
        $sql        = "SELECT email FROM tbl_customer WHERE email='$email' LIMIT 1";

        $found_row  = mysqli_query($db->link, $sql);

        if($found_row->num_rows == 1) {

            $data  = $found_row->fetch_assoc()['email'];
            $email = filter_var($data, FILTER_SANITIZE_EMAIL);
            $token = bin2hex(random_bytes(32));

            // echo "The email is: ". $data;

            // add the email of which password is to be reset to the reset_password table
            $insert_query  = "INSERT INTO reset_password(email, token, reset_date) VALUES('$email', '$token', '". date("Y-m-d h:i:s A") ."')";

            $inserted_result= $db->link->query($insert_query);

            // echo json_encode($inserted_result);
            if($inserted_result != true) {
                exit;
            }

            // echo json_encode($insert_query);
            // exit;$h

            // $inserted_data = 


            // Mail START
            //////
            // $email      = filter_var($data, FILTER_SANITIZE_EMAIL);

            // // validations

            if(filter_var($email, FILTER_VALIDATE_EMAIL) == false) {
                echo json_encode(["invalid_email", "Email is invalid"]);
                exit;
            }


            $mail= new PHPMailer();
            try {
                  $mail->isSMTP();                                            // Set mailer to use SMTP
                $mail->Host       = 'mail.privateemail.com';  // Specify main and backup SMTP servers
                $mail->SMTPAuth   = true;                                   // Enable SMTP authentication
                $mail->Username   = 'contact@sathibhai.com';                     // SMTP username
                $mail->Password   = 'Allall123@';                               // SMTP password
                $mail->SMTPSecure = 'ssl';                                  // Enable TLS encryption, [ICODE]ssl[/ICODE] also accepted
                $mail->Port       = 465;
    
                $mail->IsHTML(true);
                $mail->From="contact@sathibhai.com";
                $mail->FromName='sathibhai.com';
                $mail->Sender='contact@sathibhai.com';
                // $mail->AddReplyTo($email, $full_name);
                // set reply to
                $mail->setFrom('sathibhai.com', 'sathibhai.com', false);
                $mail->addAddress($email);
                $mail->Subject = 'Reset Password';

                $html=<<<DOC
                    <html>
                        <head>
                            <title>Reset your password</title>
                        </head>
                        <body>
                        <p>
                            Please click on the link below to change password.</p> <br /> 
                            <div>
                                <a href='https://www.sathibhai.com/reset.php?token={$token}'>Reset Password</a>
                                <p>or, copy and paste this URL in your browser's address bar https://www.sathibhai.com/reset.php?token={$token}</p>
                            </div> <br /><br />Sathibhai Team
                        </body>
                    </html>
DOC;

                $mail->Body= $html;

                if($mail->send()) {
                    $success_msg= "An email has been sent successfully. <br /><i class='fa fa-check-circle'></i>";
                } else {
                    $msg= "Something went wrong. Please try again.";
                }
            } catch (Exception $e) {
                // exit("Sorry, registration failed. <a href='register.php'>Register again</a>");
                $msg= "Sorry, Please try again.";
            }
            /* PHP Mailer */

            // For success
            if(isset($success_msg)) {
                echo json_encode([$success_msg, true]);
            }

            if(isset($msg)) {
                echo json_encode([$msg, false]);
            }
            // Mail
            /////// END


            // echo "Found";
        } else {
            echo json_encode(["User not found"]);
            exit;
        }

        // echo "<pre>";
        //     print_r($found_row);
        // echo "</pre>";

    } else {
        exit;
    }

    // if(isset($_POST)) {

    //     $email      = filter_var($email, FILTER_SANITIZE_EMAIL);

    //     // // validations

    //     if(filter_var($email, FILTER_VALIDATE_EMAIL) == false) {
    //         echo json_encode(["invalid_email", "Email is invalid"]);
    //         exit;
    //     }


    //     $mail= new PHPMailer();
    //     try {
    //         $mail->isSMTP();                                               // Send using SMTP
    //         $mail->Host       = 'smtp.gmail.com';                          // Set the SMTP server to send through
    //         $mail->SMTPAuth   = true;                                      // Enable SMTP authentication
    //         $mail->Username   = EMAIL;      // The SYSTEM REQUIRED EMAIL   // SMTP username
    //         $mail->Password   = PASSWORD;   // SYSTEM REQUIRED PASSWORD    // SMTP password
    //         $mail->SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS;     // Enable TLS encryption; `PHPMailer::ENCRYPTION_SMTPS` encouraged
    //         $mail->Port       = 587;

    //         $mail->setFrom(EMAIL, 'sathibhai.com'); // who's sending mail, can be company email
    //         $mail->addAddress($email); // whom we're sending

    //         $mail->isHTML(true);
    //         $mail->Subject  = "Reset Password";

    //         $html= "<p></p> <br /> <a href='https://www.sathibhai.com/reset.php?token={$token}'></a> <br /><br /> Sathibhai Team";

    //         $mail->Body= $html;

    //         if($mail->send()) {
    //             $msg= "Email has been sent.";
    //         } else {
    //             $msg= "Something went wrong. Please try again.";
    //         }
    //     } catch (Exception $e) {
    //         // exit("Sorry, registration failed. <a href='register.php'>Register again</a>");
    //         $msg= "Sorry, Please try again.";
    //     }
    //     /* PHP Mailer */

    //     if(isset($msg)) {
    //         echo json_encode([$msg, false]);
    //     }

    // }

?>