X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=wwwroot%2Fbackend%2Fmysql%2Fbackend.inc;h=560c5b8f9f845aa0b6aa1aa8adeb6e7bf25c82d8;hb=d47273fea89327f93dcd55e48b8800ea2c2134d2;hp=971bb104bd3a7aba4f2f97bbfcd87c67b6789d00;hpb=387da281967a2415804f59c471d5c871baa61e83;p=mirrors%2FKyberia-bloodline.git diff --git a/wwwroot/backend/mysql/backend.inc b/wwwroot/backend/mysql/backend.inc index 971bb10..560c5b8 100644 --- a/wwwroot/backend/mysql/backend.inc +++ b/wwwroot/backend/mysql/backend.inc @@ -698,7 +698,42 @@ public static function getPoll($user_id,$poll_id) { return $array; } +// XXX + +public static function resetPassword($login_id,$login,$vercode,$password) { + global $db; + + // Security checks + $login = db_escape_string($login); + if (!is_numeric($login_id)) { return false; } + + if ($login == '') { + $error="Please enter name or id"; + return false; + } + + if ($login_id = 0) { + $set=$db->query("select * from users where login='$login'"); + } else { + $set=$db->query("select * from users where user_id='$login'"); + } + $set->next(); + $user_name=$set->getString('login'); + $user_id=$set->getString('user_id'); + $hash=$set->getString('hash'); + + if ($hash != $vercode) { + $error="Bad verification code!"; + return false; + } + + $password = sha1($password); + $q="update users set password='$password',hash='' where user_id='$user_id'"; + $db->query($q); + + return 0; } +} ?>