ini_set("display_errors","1");
ini_set("display_startup_errors","1");
session_start();
set_magic_quotes_runtime(0);
session_unset();
include("include/dbcommon.php");
include("include/dbconnection.php");
$cEmailField = "email";
$reminded=false;
$strSearchBy="username";
if (@$_POST["btnSubmit"] == "Remind")
{
$strSearchBy=$_POST["searchby"];
$strUsername=refine(@$_POST["username"]);
$strEmail=refine(@$_POST["email"]);
$conn=db_connect();
$rstemp=db_query("select * from ".AddTableWrappers($cLoginTable)." where 1=0",$conn);
$tosearch=false;
if($strSearchBy!="email")
{
$value=$strUsername;
if((string)$value!="")
$tosearch=true;
if(NeedQuotes(db_fieldtype($rstemp,$cUserNameField)))
$value="'".$value."'";
$sWhere=AddFieldWrappers($cUserNameField)."=".$value;
}
else
{
$value=$strEmail;
if((string)$value!="")
$tosearch=true;
if(NeedQuotes(db_fieldtype($rstemp,$cEmailField)))
$value="'".$value."'";
$sWhere=AddFieldWrappers($cEmailField)."=".$value;
}
if($tosearch)
{
$strSQL="select ".AddFieldWrappers($cUserNameField).",".AddFieldWrappers($cPasswordField).",".AddFieldWrappers($cEmailField)." from ".AddTableWrappers($cLoginTable)." where ".$sWhere;
$rs=db_query($strSQL,$conn);
if(db_numrows($rs))
{
$data=db_fetch_numarray($rs);
$message="Password reminder\r\n";
$message.="You asked to remind your username and password at http://".$_SERVER["SERVER_NAME"].$_SERVER["SCRIPT_NAME"]."\r\n";
$message.="User Name: ".$data[0]."\r\n";
$message.="Password: ".$data[1]."\r\n";
ini_set ('sendmail_from', 'password@oliviaspear.com');
mail($data[2],"Password retrieval",$message);
$reminded=true;
}
}
if(!$reminded)
{
if($strSearchBy!="email")
$strMessage="User"." ".$strUsername." "."is not registered.";
else
$strMessage="This email don't exist in our database";
}
}
?>
Password reminder