$BYPASS_LOGIN=true;
include "am_header.php";
DrawHeader("Password Reminder");
//*************************************
// Handle Login
//*************************************
if(!empty($_POST['email_guess'])){
echo "
";
$email_guess=stripslashes($_POST['email_guess']);
$sql= "SELECT *,decode(u_passwd,'') as pwd ";
$sql.="from users where lcase(u_Email)=lcase('$email_guess') ";
$sql.="and u_Status='A'";
$result = mysql_query($sql) or die("Query failed".mysql_error());
if($row = mysql_fetch_assoc($result)){ // correct pwd
if($row['pwd']!='Ë'){ // pwd was encoded
require_once "mailclass.php";
$headers = "From: {$_VAR['EMAIL_DEFAULT_FROM']}\r\n";
$smtp=new smtp_client();
$msg= "GPP Password Reminder\r\n";
$msg.="--------------------------------\r\n";
$msg.="Here is your current username and password information ";
$msg.="for the ".$_VAR['PROJECT_LONG_NAME'].".\r\n\r\n";
$msg.="Username: ".$row['u_Login']."\r\n";
$msg.="Password: ".$row['pwd']."\r\n\r\n";
$msg.="Login at: {$_VAR['ROOT_URL']}/admin/\r\n\r\n\r\n\r\n";
$msg.="Anti-Abuse Tracking Information\r\n";
$msg.="--------------------------------\r\n";
$msg.="Request Date: ".date("m/d/y h:i:s")."\r\n";
$msg.="Requestor IP: ".$_SERVER['REMOTE_ADDR']."\r\n";
$msg.="Requestor Host: ".gethostbyaddr($_SERVER['REMOTE_ADDR'])."\r\n";
$msg.="User Agent: ".$_SERVER['HTTP_USER_AGENT']."\r\n";
$smtp->email($_VAR['EMAIL_DEFAULT_FROM'],$email_guess,$email_guess, $headers, "* GPP Password Reminder *",$msg);
$smtp->send();
unset($smtp);
echo "Your username and password have been sent to:
".strtolower($email_guess)."";
} else { // pwd wasn't encoded
echo "The email reminder page will only work for users that have logged in since 7/15/03.";
}
echo "
";
include "am_footer.php";
die();
} else { // wasn an email address
echo ""$email_guess" is not the address of any administrator.";
echo "
";
include "am_footer.php";
die();
} // endif retrieve row
} // endif passed guess_address
?>