forgot.php

<?php  include "includes/db.php"; ?>
<?php  include "includes/header.php"; ?>
<?php  include "admin/functions.php"; ?>

<!--
    find SMTP credentials of your Mailtrap Inbox (hostname, port, login and password). They're inside each Inbox.
    place these SMTP credentials to your application’s configuration. 
    You can find config examples for different environments in the Integration section inside your Inbox.

    https://github.com/PHPMailer/PHPMailer

    Mailtrap is safe email testing for staging and development
-->

<?php

//require './vendor/phpmailer/phpmailer/src/PHPMailer.php';

// Import PHPMailer classes into the global namespace
// These must be at the top of your script, not inside a function
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\Exception;
require './Classes/config.php';
require './vendor/autoload.php';

    // if(!isset($_GET['forgot'])){
    //     redirect('index');
    // }

    if($_SERVER['REQUEST_METHOD']==strtoupper('post')){

        if(isset($_POST['email'])) {
            $email = $_POST['email'];
            $length = 50;
            $token = bin2hex(openssl_random_pseudo_bytes($length)); //pseudo-random bytes, and does this via the optional crypto_strong parameter
            //the hexadecimal representation of the given string


            if(email_exists($email)){

                if($stmt = mysqli_prepare($connection, "UPDATE Users SET token='{$token}' WHERE user_email= ?")){

                    mysqli_stmt_bind_param($stmt, "s", $email);
                    mysqli_stmt_execute($stmt);
                    mysqli_stmt_close($stmt);

                    /*
                     * configure PHPMailer
                     */

                    $mail = new PHPMailer();
                    $mail->isSMTP();
                    $mail->Host = Config::SMTP_HOST;
                    $mail->Username = Config::SMTP_USERNAME;
                    $mail->Password = Config::SMTP_PASSWORD;
                    $mail->Port = Config::SMTP_PORT;
                    $mail->SMTPSecure = 'tls';
                    $mail->SMTPAuth = true;
                    $mail->isHTML(true);
                    $mail->CharSet = 'UTF-8';


                    $mail->setFrom('moebee95@yahoo.com', 'Mohamad El Bohsaly');
                    $mail->addAddress($email); //receipient
                    $mail->Subject = 'This is a test email';
                    $mail->addReplyTo('moebee95@yahoo.com', 'Information');
                    $mail->Body = '<p>Please click to reset your password
                    <a href="http://localhost:8888/By%20Edwin%20Diaz/cms/reset.php?email='.$email.'&token='.$token.' ">http://localhost:888/cms/reset.php?email='.$email.'&token='.$token.'</a>
                    </p>';


                    if($mail->send()){
                        $emailSent = true;
                        mail($email, $mail->Subject, $mail->Body, "From: ".$email);
                           
                    ?>

                        <div class="alert alert-success">
                            <strong>Success!</strong> An email has been just been sent!
                        </div>
                        

                   <?php } else{ ?>
                        <div class="alert alert-warning">
                            <strong>Warning!</strong> Attention! The email hasn't been sent!
                        </div>
                    <?php }

                }
            } else{ ?>
                <div class="alert alert-warning">
                    <strong>Warning!</strong> Attention! The email doesn't exist in our system!
                </div>
            <?php }
        }
     }

?>

<!-- Page Content -->
<div class="container">

    <div class="form-gap"></div>
    <div class="container">
        <div class="row">
            <div class="col-md-4 col-md-offset-4">
                <div class="panel panel-default">
                    <div class="panel-body">
                        <div class="text-center">


                        <?php if(!isset( $emailSent)): ?>


                                <h3><i class="fa fa-lock fa-4x"></i></h3>
                                <h2 class="text-center">Forgot Password?</h2>
                                <p>You can reset your password here.</p>
                                <div class="panel-body">

                                    <form id="register-form" role="form" autocomplete="off" class="form" method="post">

                                        <div class="form-group">
                                            <div class="input-group">
                                                <span class="input-group-addon"><i class="glyphicon glyphicon-envelope color-blue"></i></span>
                                                <input id="email" name="email" placeholder="email address" class="form-control"  type="email">
                                            </div>
                                        </div>
                                        <div class="form-group">
                                            <input name="recover-submit" class="btn btn-lg btn-primary btn-block" value="Reset Password" type="submit">
                                        </div>

                                        <input type="hidden" class="hide" name="token" id="token" value="">
                                    </form>

                                </div><!-- Body-->

                            <?php else: ?>


                                <h2>Please check your email</h2>


                            <?php endIf; ?>


                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>


    <hr>

    <?php include "includes/footer.php";?>

</div> <!-- /.container -->