WooYun.org

//通过用户名找回密码


	public function public_forget_password_username() {


		$step = intval($_POST['step']);


		$step = max($step,1);


		$this->_session_start();


		


		if(isset($_POST['dosubmit']) && $step==2) {


		//处理提交申请，以手机号为准


			if ($_SESSION['code'] != strtolower($_POST['code'])) {


				showmessage(L('code_error'), HTTP_REFERER);


			}


			$username = safe_replace($_POST['username']);





			$r = $this->db->get_one(array('username'=>$username),'userid,email');


			if($r['email']=='') {


				$_SESSION['userid'] = '';


				$_SESSION['code'] = '';


				showmessage("该账号没有绑定手机号码，请选择其他方式找回！");


			} else {


				$_SESSION['userid'] = $r['userid'];


				$_SESSION['email'] = $r['email'];


			}


			$email_arr = explode('@',$r['email']);


			include template('member', 'forget_password_username');


		} elseif(isset($_POST['dosubmit']) && $step==3) {


			$sms_report_db = pc_base::load_model('sms_report_model');


			$mobile_verify = $_POST['mobile_verify'];


			$email = $_SESSION['email'];


			if($email){


				if(!preg_match('/^([a-z0-9_]+)@([a-z0-9_]+).([a-z]{2,6})$/',$email)) exit('check email error');


				if($_SESSION['emc_times']=='' || $_SESSION['emc_times']<=0){


					showmessage("验证次数超过5次,验证码失效，请重新获取邮箱验证码！",HTTP_REFERER,3000);


				}


				$_SESSION['emc_times'] = $_SESSION['emc_times']-1;


				if($_SESSION['emc']!='' && $_POST['email_verify']==$_SESSION['emc']) {


					


					$userid = $_SESSION['userid'];


					$updateinfo = array();


					$password = random(8,"23456789abcdefghkmnrstwxy");


					$encrypt = random(6,"23456789abcdefghkmnrstwxyABCDEFGHKMNRSTWXY");


					$updateinfo['encrypt'] = $encrypt;


					$updateinfo['password'] = password($password, $encrypt);


					


					$this->db->update($updateinfo, array('userid'=>$userid));


					$rs = $this->db->get_one(array('userid'=>$userid),'phpssouid');


					if(pc_base::load_config('system', 'phpsso')) {


						//初始化phpsso


						$this->_init_phpsso();


						$this->client->ps_member_edit('', '', '', $password, $rs['phpssouid'], $encrypt);


					}


					$_SESSION['email'] = '';


					$_SESSION['userid'] = '';


					$_SESSION['emc'] = '';


					$_SESSION['code'] = '';


					pc_base::load_sys_func('mail');


					sendmail($email, '密码重置通知', "您在".date('Y-m-d H:i:s')."通过密码找回功能，重置了本站密码。");


					include template('member', 'forget_password_username');


					exit;


				} else {


					showmessage("验证码错误！请重新获取！",HTTP_REFERER,3000);


				}


			} else {


				showmessage("非法请求！");


			}


		} else {


 			include template('member', 'forget_password_username');


		}


	}





	//邮箱获取验证码


	public function public_get_email_verify() {


		pc_base::load_sys_func('mail');


		$this->_session_start();


		$code = $_SESSION['emc'] = random(8,"23456789abcdefghkmnrstwxy");


		$_SESSION['emc_times']=5;


		$message = '您的验证码为：'.$code;





		sendmail($_SESSION['email'], '邮箱找回密码验证', $message);


		echo '1';


	}