alert('未开启登录');window.location.href='./';"); } if($islogin2==1){ @header('Content-Type: text/html; charset=UTF-8'); exit(""); } if(isset($_POST['act']) && $_POST['act']=='forgot'){ @header('Content-Type: application/json; charset=UTF-8'); $email = trim(isset($_POST['email'])?daddslashes($_POST['email']):''); if(empty($email)){ exit('{"code":-1,"msg":"请输入邮箱"}'); } if(!preg_match('/^[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}$/', $email)){ exit('{"code":-1,"msg":"邮箱格式不正确"}'); } $user=$DB->find('user','*',['email'=>$email], null, '1'); if(!$user){ exit('{"code":-1,"msg":"该邮箱未注册"}'); } if($user['type']!='local'){ exit('{"code":-1,"msg":"该邮箱未绑定本地账号，无法通过邮箱找回"}'); } if($user['enable']==0){ exit('{"code":-1,"msg":"当前用户已被禁止登录"}'); } if(!$conf['mail_open'] || !$conf['mail_smtp'] || !$conf['mail_user'] || !$conf['mail_pass']){ exit('{"code":-1,"msg":"邮件服务未配置，请联系管理员"}'); } $token = md5(uniqid(mt_rand(), true)); $expire = time()+1800; $DB->update('user', ['reset_token'=>$token, 'reset_expire'=>$expire], ['uid'=>$user['uid']]); try{ $Mailer = new \lib\Mailer($conf['mail_smtp'], $conf['mail_port'], $conf['mail_user'], $conf['mail_pass'], $conf['mail_ssl'], $conf['mail_from'], $conf['mail_name']); $scheme = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']=='on') ? 'https://' : 'http://'; $host = $_SERVER['HTTP_HOST']; $dir = rtrim(dirname($_SERVER['SCRIPT_NAME']), '/'); $link = $scheme.$host.$dir.'/forgot.php?reset='.$token; $title = $conf['title'].' - 密码找回'; $content = '
'. '

密码找回

'. '

尊敬的 '.htmlspecialchars($user['nickname']).'，您好：

'. '

您正在申请找回 '.htmlspecialchars($conf['title']).' 的登录密码，请点击以下链接进行重置：

'. '

重置密码

'. '

如果按钮无法点击，请复制以下链接到浏览器打开：
'.$link.'

'. '

该链接 30分钟 内有效，为保障账号安全，请勿将链接转发给他人。

'. '

如果您没有申请找回密码，请忽略此邮件。

'. '
'; $res = $Mailer->send($email, $title, $content); if(isset($res['code']) && $res['code']!==0){ $DB->update('user', ['reset_token'=>'', 'reset_expire'=>0], ['uid'=>$user['uid']]); exit('{"code":-1,"msg":"邮件发送失败，请稍后重试"}'); } }catch(Exception $e){ $DB->update('user', ['reset_token'=>'', 'reset_expire'=>0], ['uid'=>$user['uid']]); exit('{"code":-1,"msg":"邮件发送失败，请稍后重试"}'); } exit('{"code":0,"msg":"重置链接已发送至您的邮箱，请30分钟内完成重置"}'); }elseif(isset($_POST['act']) && $_POST['act']=='reset'){ @header('Content-Type: application/json; charset=UTF-8'); $token = trim(isset($_POST['token'])?daddslashes($_POST['token']):''); $password = isset($_POST['password'])?$_POST['password']:''; $repassword = isset($_POST['repassword'])?$_POST['repassword']:''; if(empty($token)){ exit('{"code":-1,"msg":"重置链接无效"}'); } if(strlen($password) < 6 || strlen($password) > 32){ exit('{"code":-1,"msg":"密码长度需为6-32位"}'); } if($password !== $repassword){ exit('{"code":-1,"msg":"两次输入的密码不一致"}'); } $user=$DB->find('user','*',['reset_token'=>$token], null, '1'); if(!$user || $user['reset_expire'] < time()){ exit('{"code":-1,"msg":"重置链接无效或已过期，请重新申请"}'); } $hash = password_hash($password, PASSWORD_DEFAULT); $DB->update('user', ['password'=>$hash, 'reset_token'=>'', 'reset_expire'=>0], ['uid'=>$user['uid']]); exit('{"code":0,"msg":"密码重置成功，请使用新密码登录"}'); } $reset_token = isset($_GET['reset']) ? daddslashes(trim($_GET['reset'])) : ''; if($reset_token){ $reset_user = $DB->find('user','uid',['reset_token'=>$reset_token], null, '1'); if(!$reset_user){ $title = '密码找回 - ' . $conf['title']; $authTitle = '密码找回'; $authSub = '输入注册邮箱，我们发送重置链接'; $authIcon = 'fa-key'; include SYSTEM_ROOT.'auth_header.php'; echo '
重置链接无效或已过期，请重新申请。
'; echo '
返回重新申请去登录
'; include SYSTEM_ROOT.'auth_footer.php'; exit; } $title = '重置密码 - ' . $conf['title']; $authTitle = '重置密码'; $authSub = '请设置你的新密码'; $authIcon = 'fa-key'; include SYSTEM_ROOT.'auth_header.php'; ?>
返回登录
重置链接将发送至您的注册邮箱

返回登录