mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-03-28 17:42:57 +01:00
433 lines
12 KiB
PHP
433 lines
12 KiB
PHP
<?php
|
|
// +-----------------------------------------------------------------------+
|
|
// | This file is part of Piwigo. |
|
|
// | |
|
|
// | For copyright and license information, please view the COPYING.txt |
|
|
// | file that was distributed with this source code. |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | initialization |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
define('PHPWG_ROOT_PATH','./');
|
|
include_once( PHPWG_ROOT_PATH.'include/common.inc.php' );
|
|
include_once(PHPWG_ROOT_PATH.'include/functions_mail.inc.php');
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | Check Access and exit when user status is not ok |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
check_status(ACCESS_FREE);
|
|
|
|
trigger_notify('loc_begin_password');
|
|
|
|
check_input_parameter('action', $_GET, false, '/^(lost|reset|lost_code|none)$/');
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | Functions |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
/**
|
|
* checks the validity of input parameters, fills $page['errors'] and
|
|
* $page['infos'] and send an email with the verification code
|
|
*
|
|
* @return bool
|
|
*/
|
|
function process_verification_code()
|
|
{
|
|
global $page, $conf, $logger;
|
|
|
|
if (isset($_SESSION['reset_password_code']))
|
|
{
|
|
return true;
|
|
}
|
|
|
|
// empty param
|
|
$username_or_email = trim($_POST['username_or_email']);
|
|
if (empty($username_or_email))
|
|
{
|
|
$page['errors']['password_form_error'] = l10n('Invalid username or email');
|
|
return false;
|
|
}
|
|
|
|
// retrievies user by email is not try by username
|
|
$user_id = get_userid_by_email($username_or_email);
|
|
|
|
if (!is_numeric($user_id))
|
|
{
|
|
$user_id = get_userid($username_or_email);
|
|
}
|
|
|
|
// when no user is found, we assign guest_id instead of stopping.
|
|
// this lets the function behave identically for unknown users,
|
|
// preventing username/email enumeration through timing or responses.
|
|
$is_user_founded = is_numeric($user_id);
|
|
if (!$is_user_founded)
|
|
{
|
|
$user_id = $conf['guest_id'];
|
|
}
|
|
|
|
$userdata = getuserdata($user_id, false);
|
|
|
|
// check if we want to skip email sending
|
|
// if user is guest, generic or doesn't have email
|
|
$status = $userdata['status'];
|
|
$skip_mail = !$is_user_founded or is_a_guest($status) or is_generic($status) or empty($userdata['email']);
|
|
|
|
// send mail with verification code to user
|
|
switch_lang_to($userdata['language']);
|
|
$user_code = generate_user_code();
|
|
$template_mail = pwg_generate_code_verification_mail($user_code['code']);
|
|
if (!$skip_mail)
|
|
{
|
|
$mail_send = pwg_mail($userdata['email'], $template_mail);
|
|
// pwg_activity('user', $userdata['id'], 'reset_password_code', array(
|
|
// 'ip' => $_SERVER['REMOTE_ADDR'],
|
|
// 'agent' => $_SERVER['HTTP_USER_AGENT'],
|
|
// 'is_mail_sent' => $mail_send
|
|
// ));
|
|
}
|
|
switch_lang_back();
|
|
|
|
$_SESSION['reset_password_code'] = [
|
|
'secret' => $user_code['secret'],
|
|
'attempts' => 0,
|
|
'user_id' => $is_user_founded ? $user_id : null,
|
|
'created_at' => time(),
|
|
'ttl' => min($conf['password_reset_code_duration'], 900) // max 15 min
|
|
];
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* checks the validity of input parameters, fills $page['errors'] and
|
|
* $page['infos'] and send an email with reset link
|
|
*
|
|
* @return bool (true if email was sent, false otherwise)
|
|
*/
|
|
function process_password_request()
|
|
{
|
|
global $page, $conf;
|
|
|
|
$state = $_SESSION['reset_password_code'] ?? null;
|
|
if (!$state)
|
|
{
|
|
return true; // fallback line 366
|
|
}
|
|
|
|
// check expired
|
|
if (time() > $state['created_at'] + $state['ttl'])
|
|
{
|
|
unset($_SESSION['reset_password_code']);
|
|
$page['errors']['password_form_error'] = l10n('Code expired');
|
|
return false;
|
|
}
|
|
|
|
$_SESSION['reset_password_code']['attempts']++;
|
|
|
|
$is_valid = true;
|
|
$user_code = trim($_POST['user_code'] ?? '');
|
|
|
|
if (
|
|
empty($user_code) // empty user code
|
|
|| !preg_match('/^\d{6}$/', $user_code) // check digit 6
|
|
|| !verify_user_code($state['secret'], $user_code)) // verify user code
|
|
{
|
|
$is_valid = false;
|
|
}
|
|
|
|
if (!$is_valid)
|
|
{
|
|
if ($_SESSION['reset_password_code']['attempts'] >= 3)
|
|
{
|
|
unset($_SESSION['reset_password_code']);
|
|
$page['errors']['login_page_error'] = l10n('Too many attempts');
|
|
return false;
|
|
}
|
|
|
|
$page['errors']['password_form_error'] = l10n('Invalid verification code');
|
|
return false;
|
|
}
|
|
|
|
// verify code success
|
|
$user_id = $state['user_id'];
|
|
unset($_SESSION['reset_password_code']);
|
|
|
|
if (empty($user_id))
|
|
{
|
|
$page['errors']['password_form_error'] = l10n('Invalid verification code');
|
|
return false;
|
|
}
|
|
|
|
$userdata = getuserdata($user_id);
|
|
$status = $userdata['status'] ?? null;
|
|
|
|
// fallback check: don't send mail when user is guest, generic or doesn't have email
|
|
if (is_a_guest($status) || is_generic($status) || empty($userdata['email']))
|
|
{
|
|
$page['errors']['password_form_error'] = l10n('Password reset is not allowed for this user');
|
|
return false;
|
|
}
|
|
|
|
$generate_link = generate_password_link($user_id);
|
|
switch_lang_to($userdata['language']);
|
|
$email_params = pwg_generate_reset_password_mail($userdata['username'], $generate_link['password_link'], $conf['gallery_title'], $generate_link['time_validation']);
|
|
$send_email = pwg_mail($userdata['email'], $email_params);
|
|
switch_lang_back();
|
|
|
|
// pwg_activity('user', $userdata['id'], 'reset_password_link', array(
|
|
// 'ip' => $_SERVER['REMOTE_ADDR'],
|
|
// 'agent' => $_SERVER['HTTP_USER_AGENT'],
|
|
// 'is_mail_sent' => $send_email
|
|
// ));
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* checks the activation key: does it match the expected pattern? is it
|
|
* linked to a user? is this user allowed to reset his password?
|
|
*
|
|
* @return mixed (user_id if OK, false otherwise)
|
|
*/
|
|
function check_password_reset_key($reset_key)
|
|
{
|
|
global $page, $conf;
|
|
|
|
$key = $reset_key;
|
|
if (!preg_match('/^[a-z0-9]{20}$/i', $key))
|
|
{
|
|
$page['errors'][] = l10n('Invalid key');
|
|
return false;
|
|
}
|
|
|
|
$query = '
|
|
SELECT
|
|
user_id,
|
|
status,
|
|
activation_key
|
|
FROM '.USER_INFOS_TABLE.'
|
|
WHERE activation_key IS NOT NULL
|
|
AND activation_key_expire > NOW()
|
|
;';
|
|
$result = pwg_query($query);
|
|
while ($row = pwg_db_fetch_assoc($result))
|
|
{
|
|
if (pwg_password_verify($key, $row['activation_key']))
|
|
{
|
|
if (is_a_guest($row['status']) or is_generic($row['status']))
|
|
{
|
|
$page['errors'][] = l10n('Password reset is not allowed for this user');
|
|
return false;
|
|
}
|
|
|
|
$user_id = $row['user_id'];
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (empty($user_id))
|
|
{
|
|
$page['errors'][] = l10n('Invalid key');
|
|
return false;
|
|
}
|
|
|
|
return $user_id;
|
|
}
|
|
|
|
/**
|
|
* checks the passwords, checks that user is allowed to reset his password,
|
|
* update password, fills $page['errors'] and $page['infos'].
|
|
*
|
|
* @return bool (true if password was reset, false otherwise)
|
|
*/
|
|
function reset_password()
|
|
{
|
|
global $page, $conf;
|
|
|
|
if ($_POST['use_new_pwd'] != $_POST['passwordConf'])
|
|
{
|
|
$page['errors'][] = l10n('The passwords do not match');
|
|
return false;
|
|
}
|
|
|
|
if (!isset($_GET['key']))
|
|
{
|
|
$page['errors'][] = l10n('Invalid key');
|
|
}
|
|
|
|
$user_id = check_password_reset_key($_GET['key']);
|
|
|
|
if (!is_numeric($user_id))
|
|
{
|
|
return false;
|
|
}
|
|
|
|
single_update(
|
|
USERS_TABLE,
|
|
array($conf['user_fields']['password'] => $conf['password_hash']($_POST['use_new_pwd'])),
|
|
array($conf['user_fields']['id'] => $user_id)
|
|
);
|
|
|
|
deactivate_password_reset_key($user_id);
|
|
deactivate_user_auth_keys($user_id);
|
|
|
|
$page['infos'][] = l10n('Your password has been reset');
|
|
$page['infos'][] = '<a href="'.get_root_url().'identification.php">'.l10n('Login').'</a>';
|
|
|
|
return true;
|
|
}
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | Process form |
|
|
// +-----------------------------------------------------------------------+
|
|
if (isset($_POST['submit']))
|
|
{
|
|
check_pwg_token();
|
|
|
|
if ('lost' == $_GET['action'])
|
|
{
|
|
if (process_verification_code())
|
|
{
|
|
$page['infos'][] = l10n('An email has been sent with a verification code');
|
|
$page['action'] = 'lost_code';
|
|
}
|
|
}
|
|
|
|
if ('lost_code' == $_GET['action'])
|
|
{
|
|
if (process_password_request())
|
|
{
|
|
$page['infos'][] = l10n('An email has been sent with a link to reset your password');
|
|
$page['action'] = 'none';
|
|
}
|
|
}
|
|
|
|
if ('reset' == $_GET['action'])
|
|
{
|
|
if (reset_password())
|
|
{
|
|
$page['action'] = 'none';
|
|
}
|
|
}
|
|
}
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | key and action |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
// a connected user can't reset the password from a mail
|
|
if (isset($_GET['key']) and !is_a_guest())
|
|
{
|
|
unset($_GET['key']);
|
|
}
|
|
|
|
if (isset($_GET['key']) and !isset($_POST['submit']))
|
|
{
|
|
$first_login = false;
|
|
$user_id = check_password_reset_key($_GET['key']);
|
|
if (is_numeric($user_id))
|
|
{
|
|
$userdata = getuserdata($user_id, false);
|
|
$page['username'] = $userdata['username'];
|
|
$template->assign('key', $_GET['key']);
|
|
$first_login = has_already_logged_in($user_id);
|
|
|
|
if (!isset($page['action']))
|
|
{
|
|
$page['action'] = 'reset';
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$page['action'] = 'none';
|
|
}
|
|
}
|
|
|
|
if (!isset($page['action']))
|
|
{
|
|
if (!isset($_GET['action']))
|
|
{
|
|
$page['action'] = 'lost';
|
|
}
|
|
elseif (in_array($_GET['action'], array('lost', 'lost_code', 'reset', 'none')))
|
|
{
|
|
$page['action'] = $_GET['action'];
|
|
}
|
|
}
|
|
|
|
if ('reset' == $page['action'] and !isset($_GET['key']) and (is_a_guest() or is_generic()))
|
|
{
|
|
redirect(get_gallery_home_url());
|
|
}
|
|
|
|
if ('lost' == $page['action'] and !is_a_guest())
|
|
{
|
|
redirect(get_gallery_home_url());
|
|
}
|
|
|
|
if ('lost_code' == $page['action'] and !isset($_SESSION['reset_password_code']))
|
|
{
|
|
redirect(get_gallery_home_url(). 'identification.php');
|
|
}
|
|
|
|
if ('lost' == $page['action'] and isset($_SESSION['reset_password_code']))
|
|
{
|
|
$page['action'] = 'lost_code';
|
|
}
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | template initialization |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
$title = l10n('Password Reset');
|
|
if ('lost' == $page['action'])
|
|
{
|
|
$title = l10n('Forgot your password?');
|
|
|
|
if (isset($_POST['username_or_email']))
|
|
{
|
|
$template->assign('username_or_email', htmlspecialchars(stripslashes($_POST['username_or_email'])));
|
|
}
|
|
}
|
|
else if ('reset' == $page['action'] and isset($first_login) and $first_login)
|
|
{
|
|
$title = l10n('Welcome');
|
|
$template->assign('is_first_login', true);
|
|
}
|
|
|
|
$page['body_id'] = 'thePasswordPage';
|
|
|
|
$template->set_filenames(array('password'=>'password.tpl'));
|
|
$template->assign(
|
|
array(
|
|
'title' => $title,
|
|
'form_action'=> get_root_url().'password.php',
|
|
'action' => $page['action'],
|
|
'username' => isset($page['username']) ? $page['username'] : $user['username'],
|
|
'PWG_TOKEN' => get_pwg_token(),
|
|
)
|
|
);
|
|
|
|
|
|
// include menubar
|
|
$themeconf = $template->get_template_vars('themeconf');
|
|
if (!isset($themeconf['hide_menu_on']) OR !in_array('thePasswordPage', $themeconf['hide_menu_on']))
|
|
{
|
|
include( PHPWG_ROOT_PATH.'include/menubar.inc.php');
|
|
}
|
|
|
|
// +-----------------------------------------------------------------------+
|
|
// | html code display |
|
|
// +-----------------------------------------------------------------------+
|
|
|
|
include(PHPWG_ROOT_PATH.'include/page_header.php');
|
|
trigger_notify('loc_end_password');
|
|
flush_page_messages();
|
|
$template->pparse('password');
|
|
include(PHPWG_ROOT_PATH.'include/page_tail.php');
|
|
|
|
?>
|