From 02d313cb73f4f25a905483615ba3e849c98ffb35 Mon Sep 17 00:00:00 2001
From: Robbie Antenesse <gamedev@alamantus.com>
Date: Tue, 1 Dec 2015 18:01:52 -0700
Subject: [PATCH] Started on password reset.

---
 php/functions.php                 |  2 ++
 php/password_reset_validation.php | 38 +++++++++++++++++++++++++++++++
 php/random_string.php             | 12 ++++++++++
 3 files changed, 52 insertions(+)
 create mode 100644 php/password_reset_validation.php
 create mode 100644 php/random_string.php

diff --git a/php/functions.php b/php/functions.php
index 377b97b..4dcdee9 100644
--- a/php/functions.php
+++ b/php/functions.php
@@ -3,6 +3,8 @@
 
 require_once(SITE_LOCATION . '/php/helpers.php');
 require_once(SITE_LOCATION . '/php/plugins/easycrypt.php');
+require_once(SITE_LOCATION . '/php/random_string.php');
 require_once(SITE_LOCATION . '/php/validation.php');
+require_once(SITE_LOCATION . '/php/password_reset_validation.php');
 
 ?>
\ No newline at end of file
diff --git a/php/password_reset_validation.php b/php/password_reset_validation.php
new file mode 100644
index 0000000..c8e4531
--- /dev/null
+++ b/php/password_reset_validation.php
@@ -0,0 +1,38 @@
+<?php
+function Set_Password_Reset($email) {
+    $date = date("Y-m-d H:i:s");
+    $reset_code = Random_String(20);
+    $query = "UPDATE `users` SET `password_reset_code`=" . $reset_code . ", `password_reset_date`='" . $date . "' WHERE `email`='" . $email . ";";
+    $reset = query($query);
+    
+    if ($reset) {
+        return true;
+    } else {
+        return false;
+    }
+}
+
+function Check_Password_Reset($email, $code) {
+    $date = date("Y-m-d");
+    $daterange = "'" . $date . " 00:00:00' AND '" . $date . " 23:59:59'";
+    $query = "SELECT * FROM `users` WHERE `email`='" . $email . "' AND `password_reset_code`='" . $code . "' AND `password_reset_date` BETWEEN " . $daterange . ";";
+    $users = query($query);
+    
+    if ($users && num_rows($users) === 1) {
+        return true;
+    } else {
+        return false;
+    }
+}
+
+function Reset_Password($password, $email) {
+    $query = "UPDATE `users` SET `password`=" . crypt($password, $email) . ", `password_reset_date`='0000-00-00 00:00:00' WHERE `email`='" . $email . ";";
+    $reset = query($query);
+    
+    if ($reset) {
+        return true;
+    } else {
+        return false;
+    }
+}
+?>
\ No newline at end of file
diff --git a/php/random_string.php b/php/random_string.php
new file mode 100644
index 0000000..2604474
--- /dev/null
+++ b/php/random_string.php
@@ -0,0 +1,12 @@
+<?php
+// Retrieved from http://stackoverflow.com/a/4356295/3508346
+function Random_String($length = 10) {
+    $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
+    $charactersLength = strlen($characters);
+    $randomString = '';
+    for ($i = 0; $i < $length; $i++) {
+        $randomString .= $characters[rand(0, $charactersLength - 1)];
+    }
+    return $randomString;
+}
+?>
\ No newline at end of file