Bravo List
Register
Go Back   > Bravo List > Source Code > Archived Trackers > TBDev > Mods & Themes
Reply
  #1  
Old 22nd January 2015, 14:14
anaconda's Avatar
anaconda anaconda is offline
Member
 
Join Date: May 2013
Italy
Posts: 5
Question Please Recover.php
who gives me the recover.php file Please


Reply With Quote
  #2  
Old 22nd January 2015, 14:28
DND DND is offline
VIP
 
Join Date: Dec 2008
Posts: 1,241
Default
serios ? doar atat? alte cerinte nu ai ? [trebuie mai multe detalii]

don't mind me, i'm sick, speaking different languages
__________________
Need HELP!? I can install:

  1. Server/VPS (Debian,CentOS,Ubuntu,Fedora, FreeBSD) Optimization and ... + Modules
  2. Webserver Windows/Linux (Apache/Lighttpd/Nginx/Mysql/PhpMyAdmin/SSL) Optimization and ... + Modules
  3. Seedbox Windows/Linux (uTorrent,rTorrent,libTorrent,ruTorrent) + Modules
  4. Multiple source code engines
  5. Linux Server Administration (security, cryptography/encryption, proxy, load balancer, custom ddos firewall)
Reply With Quote
  #3  
Old 22nd January 2015, 15:09
WhyMe WhyMe is offline
Banned
 
Join Date: Apr 2014
P2P
Posts: 160
Thumbs up
PHP Code:
<?php

require "include/bittorrent.php";

dbconn();

if (
$_SERVER["REQUEST_METHOD"] == "POST")
{
  
$email trim($_POST["email"]);
  if (!
$email)
    
stderr("Error""You must enter an email address");
  
$res mysql_query("SELECT * FROM users WHERE email=" sqlesc($email) . " LIMIT 1") or sqlerr();
  
$arr mysql_fetch_assoc($res) or stderr("Error""The email address was not found in the database.\n");

    
$sec mksecret();

  
mysql_query("UPDATE users SET editsecret=" sqlesc($sec) . " WHERE id=" $arr["id"]) or sqlerr();
  if (!
mysql_affected_rows())
      
stderr("Error""Database error. Please contact an administrator about this.");

  
$hash md5($sec $email $arr["passhash"] . $sec);

  
$body = <<<EOD
Someone, hopefully you, requested that the password for the account
associated with this email address (
$email) be reset.

The request originated from 
{$_SERVER["REMOTE_ADDR"]}.

If you did not do this ignore this email. Please do not reply.


Should you wish to confirm this request, please follow this link:

$DEFAULTBASEURL/recover.php?id={$arr["id"]}&secret=$hash


After you do this, your password will be reset and emailed back
to you.

--
$SITENAME
EOD;

  @
mail($arr["email"], "$SITENAME password reset confirmation"$body"From: $SITEEMAIL""-f$SITEEMAIL")
    or 
stderr("Error""Unable to send mail. Please contact an administrator about this error.");
  
stderr("Success""A confirmation email has been mailed.\n" .
    
" Please allow a few minutes for the mail to arrive.");
}
elseif(
$_GET)
{
//    if (!preg_match(':^/(\d{1,10})/([\w]{32})/(.+)$:', $_SERVER["PATH_INFO"], $matches))
//      httperr();

//    $id = 0 + $matches[1];
//    $md5 = $matches[2];

    
$id $_GET["id"];
  
$md5 $_GET["secret"];

    if (!
$id)
      
httperr();

    
$res mysql_query("SELECT username, email, passhash, editsecret FROM users WHERE id = $id");
    
$arr mysql_fetch_assoc($res) or httperr();

  
$email $arr["email"];

    
$sec hash_pad($arr["editsecret"]);
    if (
preg_match('/^ *$/s'$sec))
      
httperr();
    if (
$md5 != md5($sec $email $arr["passhash"] . $sec))
      
httperr();

    
// generate new password;
    
$chars "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";

  
$newpassword "";
  for (
$i 0$i 10$i++)
    
$newpassword .= $chars[mt_rand(0strlen($chars) - 1)];

     
$sec mksecret();

  
$newpasshash md5($sec $newpassword $sec);

    
mysql_query("UPDATE users SET secret=" sqlesc($sec) . ", editsecret='', passhash=" sqlesc($newpasshash) . " WHERE id=$id AND editsecret=" sqlesc($arr["editsecret"]));

    if (!
mysql_affected_rows())
        
stderr("Error""Unable to update user data. Please contact an administrator about this error.");

  
$body = <<<EOD
As per your request we have generated a new password for your account.

Here is the information we now have on file for this account:

    User name: 
{$arr["username"]}
    Password:  
$newpassword

You may login at 
$DEFAULTBASEURL/login.php

--
$SITENAME
EOD;
  @
mail($email"$SITENAME account details"$body"From: $SITEEMAIL""-f$SITEEMAIL")
    or 
stderr("Error""Unable to send mail. Please contact an administrator about this error.");
  
stderr("Success""The new account details have been mailed to <b>$email</b>.\n" .
    
"Please allow a few minutes for the mail to arrive.");
}
else
{
     
stdhead();
    
?>
    <h1>Recover lost user name or password</h1>
    <p>Use the form below to have your password reset and your account details mailed back to you.<br>
  (You will have to reply to a confirmation email.)</p>
    <form method=post action=recover.php>
    <table border=1 cellspacing=0 cellpadding=10>
    <tr><td class=rowhead>Registered email</td>
    <td><input type=text size=40 name=email></td></tr>
    <tr><td colspan=2 align=center><input type=submit value='Do it!' class=btn></td></tr>
    </table>
    <?
    stdfoot
();
}

?>
Here u are ill help you if the boys in blue not as always car`nt do the job of helping out .... just full of shit as always from em
Reply With Quote
The Following User Says Thank You to WhyMe For This Useful Post:
anaconda (20th February 2015)
  #4  
Old 22nd January 2015, 17:17
DND DND is offline
VIP
 
Join Date: Dec 2008
Posts: 1,241
Default
and how do ya know that will work for him ? you don't even know what source he is using or what version
__________________
Need HELP!? I can install:

  1. Server/VPS (Debian,CentOS,Ubuntu,Fedora, FreeBSD) Optimization and ... + Modules
  2. Webserver Windows/Linux (Apache/Lighttpd/Nginx/Mysql/PhpMyAdmin/SSL) Optimization and ... + Modules
  3. Seedbox Windows/Linux (uTorrent,rTorrent,libTorrent,ruTorrent) + Modules
  4. Multiple source code engines
  5. Linux Server Administration (security, cryptography/encryption, proxy, load balancer, custom ddos firewall)
Reply With Quote
  #5  
Old 22nd January 2015, 20:18
WhyMe WhyMe is offline
Banned
 
Join Date: Apr 2014
P2P
Posts: 160
Default
We will see if its not the one ill give him the 09 one
Reply With Quote
  #6  
Old 23rd January 2015, 21:15
anaconda's Avatar
anaconda anaconda is offline
Member
 
Join Date: May 2013
Italy
Posts: 5
Unhappy Recover.php
Quote:
Originally Posted by DND View Post
serios ? doar atat? alte cerinte nu ai ? [trebuie mai multe detalii]

don't mind me, i'm sick, speaking different languages
Salut imi trebuie si mie recover.php funtionabil pentru ca al meu numi trimite parola de recuperare parola
Reply With Quote
  #7  
Old 23rd January 2015, 21:22
DND DND is offline
VIP
 
Join Date: Dec 2008
Posts: 1,241
Default
check the one already posted
__________________
Need HELP!? I can install:

  1. Server/VPS (Debian,CentOS,Ubuntu,Fedora, FreeBSD) Optimization and ... + Modules
  2. Webserver Windows/Linux (Apache/Lighttpd/Nginx/Mysql/PhpMyAdmin/SSL) Optimization and ... + Modules
  3. Seedbox Windows/Linux (uTorrent,rTorrent,libTorrent,ruTorrent) + Modules
  4. Multiple source code engines
  5. Linux Server Administration (security, cryptography/encryption, proxy, load balancer, custom ddos firewall)
Reply With Quote
Reply

Tags
recoverphp

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT +2. The time now is 23:10. vBulletin skin by ForumMonkeys. Powered by vBulletin® Version 3.8.11 Beta 3
Copyright ©2000 - 2024, vBulletin Solutions Inc.