= 4) { $_SESSION['password_forgotten'] = 'password'; } $email_address = oos_prepare_input($_POST['email_address']); $firstname = oos_prepare_input($_POST['firstname']); if ( empty( $email_address ) || !is_string( $email_address ) ) { oos_redirect_admin(oos_href_link_admin($aContents['forbiden'])); } if ( empty( $firstname ) || !is_string( $firstname ) ) { oos_redirect_admin(oos_href_link_admin($aContents['forbiden'])); } // Check if email exists $admintable = $oostable['admin']; $check_admin_result = $dbconn->Execute("SELECT admin_id as check_id, admin_firstname as check_firstname, admin_lastname as check_lastname, admin_email_address as check_email_address FROM $admintable WHERE admin_email_address = '" . oos_db_input($email_address) . "'"); if (!$check_admin_result->RecordCount()) { $login = 'fail'; } else { $check_admin = $check_admin_result->fields; if ($check_admin['check_firstname'] != $firstname) { $login = 'fail'; } else { $login = 'success'; $make_password = oos_create_random_value(7); $crypted_password = oos_encrypt_password($make_password); oos_mail($check_admin['check_firstname'] . ' ' . $check_admin['admin_lastname'], $check_admin['check_email_address'], ADMIN_PASSWORD_SUBJECT, nl2br(sprintf(ADMIN_EMAIL_TEXT, $make_password)), STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS); $admintable = $oostable['admin']; $dbconn->Execute("UPDATE $admintable SET admin_password = '" . $crypted_password . "' WHERE admin_id = '" . $check_admin['check_id'] . "'"); } } } $sFormid = md5(uniqid(rand(), true)); $_SESSION['formid'] = $sFormid; require 'includes/languages/' . $sLanguage . '/' . $aContents['login']; require 'includes/header.php'; ?>