36 lines
1.2 KiB
PHP
36 lines
1.2 KiB
PHP
<?php
|
|
|
|
use MintyPHP\Buffer;
|
|
use MintyPHP\Support\Flash;
|
|
use MintyPHP\Session;
|
|
use MintyPHP\Router;
|
|
use MintyPHP\Http\Request;
|
|
use MintyPHP\I18n;
|
|
use MintyPHP\Service\PasswordResetService;
|
|
|
|
$errors = [];
|
|
$email = trim((string) ($_POST['email'] ?? ($_SESSION['password_reset_email'] ?? '')));
|
|
$code = trim((string) ($_POST['code'] ?? ''));
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
if (!Session::checkCsrfToken()) {
|
|
$errors[] = t('Form expired, please try again');
|
|
} elseif ($email === '' || !filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
|
$errors[] = t('Please enter a valid email address');
|
|
} elseif ($code === '' || !preg_match('/^\d{6}$/', $code)) {
|
|
$errors[] = t('Please enter the 6-digit code');
|
|
} else {
|
|
$result = PasswordResetService::verifyCode($email, $code);
|
|
if ($result['ok'] ?? false) {
|
|
$_SESSION['password_reset_id'] = (int) $result['reset_id'];
|
|
unset($_SESSION['password_reset_email']);
|
|
Flash::success(t('Code verified'), 'password/reset', 'reset_verified');
|
|
Router::redirect('password/reset');
|
|
} else {
|
|
$errors[] = t('Invalid or expired code');
|
|
}
|
|
}
|
|
}
|
|
|
|
Buffer::set('title', t('Verify code'));
|