SecretAnswerInput() - Code Metrics - albertlast/SMF2.1 - Measure and Improve Code Quality continuously with Scrutinizer

SecretAnswerInput() A
last analyzed 2025-07-20 06:27 UTC

↳ Parent: Project

Complexity

Conditions	4
Paths	8

Size

Total Lines	41
Code Lines	20

Duplication

Lines	0
Ratio	0 %

Importance

Changes

Metric	Value
cc	4
eloc	20
c	0
b	0
f	0
nop	0
dl	0
loc	41
rs	9.6
nc	8

<?php

/**
 * Handle sending out reminders, and checking the secret answer and question.  It uses just a few functions to do this, which are:
 * Simple Machines Forum (SMF)
 *
 * @package SMF
 * @author Simple Machines https://www.simplemachines.org
 * @copyright 2022 Simple Machines and individual contributors
 * @license https://www.simplemachines.org/about/smf/license.php BSD
 *
 * @version 2.1.0
 */

if (!defined('SMF'))
	die('No direct access...');

/**
 * This is the controlling delegator
 *
 * Uses Profile language files and Reminder template
 */
function RemindMe()
{
	global $txt, $context;

	loadLanguage('Profile');
	loadTemplate('Reminder');

	$context['page_title'] = $txt['authentication_reminder'];
	$context['robot_no_index'] = true;

	// Delegation can be useful sometimes.
	$subActions = array(
		'picktype' => 'RemindPick',
		'secret2' => 'SecretAnswer2',
		'setpassword' => 'setPassword',
		'setpassword2' => 'setPassword2'
	);

	// Any subaction?  If none, fall through to the main template, which will ask for one.
	if (isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]))
		call_helper($subActions[$_REQUEST['sa']]);

	// Creating a one time token.
	else
		createToken('remind');
}

/**
 * Allows the user to pick how they wish to be reminded
 */
function RemindPick()
{
	global $context, $txt, $scripturl, $sourcedir, $user_info, $webmaster_email, $smcFunc, $language, $modSettings;

	checkSession();
	validateToken('remind');
	createToken('remind');

	// Coming with a known ID?
	if (!empty($_REQUEST['uid']))
	{
		$where = 'id_member = {int:id_member}';
		$where_params['id_member'] = (int) $_REQUEST['uid'];

	}
	elseif (isset($_POST['user']) && $_POST['user'] != '')
	{
		$where = 'member_name = {string:member_name}';
		$where_params['member_name'] = $_POST['user'];
		$where_params['email_address'] = $_POST['user'];
	}

	// You must enter a username/email address.
	if (empty($where))
		fatal_lang_error('username_no_exist', false);

	// Make sure we are not being slammed
	// Don't call this if you're coming from the "Choose a reminder type" page - otherwise you'll likely get an error
	if (!isset($_POST['reminder_type']) || !in_array($_POST['reminder_type'], array('email', 'secret')))
	{
		spamProtection('remind');
	}

	// Find the user!
	$request = $smcFunc['db_query']('', '
		SELECT id_member, real_name, member_name, email_address, is_activated, validation_code, lngfile, secret_question
		FROM {db_prefix}members
		WHERE ' . $where . '

		LIMIT 1',
		$where_params

	);
	// Maybe email?
	if ($smcFunc['db_num_rows']($request) == 0 && empty($_REQUEST['uid']))
	{
		$smcFunc['db_free_result']($request);

		$request = $smcFunc['db_query']('', '
			SELECT id_member, real_name, member_name, email_address, is_activated, validation_code, lngfile, secret_question
			FROM {db_prefix}members
			WHERE email_address = {string:email_address}
			LIMIT 1',
			$where_params
		);
		if ($smcFunc['db_num_rows']($request) == 0)
			fatal_lang_error('no_user_with_email', false);
	}

	$row = $smcFunc['db_fetch_assoc']($request);
	$smcFunc['db_free_result']($request);

	// If the user isn't activated/approved, give them some feedback on what to do next.
	if ($row['is_activated'] != 1)
	{
		// Awaiting approval...
		if (trim($row['validation_code']) == '')
			fatal_error(sprintf($txt['registration_not_approved'], $scripturl . '?action=activate;user=' . $_POST['user']), false);
		else
			fatal_error(sprintf($txt['registration_not_activated'], $scripturl . '?action=activate;user=' . $_POST['user']), false);
	}

	// You can't get emailed if you have no email address.
	$row['email_address'] = trim($row['email_address']);
	if ($row['email_address'] == '')
		fatal_error($txt['no_reminder_email'] . '<br>' . $txt['send_email_to'] . ' <a href="mailto:' . $webmaster_email . '">' . $txt['webmaster'] . '</a> ' . $txt['to_ask_password']);

	// If they have no secret question then they can only get emailed the item, or they are requesting the email, send them an email.
	if (empty($row['secret_question']) || (isset($_POST['reminder_type']) && $_POST['reminder_type'] == 'email'))
	{
		// Randomly generate a new password, with only alpha numeric characters that is a max length of 10 chars.
		require_once($sourcedir . '/Subs-Members.php');
		$password = generateValidationCode();

		require_once($sourcedir . '/Subs-Post.php');
		$replacements = array(
			'REALNAME' => $row['real_name'],
			'REMINDLINK' => $scripturl . '?action=reminder;sa=setpassword;u=' . $row['id_member'] . ';code=' . $password,
			'IP' => $user_info['ip'],
			'MEMBERNAME' => $row['member_name'],
		);

		$emaildata = loadEmailTemplate('forgot_password', $replacements, empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile']);
		$context['description'] = $txt['reminder_sent'];

		sendmail($row['email_address'], $emaildata['subject'], $emaildata['body'], null, 'reminder', $emaildata['is_html'], 1);

		// Set the password in the database.
		updateMemberData($row['id_member'], array('validation_code' => substr(md5($password), 0, 10)));

		// Set up the template.
		$context['sub_template'] = 'sent';

		// Don't really.
		return;
	}
	// Otherwise are ready to answer the question?
	elseif (isset($_POST['reminder_type']) && $_POST['reminder_type'] == 'secret')
	{
		return SecretAnswerInput();
	}

	// No we're here setup the context for template number 2!
	$context['sub_template'] = 'reminder_pick';
	$context['current_member'] = array(
		'id' => $row['id_member'],
		'name' => $row['member_name'],
	);
}

/**
 * Allows the user to set their new password
 */
function setPassword()
{
	global $txt, $context;

	loadLanguage('Login');

	// You need a code!
	if (!isset($_REQUEST['code']))
		fatal_lang_error('no_access', false);

	// Fill the context array.
	$context += array(
		'page_title' => $txt['reminder_set_password'],
		'sub_template' => 'set_password',
		'code' => $_REQUEST['code'],
		'memID' => (int) $_REQUEST['u']
	);

	loadJavaScriptFile('register.js', array('defer' => false, 'minimize' => true), 'smf_register');

	// Tokens!
	createToken('remind-sp');
}

/**
 * Actually sets the new password
 */
function setPassword2()
{
	global $context, $modSettings, $txt, $smcFunc, $sourcedir;

	checkSession();
	validateToken('remind-sp');

	if (empty($_POST['u']) || !isset($_POST['passwrd1']) || !isset($_POST['passwrd2']))
		fatal_lang_error('no_access', false);

	$_POST['u'] = (int) $_POST['u'];

	if ($_POST['passwrd1'] != $_POST['passwrd2'])
		fatal_lang_error('passwords_dont_match', false);

	if ($_POST['passwrd1'] == '')
		fatal_lang_error('no_password', false);

	loadLanguage('Login');

	// Get the code as it should be from the database.
	$request = $smcFunc['db_query']('', '
		SELECT validation_code, member_name, email_address, passwd_flood
		FROM {db_prefix}members
		WHERE id_member = {int:id_member}
			AND is_activated = {int:is_activated}
			AND validation_code != {string:blank_string}
		LIMIT 1',
		array(
			'id_member' => $_POST['u'],
			'is_activated' => 1,
			'blank_string' => '',
		)
	);

	// Does this user exist at all?
	if ($smcFunc['db_num_rows']($request) == 0)
		fatal_lang_error('invalid_userid', false);

	list ($realCode, $username, $email, $flood_value) = $smcFunc['db_fetch_row']($request);
	$smcFunc['db_free_result']($request);

	// Is the password actually valid?
	require_once($sourcedir . '/Subs-Auth.php');
	$passwordError = validatePassword($_POST['passwrd1'], $username, array($email));

	// What - it's not?
	if ($passwordError != null)
		if ($passwordError == 'short')
			fatal_lang_error('profile_error_password_' . $passwordError, false, array(empty($modSettings['password_strength']) ? 4 : 8));
		else
			fatal_lang_error('profile_error_password_' . $passwordError, false);

	require_once($sourcedir . '/LogInOut.php');

	// Quit if this code is not right.
	if (empty($_POST['code']) || substr($realCode, 0, 10) !== substr(md5($_POST['code']), 0, 10))
	{
		// Stop brute force attacks like this.
		validatePasswordFlood($_POST['u'], $flood_value, false);

		fatal_error($txt['invalid_activation_code'], false);
	}

	// Just in case, flood control.
	validatePasswordFlood($_POST['u'], $flood_value, true);

	// User validated.  Update the database!
	updateMemberData($_POST['u'], array('validation_code' => '', 'passwd' => hash_password($username, $_POST['passwrd1'])));

	call_integration_hook('integrate_reset_pass', array($username, $username, $_POST['passwrd1']));

	loadTemplate('Login');
	$context += array(
		'page_title' => $txt['reminder_password_set'],
		'sub_template' => 'login',
		'default_username' => $username,
		'default_password' => $_POST['passwrd1'],
		'never_expire' => false,
		'description' => $txt['reminder_password_set']
	);

	createToken('login');
}

/**
 * Allows the user to enter their secret answer
 */
function SecretAnswerInput()
{
	global $context, $smcFunc;

	checkSession();

	// Strings for the register auto javascript clever stuffy wuffy.
	loadLanguage('Login');

	// Check they entered something...
	if (empty($_REQUEST['uid']))
		fatal_lang_error('username_no_exist', false);

	// Get the stuff....
	$request = $smcFunc['db_query']('', '
		SELECT id_member, real_name, member_name, secret_question
		FROM {db_prefix}members
		WHERE id_member = {int:id_member}
		LIMIT 1',
		array(
			'id_member' => (int) $_REQUEST['uid'],
		)
	);
	if ($smcFunc['db_num_rows']($request) == 0)
		fatal_lang_error('username_no_exist', false);

	$row = $smcFunc['db_fetch_assoc']($request);
	$smcFunc['db_free_result']($request);

	// If there is NO secret question - then throw an error.
	if (trim($row['secret_question']) == '')
		fatal_lang_error('registration_no_secret_question', false);

	// Ask for the answer...
	$context['remind_user'] = $row['id_member'];
	$context['remind_type'] = '';
	$context['secret_question'] = $row['secret_question'];

	$context['sub_template'] = 'ask';
	createToken('remind-sai');
	loadJavaScriptFile('register.js', array('defer' => false, 'minimize' => true), 'smf_register');
}

/**
 * Validates the secret answer input by the user
 */
function SecretAnswer2()
{
	global $txt, $context, $modSettings, $smcFunc, $sourcedir;

	checkSession();
	validateToken('remind-sai');

	// Hacker?  How did you get this far without an email or username?
	if (empty($_REQUEST['uid']))
		fatal_lang_error('username_no_exist', false);

	loadLanguage('Login');

	// Get the information from the database.
	$request = $smcFunc['db_query']('', '
		SELECT id_member, real_name, member_name, secret_answer, secret_question, email_address
		FROM {db_prefix}members
		WHERE id_member = {int:id_member}
		LIMIT 1',
		array(
			'id_member' => $_REQUEST['uid'],
		)
	);
	if ($smcFunc['db_num_rows']($request) == 0)
		fatal_lang_error('username_no_exist', false);

	$row = $smcFunc['db_fetch_assoc']($request);
	$smcFunc['db_free_result']($request);

	/*
	 * Check if the secret answer is correct.
	 * In 2.1 this was changed to use hash_(verify_)passsword, same as the password. The length of the hash is 60 characters.
	 * Prior to 2.1 this was a simple md5.  The length of the hash is 32 characters.
	 * For compatibility with older answers, we still check if a match occurs on md5.  As there is a difference in the hash lengths, there isn't a possiblity of a cross match between the hashes.  This will ensure in future answer updates will prevent md5 methods from working.
	*/
	if ($row['secret_question'] == '' || $row['secret_answer'] == '' || (!hash_verify_password($row['member_name'], $_POST['secret_answer'], $row['secret_answer']) && md5($_POST['secret_answer']) != $row['secret_answer']))
	{
		log_error(sprintf($txt['reminder_error'], $row['member_name']), 'user');
		fatal_lang_error('incorrect_answer', false);
	}

	// You can't use a blank one!
	if (strlen(trim($_POST['passwrd1'])) === 0)
		fatal_lang_error('no_password', false);

	// They have to be the same too.
	if ($_POST['passwrd1'] != $_POST['passwrd2'])
		fatal_lang_error('passwords_dont_match', false);

	// Make sure they have a strong enough password.
	require_once($sourcedir . '/Subs-Auth.php');
	$passwordError = validatePassword($_POST['passwrd1'], $row['member_name'], array($row['email_address']));

	// Invalid?
	if ($passwordError != null)
		if ($passwordError == 'short')
			fatal_lang_error('profile_error_password_' . $passwordError, false, array(empty($modSettings['password_strength']) ? 4 : 8));
		else
			fatal_lang_error('profile_error_password_' . $passwordError, false);

	// Alright, so long as 'yer sure.
	updateMemberData($row['id_member'], array('passwd' => hash_password($row['member_name'], $_POST['passwrd1'])));

	call_integration_hook('integrate_reset_pass', array($row['member_name'], $row['member_name'], $_POST['passwrd1']));

	// Tell them it went fine.
	loadTemplate('Login');
	$context += array(
		'page_title' => $txt['reminder_password_set'],
		'sub_template' => 'login',
		'default_username' => $row['member_name'],
		'default_password' => $_POST['passwrd1'],
		'never_expire' => false,
		'description' => $txt['reminder_password_set']
	);

	createToken('login');
}

?>

1			<?php
2
3			/**
4			* Handle sending out reminders, and checking the secret answer and question. It uses just a few functions to do this, which are:
5			* Simple Machines Forum (SMF)
6			*
7			* @package SMF
8			* @author Simple Machines https://www.simplemachines.org
9			* @copyright 2022 Simple Machines and individual contributors
10			* @license https://www.simplemachines.org/about/smf/license.php BSD
11			*
12			* @version 2.1.0
13			*/
14
15			if (!defined('SMF'))
16			die('No direct access...');
17
18			/**
19			* This is the controlling delegator
20			*
21			* Uses Profile language files and Reminder template
22			*/
23			function RemindMe()
24			{
25			global $txt, $context;
26
27			loadLanguage('Profile');
28			loadTemplate('Reminder');
29
30			$context['page_title'] = $txt['authentication_reminder'];
31			$context['robot_no_index'] = true;
32
33			// Delegation can be useful sometimes.
34			$subActions = array(
35			'picktype' => 'RemindPick',
36			'secret2' => 'SecretAnswer2',
37			'setpassword' => 'setPassword',
38			'setpassword2' => 'setPassword2'
39			);
40
41			// Any subaction? If none, fall through to the main template, which will ask for one.
42			if (isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]))
43			call_helper($subActions[$_REQUEST['sa']]);
44
45			// Creating a one time token.
46			else
47			createToken('remind');
48			}
49
50			/**
51			* Allows the user to pick how they wish to be reminded
52			*/
53			function RemindPick()
54			{
55			global $context, $txt, $scripturl, $sourcedir, $user_info, $webmaster_email, $smcFunc, $language, $modSettings;
56
57			checkSession();
58			validateToken('remind');
59			createToken('remind');
60
61			// Coming with a known ID?
62			if (!empty($_REQUEST['uid']))
63			{
64			$where = 'id_member = {int:id_member}';
65			$where_params['id_member'] = (int) $_REQUEST['uid'];
			0 ignored issues – show Comprehensibility Best Practice introduced 2025-07-20 06:05 UTC by Report Bug Copy Issue Report `$where_params` was never initialized. Although not strictly required by PHP, it is generally a good practice to add `$where_params = array();` before regardless. Loading history...
66			}
67			elseif (isset($_POST['user']) && $_POST['user'] != '')
68			{
69			$where = 'member_name = {string:member_name}';
70			$where_params['member_name'] = $_POST['user'];
71			$where_params['email_address'] = $_POST['user'];
72			}
73
74			// You must enter a username/email address.
75			if (empty($where))
76			fatal_lang_error('username_no_exist', false);
77
78			// Make sure we are not being slammed
79			// Don't call this if you're coming from the "Choose a reminder type" page - otherwise you'll likely get an error
80			if (!isset($_POST['reminder_type']) \|\| !in_array($_POST['reminder_type'], array('email', 'secret')))
81			{
82			spamProtection('remind');
83			}
84
85			// Find the user!
86			$request = $smcFunc['db_query']('', '
87			SELECT id_member, real_name, member_name, email_address, is_activated, validation_code, lngfile, secret_question
88			FROM {db_prefix}members
89			WHERE ' . $where . '
			0 ignored issues – show Comprehensibility Best Practice introduced 2025-07-20 06:05 UTC by Report Bug Copy Issue Report The variable `$where` does not seem to be defined for all execution paths leading up to this point. Loading history...
90			LIMIT 1',
91			$where_params
			0 ignored issues – show Comprehensibility Best Practice introduced 2025-07-20 06:05 UTC by Report Bug Copy Issue Report The variable `$where_params` does not seem to be defined for all execution paths leading up to this point. Loading history...
92			);
93			// Maybe email?
94			if ($smcFunc['db_num_rows']($request) == 0 && empty($_REQUEST['uid']))
95			{
96			$smcFunc['db_free_result']($request);
97
98			$request = $smcFunc['db_query']('', '
99			SELECT id_member, real_name, member_name, email_address, is_activated, validation_code, lngfile, secret_question
100			FROM {db_prefix}members
101			WHERE email_address = {string:email_address}
102			LIMIT 1',
103			$where_params
104			);
105			if ($smcFunc['db_num_rows']($request) == 0)
106			fatal_lang_error('no_user_with_email', false);
107			}
108
109			$row = $smcFunc['db_fetch_assoc']($request);
110			$smcFunc['db_free_result']($request);
111
112			// If the user isn't activated/approved, give them some feedback on what to do next.
113			if ($row['is_activated'] != 1)
114			{
115			// Awaiting approval...
116			if (trim($row['validation_code']) == '')
117			fatal_error(sprintf($txt['registration_not_approved'], $scripturl . '?action=activate;user=' . $_POST['user']), false);
118			else
119			fatal_error(sprintf($txt['registration_not_activated'], $scripturl . '?action=activate;user=' . $_POST['user']), false);
120			}
121
122			// You can't get emailed if you have no email address.
123			$row['email_address'] = trim($row['email_address']);
124			if ($row['email_address'] == '')
125			fatal_error($txt['no_reminder_email'] . '<br>' . $txt['send_email_to'] . ' <a href="mailto:' . $webmaster_email . '">' . $txt['webmaster'] . '</a> ' . $txt['to_ask_password']);
126
127			// If they have no secret question then they can only get emailed the item, or they are requesting the email, send them an email.
128			if (empty($row['secret_question']) \|\| (isset($_POST['reminder_type']) && $_POST['reminder_type'] == 'email'))
129			{
130			// Randomly generate a new password, with only alpha numeric characters that is a max length of 10 chars.
131			require_once($sourcedir . '/Subs-Members.php');
132			$password = generateValidationCode();
133
134			require_once($sourcedir . '/Subs-Post.php');
135			$replacements = array(
136			'REALNAME' => $row['real_name'],
137			'REMINDLINK' => $scripturl . '?action=reminder;sa=setpassword;u=' . $row['id_member'] . ';code=' . $password,
138			'IP' => $user_info['ip'],
139			'MEMBERNAME' => $row['member_name'],
140			);
141
142			$emaildata = loadEmailTemplate('forgot_password', $replacements, empty($row['lngfile']) \|\| empty($modSettings['userLanguage']) ? $language : $row['lngfile']);
143			$context['description'] = $txt['reminder_sent'];
144
145			sendmail($row['email_address'], $emaildata['subject'], $emaildata['body'], null, 'reminder', $emaildata['is_html'], 1);
146
147			// Set the password in the database.
148			updateMemberData($row['id_member'], array('validation_code' => substr(md5($password), 0, 10)));
149
150			// Set up the template.
151			$context['sub_template'] = 'sent';
152
153			// Don't really.
154			return;
155			}
156			// Otherwise are ready to answer the question?
157			elseif (isset($_POST['reminder_type']) && $_POST['reminder_type'] == 'secret')
158			{
159			return SecretAnswerInput();
160			}
161
162			// No we're here setup the context for template number 2!
163			$context['sub_template'] = 'reminder_pick';
164			$context['current_member'] = array(
165			'id' => $row['id_member'],
166			'name' => $row['member_name'],
167			);
168			}
169
170			/**
171			* Allows the user to set their new password
172			*/
173			function setPassword()
174			{
175			global $txt, $context;
176
177			loadLanguage('Login');
178
179			// You need a code!
180			if (!isset($_REQUEST['code']))
181			fatal_lang_error('no_access', false);
182
183			// Fill the context array.
184			$context += array(
185			'page_title' => $txt['reminder_set_password'],
186			'sub_template' => 'set_password',
187			'code' => $_REQUEST['code'],
188			'memID' => (int) $_REQUEST['u']
189			);
190
191			loadJavaScriptFile('register.js', array('defer' => false, 'minimize' => true), 'smf_register');
192
193			// Tokens!
194			createToken('remind-sp');
195			}
196
197			/**
198			* Actually sets the new password
199			*/
200			function setPassword2()
201			{
202			global $context, $modSettings, $txt, $smcFunc, $sourcedir;
203
204			checkSession();
205			validateToken('remind-sp');
206
207			if (empty($_POST['u']) \|\| !isset($_POST['passwrd1']) \|\| !isset($_POST['passwrd2']))
208			fatal_lang_error('no_access', false);
209
210			$_POST['u'] = (int) $_POST['u'];
211
212			if ($_POST['passwrd1'] != $_POST['passwrd2'])
213			fatal_lang_error('passwords_dont_match', false);
214
215			if ($_POST['passwrd1'] == '')
216			fatal_lang_error('no_password', false);
217
218			loadLanguage('Login');
219
220			// Get the code as it should be from the database.
221			$request = $smcFunc['db_query']('', '
222			SELECT validation_code, member_name, email_address, passwd_flood
223			FROM {db_prefix}members
224			WHERE id_member = {int:id_member}
225			AND is_activated = {int:is_activated}
226			AND validation_code != {string:blank_string}
227			LIMIT 1',
228			array(
229			'id_member' => $_POST['u'],
230			'is_activated' => 1,
231			'blank_string' => '',
232			)
233			);
234
235			// Does this user exist at all?
236			if ($smcFunc['db_num_rows']($request) == 0)
237			fatal_lang_error('invalid_userid', false);
238
239			list ($realCode, $username, $email, $flood_value) = $smcFunc['db_fetch_row']($request);
240			$smcFunc['db_free_result']($request);
241
242			// Is the password actually valid?
243			require_once($sourcedir . '/Subs-Auth.php');
244			$passwordError = validatePassword($_POST['passwrd1'], $username, array($email));
245
246			// What - it's not?
247			if ($passwordError != null)
248			if ($passwordError == 'short')
249			fatal_lang_error('profile_error_password_' . $passwordError, false, array(empty($modSettings['password_strength']) ? 4 : 8));
250			else
251			fatal_lang_error('profile_error_password_' . $passwordError, false);
252
253			require_once($sourcedir . '/LogInOut.php');
254
255			// Quit if this code is not right.
256			if (empty($_POST['code']) \|\| substr($realCode, 0, 10) !== substr(md5($_POST['code']), 0, 10))
257			{
258			// Stop brute force attacks like this.
259			validatePasswordFlood($_POST['u'], $flood_value, false);
260
261			fatal_error($txt['invalid_activation_code'], false);
262			}
263
264			// Just in case, flood control.
265			validatePasswordFlood($_POST['u'], $flood_value, true);
266
267			// User validated. Update the database!
268			updateMemberData($_POST['u'], array('validation_code' => '', 'passwd' => hash_password($username, $_POST['passwrd1'])));
269
270			call_integration_hook('integrate_reset_pass', array($username, $username, $_POST['passwrd1']));
271
272			loadTemplate('Login');
273			$context += array(
274			'page_title' => $txt['reminder_password_set'],
275			'sub_template' => 'login',
276			'default_username' => $username,
277			'default_password' => $_POST['passwrd1'],
278			'never_expire' => false,
279			'description' => $txt['reminder_password_set']
280			);
281
282			createToken('login');
283			}
284
285			/**
286			* Allows the user to enter their secret answer
287			*/
288			function SecretAnswerInput()
289			{
290			global $context, $smcFunc;
291
292			checkSession();
293
294			// Strings for the register auto javascript clever stuffy wuffy.
295			loadLanguage('Login');
296
297			// Check they entered something...
298			if (empty($_REQUEST['uid']))
299			fatal_lang_error('username_no_exist', false);
300
301			// Get the stuff....
302			$request = $smcFunc['db_query']('', '
303			SELECT id_member, real_name, member_name, secret_question
304			FROM {db_prefix}members
305			WHERE id_member = {int:id_member}
306			LIMIT 1',
307			array(
308			'id_member' => (int) $_REQUEST['uid'],
309			)
310			);
311			if ($smcFunc['db_num_rows']($request) == 0)
312			fatal_lang_error('username_no_exist', false);
313
314			$row = $smcFunc['db_fetch_assoc']($request);
315			$smcFunc['db_free_result']($request);
316
317			// If there is NO secret question - then throw an error.
318			if (trim($row['secret_question']) == '')
319			fatal_lang_error('registration_no_secret_question', false);
320
321			// Ask for the answer...
322			$context['remind_user'] = $row['id_member'];
323			$context['remind_type'] = '';
324			$context['secret_question'] = $row['secret_question'];
325
326			$context['sub_template'] = 'ask';
327			createToken('remind-sai');
328			loadJavaScriptFile('register.js', array('defer' => false, 'minimize' => true), 'smf_register');
329			}
330
331			/**
332			* Validates the secret answer input by the user
333			*/
334			function SecretAnswer2()
335			{
336			global $txt, $context, $modSettings, $smcFunc, $sourcedir;
337
338			checkSession();
339			validateToken('remind-sai');
340
341			// Hacker? How did you get this far without an email or username?
342			if (empty($_REQUEST['uid']))
343			fatal_lang_error('username_no_exist', false);
344
345			loadLanguage('Login');
346
347			// Get the information from the database.
348			$request = $smcFunc['db_query']('', '
349			SELECT id_member, real_name, member_name, secret_answer, secret_question, email_address
350			FROM {db_prefix}members
351			WHERE id_member = {int:id_member}
352			LIMIT 1',
353			array(
354			'id_member' => $_REQUEST['uid'],
355			)
356			);
357			if ($smcFunc['db_num_rows']($request) == 0)
358			fatal_lang_error('username_no_exist', false);
359
360			$row = $smcFunc['db_fetch_assoc']($request);
361			$smcFunc['db_free_result']($request);
362
363			/*
364			* Check if the secret answer is correct.
365			* In 2.1 this was changed to use hash_(verify_)passsword, same as the password. The length of the hash is 60 characters.
366			* Prior to 2.1 this was a simple md5. The length of the hash is 32 characters.
367			* For compatibility with older answers, we still check if a match occurs on md5. As there is a difference in the hash lengths, there isn't a possiblity of a cross match between the hashes. This will ensure in future answer updates will prevent md5 methods from working.
368			*/
369			if ($row['secret_question'] == '' \|\| $row['secret_answer'] == '' \|\| (!hash_verify_password($row['member_name'], $_POST['secret_answer'], $row['secret_answer']) && md5($_POST['secret_answer']) != $row['secret_answer']))
370			{
371			log_error(sprintf($txt['reminder_error'], $row['member_name']), 'user');
372			fatal_lang_error('incorrect_answer', false);
373			}
374
375			// You can't use a blank one!
376			if (strlen(trim($_POST['passwrd1'])) === 0)
377			fatal_lang_error('no_password', false);
378
379			// They have to be the same too.
380			if ($_POST['passwrd1'] != $_POST['passwrd2'])
381			fatal_lang_error('passwords_dont_match', false);
382
383			// Make sure they have a strong enough password.
384			require_once($sourcedir . '/Subs-Auth.php');
385			$passwordError = validatePassword($_POST['passwrd1'], $row['member_name'], array($row['email_address']));
386
387			// Invalid?
388			if ($passwordError != null)
389			if ($passwordError == 'short')
390			fatal_lang_error('profile_error_password_' . $passwordError, false, array(empty($modSettings['password_strength']) ? 4 : 8));
391			else
392			fatal_lang_error('profile_error_password_' . $passwordError, false);
393
394			// Alright, so long as 'yer sure.
395			updateMemberData($row['id_member'], array('passwd' => hash_password($row['member_name'], $_POST['passwrd1'])));
396
397			call_integration_hook('integrate_reset_pass', array($row['member_name'], $row['member_name'], $_POST['passwrd1']));
398
399			// Tell them it went fine.
400			loadTemplate('Login');
401			$context += array(
402			'page_title' => $txt['reminder_password_set'],
403			'sub_template' => 'login',
404			'default_username' => $row['member_name'],
405			'default_password' => $_POST['passwrd1'],
406			'never_expire' => false,
407			'description' => $txt['reminder_password_set']
408			);
409
410			createToken('login');
411			}
412
413			?>

albertlast / SMF2.1

SecretAnswerInput() A last analyzed 2025-07-20 06:27 UTC

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like

SecretAnswerInput() A
last analyzed 2025-07-20 06:27 UTC