WooYun.org

public function forgetpwd() {
		if(ispostreq()) {//接受email，发送
			$email	= trim($_POST["email"]);
			if($email && ($user = DB::getDB()->selectrow("user","uid,uname","email='$email'"))  ) {
				//加载发送邮件
				require COMMONPATH. "/send.class.php";
				$sendmail	 = new SendEmail();
				
				//邮件
				$time		 = time();
				$subject	 = __("getpwd");
				$content	 = file_get_contents(DATADIR."/filemsg/forgetpwd.html");
				$search		 = array("{uname}","{forgetpwd}");
				$mailkey	 = substr(md5($email.$time),8,8);
				$url		 = getConfig('weburl').url('index','user','setpwd','uid='.$user["uid"].'&mailkey='.$mailkey);
				$replacement = array($user['uname'],$url);
				$content     = str_replace($search,$replacement,$content);
				//发送
				$ret		 = $sendmail->send($email,$subject,$content);
				if($ret) {//如果发送成功
					DB::getDB()->update("user",array("mailkey"=>$mailkey,"mailtime"=>$time),"uid='".$user["uid"]."'");
				}
				$this->setHint("forgetpwd_send_".($ret?"success":"failure"),$ret?"success":"error");
			} else {
				$this->setHint("email_not_exist","error");
			}
		} else {
			$this->getHint();
			$this->output("forgetpwd");
		} 
	}