recovery.php

<?php

if(!defined('MAIN_DIR')){define('MAIN_DIR',dirname('__FILENAME__'));}

require_once(MAIN_DIR.'/_php/_config/session.php');
require_once(MAIN_DIR.'/_php/_config/connection.php');
require_once(MAIN_DIR.'/_php/_config/functions.php');

$errors = array(); 
$status = false;

//  If user is already logged in, redirect to the homepage

if (logged_in()) {
	header('Location: index.php');
	exit;
}

//  The below script runs when a user attempts to log in

if (isset($_POST['recovery'])) {

	// Validate required fields
	$required_fields = array('email');
	$errors = array_merge($errors, check_required_fields($required_fields));
	
	
	// Sanitize data
	$email = trim($mysqli->real_escape_string($_POST['email']));

	if (empty($errors)) { //  User-submitted data is valid, so continue
			
		//-----------------------------------------------
		//  Check user credentials against the database
		//-----------------------------------------------

		$sql = "SELECT * FROM $DB_NAME.user 
					WHERE email = '{$email}' ";

		$result = db_query($mysqli, $sql);
		
		if ($result->num_rows === 1) {

			// One, and ONLY one, match was found
			
			$found_user = $result->fetch_assoc();

			//----------------------------------------------
			//  Load user info, preferences and privileges 
			//  and save them to the session
			//----------------------------------------------

			$_SESSION['user_id'] = $found_user['id'];

			foreach (array(
					'username',
					'first_name',
					'last_name',
					'display_name',
					'pref_lantern_view',
					'pref_user_type',
					'priv_digitize',
					'priv_edit',
					'priv_exportImages',
					'priv_deliver',
					'priv_catalog',
					'priv_approve',
					'priv_users_read',
					'priv_users_create',
					'priv_users_delete',
					'priv_orders_read',
					'priv_orders_create',
					'priv_orders_confirmCreation',
					'priv_orders_download',
					'priv_orders_delete',
					'priv_csv_import',
					'priv_csv_export',
					'priv_image_ids_edit',
					'priv_images_delete',
					'priv_images_flag4Export'
					) as $type)
			{
				$_SESSION[$type] = $found_user[$type];
			}

			//  Redirect the user to the homepage
			
			header('Location: index.php');
			exit();
			
		} else { // Username/password combination not found

			$status = 'badcombo';
			
		}
		
	} else { // Errors occurred

		$status = 'invalidentry';

	}

} else { // Login form has not yet been submitted.

	$username = '';
	$password = '';

}

##############################################################
###################   BEGIN CLIENT SIDE   ####################
##############################################################
require("_php/header.php"); ?>

<div id="message_wrapper">
	<div id="message_text"></div>
</div>
	
<div class="module">

	<h1>Password Recovery</h1>

	<form action="recovery.php" method="post">
		
		<input type="email" 
			id="email" 
			name="email"
			placeholder="email" 
			value="">

		<br>
		
		<input type="submit" 
			name="login" 
			value="Submit">

	</form>
	<div id="recovery">
		<hr>
		<br>
		<a href="recovery.php">Forgotten Username or Password?</a>
		<br>
	</div>

</div>

<script>
	$('div#recovery').hide();

	<?php
	if ($status == 'badcombo'):
	// Incorrect username/password combination entered ?>

		input_error($('input#username, input#password'));
		msg(['Incorrect username & password combination'], 'error');
		$('div#recovery').show();
	<?php
	elseif ($status == 'invalidentry'):

		if (in_array('username', $errors)): ?>

			input_error($('input#username'));

		<?php 
		endif;

		if (in_array('password', $errors)): ?>
		
			input_error($('input#password'));
		
		<?php
		endif; ?>

		msg(['Both username and password must be between','six and fifteen charcters in length'], 'error');
		$('div#recovery').show();
	<?php
	endif; ?>

	$(document).ready(

		function()
		{
			if ($('div#message_text').text() == '') {
				$('input#username').focus();
			}
		});

	$('input').focus(
		function()
		{
			$(this).next('span.helper').fadeIn(50);
		})
	.blur(
		function()
		{
			$(this).next('span.helper').fadeOut(50);
		});

</script>

<?php
require("_php/footer.php");

?>