HEX
Server: Microsoft-IIS/8.5
System: Windows NT YDAWBH120 6.3 build 9600 (Windows Server 2012 R2 Standard Edition) AMD64
User: tentjecom_web (0)
PHP: 7.4.14
Disabled: NONE
Upload Files
File: D:/HostingSpaces/SBogers10/promic.komma.pro/wwwroot/en/account_password.php
<?php

if (isset($_GET["i"]) && isset($_GET["h"])){
	$id = checkData($_GET["i"]);
  	$hash = checkData($_GET["h"]);
	
   	$query3 = "SELECT * FROM accounts WHERE account_id = '$id'";
	$result3 = mysql_query($query3);
	$record3 = mysql_fetch_assoc($result3);
	$emailadres_db = $record3['emailadres'];
	$code =  $record3['code'];
	
	if($hash == sha1($emailadres_db.$code)){ 
	
		if (isset($_POST['wachtwoord'])){ $verzenden = true; }
	
		if(isset($_POST['wachtwoord'])){
			$wachtwoord = $_POST['wachtwoord'];
			$wachtwoord = trim($wachtwoord);
			$lengte_wachtwoord = strlen($wachtwoord);
			if(($lengte_wachtwoord > 1) && ($lengte_wachtwoord < 45) && $wachtwoord != "Wachtwoord"){
				$valid_wachtwoord = true;
			}else{
				$valid_wachtwoord = false;
			}
		}else{
			$valid_wachtwoord = false;
		}

		if($valid_wachtwoord){
			
			$wachtwoord = utf8_decode($wachtwoord);
			$wachtwoord = htmlentities($wachtwoord);
			$wachtwoord = checkData($wachtwoord);
			
			$wachtwoord = sha1($wachtwoord);
		
			$query = "UPDATE accounts SET wachtwoord = '$wachtwoord' WHERE emailadres = '$emailadres_db'";
			$result = mysql_query($query);
			
			if($result){ ?>
				
				<div id="systeemFormulier">
                    <h1>Forgot your password?</h1>
                    <p>Your password has been successfully changed.<br />
                    We hope your Promic account will be useful to you.</p>
                </div>
				
			<?php }else{
				$error = true;
			}
		}else{ ?>
    
        <div id="systeemFormulier">
        <h1>Enter a new password</h1>
        
        <?php if($verzenden){ ?><div class="foutmelding">Please fill up your data correctly.</div><?php } ?>
        
        <form id="aanmeldenAccount" class="en" name="aanmeldenAccount" action="<?php $_SERVER['PHP_SELF']; ?>" method="post"/>
        
        <input id="wachtwoord" name="wachtwoord" <?php if($verzenden && !$valid_wachtwoord){ echo("class=\"error\""); }?> type="password" value="<?php if(!empty($wachtwoord)){ echo($wachtwoord); }else{ echo("Wachtwoord"); } ?>" />
                    
        <a id="systeemFormulierSubmit" class="ctaButton ctaBlack animationBlack">
            <span class="left"><span class="text">Change password</span><span class="up"></span><span class="hover"></span></span>
            <span class="right"><span class="icon arrowRight"></span><span class="up"></span><span class="hover"></span></span>
        </a>
         
        </form>
        
        </div>
        <div id="fullVerticalLine"><div class="line"></div></div>
        <div id="systeemFormulierRight">
            <p>Enter a new password.</p>
        </div>

    <?php }
		
	}else{ 
    	$error = true;
	}
}else{
	$error = true;
} 

if($error){ ?>

<div id="systeemFormulier">
	<h1>Forgot your password?</h1>
	<p>Apparently, some failures occurred during registration. Unfortunately, it is not possible to send data at this moment. <br />Please try again. If these problems appear more often, please contact us by email at <a href="mailto:info@promic.com">info@promic.com</a>.
	<br />Please accept our apologies for any inconvenience.</p>
</div>

<?php } ?>