boinc/html/user/recover_email.php

<?php
// This file is part of BOINC.
// http://boinc.berkeley.edu
// Copyright (C) 2008 University of California
//
// BOINC is free software; you can redistribute it and/or modify it
// under the terms of the GNU Lesser General Public License
// as published by the Free Software Foundation,
// either version 3 of the License, or (at your option) any later version.
//
// BOINC is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
// See the GNU Lesser General Public License for more details.
//
// You should have received a copy of the GNU Lesser General Public License
// along with BOINC.  If not, see <http://www.gnu.org/licenses/>.

require_once("../inc/util.inc");
require_once("../inc/token.inc");
require_once("../inc/email.inc");

check_get_args(array("id", "token"));

redirect_to_secure_url("recover_email.php");

page_head(tra("Recover email address"));

$user = get_logged_in_user();
$userid = get_int("id", true);
$token = get_str("token", true);

//Log out to clear all auth tokens
if ($user) {
    clear_cookie('auth', true);
    echo tra("Note: You have been logged out to clear all cookies.")."<br /><br />";
}

if(is_valid_token($userid, $token, TOKEN_TYPE_CHANGE_EMAIL)) {
    $tmpuser = BoincUser::lookup_id_nocache($userid);
    //We can only change passwd_hash if we can get the userdata. 
    if($tmpuser) {
	$existing = BoincUser::lookup_email_addr($tmpuser->previous_email_addr);
	if ($existing) {
	    echo tra("There is already an account with that email address.")."<br /><br />".tra("Please contact the admin.  Previous email address could not be reverted as another account is using it as their email address.");
	} else {
	    echo tra("Email address has been reverted.")."<br /><br />".tra("You need to reset your password:  ")."<a href\=".secure_url_base()."get_passwd.php\">".secure_url_base()."get_passwd.php</a>";

	    //Change previous_email
	    $result = $user->update(
		"email_addr=previous_email_addr, previous_email_addr=null, email_addr_change_time=0, passwd_hash='".random_string()."', email_validated=0"
	    );
	}
    }
} else {
    tra("Invalid token.");
}

page_tail();

?>