Server : LiteSpeed System : Linux us-phx-web1202.main-hosting.eu 4.18.0-553.84.1.lve.el8.x86_64 #1 SMP Tue Nov 25 18:33:03 UTC 2025 x86_64 User : u615232177 ( 615232177) PHP Version : 8.1.33 Disable Function : NONE Directory :  /home/u615232177/domains/ellexsleevesapartments.com/public_html/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

<?php use PHPMailer\PHPMailer\PHPMailer;use PHPMailer\PHPMailer\Exception;use PHPMailer\PHPMailer\SMTP; session_start();
$page_name = basename($_SERVER['PHP_SELF']);
$page_title = "Password Recovery";
$page_header = "df4d5a9879.jpg";
include("header.php"); ?>
<title><?php echo $company_name; ?> - <?php echo $page_title; ?></title>
<?php $expired_error=""; $errors=0;$date_today = date("Y-m-d");$msg=""; $password_mismatch_error="";
if (isset($_GET['u'])) {
	$security_code = mysqli_real_escape_string($con,$_GET['u']);

	$check = mysqli_query($con,"SELECT *
		FROM password_recovery WHERE security_code='$security_code'");
		if (mysqli_num_rows($check)===1) {
			$get = mysqli_fetch_assoc($check);
			$email = $get['email'];
			$security_code = $get['security_code'];
			$date_requested = $get['date'];
			$used = $get['used'];
			
			if( ($date_requested !== $date_today) OR ($used !== 'no') ){
				$_SESSION["action"] = "true";
				$message="Link Expired, kindly try again";
				echo "<meta http-equiv=\"refresh\" content=\"0; url=failure.php?u=$page_name&m=$message\">";exit();
				$errors = 1;
			}
			//exit();
		}
		else{echo "<meta http-equiv=\"refresh\" content=\"0; url=index.php\">";exit();}
}
else{echo "<meta http-equiv=\"refresh\" content=\"0; url=index.php\">";exit();}

if($errors == 0 AND isset($_POST['reset_password'])){
	$password1 = $_POST['password1'];
	$password2 = $_POST['password2'];
	
	if($password1 !== $password2){
		$_SESSION["action"] = "true";
		$message="Passwords do not match";
		echo "<meta http-equiv=\"refresh\" content=\"0; url=failure.php?u=$page_name?u=$security_code&m=$message\">";exit();
		$errors = 1;
	}
	if($errors == 0){
		$query = mysqli_query($con, "UPDATE users SET password='$password1' WHERE email ='$email'");
		$query34 = mysqli_query($con, "UPDATE password_recovery SET used='yes' WHERE security_code ='$security_code'");
		$_SESSION["action"] = "true";
		$message="Password change successful";
		echo "<meta http-equiv=\"refresh\" content=\"0; url=success.php?u=account.php&m=$message\">";exit();
	}
	
}
?>
       


        <section class="gallery-one gallery-one--page">
            <div class="container">
                <div class="row">
								<div class="col-lg-12 wow fadeIn" data-wow-delay="0.1s">
                                <div class="section-title">
                <h3 class="title mb-4">Fill in your new password</h3>
                
              </div>
              <span style='color:black;font-weight:900;'><?php echo $msg; ?></span>
            <form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>?u=<?php echo $security_code; ?>" method="post">
                <div class="row">
                  
                  <div class=" col-md-6">
                   
									<input type="password" class="form-control mb-2" id="email" name='password1' placeholder="Your New Password" required>
                                  <br>
                                
                                    <input type="password" class="form-control mb-2" id="email1" name='password2' placeholder="Your New Password Again" required>
                                   
                  </div>
                 
                  <div class="col-md-12">
                    
                      <button type='submit' class="btn btn-primary" name='reset_password' >Save</button>
                   
                  </div>
                </div>
              </form>
            </div>            
                </div>
            </div>
        </section>
</div>
<?php include("footer.php"); ?>