8 function wfSpecialResetpass( $par ) {
9 $form = new PasswordResetForm();
10 $form->execute( $par );
14 * Let users recover their password.
15 * @ingroup SpecialPage
17 class PasswordResetForm
extends SpecialPage
{
18 function __construct( $name=null, $reset=null ) {
19 if( $name !== null ) {
21 $this->mTemporaryPassword
= $reset;
24 $this->mName
= $wgRequest->getVal( 'wpName' );
25 $this->mTemporaryPassword
= $wgRequest->getVal( 'wpPassword' );
30 * Main execution point
32 function execute( $par ) {
33 global $wgUser, $wgAuth, $wgOut, $wgRequest;
35 if( !$wgAuth->allowPasswordChange() ) {
36 $this->error( wfMsg( 'resetpass_forbidden' ) );
40 if( $this->mName
=== null && !$wgRequest->wasPosted() ) {
41 $this->error( wfMsg( 'resetpass_missing' ) );
45 if( $wgRequest->wasPosted() && $wgUser->matchEditToken( $wgRequest->getVal( 'token' ) ) ) {
46 $newpass = $wgRequest->getVal( 'wpNewPassword' );
47 $retype = $wgRequest->getVal( 'wpRetype' );
49 $this->attemptReset( $newpass, $retype );
50 $wgOut->addWikiMsg( 'resetpass_success' );
53 'action' => 'submitlogin',
54 'wpName' => $this->mName
,
55 'wpPassword' => $newpass,
56 'returnto' => $wgRequest->getVal( 'returnto' ),
58 if( $wgRequest->getCheck( 'wpRemember' ) ) {
59 $data['wpRemember'] = 1;
61 $login = new LoginForm( new FauxRequest( $data, true ) );
65 } catch( PasswordError
$e ) {
66 $this->error( $e->getMessage() );
72 function error( $msg ) {
74 $wgOut->addHtml( '<div class="errorbox">' .
75 htmlspecialchars( $msg ) .
80 global $wgOut, $wgUser, $wgRequest;
82 $wgOut->disallowUserJs();
84 $self = SpecialPage
::getTitleFor( 'Resetpass' );
86 '<div id="userloginForm">' .
87 wfOpenElement( 'form',
90 'action' => $self->getLocalUrl() ) ) .
91 '<h2>' . wfMsgHtml( 'resetpass_header' ) . '</h2>' .
92 '<div id="userloginprompt">' .
93 wfMsgExt( 'resetpass_text', array( 'parse' ) ) .
96 wfHidden( 'token', $wgUser->editToken() ) .
97 wfHidden( 'wpName', $this->mName
) .
98 wfHidden( 'wpPassword', $this->mTemporaryPassword
) .
99 wfHidden( 'returnto', $wgRequest->getVal( 'returnto' ) ) .
100 $this->pretty( array(
101 array( 'wpName', 'username', 'text', $this->mName
),
102 array( 'wpNewPassword', 'newpassword', 'password', '' ),
103 array( 'wpRetype', 'yourpasswordagain', 'password', '' ),
108 Xml
::checkLabel( wfMsg( 'remembermypassword' ),
109 'wpRemember', 'wpRemember',
110 $wgRequest->getCheck( 'wpRemember' ) ) .
116 wfSubmitButton( wfMsgHtml( 'resetpass_submit' ) ) .
120 wfCloseElement( 'form' ) .
122 $wgOut->addHtml( $form );
125 function pretty( $fields ) {
127 foreach( $fields as $list ) {
128 list( $name, $label, $type, $value ) = $list;
129 if( $type == 'text' ) {
130 $field = '<tt>' . htmlspecialchars( $value ) . '</tt>';
132 $field = Xml
::input( $name, 20, $value,
133 array( 'id' => $name, 'type' => $type ) );
136 $out .= '<td align="right">';
137 $out .= Xml
::label( wfMsg( $label ), $name );
148 * @throws PasswordError when cannot set the new password because requirements not met.
150 function attemptReset( $newpass, $retype ) {
151 $user = User
::newFromName( $this->mName
);
152 if( $user->isAnon() ) {
153 throw new PasswordError( 'no such user' );
156 if( !$user->checkTemporaryPassword( $this->mTemporaryPassword
) ) {
157 throw new PasswordError( wfMsg( 'resetpass_bad_temporary' ) );
160 if( $newpass !== $retype ) {
161 throw new PasswordError( wfMsg( 'badretype' ) );
164 $user->setPassword( $newpass );
165 $user->saveSettings();