recoverpassword.php

<?php

include 'credentials.php';



$email="";


if($_POST['emailrecover'])
{
    $email=($_POST['emailrecover']);



}


//echo $email;




$con = mysql_connect($server, $username, $password) or die ("Could not connect: " . mysql_error());
mysql_select_db($database, $con);


    $con = mysql_connect($server, $username, $password) or die ("Could not connect: " . mysql_error());
    mysql_select_db($database, $con);

         $found =0;


         $sql = "SELECT password FROM users where email LIKE '" .  $email . "'";
         $result = mysql_query($sql) or die ("Query error: " . mysql_error());

         while($row = mysql_fetch_array($result)) {
              
     
            $found = $row[0];


 

    
         }




          if ($found === 0){
            echo '{"response":"0", "msg": "' .  "email not found" . '"}';
         }

         else{

                        //echo "sending email";
                    $custo = '08';
            $salt = 'Cf1213eParGlBJoOM0F6aJ';
            // Gera um hash baseado em bcrypt
            $hash = crypt($email . 'ybus', '$2a$' . $custo . '$' . $salt . '$');
                        //echo "<br>";
                        //echo $hash;

            //echo $hash;

            $sql = "UPDATE users SET retrievepassword= '" . $hash ."' WHERE email LIKE '" . $email . "'";
                        //echo $sql;

                        $result = mysql_query($sql) or die ("Query error: " . mysql_error());

                        $email = str_replace("%40","@",$email);

                    //echo $email;
                    

            
                    mail($email,"Password Recovery from Javascript/Ajax System by Y-bus","Click on link to create new password: http://deeplook.com.br/js_ajax_crud/resetpassword.php?token=" . $hash . "&email=" . $email);

                        echo '{"response":"1", "msg": "' .  "email sent" . '"}';
          }

mysql_close($con);




?>