aboutsummaryrefslogtreecommitdiff
path: root/actions/user/requestnewpassword.php
blob: d951e2edea8e7009a327643e400a231b363b34c1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
<?php
/**
 * Action to request a new password.
 *
 * @package Elgg
 * @subpackage Core
 * @author Curverider Ltd
 * @link http://elgg.org/
 */

require_once(dirname(dirname(dirname(__FILE__))) . "/engine/start.php");
global $CONFIG;

action_gatekeeper();

$username = get_input('username');

$access_status = access_get_show_hidden_status();
access_show_hidden_entities(true);
$user = get_user_by_username($username);
if ($user) {
	if ($user->validated) {
		if (send_new_password_request($user->guid)) {
			system_message(elgg_echo('user:password:resetreq:success'));
		} else {
			register_error(elgg_echo('user:password:resetreq:fail'));
		}
	} else if (!trigger_plugin_hook('unvalidated_requestnewpassword','user',array('entity'=>$user))) {
		// if plugins have not registered an action, the default action is to
		// trigger the validation event again and assume that the validation
		// event will display an appropriate message
		trigger_elgg_event('validate', 'user', $user);
	}
} else {
	register_error(sprintf(elgg_echo('user:username:notfound'), $username));
}

access_show_hidden_entities($access_status);
forward();
exit;