<?php
session_start();
require_once('config.php');
require 'email.php';

$error = NULL;  // Error Message Container

// Form Sanitization Function
function sanitize($data) {
  	$data = trim($data);
  	$data = stripslashes($data);
  	$data = htmlspecialchars($data);
  	return $data;
}

// Process Login Transaction
if (!empty($_POST['submit'])) {
    // Connect to Database
    $connection = mysqli_connect($db_host, $db_username, $db_password);
    if (!$connection) die ("Could not connect to the database: <br />". mysqli_error());

    // Select Database
    $db_select=mysqli_select_db($connection, $db_database);
    if (!$db_select) die ("Could not select the database: <br />". mysqli_error());

    // Register User
    if (sanitize($_POST['email']) == NULL || sanitize($_POST['email']) == "") {
        $error = "Please enter a valid email address.";
    } else {
        // Parse Credentials
        $email = sanitize($_POST['email']);

        // Check if Email Exists
        $query = "SELECT * FROM users WHERE email = '$email';";
        $result = mysqli_query($connection, $query);

        if ($row = mysqli_fetch_array($result)) {
            // Generate Reset Code
            $reset_code = uniqid();
            $query = "UPDATE users SET pass_reset = '$reset_code' WHERE email = '$email';";
            $result = mysqli_query($connection, $query);

            // Send Email
            $subject = 'Body Emotion Classification Challenge - Password Reset';
            $body = "Hello ,\r\n\nPlease click on the following link to reset your account's password.\r\n".$reset_url.$reset_code."\r\n\r\nRegards\r\nThe PSU Body Emotion Study Group";
            send_mail($email_user, $email_pass, $email, 'PSU Emotion Study Group', '', $subject, $body);

            // Redirect to Complete Page
            header('Location: ./forgot_complete.php');
        } else {
            $error = "The email address you have provided does not exist.";
        }
    }
}
?>

<!DOCTYPE html>
<html>

<head>
    <script src="js/jquery-2.1.1.min.js"></script>
    <script src="js/header.js"></script>
</head>

<body>
<nav class="light-blue lighten-1" role="navigation">
    <div class="nav-wrapper container">
        <script src="js/navibar.js"></script>
        <ul id="nav-mobile" class="right">
            <?php require_once('navigation.php'); ?>
        </ul>

    </div>
</nav>

<div class="section no-pad-bot">
    <form action="<?php echo(htmlentities($_SERVER['PHP_SELF'])); ?>" method="POST">
        <div class="container">
            <h5 class="header"><b>Account Password Reset Request</b></h5>
            <p>Enter the email address for the account you want to reset the password for. A URL will be emailed to you for resetting your account password.</p>
            <?php if ($error) echo "<p style='color:red'><b>Error:</b> $error</p>" ?>
            <br />

            <div class="row">
                <div class="input-field col s4">
                    <input id="email" type="text" class="validate" name="email" value="<?php if (!empty($_POST['email'])) echo $_POST['email'];?>">
                    <label for="email">Email Address</label>
                </div>
            </div>

            <div class="input-field col s12">
                <button name="submit" type="submit" class="btn btn-primary" value="submit">Submit</button><br /><br /><br />
            </div>
        </div>
    </form>
</div>
</body>
<script src="js/footer.js"></script>
</html>
