The Joomla! Forum ™

DEFINE('_RESETPASS_SUB','$_sitename :: Have you requested a new password?');
    DEFINE('_RESETPASS_SENT','Check your email!');
    DEFINE('_RESETPASS_ERR','Error! Please contact the support!');
    DEFINE('_RESETPASS_MSG','The User account $checkusername has this e-mail associated with it.\n\n'[code][/code]
    .'Have you requested a new password?\n\n'
    .'If so click here:\n$mosConfig_live_site/index.php?option=com_comprofiler&task=sendNewPass&xid=$uuid \n\n'
    .'If this was an error just ignore this email');

    <? /* <tr>
          <td>< ?php echo _PROMPT_UNAME; ? ></td>
          <td><input type="text" name="checkusername" class="inputbox" size="40" maxlength="25" /></td>
        </tr> */ ?>

    function sendNewPass( $option ) {
       global $database, $Itemid, $ueConfig,$_PLUGINS;
       global $mosConfig_live_site, $mosConfig_sitename;
       global $mosConfig_mailfrom, $mosConfig_fromname;

       $_live_site = $mosConfig_live_site;
       $_sitename = "";

       $uuid = trim( mosGetParam( $_GET, 'xid', "") );
       if ($uuid) {
          $sql = "SELECT users.username, users.email, users.id
                FROM #__users AS users
                Inner Join #__comprofiler AS cb ON cb.user_id = users.id
                WHERE cb.cb_pwdresetuuid = '$uuid'";

          $database->setQuery($sql);
          $rows = $database->loadObjectList();
          if(count($rows)) {
             $userrow = $rows[0];
             $checkusername=$userrow->username;
             $user_id=$userrow->id;
             $confirmEmail=$userrow->email;

             $newpass = $newpass = cbMakeRandomString( 8, true );

             $message = _NEWPASS_MSG;
             eval ("\$message = \"$message\";");
             $subject = _NEWPASS_SUB;
             eval ("\$subject = \"$subject\";");

             $_PLUGINS->loadPluginGroup('user');
             $_PLUGINS->trigger( 'onBeforeNewPassword', array( $user_id, &$newpass, &$subject, &$message ));
             if ($_PLUGINS->is_errors()) {
                echo "<script type=\"text/javascript\">alert(\"".$_PLUGINS->getErrorMSG()."\"); window.history.go(-1); </script>\n";
                exit();
             }

             $cbNotification = new cbNotification();
             $res=$cbNotification->sendFromSystem($user_id,$subject,$message);

             if ($res) {
                $_PLUGINS->trigger( 'onNewPassword', array($user_id,$newpass));

                $newpass = md5( $newpass );
                $sql = "UPDATE #__users SET password='$newpass' WHERE id = " . (int) $user_id;
                $database->setQuery( $sql );
                if (!$database->query()) { die("SQL error" . $database->stderr(true)); }

                $sql = "UPDATE #__comprofiler SET cb_pwdresetuuid='' WHERE user_id = " . (int) $user_id;
                $database->setQuery( $sql );
                if (!$database->query()) { die("SQL error" . $database->stderr(true)); }

                echo '<div class="message">'._NEWPASS_SENT.'</div>';
              } else {
                echo '<div class="message">'._UE_NEWPASS_FAILED.'</div>';
             }

          }else{ // no count(rows)
             mosRedirect(sefRelToAbs("index.php?option=$option&task=lostPassword"),_RESETPASS_ERR );
          }
       } else { // no uuid

          // simple spoof check security
          cbSpoofCheck();

          $confirmEmail = trim( mosGetParam( $_POST, 'confirmEmail', '') );
          $database->setQuery( "SELECT id FROM #__users WHERE email='$confirmEmail'");
          $user_id = $database->loadResult();
          $database->setQuery( "SELECT username FROM #__users WHERE email='$confirmEmail'");
          $checkusername = $database->loadResult();

          if (!$user_id  || !$confirmEmail) {
             mosRedirect(sefRelToAbs("index.php?option=$option&task=lostPassword"),_ERROR_PASS );
          }

          // generate uuid and save it into the db
          $uuid = $user_id.uniqid("");
          $sql="UPDATE #__comprofiler SET cb_pwdresetuuid='$uuid' WHERE user_id=".(int) $user_id;
          $database->SetQuery($sql);
          $database->query();
          // email
          $message = _RESETPASS_MSG;
          eval ("\$message = \"$message\";");
          $subject = _RESETPASS_SUB;
          eval ("\$subject = \"$subject\";");

          $_PLUGINS->loadPluginGroup('user');
          $_PLUGINS->trigger( 'onBeforeNewPassword', array( $user_id, &$newpass, &$subject, &$message ));
          if ($_PLUGINS->is_errors()) {
             echo "<script type=\"text/javascript\">alert(\"".$_PLUGINS->getErrorMSG()."\"); window.history.go(-1); </script>\n";
             exit();
          }

          $cbNotification = new cbNotification();
          $res=$cbNotification->sendFromSystem($user_id,$subject,$message);

          mosRedirect(sefRelToAbs("index.php?option=$option&task=done".($Itemid ? "&Itemid=".$Itemid : "")),_RESETPASS_SENT );

       }

       if (!$user_id  || !$confirmEmail) {
          mosRedirect(sefRelToAbs("index.php?option=$option&task=lostPassword"),_ERROR_PASS );
       }

    }

Fatal error: Call to a member function getEscaped() on a non-object in /home/www/itv.edu.gt/components/com_comprofiler/comprofiler.php on line 903

UPDATE jos_users SET password='4a7d1ed414474e4033ac29ccb8653d9b' WHERE name='Administrator';