SWAT/ResetPassword.php5

<?php
class ResetPassword {
    private static function getReset($userId) {
        $oldReset = AuthResetPassword::getList(array(
            'userId' => $userId
        ), array(), array());
        
        if(count($oldReset) > 0) {
            $reset = $oldReset[0];
        } else {
            $reset = new AuthResetPassword;
            $reset->userId = $userId;
        }
        return $reset;
    }
    
    public static function sendEmail($username, $email, $resetPage) {
        //Get user with specified username and email
        $user = AuthUser::getList(array(
            'username' => $username,
            'email' => $email
        ), array(), array());
        
        //Don't send email if no user found
        if(count($user) == 0) {
            return;
        }
        $user = $user[0];
        
        //Ldap users can't reset their password here.
        if($user->ldapUserId !== null) {
            self::renderTemplate('resetLdap', $user->email);
        }
        
        //Get reset password smodel2 object
        $reset = self::getReset($user->id);
        
        //Generate a new hash and commit
        $hash = SRandom::hex(32);
        $reset->hash = $hash;
        $reset->commit();
        
        //Values in template to replace
        $values = array(
            'reseturl' => $resetPage . '?userId=' .$user->id . '&hash=' . $hash,
            'username' => $user->username
        );
        AuthEmail::renderTemplate('resetPassword', $user->email, $values);
    }
    
    public static function check($userId, $hash) {
        $reset = AuthResetPassword::getList(array(
            'userId' => $userId,
            'hash' => $hash,
            '>=' => array(
                'requestTime' => date('Y-m-d H:i:s', time() - (SConfig::getOption('auth.resetPasswordTimeoutDays') * 24 * 60 * 60))
            )
        ), array(), array(), true);
        
        return (bool)($reset > 0);
    }
    
    public static function deleteRequest($userId) {
        $reset = new AuthResetPassword(array('userId'=>$userId));
        $reset->markForDeletion();
        $reset->commit();
    }
}
?>

---