This repository has been archived by the owner on Feb 2, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 19
/
wp-reset-password.php
132 lines (123 loc) · 5.05 KB
/
wp-reset-password.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
<?php
/**
* WordPress For SAE PassWord Reset Tools
* 2014.4.21
* [@soulteary](http:https://www.soulteary.com)
*/
define('FILE_NAME', basename($_SERVER['SCRIPT_FILENAME']));
require( dirname(__FILE__) . '/wp-load.php' );
function makeTpl($title, $event = false){
?><!DOCTYPE html>
<html xmlns="http:https://www.w3.org/1999/xhtml" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>WordPress For SAE › <?=$title;?></title>
<?php
wp_admin_css( 'wp-admin', true );
wp_admin_css( 'colors-fresh', true );
wp_admin_css( 'login', true );
?>
<meta name='robots' content='noindex,' />
</head>
<body class="login login-action-login wp-core-ui locale-zh-cn">
<div id="login">
<div id="loginform">
<h1><a href="http:https://cn.wordpress.org/" title="基于 WordPress">WordPress For SAE</a></h1>
<?php if($event == 'TOKEN'):?>
<div id="login_error"><strong>错误</strong>：您输入的Secret Key不正确。<br></div>
<?php elseif('TOOLS-INFO'==$event):?>
<style type="text/css">
.login #login_error {
background-color: #E8F8FF;
border-color: #009BCC;
}
</style>
<div id="login_error">请前往SAE管理后台获取应用的Secret Key。<br></div>
<?php elseif('RESET-EMPTY'==$event):?>
<style type="text/css">
.login #login_error {
background-color: #E8F8FF;
border-color: #009BCC;
}
</style>
<div id="login_error"><strong>提示</strong>：请将表单填写完整。<br></div>
<?php elseif('RESET-ERROR'==$event):?>
<div id="login_error"><strong>错误</strong>：重置密码失败。<br></div>
<?php elseif('RESET-DONE' == $event):?>
<style type="text/css">
.login #login_error {
background-color: #E9FFE8;
border-color: #00CC49;
}
</style>
<div id="login_error"><strong>成功</strong>：重置密码完成，请使用新密码登录。<br>新的登录密码：<code><?=trim($_POST['password'])?></code></div>
<?php endif;?>
<?php if('TOOLS-INFO'==$event||'TOKEN'==$event):?>
<form name="loginform" id="loginform" action="./<?=FILE_NAME?>" method="post" style="padding-bottom: 20px;">
<p>
<label for="token">Sina App Engine Secret Key<br />
<input type="password" name="token" id="token" class="input" value="" size="20" /></label>
</p>
<p class="submit">
<input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large"
value="验证" />
</p>
<?php elseif('RESET-EMPTY' == $event || 'RESET-ERROR' == $event):?>
<form name="loginform" id="loginform" action="./<?=FILE_NAME?>" method="post" style="padding-bottom: 20px;">
<input type="hidden" name="token" value="<?=md5(TOKEN);?>"/>
<p>
<label for="username">帐号名称<br />
<input type="text" name="username" id="username" class="input" value="" size="20" /></label>
</p>
<p>
<label for="password">新的密码<br />
<input type="password" name="password" id="password" class="input" value="" size="20" /></label>
</p>
<p class="submit">
<input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large"
value="修改" />
</p>
<?php elseif('RESET-DONE' == $event):?>
<form name="loginform" id="loginform" method="post" style="padding-bottom: 20px;">
<p class="submit">
<style type="text/css">
#bye-bye{
float: left;
margin: 0 0 0 86px;
}
</style>
<a id="bye-bye" class="button button-primary button-large" href="./wp-login.php" />前往登录</a>
</p>
<?php endif;?>
</form>
</div>
</div>
<div class="clear"></div>
</body>
</html>
<?php
exit();
}
define('TOKEN', SAE_SECRETKEY);
if(!isset($_POST['token'])||empty($_POST['token'])){
makeTpl('管理员验证','TOOLS-INFO');
}else{
if($_POST['token'] != TOKEN && ($_POST['token'] != md5(TOKEN))){
makeTpl('管理员验证','TOKEN');
}
}
$username = trim($_POST['username']);
$password = trim($_POST['password']);
if (!isset($password)||!isset($username)||empty($username)||empty($password)) {
makeTpl('重置帐号','RESET-EMPTY');
} else {
$username = wp_slash( $username );
$user = WP_User::get_data_by('login', $username);
if(!$user){
makeTpl('重置帐号','RESET-ERROR');
}
wp_set_password($password, $user->ID);
wp_password_change_notification( $user );
makeTpl('重置帐号','RESET-DONE');
}
?>