View file lost_pass1.php

<?
#############################################################################
##                            Автор: -=ША}{ТЕР=-                            #                                                                                                                                                                                      ##                           Сайт: http://v4ate.us                           #                 															                      ##                             ICQ  :  46-92-90                             #                 														 		           ##                             Версия от 14.12.2009                         #
## По вопросам приобритения скрипта или обновлений для него обращатьтся на  #
## вышеуказанные данные. РАСПРОСТРАНЕНИЕ СКРИПТА ДРУГИМИ ЛИЦАМИ ЗАПРЕШЕНО!  #
#############################################################################
header("Cache-Control: no-cache");
ini_set('display_errors', 'off');
header("Cache-Control: no-cache");
header('Cache-Control: no-store, no-cache, must-revalidate');
if ($wap=="1")header ("Content-type:text/vnd.wap.wml; charset=utf-8");
else header("Content-Type:text/html; charset=UTF-8");

$ref = rand(10000, 1000000);
require("config.php");
$link = connect_db();


if(!isset($go)){
if(empty($wap)) $wap="2";
if(empty($tyu))$tyu="center";
if(empty($title))$title="Система восстановления пароля";
include("obolochka.php");
if ($wap=="2") echo "<form method=\"POST\" action=\"lost_pass1.php?wap=$wap&amp;go=lost_pass&amp;$ses&amp;ref=$ref&amp;ot=$ot\" name=\"auth\">\n";
echo "<small>";
echo "Ник или ID:<br/>\n";
echo "</small>";
echo "<input name=\"nick\" maxlength=\"13\" title=\"lost_pass\"/><br/>\n";
echo "<small>";
echo "Транслитирация ника:<br/>\n";
echo "</small>";
echo "<select name=\"trun\">\n";
echo "<option value=\"0\">Нет</option>\n";
echo "<option value=\"1\">Да</option>\n";
echo "</select><br/>\n";
if ($wap=="1"){
echo "<small>";
echo "<anchor title=\"go\">Выслать пароль<go href=\"lost_pass1.php?wap=$wap&amp;go=lost_pass&amp;$ses&amp;ot=$ot&amp;url=$url&amp;to=$to\" method=\"post\">\n";
echo "<postfield name=\"nick\" value=\"$(nick)\"/>\n";
echo "<postfield name=\"trun\" value=\"$(trun)\"/>\n";
echo "</go></anchor>\n";
echo "</small>";
echo "<br/>";
}else{
echo "<input type=\"submit\" class=\"ibutton\" value=\"Выслать пароль\" name=\"enter\"><br/>\n";
}
if ($wap=="1")echo "<a href=\"?wap=2&amp;url=$url&amp;ref=$refamp;ot=$ot\">HTML</a>|WML<br/>";
else if ($wap=="2")echo "$div2 HTML|<a href=\"?wap=1&amp;url=$url&amp;ref=$refamp;ot=$ot\">WML</a><br />";
info_compress();
echo $div9;
if ($wap=="1")echo "</p></card></wml>";
else echo "</div></body></html>";
mysql_close ($link);
exit;
}

if(@$go == "lost_pass"){
$nick = HtmlSpecialChars($nick);
        $nick = str_replace("", "", $nick);
        $nick= str_replace("", "", $nick);
        $onick = str_replace("", "", $nick);
        $nick = str_replace("", "", $nick);
        $nick = str_replace("", "", $nick);
        $nick = str_replace("", "", $nick);
        $nick = str_replace("'", "&#8216;", $nick);
        $nick = str_replace("$", "$$", $nick);
        $nick = str_replace("|", "&#0166;", $nick);
        $nick = check($nick);
if (!ctype_digit($nick)) {
if($trun==1)$nick=trun_to_rus($nick);
$nick=trim($nick);
$post=trim($post);
if($nick=="")$nick=0;
$latuser=strtolower($nick);
$ruser = rus_to_k($nick);
if($ruser==$nick){
$select = mysql_query ("Select id,user,mail,pass from users where latuser = '".$latuser."'");
} else {
$select = mysql_query ("select id,user,mail,pass from users where ruser = '".$ruser."'");
}
} else {
$select = mysql_query ("select id,user,mail,pass from users where id = '".$nick."'");
}

$inf = mysql_fetch_array ($select);
$usid = $inf["id"];
$nick = $inf["user"];
if(empty($_GET['to']))$to = $inf["mail"];
else $to = $_GET['to'];
$pass = $inf["pass"];

if(empty($wap)) $wap="2";
if(empty($tyu))$tyu="center";
if(empty($title))$title="Система восстановления пароля";
include("obolochka.php");
if ($to==""){
echo "<small>";
echo "E-M@il при регистрации не заполнен.<br/>";
echo "Восстановление пароля невозможно.<br/>";
echo "</small>";
}else{
echo "<small>";
echo "Пароль выслан пользователю <b>".$nick."</b> на эл.почту ".$to.".<br/>";
echo "</small>";
$adds = "From: ".$_SERVER['HTTP_HOST']."<".$admail."> \n";
$adds .= "X-sender: < ".$admail." >\n";
$adds .= "Content-Type: text/plain; charset=koi8-r\n";
@$to = str_replace(chr("13"), " ", $to);
@$to = str_replace(chr("10"), " ", $to);
@$to = str_replace("\\n", " ", $to);
@$to = str_replace(" ", "  ", $to);
@$to=substr($to,0,100);
@$to = str_replace("  ", " ", $to);
@$to=ereg_replace(" +"," ",$to);
@$to = trim(" $to ");
@$mail = str_replace(chr("13"), " ", $mail);
@$mail = str_replace(chr("10"), " ", $mail);
@$mail = str_replace("\\n", " ", $mail);
@$mail = str_replace(" ", "  ", $mail);
@$mail = str_replace("  ", " ", $mail);
@$mail=ereg_replace(" +"," ",$mail);
@$mail = trim(" $mail ");
@$mail = str_replace("", "", $mail);
@$mail = str_replace("", "", $mail);
@$mail = str_replace("", "", $mail);
@$mail = str_replace("", "", $mail);
@$mail = str_replace("", "", $mail);
@$mail = str_replace("", "", $mail);
@$mail= str_replace("\\", "", $mail);
$now= date("j-m-Y");
$subject = "Система восстановления пароля чата ".$_SERVER['HTTP_HOST']."";
$body = "$now \n Вы, или кто-нибудь другой, пытались восстановить пароль \n в чате ".$adres." Пароль $pass, \n вы можете воспользоваться автологином ".$_SERVER['HTTP_HOST']."/enter.php?wap=$wap&amp;id=$usid&amp;ps=$pass";
$body = convert_cyr_string($body, 'w','k');
$subject = convert_cyr_string($subject, 'w','k');
mail($to,$subject,$body,$adds);
}
echo "<small>";
echo "<br />$divide";
echo "$div1<a href=\"index.php?wap=$wap&amp;ot=$ot&amp;url=$url\">Главная</a>$div9<br/>\n";
if ($wap=="1")echo "<a href=\"?wap=2&amp;url=$url&amp;ref=$refamp;ot=$ot\">HTML</a>|WML<br/>";
else if ($wap=="2")echo "$div2 HTML|<a href=\"?wap=1&amp;url=$url&amp;ref=$refamp;ot=$ot\">WML</a><br />";
info_compress();
echo $div9;
echo "</small>";
if ($wap=="1")echo "</p></card></wml>";
else echo "</div></body></html>";
mysql_close ($link);
exit;
}
?>