<?php
	define('thisscript','resetid');

	require_once 'global.php';
	
	if (!empty($userid)){
		redirecting('home');
	}
	
	$_POST['do'] = ((empty($_POST['do']))?"":$_POST['do']);
	$_POST['code'] = ((empty($_POST['code']))?"":$_POST['code']);
	$_POST['id'] = ((empty($_POST['id']))?"":$_POST	['id']);
	$_GET['resetid'] = ((empty($_GET['resetid']))?"":$_GET['resetid']);
	$_GET['code'] = ((empty($_GET['code']))?"":$_GET['code']);
	$_GET['id'] = ((empty($_GET['id']))?"":$_GET['id']);
	$_GET['msg'] = ((empty($_GET['msg']))?"":$_GET['msg']);
	
	$errmsg =  '';
	$cek =  '';
	$id = trim($_GET['id']);
	
	$do = $_POST['do'];
	if ($do == 'send'){
		session_start();
		$id = $_GET['id'];
		$code = $_GET['code'];
		$cek = $db->fetch_one("SELECT * from user where userid='".$db->clean($id)."' and verificationcode='".$db->clean($code)."'");
		if (!empty($cek['userid'])){
			$password = $_POST['pass'];
			if (!empty($password)){
				$user->setId($id);
				$user->resetId($password);
				redirecting("resetid?msg=success");
			}
		}
		redirecting("resetid?id=".$id."&code=".$code."&msg=error");
	}
	
	if (empty($do)){
		if ($_GET['msg'] != 'success'){
			$id = $_GET['id'];
			$code = $_GET['code'];
			$cek = $db->fetch_one("SELECT * from user where userid='".$db->clean($id)."' and verificationcode='".$db->clean($code)."'");
			if (empty($cek['userid'])){
				redirecting("home");
			}
		}
	}		
	
	$navigations = ' » <b>'.$phrase['reset_password'].'</b>';
	
	require_once "incl/global_template.php";
	$tmpl = gettemplate('resetid');
	eval("\$template = \"$tmpl\";");
	echo $template;
?>