<?php
require_once __DIR__ . '/config.php';

$pagename = 'Password Reset';

if (isset($_GET['forgot']) && isset($_POST['email']) && trim($_POST['email']) !== '') {
    $db    = getDB();
    $email = trim($_POST['email']);

    $stmt = $db->prepare('SELECT id, email FROM lake.members WHERE email = ?');
    $stmt->execute([$email]);
    $member = $stmt->fetch();

    if ($member && $member->email !== '') {
        $tempcode = sprintf('%s-%s-%s-%s',
            bin2hex(random_bytes(4)), bin2hex(random_bytes(2)),
            bin2hex(random_bytes(2)), bin2hex(random_bytes(6))
        );

        $ins = $db->prepare('INSERT INTO lake.rpreset (email, tempcode) VALUES (?,?)');
        $ins->execute([$email, $tempcode]);

        $body = '<a href="https://lake.broadwayworld.com/forgetreset.php?email=' . urlencode($email) . '&tempcode=' . urlencode($tempcode) . '">Click here to reset your password</a>.';
        sendMail($email, 'Lake Tamarack Password Reset', $body);

        include __DIR__ . '/header.php';
        echo '<div class="section mt-3" style="padding:80px 0;"><div class="container"><div class="row justify-content-center mb-5"><div class="col-md-7 text-center">';
        echo '<strong><span>Member record found, password reset information emailed.</span></strong>';
        echo '<p><a href="/index.php">Back to the Main Page...</a></p>';
        echo '</div></div></div></div>';
        include __DIR__ . '/footer.php';
        exit;
    } else {
        include __DIR__ . '/header.php';
        echo '<div class="section mt-3" style="padding:80px 0;"><div class="container"><p>Not found. Please try again.</p></div></div>';
        include __DIR__ . '/footer.php';
        exit;
    }
}

include __DIR__ . '/header.php';
?>
<br><br>
<div class="section mt-3" style="padding: 80px 0;">
    <div class="container">
        <div class="row justify-content-center mb-5">
            <div class="col-md-7 text-center">
                <div class="heading-block border-bottom-0 mb-4">
                    <h2 class="mb-4 text-transform-none">Forgot Your Password?</h2>
                </div>
                <div class="svg-line mb-4">
                    <img src="demos/nonprofit/images/divider-1.svg" alt="svg divider" height="20">
                </div>
                <p>Please enter the e-mail address that you used when you registered. A copy of your login information will be sent to that email in a few minutes, if it exists.</p>
                <form name="newuser" action="/forget.php?forgot=on" method="post">
                    <br>
                    <div align="center">
                        <strong><label>E-Mail Address:</label></strong>
                        <input name="email" type="email" size="35" style="max-width:300px;">
                    </div>
                    <div style="text-align:center;">
                        <br>
                        <strong><input type="submit" value="Send Me a New Password"></strong>
                    </div>
                </form>
            </div>
        </div>
    </div>
</div>
<?php include __DIR__ . '/footer.php'; ?>