<?php
require_once __DIR__ . '/config.php';

include __DIR__ . '/header.php';
?>
<br><br>
<div class="section mt-3" style="padding: 80px 0;">
    <div class="container">
        <div class="row justify-content-center mb-5">
            <div class="col-md-7 text-center">
                <div class="heading-block border-bottom-0 mb-4">
                    <h2 class="mb-4 text-transform-none">Forgot Your Password?</h2>
                </div>
                <div class="svg-line mb-4">
                    <img src="demos/nonprofit/images/divider-1.svg" alt="svg divider" height="20">
                </div>

<?php
if (isset($_GET['post']) && isset($_POST['email'])) {
    $db       = getDB();
    $email    = trim($_POST['email']);
    $tempcode = trim($_POST['tempcode'] ?? '');
    $newpw    = $_POST['newpw'] ?? '';

    $stmt = $db->prepare('SELECT * FROM lake.rpreset WHERE email = ? AND tempcode = ?');
    $stmt->execute([$email, $tempcode]);
    $row = $stmt->fetch();

    if ($row && $newpw !== '') {
        $db->prepare('UPDATE lake.members SET password = ? WHERE email = ?')->execute([$newpw, $email]);
        $db->prepare('DELETE FROM lake.rpreset WHERE email = ?')->execute([$email]);
        echo 'Your password has been reset! <a href="/login.php">click here to login.</a>';
    } else {
        echo 'Error.';
    }
} else {
    $urlEmail    = $_GET['email'] ?? '';
    $urlTempcode = $_GET['tempcode'] ?? '';

    if (empty($urlEmail) || empty($urlTempcode) || strpos($urlEmail, '@') === false) {
        echo 'Not Found, Please Try Again';
        include __DIR__ . '/footer.php';
        exit;
    }
?>
    <form name="newuser" action="/forgetreset.php?post=on" method="post">
        <input type="hidden" name="email" value="<?= htmlspecialchars($urlEmail) ?>">
        <input type="hidden" name="tempcode" value="<?= htmlspecialchars($urlTempcode) ?>">
        <div align="center">
            <strong><label>Please enter a new password:</label></strong>
            <input name="newpw" size="35" type="password">
        </div>
        <div style="text-align:center;">
            <br>
            <strong><input type="submit" value="Reset Password"></strong>
        </div>
    </form>
<?php } ?>
            </div>
        </div>
    </div>
</div>
<?php include __DIR__ . '/footer.php'; ?>