Make WordPress Core

Changeset 2215 for trunk/wp-login.php


Ignore:
Timestamp:
02/05/2005 02:19:00 AM (20 years ago)
Author:
saxmatt
Message:

Big buttons for login and registration, more robust registration and password recovery.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-login.php

    r2130 r2215  
    4848    window.onload = focusit;
    4949    </script>
     50    <style type="text/css">
     51    #user_login, #email, #submit {
     52        font-size: 1.7em;
     53    }
     54    </style>
    5055</head>
    5156<body>
     
    6166<p>
    6267<input type="hidden" name="action" value="retrievepassword" />
    63 <label><?php _e('Login') ?>: <input type="text" name="user_login" id="user_login" value="" size="12" tabindex="1" /></label><br />
    64 <label><?php _e('E-mail') ?>: <input type="text" name="email" id="email" value="" size="12" tabindex="2" /></label><br />
     68<label><?php _e('Login') ?>:<br />
     69<input type="text" name="user_login" id="user_login" value="" size="20" tabindex="1" /></label></p>
     70<p><label><?php _e('E-mail') ?>:<br />
     71<input type="text" name="email" id="email" value="" size="25" tabindex="2" /></label><br />
    6572</p>
    66 <p class="submit"><input type="submit" name="submit" value="<?php _e('Retrieve Password'); ?> &raquo;" tabindex="3" /></p>
     73<p class="submit"><input type="submit" name="submit" id="submit" value="<?php _e('Retrieve Password'); ?> &raquo;" tabindex="3" /></p>
    6774</form>
     75<ul>
     76    <li><a href="<?php bloginfo('home'); ?>" title="<?php _e('Are you lost?') ?>">&laquo; <?php _e('Back to blog') ?></a></li>
     77<?php if (get_settings('users_can_register')) : ?>
     78    <li><a href="<?php bloginfo('wpurl'); ?>/wp-register.php"><?php _e('Register') ?></a></li>
     79<?php endif; ?>
     80    <li><a href="<?php bloginfo('wpurl'); ?>/wp-login.php"><?php _e('Login') ?></a></li>
     81</ul>
    6882</div>
    6983</body>
     
    7387
    7488case 'retrievepassword':
    75 
    7689    $user_data = get_userdatabylogin($_POST['user_login']);
    7790    // redefining user_login ensures we return the right case in the email
     
    8396
    8497    // Generate something random for a password... md5'ing current time with a rand salt
    85     $user_pass = substr(md5(uniqid(microtime())), 0, 6);
     98    $key = substr( md5( uniqid( microtime() ) ), 0, 50);
    8699    // now insert the new pass md5'd into the db
    87     $wpdb->query("UPDATE $wpdb->users SET user_pass = MD5('$user_pass') WHERE user_login = '$user_login'");
    88     $message  = __('Login') . ": $user_login\r\n";
    89     $message .= __('Password') . ": $user_pass\r\n";
    90     $message .= get_settings('siteurl') . '/wp-login.php';
    91 
    92     $m = wp_mail($user_email, sprintf(__("[%s] Your login and password"), get_settings('blogname')), $message);
     100    $wpdb->query("UPDATE $wpdb->users SET user_activation_key = '$key' WHERE user_login = '$user_login'");
     101    $message .= __("Someone has asked to reset a password for the login this site\n\n " . get_option('siteurl') ) . "\n\n";
     102    $message .= __('Login') . ": $user_login\r\n\r\n";
     103    $message .= __("To reset your password visit the following address, otherwise just ignore this email and nothing will happen.\n\n");
     104    $message .= get_settings('siteurl') . "/wp-login.php?action=resetpass&key=$key";
     105mail($user_email, sprintf(__("[%s] Password Reset"), get_settings('blogname')), $message);
     106    $m = wp_mail($user_email, sprintf(__("[%s] Password Reset"), get_settings('blogname')), $message);
    93107
    94108    if ($m == false) {
     
    98112    } else {
    99113        echo '<p>' .  sprintf(__("The e-mail was sent successfully to %s's e-mail address."), $user_login) . '<br />';
     114        echo  "<a href='wp-login.php' title='" . __('Check your e-mail first, of course') . "'>" . __('Click here to login!') . '</a></p>';
     115        die();
     116    }
     117
     118break;
     119
     120case 'resetpass' :
     121
     122    // Generate something random for a password... md5'ing current time with a rand salt
     123    $key = $_GET['key'];
     124    $user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE user_activation_key = '$key'");
     125    if ( !$user )
     126        die( __('Sorry, that key does not appear to be valid.') );
     127
     128    $new_pass = md5( substr( md5( uniqid( microtime() ) ), 0, 7) );
     129    $wpdb->query("UPDATE $wpdb->users SET user_pass = '$new_pass', user_activation_key = '' WHERE user_login = '$user->user_login'");
     130    $message  = __('Login') . ": $user_login\r\n";
     131    $message .= __('Password') . ": $new_pass\r\n";
     132    $message .= get_settings('siteurl') . '/wp-login.php';
     133
     134    $m = wp_mail($user->user_email, sprintf(__("[%s] Your new password"), get_settings('blogname')), $message);
     135
     136    if ($m == false) {
     137         echo '<p>' . __('The e-mail could not be sent.') . "<br />\n";
     138         echo  __('Possible reason: your host may have disabled the mail() function...') . "</p>";
     139        die();
     140    } else {
     141        echo '<p>' .  sprintf(__("Your new password is in the mail."), $user_login) . '<br />';
    100142        echo  "<a href='wp-login.php' title='" . __('Check your e-mail first, of course') . "'>" . __('Click here to login!') . '</a></p>';
     143        die();
     144    }   
     145   
    101146        // send a copy of password change notification to the admin
    102147        wp_mail(get_settings('admin_email'), sprintf(__('[%s] Password Lost/Change'), get_settings('blogname')), sprintf(__('Password Lost and Changed for user: %s'), $user_login));
    103         die();
    104     }
    105 
    106148break;
    107149
     
    159201    window.onload = focusit;
    160202    </script>
     203    <style type="text/css">
     204    #log, #pwd, #submit {
     205        font-size: 1.7em;
     206    }
     207    </style>
    161208</head>
    162209<body>
     
    170217
    171218<form name="loginform" id="loginform" action="wp-login.php" method="post">
    172 <p><label><?php _e('Login') ?>: <input type="text" name="log" id="log" value="" size="20" tabindex="1" /></label></p>
    173 <p><label><?php _e('Password') ?>: <input type="password" name="pwd" value="" size="20" tabindex="2" /></label></p>
     219<p><label><?php _e('Login') ?>:<br /><input type="text" name="log" id="log" value="" size="20" tabindex="1" /></label></p>
     220<p><label><?php _e('Password') ?>:<br /> <input type="password" name="pwd" id="pwd" value="" size="20" tabindex="2" /></label></p>
    174221<p class="submit">
    175     <input type="submit" name="submit" value="<?php _e('Login'); ?> &raquo;" tabindex="3" />
     222    <input type="submit" name="submit" id="submit" value="<?php _e('Login'); ?> &raquo;" tabindex="3" />
    176223    <input type="hidden" name="redirect_to" value="<?php echo $redirect_to; ?>" />
    177224</p>
Note: See TracChangeset for help on using the changeset viewer.