Elep

<?php
/*
 * Your installation or use of this SugarCRM file is subject to the applicable
 * terms available at
 * http://support.sugarcrm.com/Resources/Master_Subscription_Agreements/.
 * If you do not agree to all of the applicable terms or do not have the
 * authority to bind the entity as an authorized representative, then do not
 * install or use this SugarCRM file.
 *
 * Copyright (C) SugarCRM Inc. All rights reserved.
 */
require_once 'modules/Users/language/en_us.lang.php';
global $app_strings;
global $sugar_config;
global $new_pwd;
global $current_user;

$mod_strings = return_module_language('', 'Users');
$res = $GLOBALS['sugar_config']['passwordsetting'];
$regexmail = "/^\w+(['\.\-\+]?\w+)*@\w+([\.-]?\w+)*(\.\w{2,4})+\$/";

///////////////////////////////////////////////////
///////  Retrieve user
$username = '';
$useremail = '';
if (isset($_POST['user_name'])) {
    $username = $_POST['user_name'];
} elseif (isset($_POST['username'])) {
    $username = $_POST['username'];
}

if (isset($_POST['Users0emailAddress0'])) {
    $useremail = $_POST['Users0emailAddress0'];
} elseif (isset($_POST['user_email'])) {
    $useremail = $_POST['user_email'];
}

$usr = new User();
if (isset($username) && $username != '' && isset($useremail) && $useremail != '') {
    if ($username != '' && $useremail != '') {
        $usr_id = $usr->retrieve_user_id($username);
        $usr->retrieve($usr_id);
        if ($usr->email1 != $useremail) {
            echo $mod_strings['LBL_PROVIDE_USERNAME_AND_EMAIL'];
            return;
        }

if ($usr->portal_only || $usr->is_group) {
            echo $mod_strings['LBL_PROVIDE_USERNAME_AND_EMAIL'];
            return;
        }
    } else {
        echo $mod_strings['LBL_PROVIDE_USERNAME_AND_EMAIL'];
        return;
    }
} else {
    if (isset($_POST['userId']) && $_POST['userId'] != '') {
        $usr->retrieve($_POST['userId']);
    } else {
        if (!empty($_POST['sugar_user_name'])) {
            $usr_id = $usr->retrieve_user_id($_POST['sugar_user_name']);
            $usr->retrieve($usr_id);
        } else {
            echo $mod_strings['LBL_PROVIDE_USERNAME_AND_EMAIL'];
            return;
        }
    }

// Check if current_user is admin for current module or the same user
    if (empty($current_user->id)
        || empty($usr->id)
        || ($usr->id != $current_user->id && !$current_user->isAdminForModule($GLOBALS['currentModule']))) {
        echo $mod_strings['LBL_PROVIDE_USERNAME_AND_EMAIL'];
        return;
    }
}

///////
///////////////////////////////////////////////////

///////////////////////////////////////////////////
///////  Check email address

if (!preg_match($regexmail, $usr->emailAddress->getPrimaryAddress($usr))) {
    echo $mod_strings['ERR_EMAIL_INCORRECT'];
    return;
}

///////
///////////////////////////////////////////////////
$isLink = true; //Due to GDPR restrictions, sys generated passwords are forbidden. User must get the link to set the password
// if i need to generate a password (not a link)
$password = $isLink ? '' : User::generatePassword();

///////////////////////////////////////////////////
///////  Create URL

// if i need to generate a link
if ($isLink) {
    global $timedate;
    $guid = create_guid();
    $url = $GLOBALS['sugar_config']['site_url'] . "/index.php?entryPoint=Changenewpassword&guid=$guid";
    $time_now = TimeDate::getInstance()->nowDb();
    //$q2="UPDATE `users_password_link` SET `deleted` = '1' WHERE `username` = '".$username."'";
    //$usr->db->query($q2);
    $q = sprintf(
        'INSERT INTO users_password_link (id, username, date_generated) VALUES(%s, %s, %s)',
        $usr->db->quoted($guid),
        $usr->db->quoted($username),
        $usr->db->quoted($time_now)
    );
    $usr->db->query($q);
}
///////
///////////////////////////////////////////////////

///////  Email creation
if ($isLink) {
    $emailTemp_id = $res['lostpasswordtmpl'];
} else {
    $emailTemp_id = $res['generatepasswordtmpl'];
}

$additionalData = [
    'link' => $isLink,
    'password' => $password,
];
if (isset($url)) {
    $additionalData['url'] = $url;
}
$result = $usr->sendEmailForPassword($emailTemp_id, $additionalData);
if ($result['status'] == false && $result['message'] != '') {
    echo $result['message'];
    $new_pwd = '4';
    return;
}

if ($result['status'] == true) {
    echo '1';
} else {
    $new_pwd = '4';
    if ($current_user->is_admin) {
        $email_errors = $mod_strings['ERR_EMAIL_NOT_SENT_ADMIN'];
        $email_errors .= "\n-" . $mod_strings['ERR_RECIPIENT_EMAIL'];
        $email_errors .= "\n-" . $mod_strings['ERR_SERVER_STATUS'];
        echo $email_errors;
    } else {
        echo $mod_strings['LBL_EMAIL_NOT_SENT'];
    }
}
return;