Add password reset functionality and SMTP mailer class

- Implemented reset-password.php for users to reset their passwords securely.
- Added validation for reset tokens and password strength checks.
- Created mailer.php to handle sending emails via SMTP, including password reset and invitation emails.
- Integrated responsive HTML email templates for better user experience.

config/.env.example

@@ -25,4 +25,14 @@ JIRA_DOMAIN=""
 JIRA_EMAIL=""
 JIRA_API_TOKEN=""
 
+# SMTP Mail Server
+SMTP_HOST="mail.fociz.nl"
+SMTP_PORT="587"
+SMTP_USER="info@fociz.nl"
+SMTP_PASS=""
+SMTP_SECURE="tls"
+SMTP_FROM_EMAIL="no-reply@fociz.nl"
+SMTP_FROM_NAME="Fociz"
+SMTP_REPLY_TO="info@fociz.nl"
+
 

config/config.php

@@ -128,6 +128,18 @@ define('APP_URL', fociz_detect_app_url());
 // Tijdzone
 date_default_timezone_set('Europe/Amsterdam');
 
+// =========================================================================
+// 3b. SMTP MAIL SERVER CONFIGURATIE
+// =========================================================================
+define('SMTP_HOST', fociz_env('SMTP_HOST', 'mail.fociz.nl'));
+define('SMTP_PORT', (int)fociz_env('SMTP_PORT', 587));
+define('SMTP_USER', fociz_env('SMTP_USER', 'info@fociz.nl'));
+define('SMTP_PASS', fociz_env('SMTP_PASS', '6swpQSBg5uWFmjar7F6a'));
+define('SMTP_SECURE', fociz_env('SMTP_SECURE', 'tls')); // 'tls' (STARTTLS port 587) of 'ssl' (port 465)
+define('SMTP_FROM_EMAIL', fociz_env('SMTP_FROM_EMAIL', 'no-reply@fociz.nl'));
+define('SMTP_FROM_NAME', fociz_env('SMTP_FROM_NAME', 'Fociz'));
+define('SMTP_REPLY_TO', fociz_env('SMTP_REPLY_TO', 'info@fociz.nl'));
+
 // =========================================================================
 // 4. VEILIGE FOUTAFHANDELING & PEN TEST BESCHERMING
 // =========================================================================

config/database.php

@@ -148,6 +148,7 @@ function ensure_tables_exist(PDO $pdo): void {
             "ALTER TABLE users ADD COLUMN avatar_url VARCHAR(255) NULL AFTER theme",
             "ALTER TABLE users ADD COLUMN backup_codes TEXT NULL AFTER two_factor_enabled",
             "ALTER TABLE board_card_schedules ADD UNIQUE KEY uk_sched_card (card_id)",
+            "CREATE TABLE IF NOT EXISTS `password_resets` (`id` INT AUTO_INCREMENT PRIMARY KEY, `email` VARCHAR(191) NOT NULL, `token` VARCHAR(64) NOT NULL UNIQUE, `expires_at` DATETIME NOT NULL, `used_at` DATETIME NULL, `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP, INDEX (`email`), INDEX (`token`)) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci",
         ];
         foreach ($colUpgrades as $sql) {
             try {

config/schema.sql

@@ -31,6 +31,17 @@ CREATE TABLE IF NOT EXISTS `invites` (
   CONSTRAINT `fk_invites_user` FOREIGN KEY (`created_by_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 
+CREATE TABLE IF NOT EXISTS `password_resets` (
+  `id` INT AUTO_INCREMENT PRIMARY KEY,
+  `email` VARCHAR(191) NOT NULL,
+  `token` VARCHAR(64) NOT NULL UNIQUE,
+  `expires_at` DATETIME NOT NULL,
+  `used_at` DATETIME NULL,
+  `created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  INDEX (`email`),
+  INDEX (`token`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
 CREATE TABLE IF NOT EXISTS `daily_plans` (
   `id` INT AUTO_INCREMENT PRIMARY KEY,
   `user_id` INT NOT NULL,