233 lines
11 KiB
PHP
233 lines
11 KiB
PHP
<?php
|
|
/**
|
|
* Fociz Wachtwoord Vergeten Aanvraag
|
|
*/
|
|
|
|
require_once __DIR__ . '/../includes/auth.php';
|
|
require_once __DIR__ . '/../includes/mailer.php';
|
|
|
|
start_secure_session();
|
|
|
|
// Indien al ingelogd, direct doorsturen naar de planner
|
|
if (get_logged_in_user()) {
|
|
header('Location: /planner.php');
|
|
exit;
|
|
}
|
|
|
|
$error = null;
|
|
$submitted = false;
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
$clientIp = fociz_get_client_ip();
|
|
$ipRateKey = "forgot_ip_{$clientIp}";
|
|
$ipLimit = fociz_check_rate_limit($ipRateKey, 5, 900);
|
|
|
|
$email = strtolower(trim($_POST['email'] ?? ''));
|
|
$emailRateKey = "forgot_email_{$email}";
|
|
$emailLimit = fociz_check_rate_limit($emailRateKey, 3, 900);
|
|
|
|
if (!verify_csrf_token($_POST['csrf_token'] ?? null)) {
|
|
$error = "Sessie verlopen of beveiligingstoken ongeldig. Ververs de pagina en probeer opnieuw.";
|
|
} elseif (!$ipLimit['allowed'] || !$emailLimit['allowed']) {
|
|
$retryAfter = max($ipLimit['retry_after'], $emailLimit['retry_after']);
|
|
$error = "Te veel herstelaanvragen. Probeer het over " . ceil($retryAfter / 60) . " minuten opnieuw.";
|
|
} elseif (empty($email) || !filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
|
$error = "Vul een geldig e-mailadres in.";
|
|
} else {
|
|
fociz_hit_rate_limit($ipRateKey, 900);
|
|
fociz_hit_rate_limit($emailRateKey, 900);
|
|
try {
|
|
$db = get_db_connection();
|
|
|
|
// Zoek gebruiker op
|
|
$stmt = $db->prepare("SELECT id, name, email FROM users WHERE email = ?");
|
|
$stmt->execute([$email]);
|
|
$user = $stmt->fetch();
|
|
|
|
if ($user) {
|
|
// Verwijder eventuele eerdere openstaande reset tokens voor dit e-mailadres
|
|
$stmtClean = $db->prepare("DELETE FROM password_resets WHERE email = ? AND used_at IS NULL");
|
|
$stmtClean->execute([$email]);
|
|
|
|
// Genereer veilig uniek token
|
|
$token = bin2hex(random_bytes(32));
|
|
$expiresAt = date('Y-m-d H:i:s', strtotime('+1 hour'));
|
|
|
|
$stmtInsert = $db->prepare("
|
|
INSERT INTO password_resets (email, token, expires_at)
|
|
VALUES (?, ?, ?)
|
|
");
|
|
$stmtInsert->execute([$email, $token, $expiresAt]);
|
|
|
|
// Bouw herstel-URL
|
|
$baseUrl = rtrim(APP_URL, '/');
|
|
$resetUrl = "{$baseUrl}/auth/reset-password.php?token={$token}";
|
|
|
|
// Verstuur herstelmail via de nieuwe FocizMailer
|
|
$mailResult = FocizMailer::sendPasswordResetEmail($user['email'], $user['name'], $resetUrl);
|
|
if (!$mailResult['success']) {
|
|
$errMsg = $mailResult['error'] ?? 'Mailserver fout';
|
|
error_log("Fout bij verzenden wachtwoordherstel mail naar {$email}: {$errMsg}");
|
|
$error = "De herstelmail kon niet worden verzonden via de mailserver: " . htmlspecialchars($errMsg);
|
|
} else {
|
|
$submitted = true;
|
|
}
|
|
} else {
|
|
// In development omgeving geven we directe diagnostische feedback
|
|
if (defined('APP_ENV') && APP_ENV === 'development') {
|
|
$error = "Er is geen Fociz account gevonden met het e-mailadres '{$email}'. Controleer of dit e-mailadres correct is ingevoerd.";
|
|
} else {
|
|
// Anti-enumeratie op productie: toon altijd succes
|
|
$submitted = true;
|
|
}
|
|
}
|
|
|
|
} catch (Throwable $e) {
|
|
error_log("Wachtwoord vergeten fout: " . $e->getMessage());
|
|
$error = "Er is een technische fout opgetreden. Probeer het over enkele ogenblikken opnieuw.";
|
|
}
|
|
}
|
|
}
|
|
|
|
$pageTitle = "Fociz — Wachtwoord Vergeten";
|
|
?>
|
|
<!DOCTYPE html>
|
|
<html lang="nl" class="dark">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title><?= htmlspecialchars($pageTitle) ?></title>
|
|
<link rel="icon" type="image/svg+xml" href="/assets/favicon.svg">
|
|
<link rel="alternate icon" href="/favicon.ico">
|
|
<script>
|
|
(function() {
|
|
var activeTheme = localStorage.getItem('fociz_theme') || 'dark';
|
|
var isDark = true;
|
|
if (activeTheme === 'dark') isDark = true;
|
|
else if (activeTheme === 'light') isDark = false;
|
|
else if (activeTheme === 'system') {
|
|
isDark = window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches;
|
|
}
|
|
if (isDark) document.documentElement.classList.add('dark');
|
|
else document.documentElement.classList.remove('dark');
|
|
})();
|
|
</script>
|
|
<script src="https://cdn.tailwindcss.com"></script>
|
|
<script>
|
|
tailwind.config = {
|
|
darkMode: 'class',
|
|
theme: {
|
|
extend: {
|
|
colors: {
|
|
slate: {
|
|
850: '#151f32',
|
|
950: '#070b12',
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
</script>
|
|
<script src="https://unpkg.com/lucide@latest"></script>
|
|
<link rel="preconnect" href="https://fonts.googleapis.com">
|
|
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
|
<link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700;800&display=swap" rel="stylesheet">
|
|
<style>
|
|
body { font-family: 'Plus Jakarta Sans', sans-serif; }
|
|
</style>
|
|
</head>
|
|
<body class="min-h-screen flex items-center justify-center p-4 bg-[#f8fafc] dark:bg-[#0c0f17] text-slate-900 dark:text-slate-100 transition-colors">
|
|
|
|
<?php require_once __DIR__ . '/../includes/env_badge.php'; ?>
|
|
|
|
<div class="w-full max-w-md bg-white dark:bg-[#111622] border border-slate-200 dark:border-slate-800/80 rounded-2xl shadow-xs backdrop-blur-xl p-8 transition">
|
|
|
|
<!-- Header -->
|
|
<div class="text-center mb-8">
|
|
<div class="inline-flex items-center justify-center w-14 h-14 rounded-2xl bg-indigo-50 dark:bg-indigo-950/40 border border-indigo-200 dark:border-indigo-800/60 text-indigo-600 dark:text-indigo-400 mb-3 shadow-xs">
|
|
<i data-lucide="key-round" class="w-7 h-7"></i>
|
|
</div>
|
|
<h1 class="text-2xl font-black tracking-tight text-slate-900 dark:text-white">Wachtwoord Vergeten?</h1>
|
|
<p class="text-slate-500 dark:text-slate-400 text-xs sm:text-sm mt-1">
|
|
Geen probleem. Vul uw e-mailadres in en we sturen u een veilige herstellink.
|
|
</p>
|
|
</div>
|
|
|
|
<?php if ($error): ?>
|
|
<div class="mb-6 p-4 rounded-2xl bg-red-500/10 border border-red-500/30 flex items-start space-x-3 text-red-700 dark:text-red-400 text-sm">
|
|
<i data-lucide="alert-triangle" class="w-5 h-5 flex-shrink-0 mt-0.5"></i>
|
|
<span><?= htmlspecialchars($error) ?></span>
|
|
</div>
|
|
<?php endif; ?>
|
|
|
|
<?php if ($submitted): ?>
|
|
<div class="space-y-6">
|
|
<div class="p-5 rounded-2xl bg-emerald-500/10 border border-emerald-500/30 text-emerald-800 dark:text-emerald-300 text-sm">
|
|
<div class="flex items-start space-x-3">
|
|
<i data-lucide="mail-check" class="w-6 h-6 flex-shrink-0 text-emerald-600 dark:text-emerald-400 mt-0.5"></i>
|
|
<div>
|
|
<strong class="font-bold block mb-1">Herstellink verzonden!</strong>
|
|
<span>
|
|
Als het opgegeven e-mailadres bij ons bekend is, ontvangt u binnen enkele ogenblikken een e-mail met instructies om uw wachtwoord opnieuw in te stellen.
|
|
</span>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="text-xs text-slate-500 dark:text-slate-400 space-y-2 bg-slate-50 dark:bg-slate-900/50 p-4 rounded-xl border border-slate-200 dark:border-slate-800">
|
|
<p>💡 <strong>Tip:</strong> Heeft u na enkele minuten nog niets ontvangen?</p>
|
|
<ul class="list-disc list-inside space-y-1 pl-1">
|
|
<li>Controleer uw map met <em>Ongewenste e-mail</em> of <em>Spam</em>.</li>
|
|
<li>Controleer of u het juiste e-mailadres heeft ingevuld.</li>
|
|
</ul>
|
|
</div>
|
|
|
|
<a href="/auth/login.php" class="w-full bg-indigo-600 hover:bg-indigo-500 text-white font-bold py-3 px-4 rounded-xl transition shadow-xs flex items-center justify-center space-x-2 cursor-pointer text-sm">
|
|
<i data-lucide="arrow-left" class="w-4 h-4"></i>
|
|
<span>Terug naar Inloggen</span>
|
|
</a>
|
|
</div>
|
|
<?php else: ?>
|
|
<form method="POST" action="/auth/forgot-password.php" class="space-y-4">
|
|
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars(get_csrf_token()) ?>">
|
|
<div>
|
|
<label class="block text-xs font-semibold text-slate-700 dark:text-slate-300 mb-1">Uw e-mailadres</label>
|
|
<div class="relative">
|
|
<input
|
|
type="email"
|
|
name="email"
|
|
required
|
|
autofocus
|
|
placeholder="uw.naam@bedrijf.nl"
|
|
value="<?= htmlspecialchars($_POST['email'] ?? '') ?>"
|
|
class="w-full bg-slate-50 dark:bg-[#0c0f17] border border-slate-300 dark:border-slate-800 rounded-xl px-4 py-2.5 text-slate-900 dark:text-white placeholder-slate-400 dark:placeholder-slate-500 focus:outline-none focus:ring-1 focus:ring-indigo-500 text-sm transition"
|
|
>
|
|
</div>
|
|
</div>
|
|
|
|
<button type="submit" class="w-full mt-4 bg-indigo-600 hover:bg-indigo-500 text-white font-bold py-3 px-4 rounded-xl transition shadow-xs flex items-center justify-center space-x-2 cursor-pointer text-sm">
|
|
<i data-lucide="send" class="w-4 h-4"></i>
|
|
<span>Herstellink Verzenden</span>
|
|
</button>
|
|
</form>
|
|
|
|
<div class="mt-6 text-center">
|
|
<a href="/auth/login.php" class="inline-flex items-center space-x-1.5 text-xs text-indigo-600 dark:text-indigo-400 hover:underline font-medium">
|
|
<i data-lucide="arrow-left" class="w-3.5 h-3.5"></i>
|
|
<span>Terug naar Inloggen</span>
|
|
</a>
|
|
</div>
|
|
<?php endif; ?>
|
|
|
|
<div class="mt-8 pt-6 border-t border-slate-100 dark:border-slate-800/80 text-center text-xs text-slate-500">
|
|
Beveiligd met end-to-end authenticatie • Fociz 2026
|
|
</div>
|
|
</div>
|
|
|
|
<script>
|
|
if (typeof lucide !== 'undefined') lucide.createIcons();
|
|
</script>
|
|
</body>
|
|
</html>
|
|
|