287 lines
13 KiB
PHP
287 lines
13 KiB
PHP
<?php
|
|
/**
|
|
* Fociz Wachtwoord Opnieuw Instellen
|
|
*/
|
|
|
|
require_once __DIR__ . '/../includes/auth.php';
|
|
start_secure_session();
|
|
|
|
// Indien al ingelogd, direct doorsturen naar de planner
|
|
if (get_logged_in_user()) {
|
|
header('Location: /planner.php');
|
|
exit;
|
|
}
|
|
|
|
$token = trim($_GET['token'] ?? ($_POST['token'] ?? ''));
|
|
$db = get_db_connection();
|
|
|
|
// Valideer token
|
|
$resetRecord = null;
|
|
if (!empty($token)) {
|
|
$stmt = $db->prepare("
|
|
SELECT pr.*, u.name, u.email as user_email
|
|
FROM password_resets pr
|
|
JOIN users u ON pr.email = u.email
|
|
WHERE pr.token = ? AND pr.used_at IS NULL AND pr.expires_at > NOW()
|
|
");
|
|
$stmt->execute([$token]);
|
|
$resetRecord = $stmt->fetch();
|
|
}
|
|
|
|
$error = null;
|
|
$success = false;
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && $resetRecord) {
|
|
$password = $_POST['password'] ?? '';
|
|
$confirmPassword = $_POST['confirm_password'] ?? '';
|
|
|
|
if (empty($password)) {
|
|
$error = "Vul een nieuw wachtwoord in.";
|
|
} elseif (($pwErr = fociz_validate_password($password)) !== null) {
|
|
$error = $pwErr;
|
|
} elseif ($password !== $confirmPassword) {
|
|
$error = "De wachtwoorden komen niet overeen.";
|
|
} else {
|
|
try {
|
|
$db->beginTransaction();
|
|
|
|
$newHash = password_hash($password, PASSWORD_DEFAULT);
|
|
|
|
// 1. Update wachtwoord van de gebruiker en reset remember tokens
|
|
$stmtUser = $db->prepare("
|
|
UPDATE users
|
|
SET password_hash = ?, remember_token = NULL, remember_token_expires_at = NULL
|
|
WHERE email = ?
|
|
");
|
|
$stmtUser->execute([$newHash, $resetRecord['user_email']]);
|
|
|
|
// 2. Markeer reset token als verbruikt
|
|
$stmtToken = $db->prepare("UPDATE password_resets SET used_at = NOW() WHERE token = ?");
|
|
$stmtToken->execute([$token]);
|
|
|
|
$db->commit();
|
|
$success = true;
|
|
|
|
fociz_log_audit(null, 'PASSWORD_RESET_COMPLETED', 'user', null, ['email' => $resetRecord['user_email']], 'SUCCESS', $resetRecord['user_email']);
|
|
|
|
} catch (Throwable $e) {
|
|
if ($db->inTransaction()) $db->rollBack();
|
|
error_log("Fout bij resetten wachtwoord: " . $e->getMessage());
|
|
$error = "Er is een fout opgetreden bij het opslaan van uw nieuwe wachtwoord.";
|
|
}
|
|
}
|
|
}
|
|
|
|
$pageTitle = "Fociz — Wachtwoord Opnieuw Instellen";
|
|
?>
|
|
<!DOCTYPE html>
|
|
<html lang="nl" class="dark">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title><?= htmlspecialchars($pageTitle) ?></title>
|
|
<link rel="icon" type="image/svg+xml" href="/assets/favicon.svg">
|
|
<link rel="alternate icon" href="/favicon.ico">
|
|
<script>
|
|
(function() {
|
|
var activeTheme = localStorage.getItem('fociz_theme') || 'dark';
|
|
var isDark = true;
|
|
if (activeTheme === 'dark') isDark = true;
|
|
else if (activeTheme === 'light') isDark = false;
|
|
else if (activeTheme === 'system') {
|
|
isDark = window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches;
|
|
}
|
|
if (isDark) document.documentElement.classList.add('dark');
|
|
else document.documentElement.classList.remove('dark');
|
|
})();
|
|
</script>
|
|
<script src="https://cdn.tailwindcss.com"></script>
|
|
<script>
|
|
tailwind.config = {
|
|
darkMode: 'class',
|
|
theme: {
|
|
extend: {
|
|
colors: {
|
|
slate: {
|
|
850: '#151f32',
|
|
950: '#070b12',
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
</script>
|
|
<script src="https://unpkg.com/lucide@latest"></script>
|
|
<link rel="preconnect" href="https://fonts.googleapis.com">
|
|
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
|
<link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700;800&display=swap" rel="stylesheet">
|
|
<style>
|
|
body { font-family: 'Plus Jakarta Sans', sans-serif; }
|
|
</style>
|
|
</head>
|
|
<body class="min-h-screen flex items-center justify-center p-4 bg-[#f8fafc] dark:bg-[#0c0f17] text-slate-900 dark:text-slate-100 transition-colors">
|
|
|
|
<?php require_once __DIR__ . '/../includes/env_badge.php'; ?>
|
|
|
|
<div class="w-full max-w-md bg-white dark:bg-[#111622] border border-slate-200 dark:border-slate-800/80 rounded-2xl shadow-xs backdrop-blur-xl p-8 transition">
|
|
|
|
<?php if (!$resetRecord && !$success): ?>
|
|
<!-- Ongeldige of Verlopen Link -->
|
|
<div class="text-center">
|
|
<div class="inline-flex items-center justify-center w-14 h-14 rounded-2xl bg-rose-50 dark:bg-rose-950/40 border border-rose-200 dark:border-rose-800/60 text-rose-600 dark:text-rose-400 mb-4 shadow-xs">
|
|
<i data-lucide="shield-alert" class="w-7 h-7"></i>
|
|
</div>
|
|
<h1 class="text-2xl font-black tracking-tight text-slate-900 dark:text-white mb-2">Herstellink Ongeldig</h1>
|
|
<p class="text-sm text-slate-500 dark:text-slate-400 mb-6 leading-relaxed">
|
|
Deze wachtwoordherstellink is ongeldig, verlopen (langer dan 60 minuten geleden aangevraagd) of al eerder gebruikt.
|
|
</p>
|
|
<div class="space-y-3">
|
|
<a href="/auth/forgot-password.php" class="w-full bg-indigo-600 hover:bg-indigo-500 text-white font-bold py-3 px-4 rounded-xl transition shadow-xs flex items-center justify-center space-x-2 cursor-pointer text-sm">
|
|
<i data-lucide="refresh-cw" class="w-4 h-4"></i>
|
|
<span>Nieuwe herstellink aanvragen</span>
|
|
</a>
|
|
<a href="/auth/login.php" class="block text-center text-xs text-slate-500 hover:text-slate-700 dark:hover:text-slate-300 font-medium py-2">
|
|
Naar Inloggen
|
|
</a>
|
|
</div>
|
|
</div>
|
|
|
|
<?php elseif ($success): ?>
|
|
<!-- Succesvol Gewijzigd -->
|
|
<div class="text-center">
|
|
<div class="inline-flex items-center justify-center w-14 h-14 rounded-2xl bg-emerald-50 dark:bg-emerald-950/40 border border-emerald-200 dark:border-emerald-800/60 text-emerald-600 dark:text-emerald-400 mb-4 shadow-xs">
|
|
<i data-lucide="check-circle" class="w-7 h-7"></i>
|
|
</div>
|
|
<h1 class="text-2xl font-black tracking-tight text-slate-900 dark:text-white mb-2">Wachtwoord Gewijzigd!</h1>
|
|
<p class="text-sm text-slate-500 dark:text-slate-400 mb-6 leading-relaxed">
|
|
Uw nieuwe wachtwoord is succesvol opgeslagen. U kunt nu direct inloggen in Fociz.
|
|
</p>
|
|
<a href="/auth/login.php" class="w-full bg-indigo-600 hover:bg-indigo-500 text-white font-bold py-3 px-4 rounded-xl transition shadow-xs flex items-center justify-center space-x-2 cursor-pointer text-sm">
|
|
<span>Inloggen met Nieuw Wachtwoord</span>
|
|
<i data-lucide="arrow-right" class="w-4 h-4"></i>
|
|
</a>
|
|
</div>
|
|
|
|
<?php else: ?>
|
|
<!-- Formulier: Nieuw Wachtwoord Invoeren -->
|
|
<div class="text-center mb-6">
|
|
<div class="inline-flex items-center justify-center w-14 h-14 rounded-2xl bg-indigo-50 dark:bg-indigo-950/40 border border-indigo-200 dark:border-indigo-800/60 text-indigo-600 dark:text-indigo-400 mb-3 shadow-xs">
|
|
<i data-lucide="lock" class="w-7 h-7"></i>
|
|
</div>
|
|
<h1 class="text-2xl font-black tracking-tight text-slate-900 dark:text-white">Nieuw Wachtwoord</h1>
|
|
<p class="text-slate-500 dark:text-slate-400 text-xs mt-1">
|
|
Kies een nieuw veilig wachtwoord voor <strong class="text-slate-800 dark:text-slate-200"><?= htmlspecialchars($resetRecord['user_email']) ?></strong>
|
|
</p>
|
|
</div>
|
|
|
|
<?php if ($error): ?>
|
|
<div class="mb-5 p-4 rounded-2xl bg-red-500/10 border border-red-500/30 flex items-start space-x-3 text-red-700 dark:text-red-400 text-sm">
|
|
<i data-lucide="alert-triangle" class="w-5 h-5 flex-shrink-0 mt-0.5"></i>
|
|
<span><?= htmlspecialchars($error) ?></span>
|
|
</div>
|
|
<?php endif; ?>
|
|
|
|
<form method="POST" action="/auth/reset-password.php" class="space-y-4">
|
|
<input type="hidden" name="token" value="<?= htmlspecialchars($token) ?>">
|
|
|
|
<div>
|
|
<label class="block text-xs font-semibold text-slate-700 dark:text-slate-300 mb-1">Nieuw wachtwoord (min. 12 tekens)</label>
|
|
<div class="relative">
|
|
<input
|
|
type="password"
|
|
name="password"
|
|
id="pwd"
|
|
required
|
|
minlength="12"
|
|
autofocus
|
|
placeholder="Minimaal 12 tekens"
|
|
class="w-full bg-slate-50 dark:bg-[#0c0f17] border border-slate-300 dark:border-slate-800 rounded-xl px-4 py-2.5 text-slate-900 dark:text-white placeholder-slate-400 dark:placeholder-slate-500 focus:outline-none focus:ring-1 focus:ring-indigo-500 text-sm transition"
|
|
oninput="checkPasswordStrength(this.value)"
|
|
>
|
|
</div>
|
|
<!-- Sterkte Indicator -->
|
|
<div class="mt-2 flex items-center space-x-1.5">
|
|
<div id="bar1" class="h-1 flex-1 rounded-full bg-slate-200 dark:bg-slate-800 transition-colors"></div>
|
|
<div id="bar2" class="h-1 flex-1 rounded-full bg-slate-200 dark:bg-slate-800 transition-colors"></div>
|
|
<div id="bar3" class="h-1 flex-1 rounded-full bg-slate-200 dark:bg-slate-800 transition-colors"></div>
|
|
<span id="strengthText" class="text-[10px] text-slate-400 pl-1 font-medium"></span>
|
|
</div>
|
|
<p class="text-[10px] text-slate-400 dark:text-slate-500 mt-1">Minimaal 12 tekens (incl. hoofdletter, kleine letter, cijfer en speciaal teken).</p>
|
|
</div>
|
|
|
|
<div>
|
|
<label class="block text-xs font-semibold text-slate-700 dark:text-slate-300 mb-1">Bevestig nieuw wachtwoord</label>
|
|
<div class="relative">
|
|
<input
|
|
type="password"
|
|
name="confirm_password"
|
|
required
|
|
minlength="12"
|
|
placeholder="Herhaal wachtwoord (min. 12 tekens)"
|
|
class="w-full bg-slate-50 dark:bg-[#0c0f17] border border-slate-300 dark:border-slate-800 rounded-xl px-4 py-2.5 text-slate-900 dark:text-white placeholder-slate-400 dark:placeholder-slate-500 focus:outline-none focus:ring-1 focus:ring-indigo-500 text-sm transition"
|
|
>
|
|
</div>
|
|
</div>
|
|
|
|
<button type="submit" class="w-full mt-4 bg-indigo-600 hover:bg-indigo-500 text-white font-bold py-3 px-4 rounded-xl transition shadow-xs flex items-center justify-center space-x-2 cursor-pointer text-sm">
|
|
<i data-lucide="check" class="w-4 h-4"></i>
|
|
<span>Wachtwoord Opslaan</span>
|
|
</button>
|
|
</form>
|
|
|
|
<div class="mt-6 text-center">
|
|
<a href="/auth/login.php" class="text-xs text-slate-500 hover:text-slate-700 dark:hover:text-slate-300 font-medium">
|
|
Annuleren en terug naar inloggen
|
|
</a>
|
|
</div>
|
|
<?php endif; ?>
|
|
|
|
<div class="mt-8 pt-6 border-t border-slate-100 dark:border-slate-800/80 text-center text-xs text-slate-500">
|
|
Beveiligd met end-to-end authenticatie • Fociz 2026
|
|
</div>
|
|
</div>
|
|
|
|
<script>
|
|
if (typeof lucide !== 'undefined') lucide.createIcons();
|
|
|
|
function checkPasswordStrength(val) {
|
|
var b1 = document.getElementById('bar1');
|
|
var b2 = document.getElementById('bar2');
|
|
var b3 = document.getElementById('bar3');
|
|
var txt = document.getElementById('strengthText');
|
|
if (!b1 || !b2 || !b3 || !txt) return;
|
|
|
|
b1.className = 'h-1 flex-1 rounded-full bg-slate-200 dark:bg-slate-800 transition-colors';
|
|
b2.className = 'h-1 flex-1 rounded-full bg-slate-200 dark:bg-slate-800 transition-colors';
|
|
b3.className = 'h-1 flex-1 rounded-full bg-slate-200 dark:bg-slate-800 transition-colors';
|
|
txt.textContent = '';
|
|
|
|
if (!val) return;
|
|
|
|
var score = 0;
|
|
if (val.length >= 12) score++;
|
|
if (/[A-Z]/.test(val) && /[a-z]/.test(val) && /[0-9]/.test(val)) score++;
|
|
if (/[^A-Za-z0-9]/.test(val) && val.length >= 12) score++;
|
|
|
|
if (score === 1) {
|
|
b1.className = 'h-1 flex-1 rounded-full bg-amber-500';
|
|
txt.textContent = 'Matig';
|
|
txt.className = 'text-[10px] text-amber-500 pl-1 font-medium';
|
|
} else if (score === 2) {
|
|
b1.className = 'h-1 flex-1 rounded-full bg-indigo-500';
|
|
b2.className = 'h-1 flex-1 rounded-full bg-indigo-500';
|
|
txt.textContent = 'Goed';
|
|
txt.className = 'text-[10px] text-indigo-400 pl-1 font-medium';
|
|
} else if (score >= 3) {
|
|
b1.className = 'h-1 flex-1 rounded-full bg-emerald-500';
|
|
b2.className = 'h-1 flex-1 rounded-full bg-emerald-500';
|
|
b3.className = 'h-1 flex-1 rounded-full bg-emerald-500';
|
|
txt.textContent = 'Sterk';
|
|
txt.className = 'text-[10px] text-emerald-400 pl-1 font-medium';
|
|
}
|
|
}
|
|
</script>
|
|
</body>
|
|
</html>
|
|
|