feat: Add comprehensive documentation suite and reorganize project structure
- Created complete documentation in docs/ directory - Added PROJECT_OVERVIEW.md with feature highlights and getting started guide - Added ARCHITECTURE.md with system design and technical details - Added SECURITY.md with comprehensive security implementation guide - Added DEVELOPMENT.md with development workflows and best practices - Added DEPLOYMENT.md with production deployment instructions - Added API.md with complete REST API documentation - Added CONTRIBUTING.md with contribution guidelines - Added CHANGELOG.md with version history and migration notes - Reorganized all documentation files into docs/ directory for better organization - Updated README.md with proper documentation links and quick navigation - Enhanced project structure with professional documentation standards
This commit is contained in:
SamiAhmed7777
127
f_core/f_classes/class.recovery.php
Normal file
127
f_core/f_classes/class.recovery.php
Normal file
@@ -0,0 +1,127 @@
|
||||
<?php
|
||||
/*******************************************************************************************************************
|
||||
| Software Name : EasyStream
|
||||
| Software Description : High End YouTube Clone Script with Videos, Shorts, Streams, Images, Audio, Documents, Blogs
|
||||
| Software Author : (c) Sami Ahmed
|
||||
|*******************************************************************************************************************
|
||||
|
|
||||
|*******************************************************************************************************************
|
||||
| This source file is subject to the EasyStream Proprietary License Agreement.
|
||||
|
|
||||
| By using this software, you acknowledge having read this Agreement and agree to be bound thereby.
|
||||
|*******************************************************************************************************************
|
||||
| Copyright (c) 2025 Sami Ahmed. All rights reserved.
|
||||
|*******************************************************************************************************************/
|
||||
|
||||
defined('_ISVALID') or header('Location: /error');
|
||||
|
||||
class VRecovery
|
||||
{
|
||||
/* validate password recovery */
|
||||
public function processForm($section)
|
||||
{
|
||||
global $language, $class_filter, $class_database;
|
||||
|
||||
$cfg = $section == 'frontend' ? $class_database->getConfigurations('signup_min_password,signup_max_password') : null;
|
||||
$allowedFields = array('recovery_forgot_new_password', 'recovery_forgot_retype_password');
|
||||
$requiredFields = $allowedFields;
|
||||
$new_pass = $_POST['recovery_forgot_new_password'] != '' ? $_POST['recovery_forgot_new_password'] : null;
|
||||
$confirm_pass = $_POST['recovery_forgot_retype_password'] != '' ? $_POST['recovery_forgot_retype_password'] : null;
|
||||
|
||||
$error_message = ($error_message == '') ? VForm::checkEmptyFields($allowedFields, $requiredFields) : $error_message;
|
||||
$error_message = ($section == 'frontend' and (strlen($new_pass) < $cfg['signup_min_password'] or strlen($new_pass) > $cfg['signup_max_password'] or strlen($confirm_pass) < $cfg['signup_min_password'] or strlen($confirm_pass) > $cfg['signup_max_password']) and $error_message == '') ? $language['notif.error.invalid.pass'] : $error_message;
|
||||
$error_message = (md5($new_pass) != md5($confirm_pass) and $error_message == '') ? $language['notif.error.pass.nomatch'] : $error_message;
|
||||
|
||||
return $error_message;
|
||||
}
|
||||
/* reset password */
|
||||
public function doPasswordReset($section)
|
||||
{
|
||||
global $db, $class_filter;
|
||||
|
||||
$hasher = new VPasswordHash(8, false);
|
||||
$enc_pass = $class_filter->clr_str($hasher->HashPassword($_POST['recovery_forgot_new_password']));
|
||||
|
||||
switch ($section) {
|
||||
case 'frontend':
|
||||
$user_id = intval(self::getRecoveryID($_GET['s']));
|
||||
$q = $db->execute(sprintf("UPDATE `db_accountuser` SET `usr_password`='%s' WHERE `usr_id`='%s' LIMIT 1;", $enc_pass, $user_id));
|
||||
break;
|
||||
case 'backend':
|
||||
$q = $db->execute(sprintf("UPDATE `db_settings` SET `cfg_data`='%s' WHERE `cfg_name`='%s' LIMIT 1;", $enc_pass, 'backend_password'));
|
||||
}
|
||||
if ($db->Affected_Rows() > 0) {
|
||||
$update_recovery = self::updateRecoveryUsage();
|
||||
return true;
|
||||
} else {
|
||||
return false;
|
||||
}
|
||||
|
||||
}
|
||||
/* validation of recovery link */
|
||||
public function validCheck($section, $type = 'recovery')
|
||||
{
|
||||
global $cfg, $class_database, $language;
|
||||
$get = $_GET['s'] != '' ? $_GET['s'] : ($_GET['sid'] != '' ? $_GET['sid'] : null);
|
||||
$h = $_GET['s'] != '' ? $cfg['recovery_link_lifetime'] : ($_GET['sid'] != '' ? 24 : 1);
|
||||
|
||||
if (self::getRecoveryID($get, $type) == '') {return 'tpl_error_max';}
|
||||
|
||||
$valid_time = strtotime('- ' . $h . ' hours');
|
||||
$match_time = strtotime(self::getRecoveryCDate());
|
||||
|
||||
if ($match_time < $valid_time or self::getRecoveryStatus($get) == 0) {
|
||||
return 'tpl_error_max';
|
||||
} else {
|
||||
return '';
|
||||
}
|
||||
|
||||
}
|
||||
/* mark recovery as used */
|
||||
public function updateRecoveryUsage($type = 'recovery')
|
||||
{
|
||||
global $db, $class_filter;
|
||||
|
||||
$get = $_GET['s'] != '' ? $_GET['s'] : ($_GET['sid'] != '' ? $_GET['sid'] : null);
|
||||
$db->execute(sprintf("UPDATE `db_usercodes` SET `code_used`=`code_used`+1, `%s`='%s' WHERE `type`='%s' AND `%s`='%s' LIMIT 1;", 'use_date', date("Y-m-d H:i:s"), $type, 'pwd_id', $class_filter->clr_str($get)));
|
||||
}
|
||||
/* recovery status */
|
||||
public function getRecoveryStatus($reset_id)
|
||||
{
|
||||
global $class_database, $class_filter;
|
||||
return $class_database->singleFieldValue('db_usercodes', 'code_active', 'pwd_id', $class_filter->clr_str($reset_id));
|
||||
}
|
||||
/* recovery create date */
|
||||
public function getRecoveryCDate()
|
||||
{
|
||||
global $class_database, $class_filter;
|
||||
$get = $_GET['s'] != '' ? $_GET['s'] : ($_GET['sid'] != '' ? $_GET['sid'] : null);
|
||||
return $class_database->singleFieldValue('db_usercodes', 'create_date', 'pwd_id', $class_filter->clr_str($get));
|
||||
}
|
||||
/* get user id of recovery */
|
||||
public function getRecoveryID($reset_id, $type = 'recovery')
|
||||
{
|
||||
global $class_filter, $db;
|
||||
$q = $db->execute(sprintf("SELECT `usr_id` FROM `db_usercodes` WHERE `pwd_id`='%s' AND `type`='%s' LIMIT 1;", $class_filter->clr_str($reset_id), $type));
|
||||
return $q->fields['usr_id'];
|
||||
}
|
||||
/* log recovery usage */
|
||||
public function addRecoveryEntry($user_id, $reset_id, $type = '', $addTo = '')
|
||||
{
|
||||
global $db, $class_database, $cfg, $class_filter;
|
||||
|
||||
$type = ($type == 'email_verification') ? 'verification' : (($type == 'invite_user' or $type == 'invite_contact') ? $type : 'recovery');
|
||||
$lg = ($type == 'invite_user' or $type == 'invite_contact') ? 'log_frinvite' : 'log_precovery';
|
||||
|
||||
$q = $db->execute(sprintf("UPDATE `db_usercodes` SET `%s`='%s' WHERE `type`='%s' AND `%s`='%s' %s;", 'code_active', '0', $type, 'usr_id', intval($user_id), (($type == 'invite_user' or $type == 'invite_contact') ? " AND `pwd_id`='" . $reset_id . "'" : null)));
|
||||
$q = $db->execute(sprintf("DELETE FROM `db_usercodes` WHERE `type`='%s' AND `pwd_id`='%s' AND `code_active`='0';", $type, $reset_id));
|
||||
$i = array("type" => $type, "usr_id" => intval($user_id), "pwd_id" => $reset_id, "create_date" => date("Y-m-d H:i:s"));
|
||||
$q = $class_database->doInsert('db_usercodes', $i);
|
||||
$to = 0;
|
||||
if ($type == 'invite_user') {
|
||||
$to = (int) $addTo;
|
||||
$addTo = $class_database->singleFieldValue('db_accountuser', 'usr_user', 'usr_id', $to);
|
||||
}
|
||||
$log = ($cfg['activity_logging'] == 1 and $action = new VActivity($user_id, $to)) ? $action->addTo($lg, $addTo) : null;
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user