query("select * from user where email = '$email' and hash = '$key' and isactive = 1");
#Prüfen ob User existiert und neues passwort angefordert hat
if (mysqli_num_rows($result_verify_email) == 1) {
if(isset($_POST['Password_reset'])){
$PW = $_POST['password'];
$PW2 = $_POST['password_confirm'];
#Neuen Hash generieren um erneutes password setzen zu verbieten
$hash = md5(uniqid(rand(), true));
#Prüfen ob passwörter übereinstimmen
if($PW==$PW2){
#Password verschlüsseln
$StorePassword = password_hash("$PW", PASSWORD_BCRYPT, array('cost' => 10));
#Password und Hash in Datenbank schreiben
$change = $con->query("update user set Password='{$StorePassword}' where Email like '{$email}' and hash='{$key}'");
$change_key = $con->query("update user set hash='{$hash}' where Email like '{$email}'");
print "";
#Ausgaben bei aufgetrettenen Fehlern
}else{
print "";
}
}
}else{
print "";
}
}else {
print "";
}
#Header und menü einbinden
$webpagetitle = "Passwort zurücksetzen";
include "Includes/Header.php";
include "Includes/Menu.php";
#html Content ausgeben
?>