loncom/interface/resetpw.pm - diff

Return to resetpw.pm CVS log

Up to [LON-CAPA] / loncom / interface

Diff for /loncom/interface/resetpw.pm between versions 1.18 and 1.23.2.2.2.2

version 1.18, 2009/09/30 21:47:07	version 1.23.2.2.2.2, 2012/02/14 00:34:48
Line 26	Line 26
# http://www.lon-capa.org/	# http://www.lon-capa.org/
#	#
#	#

	=pod

	=head1 NAME

	Apache::resetpw: reset user password.

	=head1 SYNOPSIS

	Handles resetting of forgotten passwords.

	This is part of the LearningOnline Network with CAPA project
	described at http://www.lon-capa.org.

	=head1 OVERVIEW

	A user with an e-mail address associated with his/her LON-CAPA username
	can reset a forgotten password, using a link sent to the e-mail address
	if the authentication type for the account is "internal".

	=cut

package Apache::resetpw;	package Apache::resetpw;

use strict;	use strict;
Line 46 sub handler {	Line 68 sub handler {
my $contact_name = &mt('LON-CAPA helpdesk');	my $contact_name = &mt('LON-CAPA helpdesk');
my $contact_email = $r->dir_config('lonSupportEMail');	my $contact_email = $r->dir_config('lonSupportEMail');
my $server = $r->dir_config('lonHostID');	my $server = $r->dir_config('lonHostID');
my $defdom = $r->dir_config('lonDefDomain');	my $defdom = &Apache::lonnet::default_login_domain();
	my $handle = &Apache::lonnet::check_for_valid_session($r);
	my $lonidsdir=$r->dir_config('lonIDsDir');
	if ($handle ne '') {
	if ($handle=~/^publicuser\_/) {
	unlink($r->dir_config('lonIDsDir')."/$handle.id");
	} else {
	&Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle);
	}
	}
&Apache::lonacc::get_posted_cgi($r);	&Apache::lonacc::get_posted_cgi($r);
&Apache::lonlocal::get_language_handle($r);	&Apache::lonlocal::get_language_handle($r);
&Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'},['token']);	&Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'},['token',
	'uname','useremail','referrer']);

my @emailtypes = ('permanentemail','critnotification','notification');	my @emailtypes = ('permanentemail','critnotification','notification');
my $uname = &unescape($env{'form.uname'});	my $uname = $env{'form.uname'};
	my $useremail = $env{'form.useremail'};
my $udom = $env{'form.udom'};	my $udom = $env{'form.udom'};
my $token = $env{'form.token'};	my $token = $env{'form.token'};
my $start_page =	my $case_change;
&Apache::loncommon::start_page('Reset password','',	my $brcrum = [];
{	my $bread_crumbs_component = 'Forgotten Password';
'no_inline_link' => 1,});	if ($token) {
$r->print($start_page);	push (@{$brcrum},
	{href => '/adm/resetpw',
	text => 'Update Password'});

	$bread_crumbs_component = 'Reset Password';
	} else {
	push (@{$brcrum},
	{href => '/adm/resetpw',
	text => 'Account Information'});
	if ($uname && $udom) {
	push (@{$brcrum},
	{href => '/adm/resetpw',
	text => 'Result'});
	}
	}
	my $args = {bread_crumbs => $brcrum,
	bread_crumbs_component => $bread_crumbs_component,
	'no_inline_link' => 1};
	$r->print(&Apache::loncommon::start_page('Reset password','',$args));
$r->print('<h3>'.&mt('Reset forgotten LON-CAPA password').'</h3>');	$r->print('<h3>'.&mt('Reset forgotten LON-CAPA password').'</h3>');
my $output;	my $output;
if ($token) {	if ($token) {
$output = &reset_passwd($r,$token,$contact_name,$contact_email);	$output = &reset_passwd($r,$token,$contact_name,$contact_email);
} elsif ($uname && $udom) {	} elsif ($uname && $udom && ($env{'form.referrer'} ne 'createaccount')) {
my $domdesc = &Apache::lonnet::domain($udom,'description');	my $domdesc = &Apache::lonnet::domain($udom,'description');
	my $homeserver = &Apache::lonnet::homeserver($uname,$udom);
	if ($homeserver eq 'no_host') {
	my $lc_uname = lc($uname);
	if ($lc_uname ne $uname) {
	$homeserver = &Apache::lonnet::homeserver($lc_uname,$udom);
	unless ($homeserver eq 'no_host') {
	$uname = $lc_uname;
	$useremail = lc($env{'form.useremail'});
	$case_change = 1;
	}
	}
	}
my $authtype = &Apache::lonnet::queryauthenticate($uname,$udom);	my $authtype = &Apache::lonnet::queryauthenticate($uname,$udom);
if ($authtype =~ /^internal/) {	if ($authtype =~ /^internal/) {
my $useremail = $env{'form.useremail'};
if ($useremail !~ /^[^\@]+\@[^\@]+\.[^\@\.]+$/) {	if ($useremail !~ /^[^\@]+\@[^\@]+\.[^\@\.]+$/) {
$output = &invalid_state('baduseremail',$domdesc,	$output = &invalid_state('baduseremail',$domdesc,
$contact_name,$contact_email);	$contact_name,$contact_email);
Line 87 sub handler {	Line 149 sub handler {
}	}
foreach my $item (@items) {	foreach my $item (@items) {
if ($item =~ /^[^\@]+\@[^\@]+\.[^\@\.]+$/) {	if ($item =~ /^[^\@]+\@[^\@]+\.[^\@\.]+$/) {
unless(grep(/^\Q$item\E$/,@allemails)) {	if ($case_change) {
push(@allemails,$item);	my $lcitem = lc($item);
	unless(grep(/^\Q$lcitem\E$/,@allemails)) {
	push(@allemails,$lcitem);
	}
	} else {
	unless(grep(/^\Q$item\E$/,@allemails)) {
	push(@allemails,$item);
	}
}	}
}	}
}	}
Line 116 sub handler {	Line 185 sub handler {
$contact_name,$contact_email);	$contact_name,$contact_email);
}	}
} else {	} else {
$output = &get_uname($defdom);	$output = &get_uname($defdom,$uname,$useremail);
}	}
$r->print($output);	$r->print($output);
$r->print(&Apache::loncommon::end_page());	$r->print(&Apache::loncommon::end_page());
Line 124 sub handler {	Line 193 sub handler {
}	}

sub get_uname {	sub get_uname {
my ($defdom) = @_;	my ($defdom,$uname,$useremail) = @_;
my %lt = &Apache::lonlocal::texthash(	my %lt = &Apache::lonlocal::texthash(
unam => 'username',	unam => 'username',
udom => 'domain',	udom => 'domain',
uemail => 'E-mail address in LON-CAPA',	uemail => 'E-mail address in LON-CAPA',
proc => 'Proceed');	proc => 'Proceed');
	my %value;
my $msg = &mt('If you use the same account for other campus services besides LON-CAPA, (e.g., e-mail, course registration, etc.), a separate centrally managed mechanism likely exists to reset a password. However, if your account is used for just LON-CAPA access you will probably be able to reset a password from this page.');	if ($env{'form.referrer'} eq 'createaccount') {
$msg .= '<br /><br />'.&mt('Three conditions must be met:')	$value{'uname'} = $uname;
.'<ul><li>'.&mt('An e-mail address must have previously been associated with your LON-CAPA username.').'</li>'	$value{'useremail'} = $useremail;
.'<li>'.&mt('You must be able to access e-mail sent to that address.').'</li>'	}
.'<li>'.&mt('Your LON-CAPA account must be of a type for which LON-CAPA can reset a password.')	if ($env{'form.referrer'} eq 'createaccount') {
.'</ul>';	$value{'uname'} = $uname;
$msg .= qq\|	$value{'useremail'} = $useremail;
<form name="forgotpw" method="post">	}
<table>	my $msg = '<br />'.&mt('To be able to reset a forgotten password:')
<tr><td>	.'<ul><li>'.&mt('An e-mail address must have previously been associated with your [_1] username.','Mechanics Online').'</li>'
<tr><td align="left">LON-CAPA $lt{'unam'}: </td>	.'<li>'.&mt('You must be able to access e-mail sent to the e-mail address associated with your [_1] account.','Mechanics Online').'</li></ul><br />'
<td><input type="text" name="uname" size="15" /></td></tr>	.&mt('In most cases the [_1] username is the same as your e-mail address, in which case you will enter the same information twice.','Mechanics Online').'<br /><br />';
<tr><td align="left">LON-CAPA $lt{'udom'}: </td>	$msg .= '<form name="forgotpw" method="post" action="/adm/resetpw">'.
<td>\|;	&Apache::lonhtmlcommon::start_pick_box().
$msg .= &Apache::loncommon::select_dom_form($defdom,'udom');	&Apache::lonhtmlcommon::row_title('Mechanics Online '.$lt{'unam'}).
$msg .= qq\|</td></tr>	'<input type="text" name="uname" size="30" value="'.$value{'uname'}.'" />'.
<tr><td align="left">$lt{'uemail'}: </td>	'<input type="hidden" name="udom" value="'.$defdom.'" />'.
<td><input type="text" name="useremail" size="30" /></td></tr>	&Apache::lonhtmlcommon::row_closure(1).
<tr><td colspan="2" align="left"><br />	&Apache::lonhtmlcommon::row_title($lt{'uemail'}).
<input type="submit" value="$lt{'proc'}" /></td></tr>	'<input type="text" name="useremail" size="30" value="'.$value{'useremail'}.'" />'.
</table>	&Apache::lonhtmlcommon::end_pick_box().
</form>	'<br /><br /><input type="submit" name="resetter" value="'.$lt{'proc'}.'" /></form>'."\n";
\|;
return $msg;	return $msg;
}	}

Line 176 sub send_token {	Line 244 sub send_token {
my $esc_token = &escape($token);	my $esc_token = &escape($token);
my $showtime = &Apache::lonlocal::locallocaltime(time);	my $showtime = &Apache::lonlocal::locallocaltime(time);
my $reseturl = &Apache::lonnet::absolute_url().'/adm/resetpw?token='.$esc_token;	my $reseturl = &Apache::lonnet::absolute_url().'/adm/resetpw?token='.$esc_token;
my $mailmsg = &mt('A request was submitted on [_1] for reset of the password for your LON-CAPA account.',$showtime).' '.&mt('To complete this process please open a web browser and enter the following URL in the address/location box: [_1]',$reseturl);	my $mailmsg = &mt('A request was submitted on [_1] for reset of the password for your LON-CAPA account.',$showtime)." \n".&mt('To complete this process please open a web browser and enter the following URL in the address/location box: [_1]',"\n\n".$reseturl);
my $result = &send_mail($domdesc,$email,$mailmsg,$contact_name,	my $result = &send_mail($domdesc,$email,$mailmsg,$contact_name,
$contact_email);	$contact_email);
if ($result eq 'ok') {	if ($result eq 'ok') {
$msg .= &mt("An e-mail sent to the e-mail address associated with your LON-CAPA account includes the web address for the link you should use to complete the reset process.<br /><br />The link included in the message will be valid for the next <b>two</b> hours.");	$msg .= &mt('An e-mail sent to the e-mail address associated with your LON-CAPA account includes the web address for the link you should use to complete the reset process.').'<br /><br />'.&mt('The link included in the message will be valid for the next [_1]two[_2] hours.','<b>','</b>');
} else {	} else {
$msg .= &mt("An error occurred when sending a message to the e-mail address associated with your LON-CAPA account. Please contact the [_1] ([_2]) for assistance.",$contact_name,$contact_email);	$msg .= &mt("An error occurred when sending a message to the e-mail address associated with your LON-CAPA account. Please contact the [_1] ([_2]) for assistance.",$contact_name,$contact_email);
}	}
Line 196 sub send_mail {	Line 264 sub send_mail {
my $requestmail = "To: $email\n".	my $requestmail = "To: $email\n".
"From: $contact_name <$contact_email>\n".	"From: $contact_name <$contact_email>\n".
"Subject: ".&mt('Your LON-CAPA account')."\n".	"Subject: ".&mt('Your LON-CAPA account')."\n".
	"Content-type: text/plain\;charset=UTF-8\n".
"\n\n".$mailmsg."\n\n".	"\n\n".$mailmsg."\n\n".
&mt('[_1] LON-CAPA support team',$domdesc)."\n".	&mt('[_1] LON-CAPA support team',$domdesc)."\n".
"$contact_email\n";	"$contact_email\n";
Line 213 sub invalid_state {	Line 282 sub invalid_state {
my ($error,$domdesc,$contact_name,$contact_email) = @_;	my ($error,$domdesc,$contact_name,$contact_email) = @_;
my $msg;	my $msg;
if ($error eq 'invalid') {	if ($error eq 'invalid') {
$msg = &mt('The username you provided was not verified as a valid username in the LON-CAPA system for the [_1] domain.',$domdesc)	$msg = '<p class="LC_warning">'.&mt('The username you provided was not verified as a valid username in the LON-CAPA system for the [_1] domain.',$domdesc)
.' '.&mt('Please [_1]go back[_2] and try again.','<a href="javascript:history.go(-1)"><u>','</u></a>');	.'</p>'.&mt('Please [_1]go back[_2] and try again.','<a href="javascript:history.go(-1)"><u>','</u></a>');
} else {	} else {
if ($error eq 'baduseremail') {	if ($error eq 'baduseremail') {
$msg = &mt('The e-mail address you provided does not appear to be a valid address.');	$msg = &mt('The e-mail address you provided does not appear to be a valid address.');
Line 225 sub invalid_state {	Line 294 sub invalid_state {
} elsif ($error eq 'authentication') {	} elsif ($error eq 'authentication') {
$msg = &mt('The username you provided uses an authentication type which can not be reset directly via LON-CAPA.');	$msg = &mt('The username you provided uses an authentication type which can not be reset directly via LON-CAPA.');
}	}
	$msg = '<p class="LC_warning">'.$msg.'</p>';
if ($contact_email ne '') {	if ($contact_email ne '') {
my $escuri = &HTML::Entities::encode('/adm/resetpw','&<>"');	my $escuri = &HTML::Entities::encode('/adm/resetpw','&<>"');
$msg .= '<br /> '.&mt('You may wish to contact the [_1]LON-CAPA helpdesk[_2] for the [_3] domain.'	$msg .= '<br /> '.&mt('You may wish to contact the [_1]LON-CAPA helpdesk[_2] for the [_3] domain.'
Line 254 sub reset_passwd {	Line 324 sub reset_passwd {
my $reqtime = &Apache::lonlocal::locallocaltime($data{'time'});	my $reqtime = &Apache::lonlocal::locallocaltime($data{'time'});
if ($now - $data{'time'} < 7200) {	if ($now - $data{'time'} < 7200) {
if ($env{'form.action'} eq 'verify_and_change_pass') {	if ($env{'form.action'} eq 'verify_and_change_pass') {
	my $homeserver = &Apache::lonnet::homeserver($env{'form.uname'},$env{'form.udom'});
	if ($homeserver eq 'no_host') {
	my $lc_uname = lc($env{'form.uname'});
	if ($lc_uname ne $env{'form.uname'}) {
	$homeserver = &Apache::lonnet::homeserver($lc_uname,$env{'form.udom'});
	unless ($homeserver eq 'no_host') {
	if ($env{'form.uname'} eq $env{'form.email'}) {
	$env{'form.email'} = $lc_uname;
	}
	$env{'form.uname'} = $lc_uname;
	}
	}
	}
	unless (($env{'form.uname'} eq $data{'username'}) && ($env{'form.udom'} eq $data{'domain'}) && ($env{'form.email'} eq $data{'email'})) {
	$msg = &generic_failure_msg($contact_name,$contact_email);
	return $msg;
	}
my $change_failed =	my $change_failed =
&Apache::lonpreferences::verify_and_change_password($r,'reset_by_email',$token);	&Apache::lonpreferences::verify_and_change_password($r,'reset_by_email',$token);
if (!$change_failed) {	if (!$change_failed) {
Line 271 sub reset_passwd {	Line 358 sub reset_passwd {
}	}
$msg .= '<br /><br />'	$msg .= '<br /><br />'
.'<a href="/adm/login">'.&mt('Go to the login page').'</a>.';	.'<a href="/adm/login">'.&mt('Go to the login page').'</a>.';
	} elsif ($change_failed eq 'invalid_client') {
	my $homeserver = &Apache::lonnet::homeserver($data{'username'},$data{'domain'});
	if ($homeserver eq 'no_host') {
	$msg .= &generic_failure_msg($contact_name,$contact_email);
	} else {
	my $protocol = $Apache::lonnet::protocol{$homeserver};
	$protocol = 'http' if ($protocol ne 'https');
	my $url = $protocol.'://'.&Apache::lonnet::hostname($homeserver).
	'/adm/resetpw';
	my ($opentag,$closetag);
	if ($url) {
	$opentag = '<a href="'.$url.'">';
	$closetag = '</a>';
	}
	$msg .= &mt('A problem occurred when attempting to reset the password for your account. Please try again from your [_1]home server[_2].',$opentag,$closetag);
	}
} else {	} else {
$msg .= &mt('A problem occurred when attempting to reset the password for your account. Please contact the [_1] - ([_2]) for assistance.'	$msg .= &generic_failure_msg($contact_name,$contact_email);
,$contact_name
,'<a href="mailto:'.$contact_email.'">'.$contact_email.'</a>');
}	}
} else {	} else {
$r->print(&mt('The token included in an e-mail sent to you [_1] has been verified, so you may now proceed to reset the password for your LON-CAPA account.',$reqtime).'<br /><br />');	$r->print(&mt('The token included in an e-mail sent to you [_1] has been verified, so you may now proceed to reset the password for your LON-CAPA account.',$reqtime).'<br />'.
$r->print(&mt('Please enter the username and domain of the LON-CAPA account, and the associated e-mail address, for which you are setting a password. The new password must contain at least 7 characters.').' '.&mt('Your new password will be sent to the LON-CAPA server in an encrypted form.').'<br />');	'<p>'.&mt('Please enter the username and domain of the LON-CAPA account, and the associated e-mail address, for which you are setting a password.').'<br />'.
	&mt('In most cases the [_1] username is the same as your e-mail address, in which case you will enter the same information twice.','Mechanics Online').'</p>'.
	'<p>'.&mt('The new password must contain at least 7 characters.').' '.
	&mt('Your new password will be sent to the LON-CAPA server in an encrypted form.').'<br /></p>');
&Apache::lonpreferences::passwordchanger($r,'','reset_by_email',$token);	&Apache::lonpreferences::passwordchanger($r,'','reset_by_email',$token);
}	}
} else {	} else {
Line 292 sub reset_passwd {	Line 396 sub reset_passwd {
return $msg;	return $msg;
}	}

	sub generic_failure_msg {
	my ($contact_name,$contact_email) = @_;
	return &mt('A problem occurred when attempting to reset the password for your account. Please contact the [_1] - ([_2]) for assistance.',
	$contact_name,'<a href="mailto:'.$contact_email.'">'.$contact_email.'</a>');
	}

sub create_passwd {	sub create_passwd {
my $passwd = '';	my $passwd = '';
my @letts = ("a".."z");	my @letts = ("a".."z");

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>

Removed from v.1.18
changed lines
	Added in v.1.23.2.2.2.2