Diff for /loncom/interface/resetpw.pm between versions 1.18 and 1.25

version 1.18, 2009/09/30 21:47:07 version 1.25, 2010/11/09 16:40:21
Line 26 Line 26
 # http://www.lon-capa.org/  # http://www.lon-capa.org/
 #  #
 #  #
   
   =pod
   
   =head1 NAME
   
   Apache::resetpw: reset user password.
   
   =head1 SYNOPSIS
   
   Handles resetting of forgotten passwords.
   
   This is part of the LearningOnline Network with CAPA project
   described at http://www.lon-capa.org.
    
   =head1 OVERVIEW
   
   A user with an e-mail address associated with his/her LON-CAPA username
   can reset a forgotten password, using a link sent to the e-mail address
   if the authentication type for the account is "internal".
   
   =cut
   
 package Apache::resetpw;  package Apache::resetpw;
   
 use strict;  use strict;
Line 46  sub handler { Line 68  sub handler {
     my $contact_name = &mt('LON-CAPA helpdesk');      my $contact_name = &mt('LON-CAPA helpdesk');
     my $contact_email =  $r->dir_config('lonSupportEMail');      my $contact_email =  $r->dir_config('lonSupportEMail');
     my $server = $r->dir_config('lonHostID');      my $server = $r->dir_config('lonHostID');
     my $defdom = $r->dir_config('lonDefDomain');      my $defdom = &Apache::lonnet::default_login_domain();
     &Apache::lonacc::get_posted_cgi($r);      &Apache::lonacc::get_posted_cgi($r);
     &Apache::lonlocal::get_language_handle($r);      &Apache::lonlocal::get_language_handle($r);
     &Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'},['token']);      &Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'},['token']);
Line 56  sub handler { Line 78  sub handler {
     my $udom = $env{'form.udom'};      my $udom = $env{'form.udom'};
     my $token = $env{'form.token'};      my $token = $env{'form.token'};
     my $start_page =      my $start_page =
         &Apache::loncommon::start_page('Reset password','',          &Apache::loncommon::start_page('Reset password');
                                            {  
                                              'no_inline_link'   => 1,});  
     $r->print($start_page);      $r->print($start_page);
     $r->print('<h3>'.&mt('Reset forgotten LON-CAPA password').'</h3>');      $r->print('<h3>'.&mt('Reset forgotten LON-CAPA password').'</h3>');
     my $output;      my $output;
Line 131  sub get_uname { Line 151  sub get_uname {
                                          uemail => 'E-mail address in LON-CAPA',                                           uemail => 'E-mail address in LON-CAPA',
                                          proc => 'Proceed');                                           proc => 'Proceed');
   
     my $msg = &mt('If you use the same account for other campus services besides LON-CAPA, (e.g., e-mail, course registration, etc.), a separate centrally managed mechanism likely exists to reset a password.  However, if your account is used for just LON-CAPA access you will probably be able to reset a password from this page.');      my $msg = &mt('If you use the same account for other campus services besides LON-CAPA, (e.g., e-mail, course registration, etc.), a separate centrally managed mechanism likely exists to reset a password. However, if your account is used for just LON-CAPA access you will probably be able to reset a password from this page.');
     $msg .= '<br /><br />'.&mt('Three conditions must be met:')      $msg .= '<br /><br />'.&mt('Three conditions must be met:')
            .'<ul><li>'.&mt('An e-mail address must have previously been associated with your LON-CAPA username.').'</li>'             .'<ul><li>'.&mt('An e-mail address must have previously been associated with your LON-CAPA username.').'</li>'
            .'<li>'.&mt('You must be able to access e-mail sent to that address.').'</li>'             .'<li>'.&mt('You must be able to access e-mail sent to that address.').'</li>'
Line 196  sub send_mail { Line 216  sub send_mail {
     my $requestmail = "To: $email\n".      my $requestmail = "To: $email\n".
                       "From: $contact_name <$contact_email>\n".                        "From: $contact_name <$contact_email>\n".
                       "Subject: ".&mt('Your LON-CAPA account')."\n".                        "Subject: ".&mt('Your LON-CAPA account')."\n".
                         "Content-type: text/plain\;charset=UTF-8\n".
                       "\n\n".$mailmsg."\n\n".                        "\n\n".$mailmsg."\n\n".
                       &mt('[_1] LON-CAPA support team',$domdesc)."\n".                        &mt('[_1] LON-CAPA support team',$domdesc)."\n".
                       "$contact_email\n";                        "$contact_email\n";
Line 254  sub reset_passwd { Line 275  sub reset_passwd {
         my $reqtime = &Apache::lonlocal::locallocaltime($data{'time'});          my $reqtime = &Apache::lonlocal::locallocaltime($data{'time'});
         if ($now - $data{'time'} < 7200) {          if ($now - $data{'time'} < 7200) {
             if ($env{'form.action'} eq 'verify_and_change_pass') {              if ($env{'form.action'} eq 'verify_and_change_pass') {
                   unless (($env{'form.uname'} eq $data{'username'}) && ($env{'form.udom'} eq $data{'domain'}) && ($env{'form.email'} eq $data{'email'})) {
                       $msg = &generic_failure_msg($contact_name,$contact_email);
                       return $msg;
                   }
                 my $change_failed =                   my $change_failed = 
     &Apache::lonpreferences::verify_and_change_password($r,'reset_by_email',$token);      &Apache::lonpreferences::verify_and_change_password($r,'reset_by_email',$token);
                 if (!$change_failed) {                  if (!$change_failed) {
Line 271  sub reset_passwd { Line 296  sub reset_passwd {
                     }                      }
                     $msg .= '<br /><br />'                      $msg .= '<br /><br />'
                            .'<a href="/adm/login">'.&mt('Go to the login page').'</a>.';                             .'<a href="/adm/login">'.&mt('Go to the login page').'</a>.';
                   } elsif ($change_failed eq 'invalid_client') {
                       my $homeserver = &Apache::lonnet::homeserver($data{'username'},$data{'domain'});
                       if ($homeserver eq 'no_host') {
                           $msg .= &generic_failure_msg($contact_name,$contact_email);
                       } else {
                           my $protocol = $Apache::lonnet::protocol{$homeserver};
                           $protocol = 'http' if ($protocol ne 'https');
                           my $url = $protocol.'://'.&Apache::lonnet::hostname($homeserver).
                                     '/adm/resetpw';
                           my ($opentag,$closetag);
                           if ($url) {
                              $opentag = '<a href="'.$url.'">';
                              $closetag = '</a>';
                           }
                           $msg .= &mt('A problem occurred when attempting to reset the password for your account. Please try again from your [_1]home server[_2].',$opentag,$closetag);
                       }
                 } else {                  } else {
                     $msg .= &mt('A problem occurred when attempting to reset the password for your account. Please contact the [_1] - ([_2]) for assistance.'                      $msg .= &generic_failure_msg($contact_name,$contact_email);
                                ,$contact_name  
                                ,'<a href="mailto:'.$contact_email.'">'.$contact_email.'</a>');  
                 }                  }
             } else {              } else {
                 $r->print(&mt('The token included in an e-mail sent to you [_1] has been verified, so you may now proceed to reset the password for your LON-CAPA account.',$reqtime).'<br /><br />');                  $r->print(&mt('The token included in an e-mail sent to you [_1] has been verified, so you may now proceed to reset the password for your LON-CAPA account.',$reqtime).'<br /><br />');
Line 292  sub reset_passwd { Line 331  sub reset_passwd {
     return $msg;      return $msg;
 }  }
   
   sub generic_failure_msg {
       my ($contact_name,$contact_email) = @_;
       return &mt('A problem occurred when attempting to reset the password for your account. Please contact the [_1] - ([_2]) for assistance.',
                 $contact_name,'<a href="mailto:'.$contact_email.'">'.$contact_email.'</a>');
   }
   
 sub create_passwd {  sub create_passwd {
     my $passwd = '';      my $passwd = '';
     my @letts = ("a".."z");      my @letts = ("a".."z");

Removed from v.1.18  
changed lines
  Added in v.1.25


FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>