XZY_403

<?php
session_start();
require_once("../config.php");
include("function/sql_injection.php");

<!DOCTYPE html>
<html class="no-js" lang="en"><head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
  <title>thahryamal - Forgot Password</title>

<link rel="stylesheet" href="css/font-awesome.css">

</head>

</div>

</header>

<div class="account-wrapper">
  
<?php
if(isset($_POST['submit']))
{
	$username = $_POST['username'];
	
	$chk_username = check_injection_validate($username);
	$chk_password = check_injection_validate($password);
	if($chk_username == 1 and $chk_password == 1)
	{
		$query=mysql_query("select * from admin where username='$username' ");
		$num = mysql_num_rows($query);
		if($num > 0)
		{
			while($rrr = mysql_fetch_array($query))
			{
				$password = $rrr['password'];
				
				$to = 'info@thahryamal.com';
				$subject = $subject;
				$message = 'Your Password is : '.$password;
				
				include '../library.php'; 
				include "../classes/class.phpmailer.php"; 
				$email = $to;
				$mail	= new PHPMailer; 
				$mail->IsSMTP(); 
				$mail->Host = SMTP_HOST; 
				$mail->Port = SMTP_PORT; 
				$mail->SMTPAuth = true; 
				$mail->Username = SMTP_UNAME; 
				$mail->Password = SMTP_PWORD; 
				$mail->AddReplyTo($email, $name); 
				$mail->SetFrom("mail@thahryamal.com", "thahryamal"); 
				$mail->Subject = "Forgot Password - thahryamal.com";
				$mail->AddAddress($to, "thahryamal"); 
				$mail->MsgHTML($message); 
				$send = $mail->Send();

}
		}
		else
		{ ?>
			<div class="has-error" style="border-color:#FF0000;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,.075),0 0 6px #FF0000;box-shadow:inset 0 1px 1px rgba(0,0,0,.075),0 0 6px #FF0000; color:#FF0000; padding:5px 0; background-color:#FED5CD; font-weight:bold;">
  Error : Invalid Username !</div><br>
<?php	}
	}	
}

<h3>Welcome to thahryamal.</h3>

<div class="form-group">
          <label for="login-username" class="placeholder-hidden">Username</label>
          <input class="form-control" id="login-username" name="username" placeholder="Username" tabindex="1" type="text">
        </div>

<div class="form-group">
          <button type="submit" name="submit" class="btn btn-primary btn-block btn-lg" tabindex="4">
            Submit 
          </button>
        </div>

</form>

</div>

</div>

</body></html>

XZY_403