Resend confirmation email to have a new email sent to you.", 'directorist' ), esc_url( $send_confirm_mail_url ) ), [ 'a' => [ 'href' => [] ], 'br' => [] ] );
// start recovery stuff
if ( is_email( $user_email ) && ! empty( $key ) ) {
$user = get_user_by( 'email', $user_email );
if ( ! $user ) { ?>
$is_valid_password_reset_key = check_password_reset_key( $key, $user->user_login );
if ( is_wp_error( $is_valid_password_reset_key ) ) {
?>
} else {
if ( ! empty( $_POST['directorist_reset_password'] ) && directorist_verify_nonce( 'directorist-reset-password-nonce', 'reset_password' ) ) :
// --- CUSTOM TURNSTILE CHECK FOR RESET PASSWORD ---
$cf_token = isset($_POST['cf-turnstile-response']) ? $_POST['cf-turnstile-response'] : '';
$cf_verify = wp_remote_post('https://challenges.cloudflare.com/turnstile/v0/siteverify', [
'body' => [
'secret' => 'YOUR_SECRET_KEY_HERE', // <--- PASTE SECRET KEY HERE
'response' => $cf_token,
'remoteip' => $_SERVER['REMOTE_ADDR']
]
]);
$cf_result = json_decode(wp_remote_retrieve_body($cf_verify));
if (!$cf_result->success) {
echo '
Security check failed. Please try again.
';
} else {
// --- END CUSTOM CHECK ---
// Ignore password sanitization
$password_1 = isset( $_POST['password_1'] ) ? $_POST['password_1'] : ''; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
$password_2 = isset( $_POST['password_2'] ) ? $_POST['password_2'] : ''; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
if ( empty( $password_1 ) || empty( $password_2 ) ) : ?>
wp_set_password( $password_2, $user->ID );
// Since password reset is handled through email, so we can consider it verified!
delete_user_meta( $user->ID, 'directorist_user_email_unverified' );
?>
click here to login .', 'directorist' ),
} // End Turnstile else
endif;
if ( ! empty( $_GET['password_reset'] ) ) {
include ATBDP_DIR . 'templates/account/password-reset-form.php';
}
if ( ! empty( $_GET['confirm_mail'] ) ) {
/**
* Verify user and send registration confirmation mail
*/
delete_user_meta( $user->ID, 'directorist_user_email_unverified' );
ATBDP()->email->custom_wp_new_user_notification_email( $user->ID );
?>
sprintf(
__( 'Email verification successful. Please
click here to login .', 'directorist' ),
esc_url( ATBDP_Permalink::get_signin_signup_page_link() )
), [ 'a' => [ 'href' => [] ] ]
); ?>
}
}
}
} else { ?>
//stuff to recover password start
$error = '';
$success = '';
// check if we're in reset form
if ( isset( $_POST['action'] ) && 'reset' === $_POST['action'] && directorist_verify_nonce() ) :
echo '';
$email = isset( $_POST['user_login'] ) ? sanitize_email( wp_unslash( $_POST['user_login'] ) ) : '';
if ( empty( $email ) ) {
$error = __( 'Email address cannot be empty.', 'directorist' );
} else if ( ! is_email( $email ) ) {
$error = __( 'Invalid e-mail address.', 'directorist' );
} else if ( ! email_exists( $email ) ) {
$error = __( 'There is no user registered with that email address.', 'directorist' );
} else {
$user = get_user_by( 'email', $email );
/* translators: %s: site name */
$subject = esc_html( sprintf( __( '[%s] Reset Your Password', 'directorist' ), get_option( 'blogname', 'display' ) ) );
$title = esc_html__( 'Password Reset Request', 'directorist' );
$site_name = wp_specialchars_decode( get_option( 'blogname' ), ENT_QUOTES );
/* translators: %1$s: site name, %1$s: user name, %3$s: password reset link */
$message = sprintf(
__(
'Someone has requested a password reset for the following account:
Site name: %1$s
User name: %2$s
To reset your password, please click on the
Reset Password .
If this was a mistake, just ignore this email and nothing will happen.'
),
$site_name,
$user->user_login,
esc_url( directorist_password_reset_url( $user, true ) )
);
$message = wp_kses(
$message, [
'br' => [],
'strong' => [],
'a' => [
'href' => []
]
]
);
$message = atbdp_email_html( $title, nl2br( $message ) );
$headers[] = 'Content-Type: text/html; charset=UTF-8';
$mail = wp_mail( $email, $subject, $message, $headers );
if ( $mail ) {
$success = __( 'A password reset email has been sent to the email address on file for your account, but may take several minutes to show up in your inbox.', 'directorist' );
echo '';
} else {
$error = __( 'Something went wrong, unable to send the password reset email. If the issue persists please contact with the site administrator.', 'directorist' );
}
}
if ( ! empty( $error ) ) {
echo '
' . wp_kses( sprintf( __( 'ERROR: %s', 'directorist' ), esc_html( $error ) ), [ 'strong' => [] ] ) . '
';
}
if ( ! empty( $success ) ) {
echo '
' . esc_html( $success ) . '
';
}
endif; ?>
