<?php
// Start the session and use the custom session name
require('security.php');
error_reporting(E_ALL);
ini_set('display_errors', 1);

// Check if the user is logged in by verifying session variables
if (isset($_SESSION['user_id'])) {
    // If not logged in, redirect to the login page (index.php)
    header('Location: index.php');
    exit();
}

// Include your database connection
require('connection.inc.php');

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    include_once 'csrf.php';
    if (!validate_csrf_token($_POST['csrf_token'])) {
        die('Invalid CSRF token!');
    }
    $email = $_POST['email'];
    $email = mysqli_real_escape_string($conn, $email);

    // Check if email exists in the database
    $sql = "SELECT * FROM users WHERE email = '$email' AND deleted_at IS NULL AND role_id != 3 LIMIT 1 ";
    $result = $conn->query($sql);

    if ($result->num_rows == 1) {
        // Generate OTP
        $otp = rand(100000, 999999); // Generate a 6-digit OTP

        // Store OTP in session for verification later
        $_SESSION['otp'] = $otp;
        $_SESSION['otp_email'] = $email; // Store email for OTP sending

// Email subject and message
$subject = "Your One-Time Password (OTP) for Secure Access";

$message = "
    <html>
    <head>
        <title>Your OTP Code</title>
    </head>
    <body style='font-family: Arial, sans-serif;'>
        <div style='max-width: 600px; margin: auto; padding: 20px; border: 1px solid #ddd; border-radius: 8px;'>
            <h2 style='text-align: center; color: #333;'>Hare Krishna Infratech</h2>
            <p style='color: #555;'>
                Dear Valued User,
            </p>
            <p style='color: #555;'>
                We have received a request to access your account. For security purposes, please use the One-Time Password (OTP) below to proceed:
            </p>
            <p style='text-align: center; font-size: 24px; font-weight: bold; color: #333;'>
                $otp
            </p>
            <p style='color: #555;'>
                This OTP is valid for 10 minutes. If you did not make this request, please ignore this email or contact our support team immediately.
            </p>
            <p style='color: #555;'>
                Thank you,<br>
                The Hare Krishna Infratech Team
            </p>
            <div style='text-align: center; margin-top: 20px;'>
                <a href='https://harekrishnainfratech.com' style='display: inline-block; padding: 10px 20px; background-color: #007BFF; color: white; text-decoration: none; border-radius: 4px;'>Visit Our Website</a>
            </div>
        </div>
    </body>
    </html>
";

// Additional headers
$headers = "From: Hare Krishna Infratech <info@harekrishnainfratech.com>\r\n" .
           "Reply-To: info@harekrishnainfratech.com\r\n" .
           "MIME-Version: 1.0\r\n" .
           "Content-Type: text/html; charset=UTF-8\r\n";

        unset($_SESSION['csrf_token']);
        // Send OTP to user's email
        if (mail($email, $subject, $message, $headers)) {
            echo "
                <script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script>
                <script>
                 document.addEventListener('DOMContentLoaded', function() {
                    Swal.fire({
                        icon: 'success',
                        title: 'Success',
                        text: 'OTP has been sent to your email.',
                    }).then(() => {
                        window.location.href = 'verify_otp.php';
                    });
                    });
                </script>
            ";
        } else {
            echo "
                <script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script>
                <script>
                 document.addEventListener('DOMContentLoaded', function() {
                    Swal.fire({
                        icon: 'error',
                        title: 'Error',
                        text: 'Failed to send the OTP. Please try again.',
                    });
                    });
                </script>
            ";
        }
    } else {
        echo "
            <script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script>
            <script>
             document.addEventListener('DOMContentLoaded', function() {
                Swal.fire({
                    icon: 'error',
                    title: 'Error',
                    text: 'No user found with this email address.',
                });
                });
            </script>
        ";
    }
}

$conn->close();
?>
<!DOCTYPE html>
<html lang="zxx">


<!-- Mirrored from demo.dashboardpack.com/user-management-html/forgot_pass.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 02 Dec 2024 05:54:53 GMT -->
<head>
    <!-- Required meta tags -->
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
    <title>Management Admin</title>

    <link rel="icon" href="img/mini_logo.png" type="image/png">
    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="css/bootstrap1.min.css" />
    <!-- themefy CSS -->
    <link rel="stylesheet" href="vendors/themefy_icon/themify-icons.css" />
    <link rel="stylesheet" href="vendors/font_awesome/css/all.min.css" />
    <!-- datatable CSS -->
     <!-- scrollabe  -->
     <link rel="stylesheet" href="vendors/scroll/scrollable.css" />

    <!-- menu css  -->
    <link rel="stylesheet" href="css/metisMenu.css">
    <!-- style CSS -->
    <link rel="stylesheet" href="css/style1.css" />
    <link rel="stylesheet" href="css/colors/default.css" id="colorSkinCSS">
    <style>
        .main_content{
            padding-left: 0px !important;
        }
        .footer_part{
            padding-left: 0px !important;
        }
    </style>
</head>
<body class="crm_body_bg">

<section class="main_content dashboard_part large_header_bg">
    <div class="main_content_iner ">
        <div class="container-fluid p-0">
            <div class="row justify-content-center">
              <div class="col-12">
                <div class="dashboard_header mb_50">
                    <div class="row">
                        <div class="col-lg-6">
                            <div class="dashboard_header_title">
                                <h3>Dashboard</h3>
                            </div>
                        </div>
                        <div class="col-lg-6">
                            <div class="dashboard_breadcam text-end">
                                <p><a href="index.php">Dashboard</a> <i class="fas fa-caret-right"></i> Forgot Password</p>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
                <div class="col-lg-12">
                    <div class="white_box mb_30">
                        <div class="row justify-content-center">
                            <div class="col-lg-6">
                                <!-- sign_in  -->
                                <div class="modal-content cs_modal">
                                    <div class="modal-header theme_bg_1">
                                        <h5 class="modal-title text_white">Forget Password</h5>
                                    </div>
                                    <div class="modal-body">
                                        <form method="post">
                                            <?php include_once 'csrf.php'; ?>
                                            <input type="hidden" name="csrf_token" value="<?php echo generate_csrf_token(); ?>">
                                            <div class="">
                                                <input type="email" name="email" id="email" class="form-control" placeholder="Enter your email" required>
                                            </div>
                                            <button type="subit" class="btn_1 full_width text-center">SEND</button>
                                        </form>
                                    </div>
                                </div>
                            </div>
                        </div>
                        
                    </div>
                </div>
            </div>
        </div>
    </div>

<!-- footer part -->
<?php require('footer.inc.php'); ?>
</section>
<!-- main content part end -->

  <!-- footer  -->
  <!-- jquery slim -->
  <script src="js/jquery1-3.4.1.min.js"></script>
  <!-- popper js -->
  <script src="js/popper1.min.js"></script>
  <!-- bootstarp js -->
  <script src="js/bootstrap1.min.js"></script>
  <!-- sidebar menu  -->
  <script src="js/metisMenu.js"></script>
  
  <!-- scrollabe  -->
  <script src="vendors/scroll/perfect-scrollbar.min.js"></script>
  <script src="vendors/scroll/scrollable-custom.js"></script>
  
  <!-- custom js -->
  <script src="js/custom.js"></script>
  </body>
  
<!-- Mirrored from demo.dashboardpack.com/user-management-html/forgot_pass.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 02 Dec 2024 05:54:53 GMT -->
</html>