HEX
Server: Apache
System: Linux 185.122.168.184.host.secureserver.net 5.14.0-570.52.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Oct 15 06:39:08 EDT 2025 x86_64
User: barbeatleanalyti (1024)
PHP: 8.1.33
Disabled: NONE
Upload Files
File: /home/barbeatleanalyti/www/api.beatleanalytics.com/live/getEmailPassword.php
<?php
session_start();
// array for JSON response
$response = array();

// include db connect class
//require_once '../db_connect.php';
require_once 'db_connect.php';
$db = new DB_CONNECT(); 
$date = date('Y-m-d H:i:s');

if (isset($_GET["phoneno"],$_GET["emailid"])) {

	$phoneno = $_GET["phoneno"];
	$emailid = $_GET["emailid"];
	$result = mysql_query("SELECT * FROM beatle_userlogin WHERE db_phone LIKE '$phoneno'")or die(mysql_error());

	if (!empty($result)) {
        // check for empty result
		if (mysql_num_rows($result) > 0) {

			$result = mysql_fetch_array($result);
			$uname = $result["db_username"];
			$uid = $result["userId"];
			$uEmail = $result["db_email"];
			if(empty($uEmail)){
				mysql_query("UPDATE beatle_userlogin SET db_email = '$emailid' WHERE userId = '$uid' ")or die(mysql_error());	
			}
			
			
			$mUid = md5($uid);
			$code = random_string(6);
			
				$to = $emailid;
				$subject = "verification code is ".$code." to reset Beatle Analytics Survey app password";
				$message = message($uname,$code);
		
				// Always set content-type when sending HTML email
				$headers = "MIME-Version: 1.0" . "\r\n";
				$headers .= "Content-type:text/html;charset=UTF-8" . "\r\n";

				// More headers
				$headers .= 'From: <support@beatleanalytics.com>' . "\r\n";
				//$headers .= 'Cc: myboss@example.com' . "\r\n";
				$retval = mail($to,$subject,$message,$headers);

 				if( $retval == true ) {
				// echo "Message sent successfully";
					$resCode = mysql_query("INSERT INTO reset_password (uid,email,code,confirm,created_date,updated_date) VALUES('$uid','$emailid','$code','0','$date','0000-00-00 00:00:00')")or die(mysql_error());
					if ($resCode) {
						// successfully inserted into database
						$response["success"] = 1;
						$response["message"] = "email has been sent.";
						$response["uid"] = $uid;
						// echoing JSON response
						echo json_encode($response);
					} else {
						// failed to insert row
						$response["success"] = 0;
						$response["message"] = "Oops! try again.";
						// echoing JSON response
						echo json_encode($response);
					}	
				}else {
					// echo "Message could not be sent...";
					$response["success"] = 0;
					$response["message"] = "Email could not be sent";
					echo json_encode($response);
				} 
			}else{
				$result = mysql_query("SELECT * FROM beatle_userlogin WHERE db_userLoginName LIKE '$phoneno'")or die(mysql_error());
				if (!empty($result)) {
					// check for empty result
					if (mysql_num_rows($result) > 0) {

						$result = mysql_fetch_array($result);
						$uname = $result["db_username"];
						$uid = $result["userId"];
						$uEmail = $result["db_email"];
						if(empty($uEmail)){
							mysql_query("UPDATE beatle_userlogin SET db_email = '$emailid' WHERE userId = '$uid' ")or die(mysql_error());	
						}
						
						
						$mUid = md5($uid);
						$code = random_string(6);
						
							$to = $emailid;
							$subject = "verification code is ".$code." to reset Beatle Analytics Survey app password";
							$message = message($uname,$code);
					
							// Always set content-type when sending HTML email
							$headers = "MIME-Version: 1.0" . "\r\n";
							$headers .= "Content-type:text/html;charset=UTF-8" . "\r\n";

							// More headers
							$headers .= 'From: <support@beatleanalytics.com>' . "\r\n";
							//$headers .= 'Cc: myboss@example.com' . "\r\n";
							$retval = mail($to,$subject,$message,$headers);

							if( $retval == true ) {
							// echo "Message sent successfully";
								$resCode = mysql_query("INSERT INTO reset_password (uid,email,code,confirm,created_date,updated_date) VALUES('$uid','$emailid','$code','0','$date','0000-00-00 00:00:00')")or die(mysql_error());
								if ($resCode) {
									// successfully inserted into database
									$response["success"] = 1;
									$response["message"] = "email has been sent.";
									$response["uid"] = $uid;
									// echoing JSON response
									echo json_encode($response);
								} else {
									// failed to insert row
									$response["success"] = 0;
									$response["message"] = "Oops! try again.";
									// echoing JSON response
									echo json_encode($response);
								}	
							}else {
								// echo "Message could not be sent...";
								$response["success"] = 0;
								$response["message"] = "Email could not be sent";
								echo json_encode($response);
							} 
						}else {
							// no industry found
							$response["success"] = 0;
							$response["message"] = "No user found.";

							// echo no users JSON
							echo json_encode($response);
						}
					}
			}
	}	

///////////////////step 2///////////////////////////////
}elseif (isset($_GET["uid"],$_GET["code"],$_GET['password'])) {

		$sUid = $_GET["uid"];
		$sCode = $_GET["code"];
		$sPass = md5($_GET["password"]);

		$result = mysql_query("SELECT * FROM reset_password WHERE uid = '$sUid' and code = '$sCode' and confirm = '0' ")or die(mysql_error());
		if (!empty($result)) {
        // check for empty result
			if (mysql_num_rows($result) > 0) {

				$result = mysql_fetch_array($result);
				$code = $result["code"];
				$confirm = $result["confirm"];
				if($confirm == 0){
					//if($sCode == $code){

						$result = mysql_query("UPDATE beatle_userlogin SET db_password = '$sPass' WHERE userId = '$sUid' ")or die(mysql_error());
						$resCode = mysql_query("UPDATE reset_password SET confirm = '1', updated_date = '$date' WHERE uid = '$sUid' ")or die(mysql_error());

						if(!empty($result) && !empty($resCode)){
							$response["success"] = 1;
							$response["message"] = "password has been changed successfully.";
							echo json_encode($response);
						}else{
							$response["success"] = 0;
							$response["message"] = "process has failed. please try again";
							echo json_encode($response);
						}

					}else{
						$response["success"] = 0;
						$response["message"] = "you entered wrong code.";
						echo json_encode($response);
					}
				/*}else{
					$response["success"] = 0;
					$response["message"] = "you entered used code.";
					echo json_encode($response);
				}*/
			}else {
				$response["success"] = 0;
				$response["message"] = "you entered wrong code.";
				echo json_encode($response);
			}
		} 

	}else
		/* $response["success"] = 0;
		$response["message"] = "Oops something wrong.";

        // echo no users JSON
		echo json_encode($response); */
	


	
if(isset($_GET["phoneno"])){
		
	$phoneno = $_GET["phoneno"];
	$result = mysql_query("SELECT db_email FROM beatle_userlogin WHERE db_phone LIKE '$phoneno'")or die(mysql_error());

		if (!empty($result)) {
			// check for empty result
			if (mysql_num_rows($result) > 0) {

				$result = mysql_fetch_array($result);
				$uEmail = $result["db_email"];
				
				$response["success"] = 1;
				$response["email"] = $uEmail; 
				$response["message"] = "you have already registered email address.";
				echo json_encode($response);
			}else{
				$result = mysql_query("SELECT db_email FROM beatle_userlogin WHERE db_userLoginName LIKE '$phoneno'")or die(mysql_error());
					if (!empty($result)) {
						// check for empty result
						if (mysql_num_rows($result) > 0) {

							$result = mysql_fetch_array($result);
							$uEmail = $result["db_email"];
							
							$response["success"] = 1;
							$response["email"] = $uEmail;
							$response["message"] = "you have already registered email address.";
							echo json_encode($response);
						}else{
							$response["success"] = 0;
							$response["message"] = "enter your email address.";
							echo json_encode($response);
						}
					}
			}
		}
}else{
		$response["success"] = 0;
		$response["message"] = "Oops something wrong.";
        // echo no users JSON
		echo json_encode($response);
}
	
	//tokenid genarator 
	function random_string($length) {
		$key = '';
		$keys = array_merge(range(0, 9));

		for ($i = 0; $i < $length; $i++) {
			$key .= $keys[array_rand($keys)];
		}

		return $key;
	}
	
function message($uname,$code){
	return "
					<html>
					<head>
					<link rel='stylesheet' href='https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css'>
					<script src='https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js'></script>
					<script src='https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js'></script>
					<meta name='viewport' content='width=device-width, initial-scale=1.0' />
					<meta http-equiv='Content-Type' content='text/html; charset=UTF-8' />
					<style type='text/css' rel='stylesheet' media='all'>

  *:not(br):not(tr):not(html) {
					font-family: Arial, 'Helvetica Neue', Helvetica, sans-serif;
					box-sizing: border-box;
				}
				.email_templet a {
					color: #8e9092;
				}

				body {
					width: 100% !important;
					height: 100%;
					margin: 0;
					line-height: 1.4;
					background-color: #F2F4F6;
					color: #74787E;
					-webkit-text-size-adjust: none;
				}

				.email_templet  p,
				.email_templet  ul,
				.email_templet  ol,
				.email_templet  blockquote {
					line-height: 1.4;
					text-align: left;
				}


				.email_templet a img {
					border: none;
				}

				.email_templet td {
					word-break: break-word;
				}
				/* Layout ------------------------------ */

				.email-wrapper {
					width: 100%;
					margin: 0;
					padding: 0;
					-premailer-width: 100%;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
					background-color: #F2F4F6;
				}

				.email-content {
					width: 100%;
					margin: 0;
					padding: 0;
					-premailer-width: 100%;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
				}
				/* Masthead ----------------------- */
				.email-masthead {
					padding: 25px 0;
					text-align: center;
				}
				.email-masthead_logo {
					width: 94px;
				}
				.email-masthead_name {
					font-size: 27px;
					font-weight: bold;
					color: #bbbfc3;
					text-decoration: none;
					text-shadow: 0 1px 0 white;
				}
				/* Body ------------------------------ */
				.email-body {
					width: 100%;
					margin: 0;
					padding: 0;
					-premailer-width: 100%;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
					border-top: 1px solid #EDEFF2;
					border-bottom: 1px solid #EDEFF2;
					background-color: #FFFFFF;
				}

				.email-body_inner {
					width: 570px;
					margin: 0 auto;
					padding: 0;
					-premailer-width: 570px;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
					background-color: #FFFFFF;
				}

				.email_templet .email-footer {
					width: 570px;
					margin: 0 auto;
					padding: 0;
					-premailer-width: 570px;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
					text-align: center;
				}

				.email_templet .email-footer p {
					color: #AEAEAE;
				}

				.body-action {
					width: 100%;
					margin: 30px auto;
					padding: 0;
					-premailer-width: 100%;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
					text-align: center;
				}

				.body-sub {
					margin-top: 25px;
					padding-top: 25px;
					border-top: 1px solid #EDEFF2;
				}

				.email_templet .content-cell {
					padding: 35px;
				}

				.email_templet .preheader {
					display: none !important;
					visibility: hidden;
					mso-hide: all;
					font-size: 1px;
					line-height: 1px;
					max-height: 0;
					max-width: 0;
					opacity: 0;
					overflow: hidden;
				}
				/* Attribute list ------------------------------ */

				.email_templet .attributes {
					margin: 0 0 21px;
				}

				.email_templet .attributes_content {
					background-color: #EDEFF2;
					padding: 16px;
				}

				.email_templet .attributes_item {
					padding: 0;
				}
				/* Related Items ------------------------------ */

				.email_templet .related {
					width: 100%;
					margin: 0;
					padding: 25px 0 0 0;
					-premailer-width: 100%;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
				}

				.email_templet .related_item {
					padding: 10px 0;
					color: #74787E;
					font-size: 15px;
					line-height: 18px;
				}

				.email_templet .related_item-title {
					display: block;
					margin: .5em 0 0;
				}

				.email_templet .related_item-thumb {
					display: block;
					padding-bottom: 10px;
				}

				.email_templet .related_heading {
					border-top: 1px solid #EDEFF2;
					text-align: center;
					padding: 25px 0 10px;
				}
				/* Discount Code ------------------------------ */

				.email_templet .discount {
					width: 100%;
					margin: 0;
					padding: 24px;
					-premailer-width: 100%;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
					background-color: #EDEFF2;
					border: 2px dashed #9BA2AB;
				}

				.email_templet .discount_heading {
					text-align: center;
				}

				.email_templet .discount_body {
					text-align: center;
					font-size: 15px;
				}
				/* Social Icons ------------------------------ */

				.email_templet .social {
					width: auto;
				}

				.email_templet .social td {
					padding: 0;
					width: auto;
				}

				.email_templet .social_icon {
					height: 20px;
					margin: 0 8px 10px 8px;
					padding: 0;
				}
				/* Data table ------------------------------ */

				.email_templet .purchase {
					width: 100%;
					margin: 0;
					padding: 35px 0;
					-premailer-width: 100%;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
				}

				.email_templet .purchase_content {
					width: 100%;
					margin: 0;
					padding: 25px 0 0 0;
					-premailer-width: 100%;
					-premailer-cellpadding: 0;
					-premailer-cellspacing: 0;
				}

				.email_templet .purchase_item {
					padding: 10px 0;
					color: #74787E;
					font-size: 15px;
					line-height: 18px;
				}

				.email_templet .purchase_heading {
					padding-bottom: 8px;
					border-bottom: 1px solid #EDEFF2;
				}

				.email_templet .purchase_heading p {
					margin: 0;
					color: #9BA2AB;
					font-size: 12px;
				}

				.email_templet .purchase_footer {
					padding-top: 15px;
					border-top: 1px solid #EDEFF2;
				}

				.email_templet .purchase_total {
					margin: 0;
					text-align: right;
					font-weight: bold;
					color: #2F3133;
				}

				.email_templet .purchase_total--label {
					padding: 0 15px 0 0;
				}
				/* Utilities ------------------------------ */

				.email_templet .align-right {
					text-align: right;
				}

				.email_templet .align-left {
					text-align: left;
				}

				.email_templet .align-center {
					text-align: center;
				}
				/*Media Queries ------------------------------ */

				@media only screen and (max-width: 600px) {
					.email_templet .email-body_inner,
					.email_templet .email-footer {
						width: 100% !important;
					}
				}

				@media only screen and (max-width: 500px) {
					.email_templet .button {
						width: 100% !important;
					}
				}
				/* Buttons ------------------------------ */

				.email_templet .button {
					background-color: #3869D4;
					border-top: 10px solid #3869D4;
					border-right: 18px solid #3869D4;
					border-bottom: 10px solid #3869D4;
					border-left: 18px solid #3869D4;
					display: inline-block;
					color: #FFF;
					text-decoration: none;
					border-radius: 3px;
					box-shadow: 0 2px 3px rgba(0, 0, 0, 0.16);
					-webkit-text-size-adjust: none;
				}

				.email_templet .button--green {
					background-color: #22BC66;
					border-top: 10px solid #22BC66;
					border-right: 18px solid #22BC66;
					border-bottom: 10px solid #22BC66;
					border-left: 18px solid #22BC66;
				}

				.email_templet .button--red {
					background-color: #FF6136;
					border-top: 10px solid #FF6136;
					border-right: 18px solid #FF6136;
					border-bottom: 10px solid #FF6136;
					border-left: 18px solid #FF6136;
				}
				/* Type ------------------------------ */

				.email_templet h1 {
					margin-top: 0;
					color: #2F3133;
					font-size: 19px;
					font-weight: bold;
					text-align: left;
				}

				.email_templet h2 {
					margin-top: 0;
					color: #2F3133;
					font-size: 16px;
					font-weight: bold;
					text-align: left;
				}

				.email_templet h3 {
					margin-top: 0;
					color: #2F3133;
					font-size: 14px;
					font-weight: bold;
					text-align: left;
				}

				.email_templet p {
					margin-top: 0;
					color: #74787E;
					font-size: 16px;
					line-height: 1.5em;
					text-align: left;
				}

				.email_templet p.sub {
					font-size: 12px;
				}

				.email_templet p.center {
					text-align: center;
				}
				</style>
				</head>
				<body class='email_templet'>
				<table class='email-wrapper' width='100%' cellpadding='0' cellspacing='0'>
				<tr>
				<td align='center'>
				<table class='email-content' width='100%' cellpadding='0' cellspacing='0'>
				<tr>
				<td class='email-masthead'>
				<a href='https://example.com' class='email-masthead_name'>
				Beatle Analytics
				</a>
				</td>
				</tr>
				<!-- Email Body -->
				<tr>
				<td class='email-body' width='100%' cellpadding='0' cellspacing='0'>
				<table class='email-body_inner' align='center' width='570' cellpadding='0' cellspacing='0'>
				<!-- Body content -->
				<tr>
				<td class='content-cell'>
				<h1>Hi ".$uname.",</h1>
				<p>You recently requested to reset your password for your BeatleAnalytics Survey app account and your verification code is <strong>".$code."</strong>. Use the button below to reset it. <strong>This password reset is only valid for the next 24 hours.</strong></p>

				<p>If you did not request a password reset, please ignore this email or <a href='http://beatleanalytics.com/#contact'>contact support</a> if you have questions.</p>
				<p>Thanks,
				<br>The BeatleAnalytics Team</p>
				<!-- Sub copy -->

				</td>
				</tr>
				</table>
				</td>
				</tr>
				<tr>
				<td>
				<table class='email-footer' align='center' width='570' cellpadding='0' cellspacing='0'>
				<tr>
				<td class='content-cell' align='center'>
				<p class='sub align-center'>&copy; 2018. All rights reserved.</p>
				<p class='sub align-center'>
				beatleanalytics
				<br>46, Angel Arcade,
				Opp Kalupur Com Bank,
				Sola Road,
				<br>Ghatlodia,
				Ahmedabad-380061
				</p>
				</td>
				</tr>
				</table>
				</td>
				</tr>
				</table>
				</td>
				</tr>
				</table>
				</body>
				</html>
				";
}
	?>