WooYun.org

public function getpassword( )
				{
								$username = $_POST['username'];
								$mail = $_POST['email'];
								$us = new Model( "m_member" );
								$d_us = $us->where( "username='".$username."'" )->find( );
								if ( empty( $d_us ) )
								{
												$this->assign( "waitSecond", 3 );
												$this->assign( "msgTitle", "错误！" );
												$this->assign( "jumpUrl", "__APP__/home/login/getpass" );
												$this->error( "用户名不存在" );
												exit( );
								}
								if ( $d_us['email'] != $mail )
								{
												$this->assign( "waitSecond", 3 );
												$this->assign( "msgTitle", "错误！" );
												$this->assign( "jumpUrl", "__APP__/home/login/getpass" );
												$this->error( "认证邮箱不正确！" );
												exit( );
								}
								$data['mailstate'] = 1;
								$us->data( $data )->where( "username='".$username."'" )->save( );
								$pass = $d_us['password'];
								$url = "http://".$_SERVER['SERVER_NAME']."/index.php/home/login/setpass/user/".$username."/pass/".$pass;
								vendor( "mail.class-phpmailer" );
								$title = "=?UTF-8?B?".base64_encode( c( "MALLNAME" )."密码找回" )."?=";
								$headers = "MIME-Version:1.0\r\n";
								$headers .= "Content-type:text/plain;charset=utf-8\r\n";
								$headers .= "Content-Transfer-Encoding:8bit\r\n";
								$body = c( "MALLNAME" )."用户您好，您于".date( "Y-m-d H:i:s" )."使用了密码找回服务,请点击以下链接修改密码 \n\n".$url."\n\n如果链接无法点击，请将该链接复制到浏览器(如IE)的地址栏中访问。\n如不是您本人操作请删除该邮件！\n本邮件由系统自动发出，请勿回复。";
								$html = $body;
								$mm = new PHPMailer( );