cgi/pwproj.cgi

   1 #!/usr/bin/perl
   2 # (c) Petr Baudis <pasky@suse.cz>
   3 # GPLv2
   4
   5 use strict;
   6 use warnings;
   7
   8 use lib ".";
   9 use Girocco::CGI;
  10 use Girocco::Config;
  11 use Girocco::Project;
  12 use Girocco::Util;
  13
  14
  15 sub genpwd {
  16         # FLUFFY!
  17         substr(crypt(rand, rand), 2);
  18 }
  19
  20
  21 my $gcgi = Girocco::CGI->new('Forgotten Project Password');
  22 my $cgi = $gcgi->cgi;
  23
  24 my $name = $cgi->param('name');
  25
  26 unless (defined $name) {
  27         print "<p>I need the project name as an argument.</p>\n";
  28         exit;
  29 }
  30
  31 if (!Girocco::Project::does_exist($name,1) && !Girocco::Project::valid_name($name)) {
  32         print "<p>Invalid project name. Go away, sorcerer.</p>\n";
  33         exit;
  34 }
  35
  36 if (!Girocco::Project::does_exist($name,1)) {
  37         print "<p>Sorry but this project does not exist. Now, how did you <em>get</em> here?!</p>\n";
  38         exit;
  39 }
  40
  41 my $proj = Girocco::Project->load($name);
  42 $proj or die "not found project $name, that's really weird!";
  43
  44 my $mail = $proj->{email};
  45
  46 my $y0 = $cgi->param('y0') || '';
  47 if ($y0 eq 'Reset Password' && $cgi->request_method eq 'POST') {
  48         # submitted
  49
  50         my $newpwd = genpwd();
  51
  52         defined(my $MAIL = mailer_pipe '-s', "[$Girocco::Config::name] New password for project $name", $mail)
  53                 or die "Cannot spawn mailer: $!";
  54         print $MAIL <<EOT;
  55 Hello,
  56
  57 Somebody asked for the password for project $name to be reset. Since you are
  58 the project admin, you get to know the new password:
  59
  60         $newpwd
  61
  62 In case you did not request the password to be reset, we apologize. Nevertheless,
  63 you have to use the reset password now (possibly to change it back).
  64
  65 Quick-link to the edit project page:
  66
  67         $Girocco::Config::webadmurl/editproj.cgi?name=$name
  68
  69 Have fun!
  70 EOT
  71         close $MAIL or die "mail $mail for $name died? $!";
  72
  73         $proj->update_password($newpwd);
  74
  75         print "<p>Project password has been reset. Have a nice day.</p>\n";
  76         exit;
  77 }
  78
  79 print <<EOT;
  80 <p>You are trying to make me reset password for project $name. I will send the new
  81 password to the project admin &lt;$mail&gt;.</p>
  82 <form method="post" action="@{[url_path($Girocco::Config::webadmurl)]}/pwproj.cgi">
  83 <input type="hidden" name="name" value="$name" />
  84 <p><input type="submit" name="y0" value="Reset Password" /></p>
  85 </form>
  86 EOT
  87