Erzwingung der Passwortänderung bei erstem Login ermöglicht (forcepwreset)

public/bin/forcedpwreset.php

@@ -0,0 +1,39 @@
+<?php
+/*  Mailadminscript
+    Copyright (C) 2019  Paul Schürholz contact AT roteserver . de
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>. */
+$config = parse_ini_file('../../private/config.ini');
+try {
+    $dbh = new PDO('mysql:host=' . $config['dbservername'] . ';dbname=' . $config['dbname'], $config['dbusername'], $config['dbpassword'], array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION));
+} catch (PDOException $e) {
+    //echo 'Connection failled: '. $e->getMessage(); // Errormessage kann Sicherheitsrelevantes enthalen
+    echo 'Connection failed';
+}
+session_start();
+if ($_SESSION['log']) {
+    header("Location: ../settings.php");
+    exit;
+}
+if ($_SESSION['forcepwreset']) {
+    echo '<h3>Du musst erstmal dein Passwort ändern:</h3>
+    <form name="changemailpw" method=POST action="changemailpw.php">
+    <label>Altes Passwort: <input type="password" name="oldmailpw"/></label>
+    <label>Neues Passwort: <input type="password" name="newmailpw"/>(min. 8 Zeichen, benutze nicht ' .  "'" . ')</label>
+    <label>Neue Passwort wiederholen: <input type="password" name="newmailpwrep"/></label>
+    <input type="submit" value="Abschicken"/></form>';
+    echo '<br><a href="../logout.php"><button>Logout</button></a>'; 
+}
+else header("Location: ../index.php");
+?>