@@ -54,7 +54,7 @@ if(isMEMBER) accessDenied( );

 				mt_srand((double)microtime() * 1000000);

 				$charset = '23456789' . 'abcdefghijkmnpqrstuvwxyz' . 'ABCDEFGHJKLMNPQRSTUVWXYZ';		

 				$pass = random_string($charset, 10);

-				$encryppass = md5($pass);

+				$encryppass = password_hash($_POST['password'], PASSWORD_BCRYPT, ['cost' => 12]);

 				$subject = _NEWPWDSUB;

 				$mailtext = sprintf(_NEWPWDMSG, $pass);

@@ -88,7 +88,14 @@ if(isMEMBER) accessDenied( );

 						$RegMessage .= " Asked for new password";

 						$RegMessage .= "<br>Profile link: " . "<a href='".$url."/viewuser.php?uid=" . $uid . "'>" . $penname . "</a>";

- 						sendemail($sitename, $RegNoticeTo, $siteemail, $siteemail, $RegSubject,  $RegMessage);

+						$RegNoticeTo_array = explode(',', $RegNoticeTo);

+						foreach ($RegNoticeTo_array as $RegNoticeTo_email)

+						{

+							if (validEmail($RegNoticeTo_email))

+							{

+								sendemail($sitename, $RegNoticeTo_email, $siteemail, $siteemail, $RegSubject,  $RegMessage);

+							}

+						}

 					}

 				}	 

 			}

@@ -86,6 +86,8 @@ if(isMEMBER) accessDenied( );

 						$RegNoticeTo = $notifications['registration_toemail'];

 						$RegMessage = "Username: $penname" . "\r\n" . "Email: $email" . "\r\n" . "IP: $RegIP" . "\r\n" . "Host: $RegHost";

 						$RegMessage .= " Asked for new password";

+						$RegMessage .= "<br>Profile link: " . "<a href='".$url."/viewuser.php?uid=" . $uid . "'>" . $penname . "</a>";

+

  						sendemail($sitename, $RegNoticeTo, $siteemail, $siteemail, $RegSubject,  $RegMessage);

 					}

 				}	 

@@ -67,6 +67,28 @@ if(isMEMBER) accessDenied( );

 				else $output .=  write_message(_EMAILFAILED);

 				if($logging) 

 					dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_log (`log_action`, `log_uid`, `log_ip`, `log_type`, `log_timestamp`) VALUES('".escapestring(sprintf(_LOG_LOST_PASSWORD, $penname, $uid, ($result ? _YES : _NO)))."', '$uid', INET6_ATON('".$_SERVER['REMOTE_ADDR']."'), 'LP', " . time() . ")");

+

+

+				/* lost password notice */

+				if (isset($notifications))

+				{

+					$notifications = unserialize($notifications);

+				}

+	 

+				if (isset($notifications['lostpassword_notify'])  && $notifications['lostpassword_notify'])

+				{

+				

+					if (isset($notifications['registration_toemail'])  && $notifications['registration_toemail'])

+					{

+						$RegSubject = "Lost Password Notice";

+						$RegIP = $_SERVER['REMOTE_ADDR'];

+						$RegHost = gethostbyaddr($RegIP);

+						$RegNoticeTo = $notifications['registration_toemail'];

+						$RegMessage = "Username: $penname" . "\r\n" . "Email: $email" . "\r\n" . "IP: $RegIP" . "\r\n" . "Host: $RegHost";

+						$RegMessage .= " Asked for new password";

+ 						sendemail($sitename, $RegNoticeTo, $siteemail, $siteemail, $RegSubject,  $RegMessage);

+					}

+				}	 

 			}

 		}

@@ -66,7 +66,7 @@ if(isMEMBER) accessDenied( );

 				}

 				else $output .=  write_message(_EMAILFAILED);

 				if($logging) 

-					dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_log (`log_action`, `log_uid`, `log_ip`, `log_type`, `log_timestamp`) VALUES('".escapestring(sprintf(_LOG_LOST_PASSWORD, $penname, $uid, ($result ? _YES : _NO)))."', '$uid', INET_ATON('".$_SERVER['REMOTE_ADDR']."'), 'LP', " . time() . ")");

+					dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_log (`log_action`, `log_uid`, `log_ip`, `log_type`, `log_timestamp`) VALUES('".escapestring(sprintf(_LOG_LOST_PASSWORD, $penname, $uid, ($result ? _YES : _NO)))."', '$uid', INET6_ATON('".$_SERVER['REMOTE_ADDR']."'), 'LP', " . time() . ")");

 			}

 		}

@@ -80,4 +80,4 @@ if(isMEMBER) accessDenied( );

 		</td></tr></table>";

 	}

-?>

\ No newline at end of file

+?>

new file mode 100644

@@ -0,0 +1,83 @@

+<?php

+// ----------------------------------------------------------------------

+// eFiction 3.2

+// Copyright (c) 2007 by Tammy Keefer

+// Valid HTML 4.01 Transitional

+// Based on eFiction 1.1

+// Copyright (C) 2003 by Rebecca Smallwood.

+// http://efiction.sourceforge.net/

+// ----------------------------------------------------------------------

+// LICENSE

+//

+// This program is free software; you can redistribute it and/or

+// modify it under the terms of the GNU General Public License (GPL)

+// as published by the Free Software Foundation; either version 2

+// of the License, or (at your option) any later version.

+//

+// This program is distributed in the hope that it will be useful,

+// but WITHOUT ANY WARRANTY; without even the implied warranty of

+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

+// GNU General Public License for more details.

+//

+// To read the license please visit http://www.gnu.org/copyleft/gpl.html

+// ----------------------------------------------------------------------

+

+if(!defined("_CHARSET")) exit( );

+if(!function_exists("random_char")) {

+

+function random_char($string)

+{

+	$length = strlen($string);

+	$position = mt_rand(0, $length - 1);

+	return ($string[$position]);

+}

+

+function random_string ($charset_string, $length)

+{

+	$return_string = random_char($charset_string);

+	for ($x = 1; $x < $length; $x++)

+	$return_string .= random_char($charset_string);

+	return $return_string;

+}

+

+}

+if(isMEMBER) accessDenied( );

+	$output = "<div id=\"pagetitle\">"._LOSTPASSWORD."</div>";

+

+	  if(isset($_POST['submit'])) {

+		if(validEmail($_POST['email'])) {

+			$result = dbquery("SELECT "._UIDFIELD." as uid, "._PENNAMEFIELD." as penname, "._EMAILFIELD." AS email FROM "._AUTHORTABLE." WHERE email = '".strtolower(escapestring(descript($_POST['email'])))."'");

+			list($uid, $penname, $email) = dbrow($result);

+			if(dbnumrows($result) == 0) $output .= write_message(_BADEMAIL);

+			else {

+				include("includes/emailer.php");

+				mt_srand((double)microtime() * 1000000);

+				$charset = '23456789' . 'abcdefghijkmnpqrstuvwxyz' . 'ABCDEFGHJKLMNPQRSTUVWXYZ';		

+				$pass = random_string($charset, 10);

+				$encryppass = md5($pass);

+				$subject = _NEWPWDSUB;

+				$mailtext = sprintf(_NEWPWDMSG, $pass);

+

+		

+				$result = sendemail($penname, $email, $sitename, $siteemail, $subject, $mailtext, "html");

+				if($result) {

+					$output .= write_message(_PASSWORDSENT);

+					dbquery("UPDATE ".substr(_AUTHORTABLE, 0, strpos(_AUTHORTABLE, "as author"))." SET password='$encryppass' WHERE uid = '".$uid."'");

+				}

+				else $output .=  write_message(_EMAILFAILED);

+				if($logging) 

+					dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_log (`log_action`, `log_uid`, `log_ip`, `log_type`, `log_timestamp`) VALUES('".escapestring(sprintf(_LOG_LOST_PASSWORD, $penname, $uid, ($result ? _YES : _NO)))."', '$uid', INET_ATON('".$_SERVER['REMOTE_ADDR']."'), 'LP', " . time() . ")");

+			}

+

+		}

+		else $output .= write_message(_BADEMAIL);

+	}

+	else {

+		$output .= "<form method=\"POST\" enctype=\"multipart/form-data\" action=\"user.php?action=lostpassword\">

+		<table align=\"center\" width=\"300\">

+		<tr><td>"._ENTEREMAIL."</td></tr>

+		<tr><td><INPUT  type=\"text\" class=\"textbox=\" name=\"email\"> <INPUT type=\"submit\" class=\"button\" name=\"submit\" value=\""._SUBMIT."\"></form>

+		</td></tr></table>";

+	}

+

+?>

\ No newline at end of file