<?php
    include("includes/conex.php");
    $usuario = htmlspecialchars(mysqli_real_escape_string($con,$_POST['usuario_clave']));
    $email = htmlspecialchars(mysqli_real_escape_string($con,$_POST['email_clave']));
    $sql = "SELECT U.CONTACTO FROM USUARIOS U WHERE U.USUARIO = ?";
    $stmt = $con->prepare($sql);
    $stmt->bind_param('s',$usuario);
    $stmt->execute();
    $res = $stmt->get_result();
    if($res->num_rows == 0)
    {
        header('Location:index.php?ir=u');
    }
    else
    {
        $fila = $res->fetch_array();
        $contacto = $fila['CONTACTO'];
        $sql = "SELECT C.EMAIL1 FROM CONTACTOS C WHERE C.CODIGO = ? AND C.EMAIL1 = ?";
        $stmt = $con->prepare($sql);
        $stmt->bind_param('is',$contacto,$email);
        $stmt->execute();
        $res = $stmt->get_result();
        if($res->num_rows == 0)
        {
            header('Location:index.php?ir=e');
        }
        else
        {
            function get_id_unico(){
                return date( "YmdHis" ) . sprintf( "%04d", rand( 0, 9999 ) );
            }
            $clave = $usuario.get_id_unico();
            $sha1 = sha1($clave);
            $sql = "UPDATE USUARIOS SET CLAVE='$sha1', CLAVE_TEMP = 1 WHERE CONTACTO = $contacto";
            $con->query($sql);
            $usu = ucfirst($usuario);
            $msg = utf8_encode("
            <html>
            <head>
              <title>Cambiar clave</title>
            </head>
            <body>
              <h3>Clave restablecida</h3>
              <p>Nueva clave: <strong>$clave</strong></p>
              <p>La clave se puede personalizar desde la web!</p>
            </body>
            </html>
            ");
            $cabeceras  = 'MIME-Version: 1.0' . "\r\n";
            $cabeceras .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
            mail($email,"UVEO-Clave",$msg,$cabeceras);
            header('Location:index.php?ir=ok');
        }
    }
    
?>