<?php
rg_log("FILE: /inc/user/forgot_send");

$email = rg_var_email('email');

$_forgot = "";

$errmsg = array();

$_show_form = 1;
if ($rg['doit'] == 1) {
	$r = rg_user_forgot_pass_mail($db, $rg, $email);
	if ($r['ok'] == 0) {
		$errmsg[] = "internal error; try again later";
	} else {
		// Security: we will not tell to an attacker if a user has
		// an account here!
		$_forgot .= rg_ok('If you confirmed your e-mail in the past,'
			. ' check your inbox and follow the instructions.');
		$_show_form = 0;
	}
} else {
	// defaults
	$email = "";
}

if ($_show_form == 1) {
	$rg['email'] = $email;
	$rg['HTML:errmsg'] = rg_template_errmsg($errmsg);
	$_forgot .= rg_template('user/forgot_send.html', $rg, TRUE /*xss*/);
}