PHP를 사용하여 CMS 시스템에서 사용자 비밀번호 재설정 기능을 구현하는 방법

$email = $_POST['email'];

// 生成一个唯一的标识符，用于重置密码链接
$token = uniqid();

// 将token保存到数据库中，与用户关联
$query = "INSERT INTO password_reset (email, token) VALUES ('$email', '$token')";
$result = mysqli_query($conn, $query);

// 发送包含重置密码链接的电子邮件给用户
$to = $email;
$subject = "重置密码";
$message = "请点击以下链接重置您的密码：
";
$message .= "http://www.example.com/reset_password.php?token=$token";
$headers = "From: passwordreset@example.com";
mail($to, $subject, $message, $headers);

$token = $_GET['token'];

// 在数据库中查找具有给定token的用户
$query = "SELECT * FROM password_reset WHERE token = '$token'";
$result = mysqli_query($conn, $query);
$user = mysqli_fetch_assoc($result);

// 如果没有找到相应的用户记录，或者链接已经过期，跳转到错误页面
if (!$user || time() - strtotime($user['created_at']) > 3600) {
    header('Location: error.php');
    exit;
}

// 显示密码重置表单
echo "<form action='reset_password.php' method='post'>";
echo "<input type='hidden' name='token' value='$token'>";
echo "新密码：<input type='password' name='password'>";
echo "<input type='submit' value='重置密码'>";
echo "</form>";

$token = $_POST['token'];
$password = $_POST['password'];

// 验证密码格式的有效性
if (!preg_match("/^(?=.*[a-z])(?=.*[A-Z])(?=.*d).{8,}$/", $password)) {
    echo "密码必须包含至少一个小写字母、一个大写字母、一个数字，并且至少8个字符。";
    exit;
}

// 更新用户的密码
$query = "UPDATE users SET password = '$password' WHERE token = '$token'";
mysqli_query($conn, $query);

// 删除密码重置记录
$query = "DELETE FROM password_reset WHERE token = '$token'";
mysqli_query($conn, $query);

echo "密码已成功重置！";