<?php 
include 'tpl.php';
$tpl_data['error_msg']=$tpl_data['inp_email']='';
if($_GET['email']){$tpl_data['inp_email']=$_GET['email'];}
if($_POST){
    if($_POST['email']){
        $tpl_data['inp_email']= $email = $_POST['email'];                   
    }else{
        $error = "Please enter your email.";$tpl_data['er_e']='red';goto error;
    }
    $q = mysql_query("SELECT * FROM `members` WHERE `ename`='".mysql_real_escape_string($email)."'");
    if(mysql_num_rows($q) < 1){$error = "Invalid email.";$tpl_data['er_e']='red';goto error;}
    $row = mysql_fetch_assoc($q);
    foreach($row as $k=>$v){$$k=$v;}
    $to  = "$contactname <$ename>";
	$subject_em = "YellowLeaf - Your account details";
	$email_message = '
		<div style="margin-bottom:5px;">Dear <b>'.$contactname.'</b></div>
		<div>
		Forgotten Password Details.<br><br>
		Here are your account details which you will need when you log into YellowLeaf members area.<br><br>
		<b>Email:</b> '.$email.'<br>
		<b>Password:</b> '.$epass.'<br><br>

		<a href="http://www.yellowleaf.co.uk/masrur/login/?email='.$email.'">Click here to sign in to your account.</a>
		</div>';
	include $baseurl.'/masrur/email_tmp.php';
    $error  = "Password has successfully been sent. Please check your email.";
    $err_class='succ';
}

error:
if($error){
    $tpl_data['error_msg'] = '<div class="error-message '.$err_class.'">'.$error.'</div>';
}

$tpl = curl('forgot_p_tpl.html');
$tpl_data['header'] = curl('header.html');
say($tpl,$tpl_data);
?>