<%@ page language="java" contentType="text/html; charset=UTF-8"
    pageEncoding="UTF-8"
    import="java.util.*" 
    import="javax.servlet.http.HttpServletRequest"
    import="com.tootsville.user.*"
    import="org.starhope.appius.user.*"
    import="org.starhope.appius.mb.Messages"
	import="com.tootsville.WebUtil"
%><%
/**
 *  String used for storing the account parameter
*/
String account="";
/**
 *  String used for storing the mail parameter
*/
String mail="";
/**
 *  Person object to be cast as a parent or a person to make an association between 
 *     what info is entered and the actual account.
*/
Person fpUser=null;
String answer = "";

/* USE THE TOMCAT DATABASE */ 
WebUtil.useTomcatDB();

String url = "/membership/forgotPassword/";
%>
<%
//----------  Universal Declarations: Place this on every page.
/**
 *   Error message list
*/
HashMap <String, String> err = new HashMap <String, String> (); 
HashMap <String, String> suc = new HashMap <String, String> (); 
%><%
if (null!=request.getParameter("account") && null!= request.getParameter("answer")) {	 		
	account=request.getParameter("account");
	answer=request.getParameter("answer");
	if (0<=account.indexOf('@')) {
		fpUser=(Parent) Parent.getByMail(account);
	} else {
		fpUser= (Toot) User.getByLogin(account);
	}
	if (null!=fpUser) {
		System.err.println("Question: " + fpUser.getForgotPasswordQuestion() +
				"\nAnswer:" + answer);
		if (fpUser.forgotPassword (
				fpUser.getForgotPasswordQuestion(), 
				answer)) {
			suc.put ("", Messages.getText ("password_send"));
			url = "/membership/";
 		} else {
 			err.put("answer", Messages.getText ("passRecovery.answer_incorrect"));
 		}
	} else {
		err.put("account", Messages.getText ("login_invalid"));
	}
} else {
	if (null==request.getParameter("account")) {
		err.put("account", Messages.blank_field("E-mail or User Name"));
	}
	
	if (null==request.getParameter("answer")) {
		err.put("account", Messages.blank_field("Answer"));
	}
}

if (err.size() > 0) {
	session.setAttribute("sError", err);
} else {
	session.setAttribute("sSuccess", suc);
}

response.sendRedirect(url);
%>