bug-1129: added notification mail for insight to secret Q&A from SE

interface (see bug-612)

1 files changed, 22 insertions, 0 deletions

diff --git a/pages/account/43.php b/pages/account/43.php
index c889ce3..3c044ed 100644
--- a/pages/account/43.php
+++ b/pages/account/43.php
@@ -327,6 +327,28 @@ if(intval($_REQUEST['userid']) > 0) {
         </tr>
     <?
                     } else {
+                        $body  = sprintf(_("Hi %s,"),$row['fname'])."\n\n";
+                        $ip = anonymizeIp($_SERVER['REMOTE_ADDR']);
+                        if($ip === false) {
+                            $ip = _("Error");
+                        }
+                        $body .= sprintf(_("You receive this automatic mail since you yourself or someone ".
+                            "else looked up your secret questions and answers for a forgotten ".
+                            "password.\n\n".
+                            "Network: %s\nTime: %s\n\n".
+                            "If it was you who looked up or changed that data, or clicked ".
+                            "through the menu in your account, everything is in best order ".
+                            "and you can ignore this mail.\n\n".
+                            "But if you received this mail without a recognisable reason, ".
+                            "there is a danger that an unauthorised person accessed your ".
+                            "account, and you should promptly change your password and your ".
+                            "secret questions and answers."),
+                            $ip,
+                            date("Y-m-d H:i:s T"))."\n\n";
+
+                        $body .= _("Best regards")."\n"._("CAcert Support");
+
+                        sendmail($row['email'], "[CAcert.org] "._("Email Notification"), $body, "support@cacert.org", "", "", "CAcert Support");
     ?>
         <tr>
             <td class="DataTD"><?=_("Lost Password")?> - Q1:</td>