From 9403d1214a95d769ad275b8c0c656a8a64df994b Mon Sep 17 00:00:00 2001
From: maxpozdeev <maxpozdeev@gmail.com>
Date: Wed, 25 Jun 2025 15:31:24 +0300
Subject: [PATCH] add script for emergency password reset

---
 buildtar.php          |  1 +
 src/mtt-emergency.php | 27 +++++++++++++++++++++++++++
 2 files changed, 28 insertions(+)
 create mode 100644 src/mtt-emergency.php

diff --git a/buildtar.php b/buildtar.php
index b1d74e2..5914431 100755
--- a/buildtar.php
+++ b/buildtar.php
@@ -45,6 +45,7 @@ unlink('./docker-config.php');
 unlink('./includes/lang/en-rtl.json');
 unlink('./includes/lang/_percent.php');
 unlink('./mtt-edit-settings.php');
+unlink('./mtt-emergency.php');
 unlink('./content/theme/images/svg2base64.php');
 
 chdir('..'); # to the root of repo
diff --git a/src/mtt-emergency.php b/src/mtt-emergency.php
new file mode 100644
index 0000000..a5cea4b
--- /dev/null
+++ b/src/mtt-emergency.php
@@ -0,0 +1,27 @@
+<?php
+
+$dontStartSession = true;
+require_once(__DIR__ . '/init.php');
+
+if (!need_auth()) {
+    exitmsg("No password protection is set");
+}
+
+if (isset($_POST['reset'])) {
+    $pass = _post('pass');
+    $hash = passwordHash($pass);
+    Config::set('password', $hash);
+    Config::save();
+    exitmsg("Done");
+}
+else {
+    exitmsg("<form method=post><label>Enter new password:<br><input name=pass type=password> <input name=reset type=submit></label></form>");
+}
+
+
+function exitmsg(?string $text = '') {
+    echo "<h1>Password Reset</h1>\n";
+    echo $text;
+    echo "<br><br><hr> <i>For security reasons delete this file after usage!</i>";
+    exit;
+}