<%
	'*************************************************************************
	'	ASP Scripting:
	'	Filename:			handler_retrieve_password.asp
	'	Written by:			Wilbert Madarang
	'	Date:					January 3, 2002
	'*************************************************************************
	'	Description:		This code handles the user's request to retrieve password.
	'*************************************************************************
	'	Revision History:	
	'*************************************************************************
%>
<!--#INCLUDE FILE="constants.asp"-->
<!--#INCLUDE FILE="include/library_data_connections.asp"-->
<%
	'Retrieve Secret Phrase
	strEmail = Request("email")
	strSecretPhrase = Request("secret_phrase")
	strSuccessURL = Request( "success_url" )
	strFailURL = Request("fail_url")
	strPassword = ""
	bSecretPhraseOK = true


	'Decode strSuccessURL and strFailURL
	If strSuccessURL = "" Then
		strSuccessURL = DEFAULT_SUCCESSFUL_RETRIEVED_PASSWORD_URL
	End If
	If strFailURL = "" Then
		strFailURL = DEFAULT_FAILED_RETRIEVE_PASSWORD_URL
	End If


	'Check the Username and Passwords
	bSecretPhraseOK = validateSecretPhrase( strEmail, strSecretPhrase )
	If  bSecretPhraseOK = true Then
		strPassword = retrievePassword( strEmail, strSecretPhrase ) 
		Session("MyPassword") = strPassword
		Session("MyRetrievePasswordFailed") = False
		Response.Redirect strSuccessURL
	Else
		'TBD:
		Session("MyRetrievePasswordFailed") = True
		Response.Redirect strFailURL
	End If
%>