--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/password_change.html	Mon Apr 12 02:57:25 2010 +0530
@@ -0,0 +1,11 @@
+{% extends "base.html" %}
+{% block content %}
+	{% if password_changed %}
+		Your password has been successfully changed. <a href="/reg">Click here</a> to return to home page.
+	{% else %}
+		<form action="" method="post">
+		{{form.as_p}}
+		<input type="submit" value="Change">
+		</form>
+	{% endif %}
+{% endblock %}

--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/password_reset.html	Mon Apr 12 02:57:25 2010 +0530
@@ -0,0 +1,11 @@
+{% extends "base.html" %}
+{% block content %}
+	{% if new_password %}
+		Your password has been reset to {{ new_password }}. <a href="/reg">Click here</a> to return to home page.
+	{% else %}
+		<form action="" method="post">
+		{{form.as_p}}
+		<input type="submit" value="Change">
+		</form>
+	{% endif %}
+{% endblock %}

--- a/reg/events.py	Fri Apr 09 16:51:56 2010 +0530
+++ b/reg/events.py	Mon Apr 12 02:57:25 2010 +0530
@@ -58,7 +58,6 @@
         except IntegrityError:
             pass
 
-
 def activate_user(user):
     """ mark the is_active flag as true.
     """
@@ -66,3 +65,25 @@
     user.is_active = True
     user.save()
     return user
+
+def reset_password(user):
+    """ get a key and set it as password.
+    for now, print the key.
+    later on add the send mail function.
+    """
+
+    new_password = gen_key(10)
+    user.set_password(new_password)
+    user.save()
+    print "The new password is", new_password
+    return new_password
+
+def change_password(user, new_password):
+    """ for now just set the password and be done with it.
+    later on, if we want to do something else also then we can add them here.
+    """
+
+    user.set_password(new_password)
+    user.save()
+
+

--- a/reg/forms.py	Fri Apr 09 16:51:56 2010 +0530
+++ b/reg/forms.py	Mon Apr 12 02:57:25 2010 +0530
@@ -105,3 +105,55 @@
         if start_date > stop_date:
             raise forms.ValidationError('The event stops even before it starts. I am starting to wonder what kind of event is this.')
         return stop_date
+
+class PasswordResetForm(forms.Form):
+    """ check for the existance of user for the email.
+    Reset the password irrespective of active status.
+    """
+
+    email = forms.EmailField()
+
+    def clean_email(self):
+
+        email = self.cleaned_data['email']
+        try:
+            user = User.objects.get(email__iexact=email)
+            return email
+        except User.DoesNotExist:
+            raise forms.ValidationError("This not a registered email. Please enter a valid email.")
+
+class PasswordChangeForm(forms.Form):
+
+    old_password = forms.CharField(widget=forms.PasswordInput)
+    new_password = forms.CharField(widget=forms.PasswordInput)
+    confirm_password = forms.CharField(widget=forms.PasswordInput)
+
+    def clean_old_password(self):
+        """ authenticate the given password against username.
+        """
+
+        username = self.data['username']
+        old_password = self.cleaned_data['old_password']
+        user = authenticate(username=username, password=old_password)
+        if not user:
+            raise forms.ValidationError("Incorrect password")
+        return old_password
+
+
+    def clean_new_password(self):
+        """ check if the password contains only alphabets or digits or punctuation.
+        then check if the size of the password is optimal.
+        then check if both the given passwords match.
+        """
+
+        new_password = self.cleaned_data['new_password']
+
+        if new_password.strip(string.ascii_letters+string.punctuation+string.digits):
+            raise forms.ValidationError("Only alphabets, digits and punctuation symbols are allowed in password")
+
+        if not 8 <= len(new_password) <= 30:
+            raise forms.ValidationError("Password must be atleast 8 characters and at most 30 characters")
+
+        if not new_password == self.data['confirm_password']:
+            raise forms.ValidationError("Passwords do not match")
+

--- a/reg/site/urls.py	Fri Apr 09 16:51:56 2010 +0530
+++ b/reg/site/urls.py	Mon Apr 12 02:57:25 2010 +0530
@@ -3,10 +3,12 @@
 from workshop.reg import views as reg_views
 
 urlpatterns = patterns('',
-    ('^$', reg_views.homepage),
-    ('^login/$', reg_views.user_login),
-    ('^logout/$', reg_views.user_logout),
-    ('^register/$', reg_views.user_register),
-    ('^event/create/$', reg_views.create_event),
-    ('^event/view/(\w+)/$', reg_views.view_event),
+    (r'^$', reg_views.homepage),
+    (r'^login/$', reg_views.user_login),
+    (r'^logout/$', reg_views.user_logout),
+    (r'^register/$', reg_views.user_register),
+    (r'^password_reset/$', reg_views.reset_password),
+    (r'^password_change/$', reg_views.change_password),
+    (r'^event/create/$', reg_views.create_event),
+    (r'^event/view/(\w+)/$', reg_views.view_event),
 )

--- a/reg/views.py	Fri Apr 09 16:51:56 2010 +0530
+++ b/reg/views.py	Mon Apr 12 02:57:25 2010 +0530
@@ -116,3 +116,53 @@
 
     return HttpResponse(str(event))
 
+def reset_password(request):
+    """ check for the existance of e-mail.
+    Then call the event.
+    """
+
+    user = request.user
+    if user.is_authenticated():
+        return redirect('/reg')
+
+    if request.method == "POST":
+        form = reg_forms.PasswordResetForm(request.POST)
+        if form.is_valid():
+            email = form.cleaned_data['email']
+            user = User.objects.get(email__iexact=email)
+            new_password = reg_events.reset_password(user)
+            return render_to_response('password_reset.html', {'new_password':new_password})
+        else:
+            return render_to_response('password_reset.html', {'form':form})
+    else:
+        form = reg_forms.PasswordResetForm()
+        return render_to_response('password_reset.html', {'form':form})
+
+def change_password(request):
+    """ check for the password and then set the new password.
+    """
+
+    user = request.user
+    if not user.is_authenticated():
+        return redirect('/reg')
+
+    if request.method == "POST":
+        data = request.POST.copy()
+        data.__setitem__('username', user.username)
+        form = reg_forms.PasswordChangeForm(data)
+        if form.is_valid():
+            new_password = form.cleaned_data['new_password']
+            reg_events.change_password(user, new_password)
+            return render_to_response('password_change.html', {'password_changed': True})
+        else:
+            return render_to_response('password_change.html', {'form':form})
+    else:
+        form = reg_forms.PasswordChangeForm()
+        return render_to_response('password_change.html', {'form':form})
+
+
+
+
+
+
+