Just please help!

[Musa_real]

So there's obviously an exploit in RevCMS the password forgotten case but the problem is I can delete the cases in class core.

But when I delete this code in class.users.php

final public function forgotten()
    {
        global $template, $_CONFIG, $core;
      
        if(isset($_POST['forgot']))
        {
      
            $template->form->setData();
            unset($template->form->error);
          
            if($this->nameTaken($template->form->for_username))
            {
                if(strlen($template->form->for_password) > 6)
                {
                    if($this->getInfo($this->getID($template->form->for_username), 'seckey') == $core->hashed($template->form->for_key))
                    {
                        $this->updateUser($this->getID($template->form->for_username), 'password', $core->hashed($template->form->for_password));
                        $template->form->error = 'Account recovered! Go <b><a href="index">here</a></b> to login!';
                        return;
                    }
                    else
                    {
                        $template->form->error = 'Secret key is incorrect';
                        return;
                    }
                }
                else
                {
                    $template->form->error = 'Password must have more than 6 characters.';
                    return;
                }
            }
            else
            {
                $template->form->error = 'Username does not exist';
                return;
            }
        }
    }

Then it gives this error:

Fatal error: Class Revolution\users contains 1 abstract method and must therefore be declared abstract or implement the remaining methods (Revolution\iUsers::forgotten) in C:\xampp\htdocs\app\class.users.php on line482

Is there any solvation for this problem?

I have the same problem as he has. Could' someone help me please? Otherwise i am gonna crie.

 

[LewisBHS]

Just replace the forgotten function with this.

final public function forgotten(){
$error = "Stop trying to exploit our hotel.";
return $error;
}