Example #1
0
function _makeAction($value)
{
    global $THIS_RET;
    $i = UserStudentId();
    $rem = "<a href=Modules.php?modname=scheduling/Schedule.php&student_id={$i}&del=true&c_id={$value}&cp_id={$THIS_RET['COURSE_PERIOD_ID']}&schedule_id={$THIS_RET['SCHEDULE_ID']}><img src='assets/remove_button.gif'/></a>";
    return $rem;
    //
}
    $stu_PASS = DBGet(DBQuery('SELECT la.PASSWORD FROM login_authentication la, students s WHERE s.STUDENT_ID=\'' . UserStudentId() . '\' AND la.USER_ID=s.STUDENT_ID AND la.PROFILE_ID=3'));
    $pass_old = $_REQUEST['old'];
    if ($pass_old == "") {
        $error[] = "Please Type The Password";
        echo ErrorMessage($error, 'Error');
    } else {
        $column_name = PASSWORD;
        $pass_old = paramlib_validation($column_name, $_REQUEST['old']);
        $pass_new = paramlib_validation($column_name, $_REQUEST['new']);
        $pass_retype = paramlib_validation($column_name, $_REQUEST['retype']);
        $pass_old = str_replace("\\'", "''", md5($pass_old));
        $pass_new = str_replace("\\'", "''", md5($pass_new));
        $pass_retype = str_replace("\\'", "''", md5($pass_retype));
        if ($stu_PASS[1]['PASSWORD'] == $pass_old) {
            if ($pass_new == $pass_retype) {
                $sql = 'UPDATE login_authentication SET PASSWORD=\'' . $pass_new . '\' WHERE USER_ID=\'' . UserStudentId() . '\' AND PROFILE_ID=3 ';
                DBQuery($sql);
                $note[] = "Password Sucessfully Changed";
                echo ErrorMessage($note, 'note');
            } else {
                $error[] = "Please Retype Password";
                echo ErrorMessage($error, 'Error');
            }
        } else {
            $error[] = "Old password is incorrect";
            echo ErrorMessage($error, 'Error');
        }
    }
}
echo "<span id='error' name='error'></span>";
PopTable('header', 'Change Password');
Example #3
0
include '../../Redirect_modules.php';
DrawBC("School Setup >> " . ProgramTitle());
if ($_REQUEST['action'] == 'update' && $_REQUEST['button'] == 'Save' && User('PROFILE') == 'student') {
    $stu_PASS = DBGet(DBQuery('SELECT PASSWORD FROM students WHERE STUDENT_ID=\'' . UserStudentId() . '\''));
    $pass_old = $_REQUEST['old'];
    if ($pass_old == "") {
        $error[] = "Please Type The Password";
        echo ErrorMessage($error, 'Error');
    } else {
        $pass_old = str_replace("\\'", "''", md5($_REQUEST['old']));
        $pass_new = str_replace("\\'", "''", md5($_REQUEST['new']));
        $pass_retype = str_replace("\\'", "''", md5($_REQUEST['retype']));
        if ($stu_PASS[1]['PASSWORD'] == $pass_old) {
            if ($pass_new == $pass_retype) {
                $sql = 'UPDATE students SET PASSWORD=\'' . $pass_new . '\' WHERE STUDENT_ID=\'' . UserStudentId() . '\'';
                DBQuery($sql);
                $note[] = "Password Sucessfully Changed";
                echo ErrorMessage($note, 'note');
            } else {
                $error[] = "Please Retype Password";
                echo ErrorMessage($error, 'Error');
            }
        } else {
            $error[] = "Password Does'nt Exist";
            echo ErrorMessage($error, 'Error');
        }
    }
}
/*
echo "<FORM name=change_password id=change_password action=Modules.php?modname=$_REQUEST[modname]&action=update method=POST>";
    $stu_PASS = DBGet(DBQuery("SELECT PASSWORD FROM STUDENTS WHERE STUDENT_ID='" . UserStudentId() . "'"));
    $pass_old = $_REQUEST['old'];
    if ($pass_old == "") {
        $error[] = "Please Type The Password";
        echo ErrorMessage($error, 'Error');
    } else {
        $column_name = PASSWORD;
        $pass_old = paramlib_validation($column_name, $_REQUEST['old']);
        $pass_new = paramlib_validation($column_name, $_REQUEST['new']);
        $pass_retype = paramlib_validation($column_name, $_REQUEST['retype']);
        $pass_old = str_replace("\\'", "''", md5($pass_old));
        $pass_new = str_replace("\\'", "''", md5($pass_new));
        $pass_retype = str_replace("\\'", "''", md5($pass_retype));
        if ($stu_PASS[1]['PASSWORD'] == $pass_old) {
            if ($pass_new == $pass_retype) {
                $sql = "UPDATE STUDENTS SET PASSWORD='******' WHERE STUDENT_ID='" . UserStudentId() . "'";
                DBQuery($sql);
                $note[] = "Password Sucessfully Changed";
                echo ErrorMessage($note, 'note');
            } else {
                $error[] = "Please Retype Password";
                echo ErrorMessage($error, 'Error');
            }
        } else {
            $error[] = "Password Does'nt Exist";
            echo ErrorMessage($error, 'Error');
        }
    }
}
/*
echo "<FORM name=change_password id=change_password action=Modules.php?modname=$_REQUEST[modname]&action=update method=POST>";