<!-- Titolo della pagina -->
<div class="page_title">
   <h2><?php 
echo gdrcd_filter('out', $MESSAGE['interface']['user']['pass']['page_name']);
?>
</h2>
</div>

<!-- Box principale -->
<div class="page_body">

<?php 
/*Cambio pass utenti*/
if ($_POST['op'] == 'new') {
    if ($email == gdrcd_filter_email($_POST['email']) && gdrcd_check_pass($_POST['new_pass']) === TRUE) {
        gdrcd_query("UPDATE personaggio SET pass = '******'new_pass']) . "', ultimo_cambiopass = NOW() WHERE nome = '" . $_SESSION['login'] . "'");
        gdrcd_query("INSERT INTO log (nome_interessato, autore, data_evento, codice_evento, descrizione_evento) VALUES ('" . $_SESSION['login'] . "','" . $_SESSION['login'] . "', NOW(), " . CHANGEDPASS . " ,'" . $_SERVER['REMOTE_ADDR'] . "')");
        ?>
    <div class="warning">
	   <?php 
        echo gdrcd_filter('out', $MESSAGE['warning']['modified']);
        ?>
	</div>
	<?php 
    } else {
        ?>
	<div class="error">
	   <?php 
        echo gdrcd_filter('out', $MESSAGE['warning']['cant_do']);
        ?>
<!-- Titolo della pagina -->
<div class="page_title">
   <h2><?php 
echo gdrcd_filter('out', $MESSAGE['interface']['user']['name']['page_name']);
?>
</h2>
</div>

<!-- Box principale -->
<div class="page_body">

<?php 
/*Cambio pass utenti*/
if ($_POST['op'] == 'new') {
    if ($email == gdrcd_filter_email($_POST['email']) && $pass == gdrcd_encript($_POST['new_pass']) && $iscriz >= strftime('%Y-%m-%d') && empty($_POST['new_name']) === FALSE) {
        $query = "SELECT nome FROM personaggio WHERE nome ='" . gdrcd_filter('in', $_POST['new_name']) . "'";
        $result = gdrcd_query($query, 'result');
        if (gdrcd_query($result, 'num_rows') > 0) {
            ?>
        <div class="error">
	       <?php 
            echo gdrcd_filter('out', $MESSAGE['error']['existing_name']);
            ?>
	    </div>
		<?php 
        } else {
            gdrcd_query("UPDATE personaggio SET nome = '" . gdrcd_filter('in', $_POST['new_name']) . "' WHERE nome = '" . $_SESSION['login'] . "'");
            gdrcd_query("INSERT INTO log (nome_interessato, autore, data_evento, codice_evento, descrizione_evento) VALUES ('" . gdrcd_filter('in', $_POST['new_name']) . "','" . $_SESSION['login'] . "', NOW(), " . CHANGEDNAME . " ,'" . $_SESSION['login'] . ' -> ' . gdrcd_filter('in', $_POST['new_name']) . "')");
            gdrcd_query("UPDATE log SET nome_interessato = '" . gdrcd_filter('in', $_POST['new_name']) . "' WHERE nome_interessato = '" . $_SESSION['login'] . "'");
            gdrcd_query("UPDATE log SET autore = '" . gdrcd_filter('in', $_POST['new_name']) . "' WHERE autore = '" . $_SESSION['login'] . "'");