<?php if ($_POST) { //check if its an ajax request, exit if not if (!isset($_SERVER['HTTP_X_REQUESTED_WITH']) and strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) != 'xmlhttprequest') { $output = json_encode(array('type' => 'error', 'text' => 'Sorry Request must be Ajax POST')); die($output); //exit script outputting json data } require "../../models/DB/Db.class.php"; $db = new Db(); $dbh = $db->getPurePodo(); include "../../models/PHPAuth/Config.php"; include "../../models/PHPAuth/Auth.php"; $config = new PHPAuth\Config($dbh); $auth = new PHPAuth\Auth($dbh, $config); $uid = filter_var($_POST["uid"], FILTER_SANITIZE_STRING); $currentPassword = filter_var($_POST["currentPassword"], FILTER_SANITIZE_STRING); $newPassword = filter_var($_POST["newPassword"], FILTER_SANITIZE_STRING); $confirmPassword = filter_var($_POST["confirmPassword"], FILTER_SANITIZE_STRING); $result = $auth->changePassword($uid, $currentPassword, $newPassword, $confirmPassword); if (!$result['error']) { $output = json_encode(array('type' => 'text', 'text' => "<div class='alert alert-success'><a href='#' class='close' data-dismiss='alert' aria-label='close'>×</a><strong>Success!</strong>" . $result['message'] . "</div>")); } else { $output = json_encode(array('type' => 'error', 'text' => "<div class='alert alert-danger'><a href='#' class='close' data-dismiss='alert' aria-label='close'>×</a><strong>Warning!</strong>" . $result['message'] . "</div>")); } die($output); }
<?php require "../../models/DB/Db.class.php"; $db = new Db(); $dbh = $db->getPurePodo(); include "../../models/PHPAuth/Config.php"; include "../../models/PHPAuth/Auth.php"; $config = new PHPAuth\Config($dbh); $auth = new PHPAuth\Auth($dbh, $config); $uid = $auth->getSessionUID($auth->getSessionHash()); $password = "******"; $password2 = "ucsc@123!@#AB"; $result = $auth->changePassword($uid, $password, $password2, $password2); echo '<pre>'; var_dump($result); echo '<br>';