*/
$profile_template = 'profile_changepass.html';
include 'header.php';
if (!icms::$user) {
redirect_header(ICMS_URL, 2, _NOPERM);
}
if (!isset($_POST['submit'])) {
//show change password form
$form = new icms_form_Theme(_MD_PROFILE_CHANGEPASSWORD, 'form', $_SERVER['REQUEST_URI'], 'post', true);
$form->addElement(new icms_form_elements_Password(_MD_PROFILE_OLDPASSWORD, 'oldpass', 10, 50), true);
$pwd_tray = new icms_form_elements_Tray(_MD_PROFILE_NEWPASSWORD . '<br />' . _MD_PROFILE_VERIFYPASS);
$pwd_tray->addElement(new icms_form_elements_Password('', 'password', 10, 255, '', false, $icmsConfigUser['pass_level'] ? 'password_adv' : ''));
$pwd_tray->addElement(new icms_form_elements_Password('', 'vpass', 10, 255));
$form->addElement($pwd_tray);
$form->addElement(new icms_form_elements_Button('', 'submit', _SUBMIT, 'submit'));
$form->assign($icmsTpl);
} else {
$stop = '';
$member_handler = icms::handler('icms_member');
$username = icms::$user->getVar('uname');
$password = !empty($_POST['password']) ? icms_core_DataFilter::stripSlashesGPC(trim($_POST['password'])) : '';
$oldpass = !empty($_POST['oldpass']) ? icms_core_DataFilter::stripSlashesGPC(trim($_POST['oldpass'])) : '';
$vpass = !empty($_POST['vpass']) ? icms_core_DataFilter::stripSlashesGPC(trim($_POST['vpass'])) : '';
if (empty($password) || empty($oldpass) || empty($vpass)) {
$stop .= _MD_PROFILE_PROVIDEPWDS;
} else {
icms_loadLanguageFile('core', 'user');
if (!$member_handler->loginUser(addslashes(icms::$user->getVar('login_name')), addslashes($oldpass))) {
$stop .= _US_BADPWD . "<br />";
}
if (strlen($password) < $icmsConfigUser['minpass']) {
