session_start();
$passwordIncorrect = FALSE;
$didNotMatch = FALSE;
// Load the require PHP classes.
require_once '../classes/common.class.php';
require_once '../classes/account.class.php';
$common = new common();
$account = new account();
// Check if the user is logged in.
if (!$account->isAuthenticated()) {
// The user is not logged in so forward them to the login page.
header("Location: login.php?origin=" . urlencode('account.php'));
}
if ($common->postBack()) {
// Check that the user supplied a password matching the one currently stored in administrators.xml.
$authenticated = $account->authenticate($_SESSION['login'], $_POST['password'], FALSE, FALSE);
if (!$authenticated) {
$passwordIncorrect = TRUE;
}
if ($_POST['password1'] != $_POST['password2']) {
$didNotMatch = TRUE;
}
if ($authenticated && $_POST['password1'] == $_POST['password2']) {
// Change the password stored in administrators.xml related to this users login.
$account->changePassword($_SESSION['login'], $_POST['password1']);
// Since the password has changed we will log the user out to clear older session variables.
$account->logout();
}
}
require_once 'includes/header.inc.php';
/////////////////////
$account = new account();
// Check if the user is already logged in.
if ($account->isAuthenticated()) {
if (isset($_REQUEST['origin'])) {
// Redirect the authenticated visitor to their original destination.
header("Location: " . urldecode($_REQUEST['origin']));
} else {
// Redirect the user to the administration homepage.
header("Location: index.php");
}
}
if ($common->postBack()) {
// Try to authenticate the user using the credentials supplied.
$remember = isset($_POST['remember']) ? TRUE : FALSE;
$origin = isset($_REQUEST['origin']) ? $_REQUEST['origin'] : NULL;
$authenticated = $account->authenticate($_POST['login'], $_POST['password'], $remember, TRUE, $origin);
}
/////////////////////
// BEGIN HTML BODY //
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<title></title>
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" />
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap-theme.min.css" />
<link rel="stylesheet" href="assets/css/login.css" />
</head>
<body>
<div class="container">
