/
change_password.php
63 lines (60 loc) · 1.95 KB
/
change_password.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
<?php
include 'core/init.php';
protect_page();
if ( ! empty($_POST)) {
$required_fields = array('current_password', 'password', 'password_again');
foreach($_POST as $key=>$value) {
if (empty($value) && in_array($key, $required_fields) === true){
$errors[] = 'Fields marked with an asterisk are required.';
break;
}
}
if (password_verify(trim($_POST['current_password']), $user_data['password'])) {
if (trim($_POST['password']) !== trim($_POST['password_again'])) {
$errors[] = 'Your new passwords do not match';
} else if (strlen($_POST['password']) <= 7) {
$errors[] = 'Your password must be at least 8 characters.';
} else if (strlen($_POST['password']) >= 25) {
$errors[] = 'Your password must be less than 25 characters.';
} else {
change_password($session_user_id, trim($_POST['password']));
echo '<meta HTTP-EQUIV="REFRESH" content="0; url=change_password.php?success">';
exit();
}
} else {
$errors[] = 'Your current password is incorrect';
}
}
$message = '';
if (isset($_GET['success'])) {
$message = '<h2>You have successfully changed your password.<h2>';
} else {
if (isset($_GET['force']) && empty($_GET['force'])) {
$message = '<h2>Your password was reset. Please change your password.<h2>';
}
}
include 'includes/overall/overall_header.php';
?>
<h1>Change Password</h1><br>
<?php echo ( ! empty($errors)) ? output_errors($errors) : '';?>
<?php echo ( ! empty($message)) ? $message : '';?>
<form action="" method="post">
<ul>
<li>
<label for="current_password">Current Password*:</label><br >
<input type="password" name="current_password">
</li>
<li>
<label for="password">New Password*:</label><br >
<input type="password" name="password">
</li>
<li>
<label for="password_again">Confirm New Password*:</label><br >
<input type="password" name="password_again">
</li>
<li>
<input type="submit" value="Change Password">
</li>
</ul>
</form>
<?php include 'includes/overall/overall_footer.php'; ?>