0byt3m1n1
Path:
C:
/
GEOMATICS 23-01-2021
/
LAN
/
CPMS
/
ADMIN
/
[
Home
]
File: changepassword_ctrl.php
<?php require_once "../lib/config.php"; require_once "../model/employee_mdl.php"; require_once BASE_DIR."/lib/db/connection.php"; $ex_password=""; $newpassword=""; $confirmpassword=""; $error_flag=0; $ex_password=@$_POST['txtex_password']; $newpassword=@$_POST['txtnewpassword']; $confirmpassword=@$_POST['txtconfirmpassword']; $u_name=@$_SESSION['username']; //---------Null---/ if($ex_password=="") { $error['password_null']="Please Enter Existing password"; $error_flag=1; } if($newpassword=="") { $error['newpassword_null']="Please Enter newpassword"; $error_flag=1; } if($confirmpassword=="") { $error['confirmpassword_null']="Please Enter confirmpassword"; $error_flag=1; } if($confirmpassword!=$newpassword) { $error['confirm_null']="Password mismatch "; $error_flag=1; } $sql="SELECT * from `user` WHERE `user_name` = '$u_name'"; $sql=mysql_query($sql); while($row=mysql_fetch_array($sql)) { $ex_db_password=$row['passwd']; } if ($ex_db_password != $ex_password) { $error['password_null']=" Invalid password"; $error_flag=1; } if($error_flag==1) { include("changepassword.php"); exit(); } else { $sql="UPDATE `user` SET `passwd` = '$newpassword' WHERE `user_name` = '$u_name'"; mysql_query($sql); $test=mysql_affected_rows(); //echo mysql_affected_rows(); //exit(); //echo @$_SESSION['username'],$error_flag; exit(); if ($test>0) { $message="Password updated"; @$_SESSION['password']=$newpassword; include("changepassword.php"); exit(); } else { $message= "Not set"; exit(); } } /*if( is_uploaded_file($_FILES['photo']['tmp_name']) ) { $type = $_FILES['photo']['type']; if($arr_img_type[$type]=="bmp" || $arr_img_type[$type]=="gif" || $arr_img_type[$type]=="jpeg" || $arr_img_type[$type]=="png") { //$photo_url= "../photos/".$username.$image.".".$arr_img_type[$type]; $photo_url= "../photos/".$username.$image; // $result= Employee::photoCheck($username.$image.".".$arr_img_type[$type]); $result= Employee::photoCheck($username.$image); if($result != NULL) { $error['image']="Image name allready exists. Please rename the photo"; $error_flag=1; include("register.php"); exit(); } if( !move_uploaded_file($_FILES['photo']['tmp_name'],$photo_url) ) { $error_flag=1; $error['image']="Photo not uploaded"; include("register.php"); exit(); } } else { $error_flag=1; $error['image']="Invalid file format"; include("register.php"); exit(); } } if($error_flag==0) { $result= Employee::addStaff($staffcode,$name,$address,$designation,$division,$dob,$JD,$RD,$username.$image,$username,$password); if ($result==true) { $message="Registration Completed successfully.."; include("register.php"); exit(); } else { $message="Registration Failed.."; include("register.php"); exit(); } } } */ ?>