0byt3m1n1
Path:
C:
/
GEOMATICS 23-01-2021
/
LAN
/
CPMS
/
USER
/
[
Home
]
File: changepassword_ctrl.php
<?php require_once "../lib/config.php"; require_once BASE_DIR."/lib/db/connection.php"; //include("../model/employee_mdl.php"); $ex_password=""; $newpassword=""; $confirmpassword=""; $error_flag=0; $ex_password=@$_POST['txtexpasswd']; $newpassword=@$_POST['txtnewpasswd']; $confirmpassword=@$_POST['txtconfirmpasswd']; $u_name=@$_SESSION['username']; //---------Null---/ if($ex_password=="") { $error['password_null']="Please Enter Existing password"; $error_flag=1; } if($newpassword=="") { $error['newpassword_null']="Please Enter newpassword"; $error_flag=1; } if($confirmpassword=="") { $error['confirmpassword_null']="Please Enter confirmpassword"; $error_flag=1; } if($confirmpassword!=$newpassword) { $error['confirm_null']=" Password mismatch ReEnter confirmpassword"; $error_flag=1; } $sql="SELECT * from `user` WHERE `user_name` = '$u_name'"; $sql=mysql_query($sql); while($row=mysql_fetch_array($sql)) { $ex_db_password=$row['passwd']; } if ($ex_db_password != $ex_password) { $error['password_invalid']=" Invalid password"; $ex_password=""; $error_flag=1; } if($error_flag==1) { /*echo "<script>window.location='http://localhost/CPFMS/USER/changepassword.php'</script>";*/ include("changepassword.php"); exit(); } else { $sql="UPDATE `user` SET `passwd` = '$newpassword' WHERE `user_name` = '$u_name'"; mysql_query($sql); $test=mysql_affected_rows(); //echo mysql_affected_rows(); //exit(); //echo @$_SESSION['username'],$error_flag; exit(); if ($test>0) { $message="Password updated"; @$_SESSION['password']=$newpassword; include("changepassword.php"); exit(); } else { $message= "Not set"; exit(); } } ?>