0byt3m1n1
Path:
C:
/
wamp64
/
www
/
cpms_new
/
ADMIN
/
[
Home
]
File: changepassword_ctrl.php
<?php require_once "../lib/config.php"; require_once "../model/employee_mdl.php"; require_once BASE_DIR."/lib/db/connection.php"; $servername = "localhost"; $username = "root"; $password = ""; $dbname = "cpms"; $con= mysqli_connect($servername, $username, $password, $dbname); $ex_password=""; $newpassword=""; $confirmpassword=""; $error_flag=0; $ex_password=@$_POST['txtex_password']; $newpassword=@$_POST['txtnewpassword']; $confirmpassword=@$_POST['txtconfirmpassword']; $user_id=@$_SESSION['user_id']; //---------Null---/ if($ex_password=="") { $error['password_null']="Please Enter Existing password"; $error_flag=1; } if($newpassword=="") { $error['newpassword_null']="Please Enter newpassword"; $error_flag=1; } if($confirmpassword=="") { $error['confirmpassword_null']="Please Enter confirmpassword"; $error_flag=1; } if($confirmpassword!=$newpassword) { $error['confirm_null']="Password mismatch "; $error_flag=1; } $sql = "SELECT * FROM `user` WHERE `user_id` = '$user_id'"; $result = mysqli_query($con, $sql); if (!$result) { die("Error: " . mysqli_error($con)); // Handle the error appropriately } $row = mysqli_fetch_assoc($result); $ex_db_password = $row['passwd']; if ($ex_db_password !== $ex_password) { $error['password_null'] = "Invalid password"; $error_flag = 1; } if ($error_flag == 1) { include("changepassword.php"); exit(); } else { $sql = "UPDATE `user` SET `passwd` = '$newpassword' WHERE `user_id` = '$user_id'"; $update_result = mysqli_query($con, $sql); if ($update_result) { $message = "Password updated"; $_SESSION['password'] = $newpassword; $url = $server_ip . "/ADMIN/changepassword.php?message=$message"; echo "<script>window.location='$url'</script>"; exit(); } else { $message = "Error updating password"; $url = $server_ip . "/ADMIN/changepassword.php?message=$message"; echo "<script>window.location='$url'</script>"; exit(); } }