0byt3m1n1
Path:
C:
/
wamp64
/
www
/
cpms_new
/
SO
/
[
Home
]
File: changepassword_ctrl.php
<?php require_once "../lib/config.php"; require_once "../model/employee_mdl.php"; require_once BASE_DIR."/lib/db/connection.php"; $ex_password=""; $newpassword=""; $confirmpassword=""; $error_flag=0; $ex_password=@$_POST['txtex_password']; $newpassword=@$_POST['txtnewpassword']; $confirmpassword=@$_POST['txtconfirmpassword']; $user_id=@$_SESSION['user_id']; //---------Null---/ if($ex_password=="") { $error['password_null']="Please Enter Existing password"; $error_flag=1; } if($newpassword=="") { $error['newpassword_null']="Please Enter newpassword"; $error_flag=1; } if($confirmpassword=="") { $error['confirmpassword_null']="Please Enter confirmpassword"; $error_flag=1; } if($confirmpassword!=$newpassword) { $error['confirm_null']="Password mismatch "; $error_flag=1; } $sql="SELECT * from `user` WHERE `user_id` = '$user_id'"; $sql=mysql_query($sql); while($row=mysql_fetch_array($sql)) { $ex_db_password=$row['passwd']; } if ($ex_db_password != $ex_password) { $error['password_null']=" Invalid password"; $error_flag=1; } if($error_flag==1) { include("changepassword.php"); exit(); } else { $sql="UPDATE `user` SET `passwd` = '$newpassword' WHERE `user_id` = '$user_id'"; mysql_query($sql); $test=mysql_affected_rows(); if ($test>0) { $message="Password updated"; @$_SESSION['password']=$newpassword; $url=$server_ip."ED/changepassword.php?message=$message"; echo "<script>window.location='$url'</script>"; exit(); } else { $message= "Not set"; $url=$server_ip."ED/changepassword.php?message=$message"; echo "<script>window.location='$url'</script>"; exit(); } } ?>