0byt3m1n1
Path:
C:
/
wamp64
/
www
/
cpms_new
/
USER
/
[
Home
]
File: changepassword_ctrl.php
<?php require_once "../lib/config.php"; require_once "../model/employee_mdl.php"; require_once BASE_DIR."/lib/db/connection.php"; $ex_password=""; $newpassword=""; $confirmpassword=""; $error_flag=0; $ex_password=@$_POST['txtex_password']; $newpassword=@$_POST['txtnewpassword']; $confirmpassword=@$_POST['txtconfirmpassword']; $user_id=@$_SESSION['user_id']; //---------Null---/ if($ex_password=="") { $error['password_null']="Please Enter Existing password"; $error_flag=1; } if($newpassword=="") { $error['newpassword_null']="Please Enter newpassword"; $error_flag=1; } if($confirmpassword=="") { $error['confirmpassword_null']="Please Enter confirmpassword"; $error_flag=1; } if($confirmpassword!=$newpassword) { $error['confirm_null']="Password mismatch "; $error_flag=1; } $sql = "SELECT `passwd` FROM `user` WHERE `user_id` = ?"; $stmt = $con->prepare($sql); $stmt->bind_param("i", $user_id); $stmt->execute(); $result = $stmt->get_result(); $ex_db_password = null; if ($result->num_rows > 0) { $row = $result->fetch_assoc(); $ex_db_password = $row['passwd']; } if ($ex_db_password !== $ex_password) { $error['password_null'] = "Invalid password"; $error_flag = 1; } if ($error_flag == 1) { include("changepassword.php"); exit(); } else { $sql = "UPDATE `user` SET `passwd` = ? WHERE `user_id` = ?"; $stmt = $con->prepare($sql); $stmt->bind_param("si", $newpassword, $user_id); $stmt->execute(); $affected_rows = $stmt->affected_rows; if ($affected_rows > 0) { $message = "Password updated"; @$_SESSION['password'] = $newpassword; $url = $server_ip . "user/changepassword.php?message=$message"; echo "<script>window.location='$url'</script>"; exit(); } else { $message = "Not set"; $url = $server_ip . "user/changepassword.php?message=$message"; echo "<script>window.location='$url'</script>"; exit(); } } ?>