Your IP : 216.73.216.79

Current Path : /var/www/html/ebilikparlimen1/ebilik/ks_user/
Upload File :
Current File : /var/www/html/ebilikparlimen1/ebilik/ks_user/changepassword_handler.php

<?php

include_once '../library.php';

if (! class_exists ( 'CUSTOM_User' )) {
	echo "Class User doesn't exist! Use Class Generator to create it. Otherwise the forms will not work.";
	exit ();
}

session_start ();
$ks_session_group = KSCONFIG_DB_NAME;
$id = $_SESSION [$ks_session_group] ['USR_ID'];

if (! strlen ( $id )) {
	header ( "Location: login.php?msg=notlogin" );
	exit ();
}

$objUser = new CUSTOM_User_Base ();
$objUser->setId ( $id );
if (! $objUser->exists ()) {
	header("Location: login.php?msg=notlogin");
	exit ();
}
$objUser->select();

$currentPwd = KS_Filter::inputSanitize ( $_POST ['currentPwd'] );
$newPwd = KS_Filter::inputSanitize ( $_POST ['newPwd'] );

//check if password is the same
if (md5 ( $currentPwd  . $objUser->getSalt() ) != $objUser->getPassword ()) {
	header ( "Location: changepassword.php?msg=wrong_current" );
	exit ();
}

//now change it
$objUser->setPassword ( md5 ( $newPwd . $objUser->getSalt() ) );
$objUser->update ();

$objAudittrail = new KS_Audittrail ();
$objAudittrail->setTablename1 ( 't_user' );
$objAudittrail->setRecordid1 ( $objUser->getId () );
$objAudittrail->setDatetime ( date ( "Y-m-d H:i:s" ) );
$objAudittrail->setAction ( 'profile_update' );
$objAudittrail->setUserid ( $objUser->getId () );
$objAudittrail->setIpno ( $_SERVER ['REMOTE_ADDR'] );
$objAudittrail->setFilename ( 'ks_user/changepassword.php' );
$objAudittrail->setDetail ( "{$objUser->getId()} changed own password." );
$objAudittrail->insert ();

header ( "Location: profile.php?msg=updated_password&id={$objUser->getId()} " );