File manager

File manager - Edit - /home/familylifersmpc/htdocs/www.familylifersmpc.com/change-password.php

Back
<?php session_start(); error_reporting(0); include('includes/config.php'); $sid = $_SESSION['alogin']; if (strlen($_SESSION['alogin']) == "") { header("Location: login.php"); } else { if (isset($_POST['submit'])) { $password = hash('sha256', $_POST['password']); $newpassword = hash('sha256', $_POST['newpassword']); $username = $_SESSION['alogin']; $sql = "SELECT * FROM usersupdated WHERE uname=:uname and password=:password"; $query = $dbh->prepare($sql); $query->bindParam(':uname', $sid, PDO::PARAM_STR); $query->bindParam(':password', $password, PDO::PARAM_STR); $query->execute(); $results = $query->fetchAll(PDO::FETCH_OBJ); if ($query->rowCount() > 0) { $con = "update usersupdated set password=:newpassword where uname=:username"; $chngpwd1 = $dbh->prepare($con); $chngpwd1->bindParam(':username', $username, PDO::PARAM_STR); $chngpwd1->bindParam(':newpassword', $newpassword, PDO::PARAM_STR); $chngpwd1->execute(); $con = "update users set password=:newpassword where uname=:username"; $chngpwd1 = $dbh->prepare($con); $chngpwd1->bindParam(':username', $username, PDO::PARAM_STR); $chngpwd1->bindParam(':newpassword', $newpassword, PDO::PARAM_STR); $chngpwd1->execute(); $msg = " Your Password succesfully changed"; } else { $password = hash('sha256', $_POST['password']); $newpassword = hash('sha256', $_POST['newpassword']); $username = $_SESSION['alogin']; $sql = "SELECT password FROM users WHERE uname=:username and password=:password"; $query = $dbh->prepare($sql); $query->bindParam(':username', $username, PDO::PARAM_STR); $query->bindParam(':password', $password, PDO::PARAM_STR); $query->execute(); $results = $query->fetchAll(PDO::FETCH_OBJ); if ($query->rowCount() > 0) { $sql = "SELECT * FROM usersupdated WHERE uname=:username"; $query = $dbh->prepare($sql); $query->bindParam(':username', $username, PDO::PARAM_STR); $query->execute(); $results = $query->fetchAll(PDO::FETCH_OBJ); if ($query->rowCount() > 0) { $error = " Your current password is incorrect"; } else { $con = "update users set password=:newpassword where uname=:username"; $chngpwd1 = $dbh->prepare($con); $chngpwd1->bindParam(':username', $username, PDO::PARAM_STR); $chngpwd1->bindParam(':newpassword', $newpassword, PDO::PARAM_STR); $chngpwd1->execute(); $chngpwd1 = $dbh->prepare("SELECT * FROM users WHERE uname=:username"); $chngpwd1->execute(['username' => $username]); $user = $chngpwd1->fetch(); $data = [ 'password' => $newpassword, 'username' => $username, 'name1' => $user['cname'], ]; $sql = "INSERT INTO usersupdated (password,uname,cname) VALUES (:password, :username, :name1)"; $chngpwd1 = $dbh->prepare($sql); $chngpwd1->execute($data); $msg = " Your Password succesfully changed"; } } } } ?> <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="favicon.ico" type="image/icon type"> <?php $sql = "SELECT * FROM tblsettings"; $query = $dbh->prepare($sql); $query->execute(); $results = $query->fetchAll(PDO::FETCH_OBJ); $cnt = 1; if ($query->rowCount() > 0) { foreach ($results as $result) { ?> <?php $BGCOLOR = $result->BGCOLOR; $COLOR1 = $result->COLOR1; $COLOR2 = $result->COLOR2; ?> <?php $cnt = $cnt + 1; } } ?> <meta name="theme-color" content="<?php echo htmlentities($BGCOLOR); ?>" /> <title>Change Password</title> <link rel="stylesheet" href="css/bootstrap.css" media="screen"> <link rel="stylesheet" href="css/font-awesome.min.css" media="screen"> <link rel="stylesheet" href="css/animate-css/animate.min.css" media="screen"> <link rel="stylesheet" href="css/lobipanel/lobipanel.min.css" media="screen"> <link rel="stylesheet" href="css/prism/prism.css" media="screen"> <!-- USED FOR DEMO HELP - YOU CAN REMOVE IT --> <link rel="stylesheet" href="css/main.css" media="screen"> <script src="js/modernizr/modernizr.min.js"></script> <script type="text/javascript"> function valid() { if (document.chngpwd.newpassword.value != document.chngpwd.confirmpassword.value) { alert("New Password and Confirm Password Field do not match !!"); document.chngpwd.confirmpassword.focus(); return false; } return true; } </script> <style> .errorWrap { padding: 10px; margin: 0 0 20px 0; background: #fff; border-left: 4px solid #dd3d36; -webkit-box-shadow: 0 1px 1px 0 rgba(0, 0, 0, .1); box-shadow: 0 1px 1px 0 rgba(0, 0, 0, .1); } .succWrap { padding: 10px; margin: 0 0 20px 0; background: #fff; border-left: 4px solid #5cb85c; -webkit-box-shadow: 0 1px 1px 0 rgba(0, 0, 0, .1); box-shadow: 0 1px 1px 0 rgba(0, 0, 0, .1); .button1 { background-color: #F7DC6F; } /* Green */ } </style> </head> <body class="top-navbar-fixed"> <div class="main-wrapper"> <?php include('includes/topbar.php'); ?> <div class="content-wrapper"> <div class="content-container"> <?php include('includes/leftbar.php'); ?> <!-- /.left-sidebar --> <div class="main-page"> <div class="container-fluid"> <div class="row page-title-div"> <div class="col-md-0"> <h2 class="title"><strong>Change my password</strong></h2> </div> </div> <!-- /.row --> <div class="row breadcrumb-div"> <div class="col-md-0"> <ul class="breadcrumb"> <li><a href="dashboard.php"><i class="fa fa-home"></i> <strong>Home</strong></a></li> <li class="active">Change my password</li> </ul> </div> </div> <!-- /.row --> </div> <!-- /.container-fluid --> <section class="section"> <div class="container-fluid"> <div class="row"> <div class="col-md-8 col-md-offset-2"> <div class="panel"> <?php if ($msg) { ?> <div class="alert alert-info left-icon-alert" role="alert"> <strong>Well done!</strong><?php echo htmlentities($msg); ?> </div><?php } else if ($error) { ?> <div class="alert alert-danger left-icon-alert" role="alert"> <strong>Oh snap!</strong> <?php echo htmlentities($error); ?> </div> <?php } ?> <div class="panel-body"> <form name="chngpwd" method="post" \ onSubmit="return valid();"> <div class="form-group"> <label for="success" class="control-label">Current Password</label> <div class=""> <input type="password" name="password" class="form-control" required="required" id="success"> </div> </div> <div class="form-group"> <label for="success" class="control-label">New Password</label> <div class=""> <input type="password" name="newpassword" required="required" class="form-control" id="success"> </div> </div> <div class="form-group"> <label for="success" class="">Confirm Password</label> <div class=""> <input type="password" name="confirmpassword" class="form-control" required="required" id="success"> </div> </div> <div class="form-group has-success"> <div class="button"> <button type="submit" name="submit" class="btn btn-primary btn-labeled pull-right">Change<span class="btn-label btn-label-right button1"><i class="fa fa-check"></i></span></button> </div> </form> </div> </div> </div> <!-- /.col-md-8 col-md-offset-2 --> </div> <!-- /.row --> </div> <!-- /.container-fluid --> </section> <!-- /.section --> </div> <!-- /.main-page --> </div> <!-- /.content-container --> </div> <!-- /.content-wrapper --> </div> <!-- /.main-wrapper --> <!-- ========== COMMON JS FILES ========== --> <script src="js/jquery/jquery-2.2.4.min.js"></script> <script src="js/jquery-ui/jquery-ui.min.js"></script> <script src="js/bootstrap/bootstrap.min.js"></script> <script src="js/pace/pace.min.js"></script> <script src="js/lobipanel/lobipanel.min.js"></script> <script src="js/iscroll/iscroll.js"></script> <!-- ========== PAGE JS FILES ========== --> <script src="js/prism/prism.js"></script> <!-- ========== THEME JS ========== --> <script src="js/main.js"></script> <!-- ========== ADD custom.js FILE BELOW WITH YOUR CHANGES ========== --> </body> </html> <?php } ?>

| ver. 1.4 | Github | . | PHP 7.4.33 | Generation time: 0.01 | proxy | phpinfo | Settings