Initial commit

production/admin/sources/adminusers/changePass.inc.php

@@ -0,0 +1,77 @@
+<?php 
+/*
++--------------------------------------------------------------------------
+|   CubeCart 4
+|   ========================================
+|	CubeCart is a registered trade mark of Devellion Limited
+|   Copyright Devellion Limited 2006. All rights reserved.
+|   Devellion Limited,
+|   5 Bridge Street,
+|   Bishops Stortford,
+|   HERTFORDSHIRE.
+|   CM23 2JU
+|   UNITED KINGDOM
+|   http://www.devellion.com
+|	UK Private Limited Company No. 5323904
+|   ========================================
+|   Web: http://www.cubecart.com
+|   Email: info (at) cubecart (dot) com
+|	License Type: CubeCart is NOT Open Source Software and Limitations Apply 
+|   Licence Info: http://www.cubecart.com/site/faq/license.php
++--------------------------------------------------------------------------
+|	changePass.inc.php
+|   ========================================
+|	Change Admin Password
++--------------------------------------------------------------------------
+*/
+
+if(!defined('CC_INI_SET')) { die("Access Denied"); }
+
+$lang = getLang("admin".CC_DS."admin_adminusers.inc.php");
+
+if(isset($_POST['oldPass']) && isset($_POST['newPass']) && isset($_POST['confirmPass'])){
+	
+	$query = sprintf("SELECT adminId FROM ".$glob['dbprefix']."CubeCart_admin_users WHERE password = %s AND adminId = %s", 
+						$db->mySQLSafe(md5($_POST['oldPass'])),
+						$db->mySQLSafe($ccAdminData['adminId']));
+ 
+	$result = $db->select($query);
+	
+	
+	if($result == TRUE) {
+		$data['password'] = $db->mySQLSafe(md5($_POST['newPass']));
+		$update = $db->update($glob['dbprefix']."CubeCart_admin_users",$data,"adminId=".$result[0]['adminId']);
+		$msg = "<p class='infoText'>".$lang['admin']['adminusers_pass_updated']."</p>";	
+	} else {
+		$msg = "<p class='warnText'>".$lang['admin']['adminusers_pass_not_updated']."</p>";
+	}
+}
+require($glob['adminFolder'].CC_DS."includes".CC_DS."header.inc.php"); 
+if(isset($msg)){ 
+	echo msg($msg); 
+}
+?>
+<p class="pageTitle"><?php echo $lang['admin']['adminusers_change_password']; ?></p>
+<form action="<?php echo $glob['adminFile']; ?>?_g=adminusers/changePass" method="post" enctype="multipart/form-data" name="login" target="_self">
+<table border="0" align="center" cellpadding="3" cellspacing="1" class="mainTable">
+  <tr>
+    <td colspan="2" class="tdTitle"><?php echo $lang['admin']['adminusers_change_pass_below']; ?></td>
+    </tr>
+  <tr>
+    <td class="tdText"><?php echo $lang['admin']['adminusers_old_pass']; ?></td>
+    <td><input name="oldPass" type="password" id="oldPass" class="textbox" /></td>
+  </tr>
+  <tr>
+    <td class="tdText"><?php echo $lang['admin']['adminusers_new_pass']; ?></td>
+    <td><input name="newPass" type="password" id="newPass" class="textbox" /></td>
+  </tr>
+  <tr>
+    <td class="tdText"><?php echo $lang['admin']['adminusers_confirm_pass']; ?></td>
+    <td><input name="confirmPass" type="password" id="confirmPass" class="textbox" /></td>
+  </tr>
+  <tr>
+    <td>&nbsp;</td>
+    <td><input name="login" type="submit" class="submit" id="login" value="<?php echo $lang['admin']['adminusers_update_pass']; ?>" /></td>
+  </tr>
+</table>
+</form>