mySQLSafe($ccAdminData['adminId']);
$salt = $db->select($query);
$query = sprintf("SELECT `adminId` FROM ".$glob['dbprefix']."CubeCart_admin_users WHERE `password` = %s AND `adminId` = %s",
$db->mySQLSafe(md5(md5($salt[0]['salt']).md5($_POST['oldPass']))),
$db->mySQLSafe($ccAdminData['adminId']));
$result = $db->select($query);
if($result == true) {
$salt = randomPass(6);
$data['salt'] = $db->mySQLSafe($salt);
$data['password'] = $db->mySQLSafe(md5(md5($salt).md5($_POST['newPass'])));
$update = $db->update($glob['dbprefix']."CubeCart_admin_users",$data,"adminId=".$result[0]['adminId']);
$msg = "".$lang['admin']['adminusers_pass_updated']."
";
} else {
$msg = "".$lang['admin']['adminusers_pass_not_updated']."
";
}
}
require($glob['adminFolder'].CC_DS."includes".CC_DS."header.inc.php");
if(isset($msg)){
echo msg($msg);
}
?>