Files
bobsleighphotos.com/production/admin/sources/adminusers/changePass.inc.php
2017-03-02 20:30:40 -06:00

77 lines
3.0 KiB
PHP

<?php
/*
+--------------------------------------------------------------------------
| CubeCart 4
| ========================================
| CubeCart is a registered trade mark of Devellion Limited
| Copyright Devellion Limited 2006. All rights reserved.
| Devellion Limited,
| 5 Bridge Street,
| Bishops Stortford,
| HERTFORDSHIRE.
| CM23 2JU
| UNITED KINGDOM
| http://www.devellion.com
| UK Private Limited Company No. 5323904
| ========================================
| Web: http://www.cubecart.com
| Email: info (at) cubecart (dot) com
| License Type: CubeCart is NOT Open Source Software and Limitations Apply
| Licence Info: http://www.cubecart.com/site/faq/license.php
+--------------------------------------------------------------------------
| changePass.inc.php
| ========================================
| Change Admin Password
+--------------------------------------------------------------------------
*/
if(!defined('CC_INI_SET')) { die("Access Denied"); }
$lang = getLang("admin".CC_DS."admin_adminusers.inc.php");
if(isset($_POST['oldPass']) && isset($_POST['newPass']) && isset($_POST['confirmPass'])){
$query = sprintf("SELECT adminId FROM ".$glob['dbprefix']."CubeCart_admin_users WHERE password = %s AND adminId = %s",
$db->mySQLSafe(md5($_POST['oldPass'])),
$db->mySQLSafe($ccAdminData['adminId']));
$result = $db->select($query);
if($result == TRUE) {
$data['password'] = $db->mySQLSafe(md5($_POST['newPass']));
$update = $db->update($glob['dbprefix']."CubeCart_admin_users",$data,"adminId=".$result[0]['adminId']);
$msg = "<p class='infoText'>".$lang['admin']['adminusers_pass_updated']."</p>";
} else {
$msg = "<p class='warnText'>".$lang['admin']['adminusers_pass_not_updated']."</p>";
}
}
require($glob['adminFolder'].CC_DS."includes".CC_DS."header.inc.php");
if(isset($msg)){
echo msg($msg);
}
?>
<p class="pageTitle"><?php echo $lang['admin']['adminusers_change_password']; ?></p>
<form action="<?php echo $glob['adminFile']; ?>?_g=adminusers/changePass" method="post" enctype="multipart/form-data" name="login" target="_self">
<table border="0" align="center" cellpadding="3" cellspacing="1" class="mainTable">
<tr>
<td colspan="2" class="tdTitle"><?php echo $lang['admin']['adminusers_change_pass_below']; ?></td>
</tr>
<tr>
<td class="tdText"><?php echo $lang['admin']['adminusers_old_pass']; ?></td>
<td><input name="oldPass" type="password" id="oldPass" class="textbox" /></td>
</tr>
<tr>
<td class="tdText"><?php echo $lang['admin']['adminusers_new_pass']; ?></td>
<td><input name="newPass" type="password" id="newPass" class="textbox" /></td>
</tr>
<tr>
<td class="tdText"><?php echo $lang['admin']['adminusers_confirm_pass']; ?></td>
<td><input name="confirmPass" type="password" id="confirmPass" class="textbox" /></td>
</tr>
<tr>
<td>&nbsp;</td>
<td><input name="login" type="submit" class="submit" id="login" value="<?php echo $lang['admin']['adminusers_update_pass']; ?>" /></td>
</tr>
</table>
</form>