if(isset($_GET['changePass'])){
$username=$_GET['username'];
require_once("../connection.php");
$table="v1_pessoas_users";
$sql="SELECT * FROM $table WHERE username='$username'";
$query=mysqli_query($connect, $sql) or die($sql);
$fetch=mysqli_fetch_assoc($query);
}
if(isset($_POST['register'])){
// passsssss
if($_POST['pass']==$_POST['pass_repeat']){
// registo (testa se a password já existe para este user)
$table="passwords";
$pass=$_POST['pass'];
$idUser=$_POST['idUser'];
$sql="SELECT id FROM $table WHERE idUser=$idUser and pass = '$pass'";
$query=mysqli_query($connect, $sql);
$total=mysqli_num_rows($query);
if($total==0){
// posso registar
$sql="INSERT INTO $table (idUser, pass) VALUES ($idUser, '$pass')";
mysqli_query($connect, $sql);
$path="login.php";
} else {
// não posso
$path="?passwordInvalida&username=$username&changePass";
}
} else {
// não registo
$path="?erroPass&username=$username&changePass";
}
header("Location:$path");
}
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no">
<title>Change Password - TPW-BackOffice</title>
<meta name="description" content="Técnicas Avançadas de programação WEB Backoffice">
<link rel="stylesheet" href="assets/bootstrap/css/bootstrap.min.css">
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i">
<link rel="stylesheet" href="assets/fonts/fontawesome-all.min.css">
<style>
*{
border-radius: 5px !important;</style>
</head>
<body class="bg-gradient-primary">
<div class="container">
<div class="card shadow-lg o-hidden border-0 my-5">
<div class="card-body p-0">
<div class="row">
<div class="col-lg-5 d-none d-lg-flex">
<div class="flex-grow-1 bg-register-image" style="background-image: url("assets/img/dogs/image2.jpeg");"></div>
</div>
<div class="col-lg-7">
<div class="p-5">
<div class="text-center">
<h4 class="text-dark mb-4">Change password!</h4>
</div>
<?php if(isset($_GET['passwordInvalida'])){?>
<div class="text-center">
<div class="alert alert-warning alert-dismissible">
<button type="button" class="close" data-dismiss="alert">×</button>
<strong>Alteração de password!</strong> Terá de escolher uma password que nunca tenha sido utilizada</div></div>
<?php }?>
<?php if(isset($_GET['erroPass'])){?>
<div class="text-center">
<div class="alert alert-danger alert-dismissible">
<button type="button" class="close" data-dismiss="alert">×</button>
<strong>Alteração de password!</strong> As passwords têm de ser iguais</div></div>
<?php }?>
<form class="user" method="post">
<div class="form-group row">
<div class="col-sm-6 mb-3 mb-sm-0">
<input class="form-control form-control-user" readonly value="<?php echo $fetch['firstName'];?>">
</div>
<div class="col-sm-6">
<input class="form-control form-control-user" readonly value="<?php echo $fetch['lastName'];?>">
</div>
</div>
<div class="form-group">
<input class="form-control form-control-user" readonly value="<?php echo $fetch['username'];?>">
</div>
<div class="form-group row">
<div class="col-sm-6 mb-3 mb-sm-0"><input class="form-control form-control-user" type="password" id="examplePasswordInput" placeholder="Password" name="pass" required></div>
<div class="col-sm-6"><input class="form-control form-control-user" type="password" id="exampleRepeatPasswordInput" placeholder="Repeat Password" name="pass_repeat" required></div>
</div><button name="register" class="btn btn-primary btn-block text-white btn-user" type="submit">Change Password</button>
<hr>
<input type="hidden" name="idUser" value="<?php echo $fetch['idUser'];?>">
</form>
<div class="text-center"><a class="small" href="forgot-password.php">Forgot Password?</a></div>
<div class="text-center"><a class="small" href="login.php">Already have an account? Login!</a></div>
</div>
</div>
</div>
</div>
</div>
</div>
<script src="assets/js/jquery.min.js"></script>
<script src="assets/bootstrap/js/bootstrap.min.js"></script>
<script src="assets/js/chart.min.js"></script>
<script src="assets/js/bs-init.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.4.1/jquery.easing.js"></script>
<script src="assets/js/theme.js"></script>
</body>
</html>
Sem comentários:
Enviar um comentário