| Current Path : /home/bolconlineco/www/aaaaaa/tutor/ |
| Current File : /home/bolconlineco/www/aaaaaa/tutor/changepassword.php |
<?php
ob_start();
session_start();
include('header.php');
if(!isset($_SESSION['tutor']) || $_SESSION['tutorrole'] != 3) {
header("location:../index.php");
exit();
} ?>
<script language="javascript" src="../coordinator/includes/jquery.js"></script>
<?php if(isset($_GET['rollno'])) {
$rollno=sql_strip($_GET['rollno']);
}
if(isset($_GET['error'])) { ?>
<div class="alert alert-danger"> Your new new password and confirm password must be match</div>
<?php } else if(isset($_GET['ex'])) { ?>
<div class="alert alert-danger">Enter your old password</div>
<?php } else if(isset($_GET['ok'])) { ?>
<div class="alert alert-danger"> Password change Successfully</div>
<?php } ?>
<h3 class="page-title">Password Management</h3>
<ul class="page-breadcrumb breadcrumb">
<li><i class="fa fa-home"></i> <a href="dashbord.php"> Home </a> <i class="fa fa-angle-right"></i> </li>
<li class="active">Password Management</li>
</ul>
<form action="" method="post" class="form-horizental">
<div class="form-group clearfix">
<label for="oldpassword" class="col-sm-2 control-label">Old Password : </label>
<div class="col-sm-6">
<input type="password" name="oldpassword" class="form-control" required/>
</div>
</div>
<div class="form-group clearfix">
<label for="newpassword" class="col-sm-2 control-label">New Password : </label>
<div class="col-sm-6">
<input type="password" name="newpassword" class="form-control" required/>
</div>
</div>
<div class="form-group clearfix">
<label for="confirmpassword" class="col-sm-2 control-label">Confirm Password : </label>
<div class="col-sm-6">
<input type="password" name="confirmpassword" class="form-control" required/>
</div>
</div>
<div class="form-group clearfix">
<div class="col-sm-6 col-sm-offset-2">
<input class="add2 btn btn-success" type="submit" name="update-pass" value="Update" />
</div>
</div>
</form>
</div>
</div>
</div>
</div>
<div id="data">
</div>
</div> <!-- end content -->
</div><!-- end wrapper -->
<?php
if(isset($_POST['update-pass']))
{
$old = md5(sql_strip($_POST['oldpassword']));
$new = md5(sql_strip($_POST['newpassword']));
$newconfirm = md5(sql_strip($_POST['confirmpassword']));
if($new != $newconfirm)
{
header("location:changepassword.php?error");
exit();
}
else
{
$sql="select adminId from admin where userPass = '$old'";
$result=mysql_query($sql) or die(mysql_error());
if(mysql_num_rows($result) == 1)
{
$sql="update admin set userPass='$new' where userPass='$old'";
$result=mysql_query($sql) or die(mysql_error());
header("location:changepassword.php?ok");
exit();
}
else
{
header("location:changepassword.php?ex");
exit();
}
}
}
?>
<?php include('../includes/footer.php');?>