session_start(); if (!session_is_registered("LLC")) { // if session check fails, invoke error handler header("Location: /error.php?e=1"); exit(); } else { $user = $_SESSION['UNAME']; $oldpass = $_POST["oldpass"]; $newpass1 = $_POST["newpass1"]; $newpass2 = $_POST["newpass2"]; include(dirname(__FILE__)."/llc/includes/dbconfig.php"); $connection = mysql_connect($db_host, $db_user, $db_pass) or die ("Unable to connect!"); $query = "SELECT GroupID from userlist WHERE username = '$user' AND password = OLD_PASSWORD('$oldpass')"; mysql_select_db($db_name); $result = mysql_query($query, $connection) or die ("Error in query: $query. " . mysql_error()); // if row exists -> user/pass combination is correct if (mysql_num_rows($result) == 1) { //check new password if ($newpass1 != $newpass2) { header("Location: /error.php?e=6"); exit(); } //update password $query = "update userlist set Password = OLD_PASSWORD('$newpass1') where UserName = '$user'"; mysql_query($query, $connection) or die ("Error in query: $query. " . mysql_error()); if (mysql_affected_rows() != 1) { header("Location: /error.php?e=7"); exit(); } } // user/pass combination is wrong else { header("Location: /error.php?e=4"); exit(); } } ?>
Staff Login -- My Account |
Changed PasswordYour password has been changed. This has NOT changed your personal information. Please return to the previous page to update your personal information. |