BossBey File Manager

Editing: change_password.php

<?php
include_once("auth_incl.php");
include_once("db_connect_incl.php");
include_once("settings_incl.php");

$action=$_POST['action'];

if (($rez>0)&&($rez<100)) {
	
    if ($action=='change_user') {
//******************* CHANGE USER SCRIPT *******************
$oldpass=$_POST['oldpass'];
$id=$login.$oldpass;
$usid=md5($id);
$cryp=date(d).date(m).date(y).$usid;
$usid=md5($cryp);
if ($usid==$sid) {
	$newpass=$_POST['newpass'];
	$newpassconf=$_POST['newpassconf'];
	if (($newpass==$newpassconf)&&($newpass!='')) {
		$id=$login.$newpass;
		$sid=md5($id);
		$sql_query="update users set sid='$sid' where name='$login';";
		mysql_query($sql_query);
		$cryp=date(d).date(m).date(y).$sid;
		$sid=md5($cryp);
		Header("Location:http://$domain/index.php?section=admin&ch_pass_result=ok&sid=$sid&login=$login"); 
	}
	else {
		Header("Location:http://$domain/index.php?section=admin&ch_pass_result=noagreement$add");
	}
}
else {
	Header("Location:http://$domain/index.php?section=admin&ch_pass_result=invalidoldpass$add");
}
//***************** END CHANGE USER SCRIPT *****************
   }
   
}
?>

Cancel