1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / earnlouq / tapnaire.live / manager /
Filename : change-password.php
back
<?php
session_start();
error_reporting(0);
include('../../config/conn.php');
include('include/checklogin.php');
check_login();
$title="UChange Password";
$currentTime = date( 'd-m-Y h:i:s A', time () );

$aid=$_SESSION['id'];

if (isset($_POST['submit'])) {
    $aid = $_SESSION['id'];
    $password = $_POST['password'];  // Current password
    $newpassword = $_POST['npassword'];  // New password
    $confirmnewpassword = $_POST['cpassword'];  // Confirm new password
    
    // Fetch the current hashed password from the database
    $sql = "SELECT `password` FROM `admin` WHERE `id` = ?";
    $stmt = $con->prepare($sql);
    $stmt->bind_param("i", $aid); // "i" denotes integer parameter type
    $stmt->execute();
    $stmt->store_result();
    $stmt->bind_result($storedPassword);
    $stmt->fetch();
    
    // Check if the current password matches the stored password
    if ($stmt->num_rows > 0) {
        // Verify the entered password with the stored hashed password
        if (!password_verify($password, $storedPassword)) {
            $msg = "The current password is not correct!";
        } elseif ($newpassword === $confirmnewpassword) {
            // Hash the new password
            $newpasswordHash = password_hash($newpassword, PASSWORD_DEFAULT);
            
            // Prepare the update query to change the password
            $updateSql = "UPDATE `admin` SET `password` = ?, `updationDate` = ? WHERE `id` = ?";
            $updateStmt = $con->prepare($updateSql);
            
            // Get the current time for updation date
            $currentTime = date("Y-m-d H:i:s");

            // Bind parameters and execute the query
            $updateStmt->bind_param("ssi", $newpasswordHash, $currentTime, $aid);
            
            if ($updateStmt->execute()) {
                $msg = "Password Successfully Updated!!";
            } else {
                $msg = "Something went wrong. Please try again.";
            }
        } else {
            $msg = "Passwords do not match!";
        }
    } else {
        $msg = "The user does not exist!";
    }
}
?>


<?php include('include/header.php');?>
		
<?php include('include/sidebar.php');?>

<div class="container-fluid py-4">
      <div class="row">
        <div class="col-12">
          <div class="card mb-4">
            
            <div class="card-body px-0 pt-0 pb-2">
              <div class="table-responsive p-0">
			  <p style="padding-left:10vw;color:#cb0c9f;padding-top:10px;">	<?php if($msg) { echo htmlentities($msg);}?></p> 
         

<div style="margin:2%;">
<div class="form-group text-box" >

<h4>Change Password </h4>

<?php 
 if(isset($data['updationDate'])) {
  ?>
<p><b>Password Last Update Date: </b><?php echo htmlentities($data['updationDate']);?></p>
<?php   }?>
<hr />
<form role="form"  method="post" action="">
<div class="form-group">
<label for="status">
 <br>Old Password 
</label>
<input type="password" name="password" class="form-control" >
</div>
<div class="form-group">
<label for="status">
 <br>New Password 
</label>
<input type="password" name="npassword" class="form-control" >
</div>
  <div class="form-group">
  <label for="status">
  Confirm New Password</label>
<input type="password" name="cpassword" class="form-control" >
          </div>    
		  <div class="mt-2">
	<button type="submit" name="submit" class="btn btn-o btn-primary">
															Change Password
														</button>
 </div>
													</form>
												
              </div>
            </div>
          </div>
        </div>
      </div>




<?php include('include/footer.php');?>