1 <?php
2 // 
3 // Postfix Admin 
4 // by Mischa Peters <mischa at high5 dot nl>
5 // Copyright (c) 2002 - 2005, 2021 High5!
6 // License Info: http://www.postfixadmin.com/?file=LICENSE.TXT
7 //
8 // File: password.php
9 //
10 // Template File: password.tpl
11 //
12 // Template Variables:
13 //
14 // tMessage
15 //
16 // Form POST \ GET Variables:
17 //
18 // fPassword_current
19 // fPassword
20 // fPassword2
21 //
22 require ("./variables.inc.php");
23 require ("./config.inc.php");
24 require ("./functions.inc.php");
25 include ("./languages/" . check_language () . ".lang");
26 
27 $SESSID_USERNAME = check_session ();
28 
29 if ($_SERVER['REQUEST_METHOD'] == "GET")
30 {
31    include ("./templates/header.tpl");
32    include ("./templates/menu.tpl");
33    include ("./templates/password.tpl");
34    include ("./templates/footer.tpl");
35 }
36 
37 if ($_SERVER['REQUEST_METHOD'] == "POST")
38 {
39    $fPassword_current = escape_string ($_POST['fPassword_current']);
40    $fPassword = escape_string ($_POST['fPassword']);
41    $fPassword2 = escape_string ($_POST['fPassword2']);
42 
43    $username = $SESSID_USERNAME;
44      
45   	$result = db_query ("SELECT * FROM admin WHERE username='$username'");
46    if ($result['rows'] == 1)
47    {
48       $row = db_array ($result['result']);
49       if (!password_verify($fPassword_current, $row['password']))
50       {
51          $error = 1;
52          $pPassword_password_current_text = $PALANG['pPassword_password_current_text_error'];
53       }
54    }
55    else
56    {
57       $error = 1;
58       $pPassword_email_text = $PALANG['pPassword_email_text_error']; 
59    }
60 
61 	if (empty ($fPassword) or ($fPassword != $fPassword2))
62 	{
63 	   $error = 1;
64       $pPassword_password_text = $PALANG['pPassword_password_text_error'];
65 	}
66 
67    if ($error != 1)
68    {
69       $password = pacrypt ($fPassword);
70       $result = db_query ("UPDATE admin SET password='$password',modified=NOW() WHERE username='$username'");
71       if ($result['rows'] == 1)
72       {
73          $tMessage = $PALANG['pPassword_result_succes'];
74       }
75       else
76       {
77          $tMessage = $PALANG['pPassword_result_error'];
78       }
79    }
80    
81    include ("./templates/header.tpl");
82    include ("./templates/menu.tpl");
83    include ("./templates/password.tpl");
84    include ("./templates/footer.tpl");
85 }
86 ?>