From 75f1fa5c96dfdc2c34f4c660c67db350b5875001 Mon Sep 17 00:00:00 2001
From: Kelly Rauchenberger <fefferburbia@gmail.com>
Date: Sun, 7 Sep 2008 15:37:58 +0000
Subject: Series: Added change password form

Refs #53
---
 series/core/trunk/admin/chpwd.php           | 132 ++++++++++++++++++++++++++++
 series/core/trunk/theme/changedpassword.tpl |  13 +++
 series/core/trunk/theme/changepassword.tpl  |  74 ++++++++++++++++
 3 files changed, 219 insertions(+)
 create mode 100644 series/core/trunk/admin/chpwd.php
 create mode 100644 series/core/trunk/theme/changedpassword.tpl
 create mode 100644 series/core/trunk/theme/changepassword.tpl

diff --git a/series/core/trunk/admin/chpwd.php b/series/core/trunk/admin/chpwd.php
new file mode 100644
index 0000000..2f5368d
--- /dev/null
+++ b/series/core/trunk/admin/chpwd.php
@@ -0,0 +1,132 @@
+<?php
+
+/* InstaDisc Series - A Four Island Project */
+
+/** 
+ * require_once() is used to ensure
+ * the ACP files are being called by
+ * admin.php instead of their actual
+ * locations admin/.
+ * The _once() part ensures no problem
+ * arises as includes/instadisc.php has
+ * already been included from admin.php
+ */
+require_once('includes/instadisc.php');
+
+if (!isset($_SESSION['username']))
+{
+	header('Location: index.php');
+}
+
+if (isset($_SESSION['username']))
+{
+	if (!isset($_GET['submit']))
+	{
+		showForm('','','',array());
+	} else {
+		$numOfErrors = 0;
+		$errors = array();
+
+		if ($_POST['old'] == '')
+		{
+			addError($numOfErrors, $errors, 'old', 'Old Password is a required field');
+		} else {
+			if (!instaDisc_verifyUser($_SESSION['username'], $_POST['old']))
+			{
+				addError($numOfErrors, $errors, 'old', 'Old password is not correct');
+			}
+		}
+
+		if ($_POST['new'] == '')
+		{
+			addError($numOfErrors, $errors, 'new', 'New Password is a required field');
+		}
+
+		if ($_POST['confirm'] == '')
+		{
+			addError($numOfErrors, $errors, 'confirm', 'Confirm New Password is a required field');
+		}
+
+		if ($_POST['new'] != $_POST['confirm'])
+		{
+			addError($numOfErrors, $errors, 'confirm', 'Passwords do not match');
+		}
+
+		if ($numOfErrors > 0)
+		{
+			showForm($_POST['old'], $_POST['new'], $_POST['confirm'], $errors);
+		} else {
+			instaDisc_changePassword( $_POST['new']);
+
+			$template = new FITemplate('changedpassword');
+			$template->add('SITENAME', instaDisc_getConfig('siteName'));
+			$template->display();
+		}
+	}
+} else {
+	header('Location: index.php');
+}
+
+function showForm($old, $new, $confirm, $errors)
+{
+	$template = new FITemplate('changepassword');
+	$template->add('SITENAME', instaDisc_getConfig('siteName'));
+
+	if (isset($errors[1]))
+	{
+		$template->adds_block('ERROR', array('ex'=>'1'));
+
+		foreach ($errors as $name => $value)
+		{
+			$template->adds_block('ERRORS', array(	'NAME' => $name,
+								'MSG' => $value['msg']));
+		}
+	}
+
+	$template->add('OLD_ERR', ifErrors($errors, 'old'));
+	$template->add('NEW_ERR', ifErrors($errors, 'new'));
+	$template->add('CONFIRM_ERR', ifErrors($errors, 'confirm'));
+
+	doErrors($template, $errors, 'old');
+	doErrors($template, $errors, 'new');
+	doErrors($template, $errors, 'confirm');
+
+	$template->add('OLD', $old);
+	$template->add('NEW', $new);
+	$template->add('CONFIRM', $confirm);
+
+	$template->display();
+}
+
+function ifErrors($errors, $id)
+{
+        foreach ($errors as $name => $value)
+        {
+                if ($value['field'] == $id)
+                {
+                        return ' error';
+                }
+        }
+
+	return '';
+}
+
+function doErrors($template, $errors, $id)
+{
+        foreach ($errors as $name => $value)
+        {
+                if ($value['field'] == $id)
+                {
+			$template->adds_block(strtoupper($id) . '_ERRS', array(	'NAME' => $name,
+										'VALUE' => $value['msg']));
+                }
+        }
+}
+
+function addError(&$numOfErrors, &$errors, $field, $msg)
+{
+        $numOfErrors++;
+        $errors[$numOfErrors] = array('field' => $field, 'msg' => $msg);
+}
+
+?>
diff --git a/series/core/trunk/theme/changedpassword.tpl b/series/core/trunk/theme/changedpassword.tpl
new file mode 100644
index 0000000..9d5b153
--- /dev/null
+++ b/series/core/trunk/theme/changedpassword.tpl
@@ -0,0 +1,13 @@
+<HTML>
+	<HEAD>
+		<TITLE><!--SITENAME--> InstaDisc Series Control</TITLE>
+	</HEAD>
+
+	<BODY>
+		<CENTER>
+			<H1>InstaDisc Change Password</H1>
+
+			<P>You've sucessfully changed your password. <A HREF="admin.php">Return to the ACP</A>
+		</CENTER>
+	</BODY>
+</HTML>
diff --git a/series/core/trunk/theme/changepassword.tpl b/series/core/trunk/theme/changepassword.tpl
new file mode 100644
index 0000000..50ae3c6
--- /dev/null
+++ b/series/core/trunk/theme/changepassword.tpl
@@ -0,0 +1,74 @@
+<HTML>
+	<HEAD>
+		<TITLE><!--SITENAME--> InstaDisc Series Control</TITLE>
+		<LINK REL="stylesheet" TYPE="text/css" HREF="theme/uniform.css">
+	</HEAD>
+
+	<BODY>
+		<CENTER>
+			<H1>InstaDisc Change Password</H1>
+
+			<P>If you would like to change your password, please fill out the form below.
+		</CENTER>
+
+		<FORM CLASS="uniform" ACTION="./admin.php?id=chpwd&amp;submit=" METHOD="POST">
+
+			<!--BEGIN ERROR-->
+			<DIV ID="errorMsg">Uh oh! Validation errors!<P>
+				<OL>
+			<!--END ERROR-->
+
+			<!--BEGIN ERRORS-->
+					<LI><A HREF="#error<!--ERRORS.NAME-->"><!--ERRORS.MSG--></A></LI>
+			<!--END ERRORS-->
+
+			<!--BEGIN ERROR-->
+				</OL>
+			</DIV>
+			<!--END ERROR-->
+
+			<FIELDSET CLASS="inlineLabels">
+				<LEGEND>Password Details</LEGEND>
+
+				<DIV CLASS="ctrlHolder<!--OLD_ERR-->">
+					<!--BEGIN OLD_ERRS-->
+						<P ID="error<!--OLD_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+							<!--OLD_ERRS.MSG-->
+						</P>
+					<!--END OLD_ERRS-->
+
+					<LABEL FOR="old"><EM>*</EM> Old Password: </LABEL>
+					<INPUT TYPE="password" ID="old" NAME="old" CLASS="textInput" VALUE="<!--OLD-->">			
+				</DIV>
+
+				<DIV CLASS="ctrlHolder<!--NEW_ERR-->">
+					<!--BEGIN NEW_ERRS-->
+						<P ID="error<!--NEW_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+							<!--NEW_ERRS.MSG-->
+						</P>
+					<!--END NEW_ERRS-->
+
+					<LABEL FOR="new"><EM>*</EM> New Password: </LABEL>
+					<INPUT TYPE="password" ID="new" NAME="new" CLASS="textInput" VALUE="<!--NEW-->">
+				</DIV>
+
+				<DIV CLASS="ctrlHolder<!--EMAIL_ERR-->">
+					<!--BEGIN CONFIRM_ERRS-->
+						<P ID="error<!--CONFIRM_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+							<!--CONFIRM_ERRS.MSG-->
+						</P>
+					<!--END CONFIRM_ERRS-->
+
+					<LABEL FOR="confirm"><EM>*</EM> Confirm New Password: </LABEL>
+					<INPUT TYPE="password" ID="confirm" NAME="confirm" CLASS="textInput" VALUE="<!--CONFIRM-->">
+
+					<P CLASS="formHint">Please re-type your new password</P>
+				</DIV>
+			</FIELDSET>
+
+			<DIV CLASS="buttonHolder">
+				<INPUT TYPE="submit" NAME="submit" VALUE="Submit">
+			</DIV>
+		</FORM>
+	</BODY>
+</HTML>
-- 
cgit 1.4.1