<?php
include("configs.php");

function shitChecker($str)
{
    $var = preg_match('/[^a-zA-Z]/', $str);
    return $var;
}
function shitCheckerNum($str)
{
  $var = preg_match('/[^a-zA-Z0-9]/', $str);
  return $var;
}

if(isset($_POST['submit']))
{
    //Get all the user inputs
    $account = $_POST['account'];
    $passwordOlds = $_POST['passwordOld'];
    $passwordNews = $_POST['passwordNew'];
    $passwordNew1s = $_POST['passwordNew1'];
$aDatabase = "marastrealm";
    //Connect to  database
 $conn = mysql_connect("$serveraddress", "$serveruser", "$serverpass")or die("Couldn't connect to database");
    mysql_select_db($aDatabase) or die(mysql_error());

    //Remove bullshit from the user inputs(Sorta pointless as i use regex in a second...
    $passwordOld = sha1($_POST['passwordOld']);
    $passwordNew = sha1($_POST['passwordNew']);
    $passwordNew1 = sha1($_POST['passwordNew1']);


    //Get acct num from db
    $query = "SELECT * FROM account WHERE username = '".$_SESSION['username']."' AND sha_pass_hash = '".$passwordOld."'";

    $result = mysql_query($query) or die(mysql_error());
    $numrows = mysql_num_rows($result);

    echo "<tr><td align=center>";

    //If no rows, means invalid user/pass, die.
    if($numrows == 0)
    {
        echo "".$passwordOld."<br>";
        die("Invalid username/password!");
    }

    //Change pass to new password
    $query = "UPDATE account SET sha_pass_hash = '".$passwordNew."' WHERE username = '".$account."'";
    $result = mysql_query($query) or die(mysql_error());

    echo "Password for account '".$account."' successfully changed!";

    echo "</td></tr>";

    //close mysql connection
    mysql_close();
}
else
{
    echo "<form name=myform method=post action=#>";
    echo "<table>";
    echo "<tr><td colspan=2 align=center><font size=4>Změna Hesla</td></tr>";
    echo "<tr><td width=125>Account Name: </td><td><input type='text' disabled='disabled' id='oldPassword' name='account' value='".strtolower($_SESSION['username'])."' class=' input border-5 glow-shadow-2
' maxlength='16' tabindex='1' /></td></tr>";
    echo "<tr><td width=125>Old-Password: </td><td><input type='text' id='oldPassword' name='passwordOld' value='' class=' input border-5 glow-shadow-2
' maxlength='16' tabindex='1' /></td></tr>";
    echo "<tr><td width=125>New-Password: </td><td><input type='text' id='oldPassword' name='passwordNew' value='' class=' input border-5 glow-shadow-2
' maxlength='16' tabindex='1' /></td></tr>";
    echo "<tr><td width=125>Re-Enter: </td><td><input type='text' id='oldPassword' name='passwordNew1' value='' class=' input border-5 glow-shadow-2
' maxlength='16' tabindex='1' /></td></tr></td></tr>";
    echo "<tr><td><br></td><td><button
class='ui-button button1 enabled'
type='submit'
name='submit'
id='settings-submit'
value='Change my password!'
tabindex='1'>
<span>
<span>Pokračovat</span>
</span>
</button></td></tr></table>";
    echo "</form>";
}
?>