<?php
require_once("inc/inc.config.php");
if(isset($_POST['submit'])) {
	if(!empty($_POST['password2'])) {
		// DEBUG
		echo "DEBUG!<br />";
		echo "Password Changing to: ".$_POST['password2']."<br />";
		echo "Site Config Secret Key: ".$config['Site']['hash_secret']."<br />";
		$pass = sha1($_POST['password2'] . $config['Site']['hash_secret']);
		echo "Password Hash Generated to: ".$pass."<br />";
		$myname = $_POST['username'];
		echo "User's Username: ".$myname."<br />";
		mysql_query("UPDATE users SET password = '".$pass."' WHERE username = '".$myname."'");
		echo "MySQL Error (If there is one): ".mysql_error()."<br />";
		echo '<font color="green">Your Password has succesfully been changed</font><br>';
	}
	if(!empty($_POST['email2'])) {
		$email  = strip_tags(mysql_real_escape_string($_POST['email2']));
		$myname = $_POST['username'];
		mysql_query("UPDATE users SET email = '".$email."' WHERE username = '".$myname."'");
		echo '<font color="green">Your Email has succesfully been changed</font><br>';
	}
}
?>
<div id="contentLeft">
        <div class="contentHolder">
                        <div class="contentHeader">
                Change your password            </div>
            <form method="post" action="?password">
                <br />
                New Password: <br />
                <input type="password" name="password2" />
                <br />
                Retype password: <br />
                <input type="password" name="password3" />
				<input type="hidden" name="username" value="%HabboName%">
			   <br /><br />
                <input type="submit" value="Change your password" name="submit" />
            </form>
        </div>
        <div class="contentHolder">
            <div class="contentHeader">
                Change your email address            </div>
            <br />            <form method="post" action="?email">

		<input type="hidden" name="username" value="%HabboName%">

                New Email<br />
                <input type="text" name="email2" /><br />
                <br />
                <input type="submit" value="Change your email" name="submit" />
            </form>
        </div>
    </div>