<?php
/**
 * Main index page
 */
    require_once('lib/startup.php');

    $vals = array('subd' => Local::$subd);
    $tpl = 'changepassword.twig';

    //if (!isset($_SESSION['user']))
    //{
        //header('Location: index.php');
    //exit;
    //}

//$user = $_SESSION['user'];


if (filter_has_var(INPUT_POST, 'oldpassword'))
{
    $errors = array();
    $oldpass = array();


    $oldpassword = md5(trim($_POST['oldpassword']));
    $newpassword = md5(trim($_POST['newpassword']));
    $newpassword1 = md5(trim($_POST['newpassword1']));


    //check if they're empty, if not, continue
    if ($oldpassword == ''  || $newpassword == '' || $newpassword1 == '')
    {
        $errors[] = 'Please fill in all the boxes';

    }
    else
    {

        $user = R::findOne('users', 'username=?' and 'password=?', array (isset($_SESSION['username'], $_POST['oldpassword'])));
    $userbean = R::load('users', $user['id']);
    print_r($oldpassword); echo ' _________________';
    print_r($newpassword);


    if ($userbean !== $user->password)
    {
       $errors[] = 'Your old password is incorrect';
    }
    if ($newpassword !== $newpassword1)
    {
        $errors[] = 'Your new passwords do not match';
    }
    //if (strlen ($newpassword) < 6)
    //{
       // $errors[] = 'Your new password must be 6 or more characters long.';
    //}
    $tpl = 'changepassword.twig';
    }

    if (!empty($errors))
    {
        $vals['errors'] = $errors;
        $tpl = 'changepassword.twig';
    }
    else
    {
        //if it passes all the tests, dispense into the database
        $userbean->password = ($newpassword);
        R::store ($userbean);
        //go back to members page page once dispensed.
        $tpl = 'members.twig';
    }

}



    echo $twig->loadTemplate($tpl)->render($vals);
?>