<?php
$user = User::byId($_GET['id']);
if(isset($_POST['submit']))
{
    $currentUser = User::byId($_SESSION['id']);
    if($currentUser->id == $user->id)
    {
        if($_POST['old_password']==$user->password)
        {
            $user->changePassword($_POST['new_password']);
            $changed = true;
        }
        else
            $error = true;
    }
    else
        $error = true;
}
$password = $user->password;
if($user->id) {
    ?>
    <div class="col-4 px-3 py-3 pt-md-5 pb-md-4 mx-auto text-center">
        <h5 class="px-3 py-3">Смена пароля для: <?= htmlspecialchars($user->login); ?></h5>
        <form method="post" class="form-horizontal">
            <?php
            if($error)
                echo "<p>Доступ запрещен</p>";
            if($changed)
                echo "<p>Пароль успешно изменен!</p>";
            ?>
            <div class="form-group row">
                <input type="password" id="old_pass" name="old_password" class="form-control here"
                       value="<?= htmlspecialchars($password); ?>">
            </div>
            <div class="form-group row">
                <input type="password" id="password" name="new_password" class="form-control here"
                       placeholder="Новый пароль">
            </div>
            <div class="form-group text-center row">
                <button name="submit" type="submit" class="btn btn-primary">Сменить пароль</button>
            </div>
        </form>
    </div>
    <?php
}else
    echo "    <div class=\"col-4 px-3 py-3 pt-md-5 pb-md-4 mx-auto text-center\"><h5 class=\"px-3 py-3\">User not found</h5></div>";
?>