<?php
/**
 * Main index page
 */
require_once('lib/startup.php');

$vals = array('subd' => Local::$subd);


if (!isset($_SESSION['user']))
{
    $tpl = 'index.twig';
    $errors[] = 'You must be logged in to see this page.';
}
else
{
   $tpl = 'changepassword.twig';
    //header('Location: changepassword.php');

    $user = $_SESSION['user'];
}


if (filter_has_var(INPUT_POST, 'oldpassword'))
{
    $errors = array();
    $oldpass = array();


    $oldpassword = md5(trim($_POST['oldpassword']));
    $newpassword = md5(trim($_POST['newpassword']));
    $newpassword1 = md5(trim($_POST['newpassword1']));


    //check if they're empty, if not, continue
    if ($oldpassword == '' || $newpassword == '' || $newpassword1 == '')
    {
        $errors[] = 'Please fill in all the boxes';

    }
    else
    {
        $user = R::find('users', 'username=?' and 'password=?', array($_SESSION['user']->username, $oldpassword));
    $userbean = R::load('users', $user['id']);

    if ($oldpassword != $userbean ->password)
    {
       $errors[] = 'Your old password is incorrect';
    }
    if ($newpassword !== $newpassword1)
    {
        $errors[] = 'Your new passwords do not match';
    }
    //if (strlen ($newpassword) < 6)
    //{
       // $errors[] = 'Your new password must be 6 or more characters long.';
    //}
    $tpl = 'changepassword.twig';
    }

    if (!empty($errors))
    {
        $vals['errors'] = $errors;
        $tpl = 'changepassword.twig';
    }
    else
    {
        //if it passes all the tests, dispense into the database
        $userbean->password = ($newpassword);
        R::store ($userbean);
        //go back to members page page once dispensed.
        $tpl = 'members.twig';
    }

}



    echo $twig->loadTemplate($tpl)->render($vals);
?>