<?php include('secure.php'); ?>
<?php
session_start();

if (!isset($_SESSION['login']))
{
	header ('Location: index.php');
	exit();
}
$login = htmlentities(trim($_SESSION['login']));

if (isset($_POST['old_pass']) && isset($_POST['new_pass2']) && isset($_POST['new_pass']))
{
	$old_pass = $_POST['old_pass'];
	$new_pass2 = $_POST['new_pass2'];
	$new_pass = $_POST['new_pass'];

	include('private/sql_connect.php');

	if($new_pass == $new_pass2)
	{
		$sql = "SELECT password FROM authdb_users WHERE username='".mysql_escape_string($_SESSION['login'])."'";
		$verif_pass = mysql_query($sql);
		if ( $verif_pass === false) {
			echo 'Erreur SQL à la ligne 20 <br />Avec la requete : '.$sql.'<br />Message d\'erreur : <span style="font-weight:"bold">'.mysql_error().'</span>';
		}
		else {
			$array_verif_pass = mysql_fetch_array($verif_pass);
			$array_pass = $array_verif_pass['pass_md5'];

			if($array_pass == $old_pass)
			{
				$sql = "UPDATE authdb_users SET password='".mysql_escape_string(md5($new_pass))."' WHERE username='".mysql_escape_string($_SESSION['login'])."'";
				$ret = mysql_query($sql);
				if ($ret === false) {
					echo 'Erreur SQL à la ligne 33 <br />Avec la requete : '.$sql.'<br />Message d\'erreur : <span style="font-weight:"bold">'.mysql_error().'</span>';
				}
				else {
					/* Update OK */
				}
			}
			echo 'Mot de passe correct : '.$array_pass .', Mot de passe proposé : '.$old_pass;
		}
	}
	else
	echo 'les mots de passe ne sont pas identique';
	//mysql_close($base);
}
else
echo 'veuillez remplir correctement le formulaire';
?>
<style type="text/css">
<!--
.style1 {font-weight: bold}
.style2 {
	color: #6e3e10;
	font-weight: bold;
}
-->
</style>
<div align="cetner" class="hn"><br>&nbsp; Changez mon password :</div>
<p><form method="post">
<label for="old_pass">Ancien mot de passe :  </label><input type="text" id="old_pass" name="old_pass" /><br />
<label for="new_pass">Nouveau mot de passe :  </label><input type="text" id="new_pass" name="new_pass" /><br />
<label for="new_pass2">Confirmation mot de passe :  </label><input type="text" id="new_pass2" name="new_pass2" /><br />
<input type="submit" /><input type="reset" />
</form>
</p>
<div class="bn"></div>
<!-- Fin Cadre -->