Untitled

<?php
session_start();
if (isset($_POST['exit'])) {
	session_destroy();
	header('Location: http://manyaedgar.pe.hu/index.php');
}
$db = mysql_connect ("mysql.hostinger.ru","u549111235_root","111111");
mysql_select_db ("u549111235_reg",$db);

$null = "0";
$one = "1";
$two = "2";

 ?>
<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<link rel="stylesheet" href="css/bootstrap.min.css">
    <link rel="stylesheet" href="css/bootstrap-theme.min.css">
    <script src="js/bootstrap.min.js"></script>
	<title>Document</title>
</head>
<body>
	<div class="row">
		<div class="col-md-4"></div>
		<div class="col-md-4">
			<form style="float: right" action="" method="post">
				<input type="submit" name="exit" class="btn btn-info" value="Выход">
			</form>
		<?php
			$queryBlock = mysql_query("SELECT * FROM userAccount WHERE loginUser = '".$_SESSION['login']."' ");
			if ($blokUser['blockUser'] == 1) {
				exit("Профиль этого пользователя заблокирован администратором");
			}
		 ?>
		<h3>Страница пользователя</h3>
		<?php
			$pass = mysql_query("SELECT * FROM userAccount WHERE loginUser = '".$_SESSION['login']."' ");
			$chan = mysql_fetch_array($pass);
			if ($chan['passChan'] == md5($null)) {
				echo "Измените пароль: ";
			?>
                <form action="" method="post" class = "form-inline">
                    <input type="password" class="form-control" name="password" placeholder = "Пароль" required minlength="8" maxlength="20">
                    <input type="password" class="form-control" name="passwordRepeat" placeholder = "Повторите пароль" required minlength="8" maxlength="20">
                    <input type="submit" name="passChan" class="btn" value="Изменить">
                </form>
			<?php
			}

			if (isset($_POST['passChan'])) {
				if ($_POST['password'] != $_POST['passwordRepeat']) {
					echo "Пароли не совпадают";
				} elseif (preg_match("/([0-9]+)/", $_POST['password']) AND
			               //     preg_match("/([a-z]+)/", $_POST['password']) AND
			                 //       preg_match("/([A-Z]+)/", $_POST['password']) AND
			                  //          preg_match("/([А-ЯЁ]+)/", $_POST['password']) AND
			                                preg_match("/([!?.,:;]+)/", $_POST['password'])) {
					$pass = md5($_POST['password']);
					$q = md5($one);
					$newPass = mysql_query("UPDATE userAccount SET passwordUserHash = '$pass', passChan = '1' WHERE loginUser = '".$_SESSION['login']."' ");
                	echo "<script language=\"JavaScript\"> window.location.href = \"http://manyaedgar.pe.hu\"</script>";
				} else {
            echo '<div class="col-md-4"></div>
                <div class="col-md-4"><strong>Пароль не удовлетворяет одному или нескольким требованиям: Наличие цифр и знаков препинания.</strong></div>
                <div class="col-md-4"></div';
				}
			}

		 ?>
		</div>
		<div class="col-md-4">
					</div>
	</div>

	<div class="row">
		<div class="col-md-4"></div>
		<div class="col-md-4">
			<?php
			$query = mysql_query("SELECT * FROM userAccount WHERE loginUser = '".$_SESSION['login']."' ");
			$passUser = mysql_fetch_array($query);
				if ($passUser['passChan'] == 1) {
					echo $passUser['loginUser'];

				}
			 ?>
		</div>
		<div class="col-md-4"></div>

	</div>


<div class="row">
	<div class="col-md-4"></div>

<div class="col-md-4">
   <?php
   $queryU = mysql_query("SELECT * FROM userAccount WHERE loginUser = '".$_SESSION['login']."' ");
   $queryUser = mysql_fetch_array($queryU);
   if ($queryUser['blockUser'] == md5($null) AND $queryUser['passChan'] == md5($one)) {
   ?>
   <form action="" method="post" >
    <input type="password" class="form-control" name = "oldPass" placeholder = "Введите старый пароль" required minlength="8" maxlength="20">
    <input type="password" class="form-control" name = "newPass" placeholder = "Введите новый пароль" required minlength="8" maxlength="20">
    <input type="password" class="form-control" name = "newPass2" placeholder = "Поторите новый пароль" required minlength="8" maxlength="20">
    <input type="submit" name = "btnNewPass" value = "Готово" class = "btn btn">
   </form>
   <?php
   }
   if (isset($_POST['btnNewPass'])) {
    if (md5($_POST['oldPass']) != $queryUser['passwordUserHash'] ) {
     echo "Не верный старый пароль";
     exit;
    } elseif ($_POST['newPass'] != $_POST['newPass2']){
     echo "string";
     exit;
    } elseif (preg_match("/([0-9]+)/", $_POST['password']) AND
			               //     preg_match("/([a-z]+)/", $_POST['password']) AND
			                 //       preg_match("/([A-Z]+)/", $_POST['password']) AND
			                  //          preg_match("/([А-ЯЁ]+)/", $_POST['password']) AND
			                                preg_match("/([!?.,:;]+)/", $_POST['password'])) {
     $newPass = md5($_POST['newPass']);
     $queryNewPass = mysql_query("UPDATE userAccount SET passwordUserHash = '$newPass' WHERE loginUser = '".$_SESSION['login']."' ");
    }
   }
    ?>
  </div>

	<div class="col-md-4"></div>
</div>

</body>
</html>