<?php
include 'header.php';
?>

<?php
require_once("conn.php");
?>


<div class="container">
    <h1 class="welcome text-center">Welcome to <br> Virtual Planner</h1>
        <div class="card card-container">
        <h2 class='login_title text-center'>Reset Password</h2>
        <hr>

            <form action="<?=$_SERVER['PHP_SELF']?>"  method="post" class="form-signin">

         <span id="reauth-email" class="reauth-email"></span>
                <p class="input_title">Student Username</p>
                <input name="StudentUsername" type="text" id="inputEmail" class="login_box" placeholder="Enter username" required autofocus>
	 <p class="input_title">New Student Password</p>
                <input type="password" name="StudentPassword" id="inputPassword" class="login_box" placeholder="******" required>


					  <span id="reauth-email" class="reauth-email"></span>
                <p class="input_title">Teacher Username</p>
                <input name="username" type="text" id="inputEmail" class="login_box" placeholder="Enter username" required autofocus>


		 <p class="input_title">Teacher Password</p>
                <input type="password" name="TeacherPassword" id="inputPassword" class="login_box" placeholder="******" required>

                    <label>

                    </label>


               <input class="login_box btn-primary" type="submit" name="submit" value="Submit" />
            </form><!-- /form -->
        </div><!-- /card-container -->
    </div><!-- /container -->

<?php
    require_once("conn.php");
    $mysqli = new mysqli(DB_HOST, DB_USER, DB_PASS, DB_NAME);
    # check connection
    if ($mysqli->connect_errno) {
        echo "<p>MySQL error no {$mysqli->connect_errno} : {$mysqli->connect_error}</p>";
        exit();
    }

    $TeacherUsername = $_POST['username'];
    $TeacherPassword = $_POST['TeacherPassword'];
    $StudentUsername = $_POST['StudentUsername'];
    $StudentPassword = $_POST['StudentPassword'];


    $sql = "SELECT * FROM `teacher` WHERE `Username` = '$TeacherUsername' AND `Password` = '$TeacherPassword' LIMIT 1";
    $result = $mysqli ->query($sql);
    if ($result->num_rows > 0 ) {
	$sql = "SELECT * FROM `student` WHERE `Username` = '$StudentUsername' LIMIT 1";
	$result = $mysqli ->query($sql);
	if ($result->num_rows > 0){

		echo '<script language="javascript">';
		echo 'alert("Student Found")';
		echo '</script>';
        	$sql = "UPDATE `student` SET `Password` = '$StudentPassword' WHERE `student`.`Username` = '$StudentUsername'";
        	echo $sql;
    		$Changed = $mysqli ->query($sql);
        	if($Changed) {

            		echo '<script language="javascript">';
					echo 'alert("Password Changed")';
					echo '</script>';

        	}
		else{
			echo 'password not changed';
			echo '<script language="javascript">';
			echo 'alert("Password not changed")';
			echo '</script>';}
	}
	else{
		echo '<script language="javascript">';
		echo 'alert("Student Not found")';
		echo '</script>';

	}

    }else{
 		echo '<script language="javascript">';
		echo 'alert("Teacher Login Incorrect")';
		echo '</script>';


    }
?>