Change Password

<?php require_once 'engine/init.php';
protect_page();

if (empty($_POST) === false) {
    /* Token used for cross site scripting security */
    if (!Token::isValid($_POST['token'])) {
        $errors[] = 'Token is invalid.';
    }

    $required_fields = array('current_password', 'new_password', 'new_password_again');

    foreach($_POST as $key=>$value) {
        if (empty($value) && in_array($key, $required_fields) === true) {
            $errors[] = 'You need to fill in all fields.';
            break 1;
        }
    }

    $pass_data = user_data($session_user_id, 'password');
    //$pass_data['password'];
    // $_POST['']

    // .3 compatibility
    if ($config['ServerEngine'] == 'TFS_03' && $config['salt'] === true) {
        $salt = user_data($session_user_id, 'salt');
    }
    if (sha1($_POST['current_password']) === $pass_data['password'] || $config['ServerEngine'] == 'TFS_03' && $config['salt'] === true && sha1($salt['salt'].$_POST['current_password']) === $pass_data['password']) {
        if (trim($_POST['new_password']) !== trim($_POST['new_password_again'])) {
            $errors[] = 'Your new passwords do not match.';
        } else if (strlen($_POST['new_password']) < 6) {
            $errors[] = 'Your new passwords must be at least 6 characters.';
        } else if (strlen($_POST['new_password']) > 100) {
            $errors[] = 'Your new passwords must be less than 100 characters.';
        }
    } else {
        $errors[] = 'Your current password is incorrect.';
    }
}

?>

<h1 class="text-white">Alterar senha</h1>

<?php
if (isset($_GET['success']) && empty($_GET['success'])) {
    echo 'Your password has been changed.<br>You will need to login again with the new password.';
    session_destroy();
    header("refresh:2;url=index.php");
    exit();
} else {
    if (empty($_POST) === false && empty($errors) === true) {
        //Posted the form without errors
        if ($config['ServerEngine'] == 'TFS_02' || $config['ServerEngine'] == 'TFS_10' || $config['ServerEngine'] == 'OTHIRE') {
            user_change_password($session_user_id, $_POST['new_password']);
        } else if ($config['ServerEngine'] == 'TFS_03') {
            user_change_password03($session_user_id, $_POST['new_password']);
        }
        header('Location: changepassword.php?success');
    } else if (empty($errors) === false){

        echo '<font color="red"><b>';
        echo output_errors($errors);
        echo '</b></font>';
    }
    ?>

    <form action="" method="post">
        <ul>
        <center>
        <li class="text-white" style="list-style-type: none;">
                <h5>Senha atual</h5>
                <input type="password" name="current_password">
            </li>
            <li class="text-white" style="list-style-type: none;">
                <h5>Nova senha</h5>
                <input type="password" name="new_password">
            </li>
            <li class="text-white" style="list-style-type: none;">
                <h5>Nova senha</h5>
                <input type="password" name="new_password_again">
            </li>
        </center>

            <?php
                /* Form file */
                Token::create();
            ?><br>
            <center>
                <input type="submit" value="Confirmar a nova senha" class="btn text-white UI hr"><br>
            </center>
        </ul>
    </form>
<?php
}
?>
<style>
    li{
        list-style-type: none;
    }
</style>