root/trunk/gui/admin/password_change.php

<?php
/**
 * ispCP ω (OMEGA) a Virtual Hosting Control System
 *
 * @copyright     2001-2006 by moleSoftware GmbH
 * @copyright     2006-2008 by ispCP | http://isp-control.net
 * @version     SVN: $Id$
 * @link         http://isp-control.net
 * @author         ispCP Team
 *
 * @license
 *   This program is free software; you can redistribute it and/or modify it under
 *   the terms of the MPL General Public License as published by the Free Software
 *   Foundation; either version 1.1 of the License, or (at your option) any later
 *   version.
 *   You should have received a copy of the MPL Mozilla Public License along with
 *   this program; if not, write to the Open Source Initiative (OSI)
 *   http://opensource.org | osi@opensource.org
 */

require '../include/ispcp-lib.php';

check_login(__FILE__);

$tpl = new pTemplate();
$tpl->define_dynamic('page', Config::get('ADMIN_TEMPLATE_PATH') . '/password_change.tpl');
$tpl->define_dynamic('page_message', 'page');
$tpl->define_dynamic('hosting_plans', 'page');

$theme_color = Config::get('USER_INITIAL_THEME');

$tpl->assign(
        array(
            'TR_ADMIN_CHANGE_PASSWORD_PAGE_TITLE' => tr('ispCP - Admin/Change Password'),
            'THEME_COLOR_PATH' => "../themes/$theme_color",
            'THEME_CHARSET' => tr('encoding'),
            'ISP_LOGO' => get_logo($_SESSION['user_id'])
        )
    );

function update_password() {
    $sql = Database::getInstance();

    if (isset($_POST['uaction']) && $_POST['uaction'] === 'updt_pass') {
        if (empty($_POST['pass']) || empty($_POST['pass_rep']) || empty($_POST['curr_pass'])) {
            set_page_message(tr('Please fill up all data fields!'));
        } else if (!chk_password($_POST['pass'])) {
            if(Config::get('PASSWD_STRONG')){
        set_page_message(sprintf(tr('The password must be at least %s long and contain letters and numbers to be valid.'), Config::get('PASSWD_CHARS')));
      } else {
        set_page_message(sprintf(tr('Password data is shorter than %s signs or includes not permitted signs!'), Config::get('PASSWD_CHARS')));
      }
        } else if ($_POST['pass'] !== $_POST['pass_rep']) {
            set_page_message(tr('Passwords do not match!'));
        } else if (check_udata($_SESSION['user_id'], $_POST['curr_pass']) === false) {
            set_page_message(tr('The current password is wrong!'));
        } else {
            $upass = crypt_user_pass($_POST['pass']);

            $_SESSION['user_pass'] = $upass;

            $user_id = $_SESSION['user_id'];

            $query = <<<SQL_QUERY
                update
                    admin
                set
                    admin_pass = ?
                where
                    admin_id = ?
SQL_QUERY;
            $rs = exec_query($sql, $query, array($upass, $user_id));

            set_page_message(tr('User password updated successfully!'));
        }
    }
}

function check_udata($id, $pass) {
    $sql = Database::getInstance();

    $query = <<<SQL_QUERY
        SELECT
            admin_name, admin_pass
        FROM
          admin
        WHERE
          admin_id = ?
SQL_QUERY;

    $rs = exec_query($sql, $query, array($id));

    if ($rs->RecordCount() == 1) {
        $rs = $rs->FetchRow();

        if ((crypt($pass, $rs['admin_pass']) == $rs['admin_pass']) || (md5($pass) == $rs['admin_pass'])) {
            return true;
        }
    }

    return false;
}

/*
 *
 * static page messages.
 *
 */
gen_admin_mainmenu($tpl, Config::get('ADMIN_TEMPLATE_PATH') . '/main_menu_general_information.tpl');
gen_admin_menu($tpl, Config::get('ADMIN_TEMPLATE_PATH') . '/menu_general_information.tpl');

$tpl->assign(
    array('TR_CHANGE_PASSWORD' => tr('Change password'),
        'TR_PASSWORD_DATA' => tr('Password data'),
        'TR_PASSWORD' => tr('Password'),
        'TR_PASSWORD_REPEAT' => tr('Repeat password'),
        'TR_UPDATE_PASSWORD' => tr('Update password'),
        'TR_CURR_PASSWORD' => tr('Current password')
        )
    );

update_password();

gen_page_message($tpl);

$tpl->parse('PAGE', 'page');
$tpl->prnt();

if (Config::get('DUMP_GUI_DEBUG'))
    dump_gui_debug();

unset_messages();

?>