1#@!#!123s

: / home / diafrica / result.dominicaninstitute.org /
Filename : updaterecordpass.php
back
<?php 
if (!isset($_SESSION)) {
  @session_start();
}
$acc=$_SESSION['acc'];
$yto=$_SESSION['yto'];


if(isset($_POST['updatepass'])){
	
unset($temp);
if(isset($_POST['updatepass'])){
$_POST['updatepass']=trim($_POST['updatepass']);
if($_POST['updatepass']=="byto") $temp=$_POST['updatepass'];
}
if(!isset($temp)){echo "Sorry! Wrong Data!"; exit();}

$id=$temp;

unset($temp);
if(isset($_POST['newpass'])){
$_POST['newpass']=trim($_POST['newpass']);
if(preg_match('/^[a-zA-Z0-9^$.*+\[\]{,}]/u',$_POST['newpass'])) $temp=$_POST['newpass'];
}
if(!isset($temp)){echo "Sorry! Wrong Data!"; exit();}

$np=$temp;

unset($temp);
if(isset($_POST['confirmnewpass'])){
$_POST['confirmnewpass']=trim($_POST['confirmnewpass']);
if(preg_match('/^[a-zA-Z0-9^$.*+\[\]{,}]/u',$_POST['confirmnewpass'])) $temp=$_POST['confirmnewpass'];
}
if(!isset($temp)){echo "Sorry! Wrong Data!"; exit();}

$cnp=$temp;

if ($np != $cnp){
$dd="<p style='color:#990000'>Please confirm the New Password correctly</p>";
include("changepass.php");
exit();
}

include("Connecter/dataconn.php");
$sql=sprintf("update users set passwrd='%s' where username='%s'", 
				sha1(mysql_real_escape_string($_POST['newpass'])),mysql_real_escape_string($_SESSION['loginname']));

if (mysql_query($sql,$csn)){
include("logout.php");	
} else {
$dd="<p>Error performing update: " . mysql_error() . "</p>";
include("changepass.php");
}
}
?>