Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
SpryAssets	[ DIR ]	drwxr-sr-x	2013-09-25 09:36
docthumbs	[ DIR ]	drwxr-sr-x	2015-07-16 10:47
downloads	[ DIR ]	drwxr-sr-x	2015-05-20 09:39
guidelines	[ DIR ]	drwxr-sr-x	2017-10-25 14:17
images	[ DIR ]	drwxr-sr-x	2015-07-14 05:06
lightbox	[ DIR ]	drwxr-sr-x	2013-09-25 09:35
pdf	[ DIR ]	drwxr-sr-x	2013-09-25 09:36
Guideline 2 - Developing a WPTP.DOCX	182.26 KB	-rw-r--r--	2013-09-25 09:33
ReportMilestones.php	7.54 KB	-rw-r--r--	2014-07-07 06:49
archivedmessages.php	2.69 KB	-rw-r--r--	2013-10-21 10:34
calendar.js	13.62 KB	-rw-r--r--	2013-09-25 09:33
calendar.php	2.88 KB	-rw-r--r--	2014-01-22 08:36
changedates.php	1.37 KB	-rw-r--r--	2013-09-25 09:33
contacts.php	3.2 KB	-rw-r--r--	2013-09-25 09:33
details.php	5.48 KB	-rw-r--r--	2013-09-25 09:33
feedback.php	16.68 KB	-rw-r--r--	2015-09-16 05:17
forgotpwd.php	2.49 KB	-rw-r--r--	2013-10-14 07:07
gallery.php	2.27 KB	-rw-r--r--	2013-09-25 09:33
guidelines.php	1.95 KB	-rw-r--r--	2014-10-13 08:37
inc_footer.php	349 B	-rw-r--r--	2013-09-25 09:34
inc_functions.php	739 B	-rw-r--r--	2013-10-10 13:34
inc_header.php	114 B	-rw-r--r--	2014-01-22 08:56
inc_sidebar.php	3.7 KB	-rw-r--r--	2018-11-21 13:29
index.php	8.85 KB	-rw-r--r--	2015-07-14 05:07
library.php	3.98 KB	-rw-r--r--	2013-09-25 09:35
login.php	3.88 KB	-rw-r--r--	2014-07-21 09:41
logout.php	104 B	-rw-r--r--	2013-09-25 09:35
messages.php	4.35 KB	-rw-r--r--	2014-01-22 08:56
milestones.php	15.55 KB	-rw-r--r--	2015-07-13 09:14
milestones_backup.php	18.64 KB	-rw-r--r--	2014-01-16 08:07
modcontact.php	5.75 KB	-rw-r--r--	2014-04-14 08:20
notices.php	2.76 KB	-rw-r--r--	2013-09-25 09:35
password.php	5.11 KB	-rw-r--r--	2014-11-03 09:00
pdfthumb.php	230 B	-rw-r--r--	2013-09-25 09:48
php_errors.log	1.92 KB	-rw-r--r--	2026-08-20 23:56
profile.php	8.1 KB	-rw-r--r--	2018-11-23 12:50
readmessage.php	4.21 KB	-rw-r--r--	2014-01-22 08:56
register.php	79.1 KB	-rw-r--r--	2014-09-02 10:32
register_step2.php	56.18 KB	-rw-r--r--	2014-11-03 09:09
sentmessages.php	2.51 KB	-rw-r--r--	2013-10-21 10:34
style.css	3.72 KB	-rw-r--r--	2013-09-25 09:36
templates.php	1.91 KB	-rw-r--r--	2013-09-25 09:36

Rename

<?php
include("inc_functions.php");

if (!isset($_SESSION["StudentID"]) || empty($_SESSION["StudentID"])) header("Location: http://www.cesa.co.za/mentanet/login.php");
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>MentaNet</title>
<link href="style.css" rel="stylesheet" type="text/css" />

</head>

<div id="container">
<?php include("inc_header.php"); ?>
<?php include("inc_sidebar.php"); ?>
  <div id="mainContent">
    <h1> Change Username and Password:</h1>
<?php
$sql = "SELECT * FROM ";
if ($_SESSION["UserType"]=="C") {
	$sql.="CCMStudents";
} elseif ($_SESSION["UserType"]=="M") {
	$sql.="CCMMentors";
} elseif ($_SESSION["UserType"]=="E") {
	$sql.="CCMEmployers";
}
$sql.=" WHERE ";
if ($_SESSION["UserType"]=="C") {
	$sql.="CCMStudentID";
} elseif ($_SESSION["UserType"]=="M") {
	$sql.="CCMMentorID";
} elseif ($_SESSION["UserType"]=="E") {
	$sql.="CCMEmployerID";
}
$sql.="=".$_SESSION["StudentID"];
$rec = mysql_query($sql);
$row = mysql_fetch_assoc($rec);

$sCurrentUser=$row["WebUsername"];
$sCurrentPwd=$row["WebPassword"];

if (isset($_POST["go"]) && ($_POST["go"]==1)) {
	
	if ($sCurrentPwd!=$_POST["password1"]) {
		echo "<p><b style='color:red'>ERROR: The password you entered does not match your current password.</b></p>";
	} elseif (empty($_POST["username2"])) {
		echo "<p><b style='color:red'>ERROR: You must specify a username.</b></p>";
	} elseif (empty($_POST["password2"])) {
		echo "<p><b style='color:red'>ERROR: You must specify a new password.</b></p>";
	} elseif (strlen($_POST["password2"])<8) {
		echo "<p><b style='color:red'>ERROR: Your new password must be at least 8 characters long.</b></p>";
	} else {
		$sql = "SELECT * FROM ";
		if ($_SESSION["UserType"]=="C") {
			$sql.="CCMStudents";
		} elseif ($_SESSION["UserType"]=="M") {
			$sql.="CCMMentors";
		} elseif ($_SESSION["UserType"]=="E") {
			$sql.="CCMEmployers";
		}
		$sql.=" WHERE ";
		if ($_SESSION["UserType"]=="C") {
			$sql.="CCMStudentID";
		} elseif ($_SESSION["UserType"]=="M") {
			$sql.="CCMMentorID";
		} elseif ($_SESSION["UserType"]=="E") {
			$sql.="CCMEmployerID";
		}
		$sql.="<>".$_SESSION["StudentID"]." AND WebUsername='".$_POST["username2"]."'";
		$rec = mysql_query($sql);
		if (mysql_num_rows($rec)>0) {
			echo "<p><b style='color:red'>ERROR: The username you have chosen already exists.</b></p>";		
		} else {
	
			$sql = "UPDATE ";
			if ($_SESSION["UserType"]=="C") {
				$sql.="CCMStudents";
			} elseif ($_SESSION["UserType"]=="M") {
				$sql.="CCMMentors";
			} elseif ($_SESSION["UserType"]=="E") {
				$sql.="CCMEmployers";
			}
			$sql.=" SET WebUsername='".$_POST["username2"]."', WebPassword='".$_POST["password2"]."' WHERE ";
			if ($_SESSION["UserType"]=="C") {
				$sql.="CCMStudentID";
			} elseif ($_SESSION["UserType"]=="M") {
				$sql.="CCMMentorID";
			} elseif ($_SESSION["UserType"]=="E") {
				$sql.="CCMEmployerID";
			}
			$sql.="=".$_SESSION["StudentID"];
			mysql_query($sql);
			
			echo "<p><b>SUCCESS: Your username and password have been updated to:<br></b>
			Username: ".$_POST["username2"]."<br>
			Password: ".$_POST["password2"]."</p>";
		}
	}
		
		
}
?>
    <form id="form1" name="form1" method="post" action="password.php">
    <input type="hidden" name="go" value="1" />
      <table border="0" cellpadding="5" cellspacing="0">
        <tbody>
          <tr>
            <td>Current username:</td>
            <td><?php echo $sCurrentUser; ?></td>
          </tr>
          <tr>
            <td>New username:</td>
            <td><input name="username2" type="text" id="username2" size="50" value="<?php echo $sCurrentUser; ?>" /></td>
          </tr>
          <tr>
            <td>Current password:</td>
            <td><input name="password1" type="text" id="password1" size="50" /></td>
          </tr>
          <tr>
            <td width="203" valign="top"><p>New password:</p></td>
            <td width="379"><p>
                <input name="password2" type="text" id="password2" size="50" /><br />
                Must be at least 8 characters long
            </p></td>
          </tr>
        </tbody>
      </table>
      <p>
        <label>
        <input type="submit" name="button" id="button" value="Update Now" />
        </label>
      </p>
    </form>
    <p>&nbsp;</p>
  </div>
<?php include("inc_footer.php"); ?>
</div>
</body>
</html>