-
Notifications
You must be signed in to change notification settings - Fork 0
/
settings.php
137 lines (121 loc) · 3.82 KB
/
settings.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
<?php
require_once 'utils/mysqli.php';
require_once 'utils/auth.php';
require_once 'utils/functions.php';
session_start();
// check user and token from cookie
if (!isset($_COOKIE["auth_user"]) || !isset($_COOKIE["auth_token"])) {
// if doesn't have cookie
$_SESSION['message'] = "You need to login first!";
$_SESSION['type'] = "error";
header("Location: /sign-in.php");
exit();
}
// if user cookie isn't valid
if (!checkAuthCookie($_COOKIE["auth_user"], $_COOKIE["auth_token"])) {
$_SESSION['message'] = "You need to login first!";
$_SESSION['type'] = "error";
header("Location: /sign-in.php");
exit();
}
// get user data
$user = loginFromCookie($_COOKIE["auth_user"]);
// destructuring from user data
['id_user' => $id_user, 'name' => $name, 'email' => $email] = $user;
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$oldPassword = $_POST['old_password'];
$newPassword = $_POST['new_password'];
$confirmPassword = $_POST['confirm_password'];
// Validate old password
if (!validatePassword($oldPassword, $id_user)) {
$_SESSION['message'] = "Invalid old password!";
$_SESSION['type'] = "error";
header("Location: /settings.php");
exit();
}
// Validate new password
if ($newPassword !== $confirmPassword) {
$_SESSION['message'] = "New passwords doesn't match!";
$_SESSION['type'] = "error";
header("Location: /settings.php");
exit();
}
// Update password
if (updatePassword($newPassword, $id_user)) {
$_SESSION['message'] = "Password updated successfully!";
$_SESSION['type'] = "success";
header("Location: /dashboard.php");
exit();
} else {
$_SESSION['message'] = "Failed to update password!";
$_SESSION['type'] = "error";
header("Location: /settings.php");
exit();
}
}
// check session to show an alert
if (isset($_SESSION['message'], $_SESSION['type'])) {
$message = $_SESSION['message'];
$type = $_SESSION['type'];
unset($_SESSION['message']);
unset($_SESSION['type']);
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Dashboard</title>
<!-- Google Fonts -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Outfit:wght@200;300;400;500;600;700&display=swap"
rel="stylesheet">
<link rel="stylesheet" href="assets/css/reset.css">
<link rel="stylesheet" href="assets/css/sidebar.css">
<link rel="stylesheet" href="assets/css/settings.css">
</head>
<body>
<?php if (isset($message, $type)): ?>
<div class="alert alert-<?= $type ?>">
<img src="assets/images/<?= $type ?>.svg">
<p class="alert__message">
<?= $message ?>
</p>
</div>
<?php endif; ?>
<!-- Sidebar start -->
<?php
$active = 'settings';
require_once 'templates/sidebar.php';
?>
<!-- Sidebar end -->
<!-- Main start -->
<main>
<h1 class="title">Settings</h1>
<div class="settings">
<h2 class="settings__title">Change Password</h2>
<form class="settings__form" action="settings.php" method="POST">
<label>
Old Password
<input type="password" name="old_password" required>
</label>
<label>
New Password
<input type="password" name="new_password" required>
</label>
<label>
Confirm Password
<input type="password" name="confirm_password" required>
</label>
<input class="settings__form-submit" type="submit" value="Change Password">
</form>
</div>
</main>
<!-- Main end -->
<script src="./assets/js/settings.js"></script>
</body>
</html>