PK

<?php
include "conn.php";
$_SESSION['url']=$_SERVER['REQUEST_URI'];
check_login();

if($_POST['change_password']){
    $current_password = mysqli_real_escape_string($conn, $_POST['current_password']);
    $new_password = mysqli_real_escape_string($conn, $_POST['new_password']);
    $confirm_password = mysqli_real_escape_string($conn, $_POST['confirm_password']);
    
    // Get current password from database
    $query = "SELECT password FROM members WHERE member_id = '".$_SESSION['member_id']."'";
    $result = mysqli_query($conn, $query);
    $user = mysqli_fetch_array($result);
    
    // Verify current password
    if($user['password'] != crypt($current_password, $user['password'])) {
        $errmsg = "Current password is incorrect.";
    } elseif($new_password != $confirm_password) {
        $errmsg = "New password and confirm password do not match.";
    } elseif(strlen($new_password) < 6) {
        $errmsg = "Password must be at least 6 characters long.";
    } else {
        // Update password
        $sql = "UPDATE members SET password = '".encryptPass($new_password)."' WHERE member_id = '".$_SESSION['member_id']."'";
        if(mysqli_query($conn, $sql)) {
            $_SESSION['msg'] = "Password changed successfully.";
            header("Location: my_change_password");
            exit();
        } else {
            $errmsg = "Error updating password: " . mysqli_error($conn);
        }
    }
}

if($_SESSION['msg']){ $msg = $_SESSION['msg']; unset($_SESSION['msg']); }
if($_SESSION['errmsg']){ $errmsg = $_SESSION['errmsg']; unset($_SESSION['errmsg']); }

include "header.php";
?>

<div class="breadcrumb-section">
	<div class="container">
		<h2>Change Password</h2>
		<nav class="theme-breadcrumb">
			<ol class="breadcrumb">
				<li class="breadcrumb-item">
					<a href="index.html">Home</a>
				</li>
				<li class="breadcrumb-item active">Change Password</li>
			</ol>
		</nav>
	</div>
</div>

<section class="dashboard-section section-b-space user-dashboard-section">
	<div class="container">
		<div class="row">
			<?php include "login_sidebar.php";?>
			
			<div class="col-lg-9">
				<button class="show-btn btn d-lg-none d-block">Show Menu</button>
				<div class="faq-content tab-content" id="myTabContent">
					<div class="tab-pane fade show active" id="password-tab-pane" role="tabpanel" aria-labelledby="password-tab">
						<div class="row">
							<div class="card mb-0 dashboard-table mt-0">
								<div class="card-body">
									<div class="top-sec">
										<h3>Change Password</h3>
									</div>
									<div class="total-box mt-0">
										<?php if($msg){ ?> <div class="alert alert-success text-center"> <strong>Success!</strong> <?php echo $msg?> </div> <?php }?>
										<?php if($errmsg){ ?> <div class="alert alert-danger text-center"> <strong>Error!</strong> <?php echo $errmsg?> </div> <?php }?>
										
										<form class="theme-form" action="" method="post">
											<div class="row">
												<div class="col-md-12">
													<div class="form-box">
														<label for="current_password" class="form-label">Current Password</label>
														<input type="password" class="form-control" name="current_password" id="current_password" placeholder="Enter current password" required="">
													</div>
												</div>
												<div class="col-md-12">
													<div class="form-box">
														<label for="new_password" class="form-label">New Password</label>
														<input type="password" class="form-control" name="new_password" id="new_password" placeholder="Enter new password (minimum 6 characters)" required="" minlength="6">
													</div>
												</div>
												<div class="col-md-12">
													<div class="form-box">
														<label for="confirm_password" class="form-label">Confirm New Password</label>
														<input type="password" class="form-control" name="confirm_password" id="confirm_password" placeholder="Confirm new password" required="" minlength="6">
													</div>
												</div>
												<div class="col-12">
													<input type="Submit" name="change_password" value="Change Password" class="btn btn-solid w-auto mt-4" />
												</div>
											</div>
										</form>
									</div>
								</div>
							</div>
						</div>
					</div>
				</div>
			</div>
		</div>
	</div>
</section>

<script>
// Password confirmation validation
document.getElementById('confirm_password').addEventListener('input', function() {
    var newPassword = document.getElementById('new_password').value;
    var confirmPassword = this.value;
    
    if (newPassword !== confirmPassword) {
        this.setCustomValidity('Passwords do not match');
    } else {
        this.setCustomValidity('');
    }
});

document.getElementById('new_password').addEventListener('input', function() {
    var confirmPassword = document.getElementById('confirm_password');
    if (confirmPassword.value !== '' && this.value !== confirmPassword.value) {
        confirmPassword.setCustomValidity('Passwords do not match');
    } else {
        confirmPassword.setCustomValidity('');
    }
});
</script>
	
<?php include "footer.php"; ?>

PK 99