diff --git a/src/admin/controllers/profile/password.php b/src/admin/controllers/profile/password.php index 4bf45c6..0eb8b44 100755 --- a/src/admin/controllers/profile/password.php +++ b/src/admin/controllers/profile/password.php @@ -1,30 +1,27 @@ post('old_password'), + 'new_password' => post('new_password'), + 'hashed_password' => hash('sha256', post('new_password')), + 'user_key' => $AdminInfo['admin_key'], + 'user_password' => $AdminInfo['admin_password'], + ); -if (!isset($_POST['submit'])) { - exit('405 / Method Not Allowed'); -} - -$FormData = array( - 'old_password' => post('old_password'), - 'new_password' => post('new_password'), - 'hashed_password' => hash('sha256', post('new_password')), - 'user_key' => $AdminInfo['admin_key'], - 'user_password' => $AdminInfo['admin_password'], -); - -if (hash('sha256', $FormData['old_password']) == $FormData['user_password']) { - $result = $DB->update('admin', array('admin_password' => $FormData['hashed_password']), array('admin_key' => $FormData['user_key'])); - if ($result) { - setMessage('Password changed successfully !'); - unset($_SESSION['UIISC_ADMIN']); - redirect('admin/login'); + if (hash('sha256', $FormData['old_password']) == $FormData['user_password']) { + $result = $DB->update('admin', array('admin_password' => $FormData['hashed_password']), array('admin_key' => $FormData['user_key'])); + if ($result) { + setMessage('Password changed successfully !'); + unset($_SESSION['UIISC_ADMIN']); + redirect('admin/login'); + } else { + setMessage("Something went's wrong !", 'danger'); + redirect('admin/settings'); + } } else { - setMessage("Something went's wrong !", 'danger'); + setMessage('Invalid user password !', 'danger'); redirect('admin/settings'); } -} else { - setMessage('Invalid user password !', 'danger'); - redirect('admin/settings'); } diff --git a/src/admin/views/footer.php b/src/admin/views/footer.php index d017048..983e328 100755 --- a/src/admin/views/footer.php +++ b/src/admin/views/footer.php @@ -4,7 +4,7 @@