*/ session_name('LetterBox2');
session_start();
if(file_exists($_SESSION['config']['lang'].'.php'))
{
include($_SESSION['config']['lang'].'.php');
}
else
{
$_SESSION['error'] = "Language file missing...
";
}
require_once("class_functions.php");
$func = new functions();
$_SESSION['error'] ="";
$_SESSION['user']['pass'] = $func->wash($_POST['pass1'], "no", _THE_PSW);
$pass2 = $func->wash($_POST['pass2'], "no", _THE_PSW_VALIDATION);
if($_SESSION['user']['pass'] <> $pass2)
{
$_SESSION['error'] = _WRONG_SECOND_PSW.".
";
}
else
{
$_SESSION['user']['pass'] = md5($pass2);
}
$_SESSION['user']['FirstName'] = $func->wash($_POST['FirstName'], "no", _THE_LASTNAME);
$_SESSION['user']['LastName'] = $func->wash($_POST['LastName'], "no", _THE_FIRSTNAME);
if(isset($_POST['Department']) && !empty($_POST['Department']))
{
$_SESSION['user']['department'] = $_POST['Department'];
}
if(isset($_POST['Phone']) && !empty($_POST['Phone']))
{
$_SESSION['user']['Phone'] = $_POST['Phone'];
}
$_SESSION['user']['Mail'] = $func->wash($_POST['Mail'], "mail", _MAIL);
if(!empty($_SESSION['error']))
{
header("location: change_pass.php");
exit;
}
else
{
require_once("class_db.php");
$db = new dbquery();
$db->connect();
$db->query("update `".$_SESSION['tablename']['users']."` set PASSWORD = '".$_SESSION['user']['pass']."' ,`FirstName` = '".$_SESSION['user']['FirstName']."', `LastName` = '".$_SESSION['user']['LastName']."', `Phone` = '".$_SESSION['user']['Phone']."', `Mail` = '".$_SESSION['user']['Mail']."' , `Department` = '".$_SESSION['user']['department']."' , CHANGE_PASSWORD = 'N' where user_id = '".$_SESSION['user']['UserId']."'");
header("location: index.php");
exit;
}
?>