<?php
session_start();
require('connect.php');
require('pass.php');

if($_SESSION['pass']==0){
	header('Location: ../');
}

$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];
$name = $_SESSION['name'];

if($pass1=='' || $pass2==''){
	header('Location: ../login/forgot/reset?nomatch=1');
}

if ($pass1 === $pass2){
	$pass = password_hash($pass1, PASSWORD_BCRYPT);
	mysql_query("UPDATE login SET pass='$pass' WHERE name='$name'", $connection);
	mysql_query("UPDATE pass_forgot SET pass_forgot='0' WHERE name='$name'", $connection);
	$_SESSION['pass']=0;
	if(strlen($name)==2){
		header("Location: ../?page=docent/$name");
	}
	elseif(strlen($name)>2){
		header("Location: ../?page=leerling/$name");
	}
	
}
else {
	header('Location: ../login/forgot/reset?nomatch=1');
}
?>