35 lines
856 B
PHP
35 lines
856 B
PHP
<?php
|
|
session_start();
|
|
require('connect.php');
|
|
require('pass.php');
|
|
|
|
$oldpass = $_POST['oldpass'];
|
|
$pass1 = $_POST['pass1'];
|
|
$pass2 = $_POST['pass2'];
|
|
$name = $_SESSION['name'];
|
|
|
|
|
|
if($oldpass=='' || $pass1=='' || $pass2==''){
|
|
die('Vul all velden in');
|
|
}
|
|
|
|
$query = "SELECT * FROM login WHERE name='$name'";
|
|
$result_query = mysql_query($query, $connection) or die("Er is een fout opgetreden");
|
|
|
|
while($result = mysql_fetch_assoc($result_query)){
|
|
$hash = $result['pass'];
|
|
if (password_verify($oldpass, $hash)) {
|
|
if ($pass1 === $pass2){
|
|
$pass = password_hash($pass1, PASSWORD_BCRYPT);
|
|
mysql_query("UPDATE login SET pass='$pass' WHERE name='$name'", $connection);
|
|
echo 'Uw wachtwoord is succesvol gewijzigd';
|
|
}
|
|
else {
|
|
die('Wachtwoorden komen niet overeen');
|
|
}
|
|
}
|
|
else {
|
|
die('Wachtwoord fout');
|
|
}
|
|
}
|
|
?>
|