<?php 

include('../dbconnect.php');
ob_start();
session_start();

if( !isset($_SESSION['user']) ) {
 header("Location: ../index.php");
 exit;
}
if(isset($_POST['changepass'])){
    $user = $_SESSION['user'];
    $oldpass = $_POST['oldpass'];
    $newpass = $_POST['newpass'];
    $sqlpass = "SELECT * FROM account WHERE userid = '$user'";
    $resultpass = mysqli_query($conn, $sqlpass);
    $rowpass  = mysqli_fetch_assoc($resultpass);

    $opass = hash('sha256', $oldpass);
    $npass = hash('sha256', $newpass);
    $opass = mysqli_real_escape_string($conn, $opass);
    $npass = mysqli_real_escape_string($conn, $npass);


    if($rowpass['password'] == $opass){
      


        $updatepass  = "UPDATE `account` SET `password`='$npass' WHERE userid='$user'";

        if (mysqli_query($conn, $updatepass)) {
        
        
            $alert = '<div class="alert alert-success">User password successfully change</div>';
            header("location: changepass.php?alert=$alert");
        

        
        } 



    }
    else{

        $alert = '<div class="alert alert-danger">Incorrect Old Passowrd</div>';

    }
}

mysqli_close($conn);

?>
<!DOCTYPE html>
<html lang="en">

  <head>

    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
    <meta name="description" content="">
    <meta name="author" content="">

    <title>Super Admin | User Account</title>

    <!-- Bootstrap core CSS-->
    <link href="../vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">

    <!-- Custom fonts for this template-->
    <link href="../vendor/fontawesome-free/css/all.min.css" rel="stylesheet" type="text/css">

    <!-- Page level plugin CSS-->
    <link href="../vendor/datatables/dataTables.bootstrap4.css" rel="stylesheet">

    <!-- Custom styles for this template-->
        <link href="../css/sb-admin.css" rel="stylesheet">
    <link href="../css/style.css" rel="stylesheet">
    <link rel="icon" href="../images/logo.jpg" type="image/gif" sizes="16x16">
    

  </head>

   <body id="page-top">
	<div id="preloader">
   		<img src="../images/loaderS.gif" alt="processing..." height="150px" width="200px"/>
	</div>

  <div id="pageloader">
   <img src="../images/loaderS.gif" alt="processing..." height="150px" width="200px"/>
</div>

    <?php include('uppernav.php')?>



      <!-- Sidebar -->
      
      <?php 
      include('sidebar.php');
      $dashboard="active"; ?>
      <div id="content-wrapper">

        <div class="container-fluid">

          <!-- Breadcrumbs-->
          <ol class="breadcrumb">
            <li class="breadcrumb-item">
              <a href="useraccount.php">User Account</a>
            </li>
            <li class="breadcrumb-item active">Change Password</li>

          </ol>
        <form method="post" enctype="multipart/form-data">
        <?php echo $alert; echo $_GET['alert']?>
            <div class="row justify-content-lg-center">
        
            <img src="../files/pictures/<?php echo $pic?>" alt="profilepicture" style="height: 150px; width: 150px; border-radius:100px;">
            </div>
            <div class="row p-3" >
              <div class="col-sm-6 form-group required">
              
                <label class="control-label">Username</label> <br>
                <input type="text"  class="form-control" name="id" value="<?php echo $user?>" required disabled>
          

              </div>
              <div class="col-sm-6 form-group required">
              
                <label class="control-label">Full Name</label> <br>
                <input type="text"  class="form-control" name="id"  placeholder="ID" value="<?php echo $accountname ?>" required disabled>
        

              </div>
              <div class="col-sm-6 form-group required">
              
                <label class="control-label">Level</label> <br>
                <input type="text"  class="form-control" name="id" value="<?php echo $acclevel?>" required disabled>
          

              </div>
              <div class="col-sm-6 form-group required">
              
                <label class="control-label">Status</label> <br>
                <input type="text"  class="form-control" name="id"  placeholder="ID" value="<?php echo $accstat?>" required disabled>
        

              </div>
              <div class="col-sm-6 form-group required">
              
                <label class="control-label">Old Password</label> <br>
                <input type="password"  class="form-control" name="oldpass" placeholder="Old Password"  required>
          

              </div>
              <div class="col-sm-6 form-group required">
              
                <label class="control-label">New Password</label> <br>
                <input type="password"  class="form-control" name="newpass"  placeholder="New Password" pattern="(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{8,}" title="Must contain at least one number and one uppercase and lowercase letter, and at least 8 or more characters" required>
        

              </div>
              <div class="col-sm-12 form-group" style="padding: 10px 18px;">
                <div class="row justify-content-end" >


                    <button type="button" class="btn btn-success" data-toggle="modal"  data-target="#changepass"><i class="fas fa-check"></i>  Save</button>  &nbsp
                        
                          
                      
                    <a href="useraccount.php" class="btn btn-danger" role="button" style="margin-right: 5px;"><i class="fas fa-close"></i> Cancel </a>
                         
                </div>
            </div>
            </div>
        <div class="modal fade" id="changepass" tabindex="-1" role="dialog" aria-labelledby="exampleModalLabel" aria-hidden="true">
        <div class="modal-dialog modal-dialog-centered" role="document">
            <div class="modal-content">
            <div class="modal-header">
                <h5 class="modal-title" id="exampleModalLabel">Change User Password </h5>
                <button class="close" type="button" data-dismiss="modal" aria-label="Close">
                <span aria-hidden="true">×</span>
                </button>
            </div>
            <div class="modal-body">Are you sure you want to change your password? </div>
            <div class="modal-footer">
                <button type ="submit" class="btn btn-success"  name="changepass"> <i class="fa fa-check"></i> Yes</button>
                <button class="btn btn-danger" type="button" data-dismiss="modal" aria-label="Close"> <i class="fa fa-close"></i> No </button>
            </div>
            </div>
        </div>
        </div>
        </form>
      
          
        


          

          <!-- Icon Cards-->
      
        <!-- /.container-fluid -->

        <!-- Sticky Footer -->


      </div>
      <!-- /.content-wrapper -->

    </div>
    <!-- /#wrapper -->

    <!-- Scroll to Top Button-->
    <a class="scroll-to-top rounded" href="#page-top">
      <i class="fas fa-angle-up"></i>
    </a>

    <!-- Logout Modal-->
    <div class="modal fade" id="logoutModal" tabindex="-1" role="dialog" aria-labelledby="exampleModalLabel" aria-hidden="true">
      <div class="modal-dialog" role="document">
        <div class="modal-content">
          <div class="modal-header">
            <h5 class="modal-title" id="exampleModalLabel">Ready to Leave?</h5>
            <button class="close" type="button" data-dismiss="modal" aria-label="Close">
              <span aria-hidden="true">×</span>
            </button>
          </div>
          <div class="modal-body">Select "Logout" below if you are ready to end your current session.</div>
          <div class="modal-footer">
            <button class="btn btn-secondary" type="button" data-dismiss="modal">Cancel</button>
            <a class="btn btn-primary" href="login.html">Logout</a>
          </div>
        </div>
      </div>
    </div>

    <!-- Bootstrap core JavaScript-->
    <script src="../vendor/jquery/jquery.min.js"></script>
    <script src="../vendor/bootstrap/js/bootstrap.bundle.min.js"></script>

    <!-- Core plugin JavaScript-->
    <script src="../vendor/jquery-easing/jquery.easing.min.js"></script>

    <!-- Page level plugin JavaScript-->
    <script src="../vendor/chart.js/Chart.min.js"></script>
    <script src="../vendor/datatables/jquery.dataTables.js"></script>
    <script src="../vendor/datatables/dataTables.bootstrap4.js"></script>

    <!-- Custom scripts for all pages-->
    <script src="../js/sb-admin.min.js"></script>

    <!-- Demo scripts for this page-->
    <script src="../js/demo/datatables-demo.js"></script>
    <script src="../js/demo/chart-area-demo.js"></script>

          <script language="javascript" type="text/javascript">
            $(document).ready(function(){
            $("form").on("submit", function(){
                $("#pageloader").fadeIn();
            });//submit

             $('#preloader').fadeOut();
            });//document ready



        </script>
</body>

</html>
