diff --git a/includes/update-password.php b/includes/update-password.php new file mode 100644 index 0000000..4ced42b --- /dev/null +++ b/includes/update-password.php @@ -0,0 +1,21 @@ +prepare("SELECT userpass FROM userinfo WHERE userid = ?"); +$verifypass->bind_param("i", $_SESSION['userid']); +$verifypass->execute(); +$result = $verifypass->get_result(); +while ($row = $result->fetch_assoc()) { + $vp = password_verify ($_POST['oldpass'],$row['userpass']); + if ($vp) { + $hp = password_hash($_POST['userpass1'], PASSWORD_DEFAULT); + echo 'Verified old password, updating to new password!
'; + $updpass = $con->prepare("UPDATE userinfo SET userpass = ? WHERE userid = ?"); + $updpass->bind_param("si", $hp, $_SESSION['userid']); + $updpass->execute(); + echo 'Password updated!
'; + $updpass->close(); + } else { + echo 'Old password doesn\'t match, password is NOT updated!
'; + } +} +?> \ No newline at end of file