83 lines
2.3 KiB
PHP
83 lines
2.3 KiB
PHP
<?php
|
|
//
|
|
// OpenSMTPD Admin
|
|
// by Mischa Peters <mischa at high5 dot nl>
|
|
// Copyright (c) 2022 High5!
|
|
// License Info: LICENSE.TXT
|
|
//
|
|
// File: password.php
|
|
//
|
|
// Template File: password.tpl
|
|
//
|
|
// Template Variables:
|
|
//
|
|
// message
|
|
//
|
|
// POST / GET Variables:
|
|
//
|
|
// password_current
|
|
// password1
|
|
// password2
|
|
//
|
|
require_once './functions.inc.php';
|
|
include './languages/' . check_language() . '.lang';
|
|
|
|
$SESSID_USERNAME = check_session();
|
|
$ROLE = check_role($SESSID_USERNAME);
|
|
|
|
if ($ROLE == ADMIN_ROLE) {
|
|
$list_domains = list_domains();
|
|
$list_admins = list_admins();
|
|
} else {
|
|
$list_domains = list_domains($SESSID_USERNAME);
|
|
}
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] == "POST") {
|
|
$username = $SESSID_USERNAME;
|
|
$password_current = filter_input(INPUT_POST, 'password_current', FILTER_DEFAULT);
|
|
$password1 = filter_input(INPUT_POST, 'password1', FILTER_DEFAULT);
|
|
$password2 = filter_input(INPUT_POST, 'password2', FILTER_DEFAULT);
|
|
|
|
if (empty($password_current) || empty($password1) || $password1 != $password2) {
|
|
$message = $LANG['Password_password_text_error'];
|
|
}
|
|
|
|
if (empty($message) && !empty($password_current)) {
|
|
$dbh = pdo_connect();
|
|
if (count($list_domains) == 0) {
|
|
$sth = $dbh->prepare("SELECT password FROM mailbox WHERE username=?");
|
|
} else {
|
|
$sth = $dbh->prepare("SELECT password FROM admin WHERE username=?");
|
|
}
|
|
$sth->bindParam(1, $username, PDO::PARAM_STR);
|
|
$sth->execute();
|
|
$row = $sth->fetch(PDO::FETCH_COLUMN);
|
|
if (!password_verify($password_current, $row)) {
|
|
$message = $LANG['Password_password_current_text_error'];
|
|
}
|
|
}
|
|
|
|
if (empty($message) && !empty($password1)) {
|
|
$hashed = bcrypt($password1);
|
|
try {
|
|
$dbh = pdo_connect();
|
|
if (count($list_domains) == 0) {
|
|
$sth = $dbh->prepare("UPDATE mailbox SET password=?,modified=NOW() WHERE username=?");
|
|
} else {
|
|
$sth = $dbh->prepare("UPDATE admin SET password=?,modified=NOW() WHERE username=?");
|
|
}
|
|
$sth->bindParam(1, $hashed, PDO::PARAM_STR);
|
|
$sth->bindParam(2, $username, PDO::PARAM_STR);
|
|
$sth->execute();
|
|
$message = $LANG['Password_result_succes'];
|
|
} catch(PDOException $e) {
|
|
$message = $LANG['Password_result_error'];
|
|
}
|
|
}
|
|
}
|
|
include './templates/header.tpl';
|
|
include './templates/menu.tpl';
|
|
include './templates/password.tpl';
|
|
include './templates/footer.tpl';
|
|
?>
|