MyDynaWeb CVS: htdocs sukria

[mdw c. <myd...@li...>]

MyDynaWeb CVS committal

Author  : sukria
Project : mydynaweb
Module  : htdocs

Dir     : mydynaweb/htdocs


Modified Files:
	passwd.php3 


Log Message:
fixing the bug.
There was an old reference to mydynaweb.ini.php3.

I've also put a check_session call and use the get_login_from_session to get the username.

It works fine now (tested)


===================================================================
RCS file: /cvsroot/mydynaweb/mydynaweb/htdocs/passwd.php3,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -3 -r1.2 -r1.3
--- passwd.php3	2001/03/26 20:12:12	1.2
+++ passwd.php3	2001/10/04 20:37:32	1.3
@@ -1,26 +1,34 @@
 <?
 
-include("include/mydynaweb.ini.php3");
+include('./include/mydynaweb.init.php');
+include(DYNA_ROOT . '/include/mydynaweb.libs.php');
 
 $DBH=new db();
 $DBH->open($dbName, $dbServer, $dbUser, $dbPass);
 
 
-define ("USER_ID", $UserID);
+check_session($DYNA_SESSION, $DBH);
+$login = get_login_from_session ($DYNA_SESSION, $DBH);
 
-if (USER_ID) {
-  $sql = "select pass from members where name='".USER_ID."'";
+if (strlen(USER_ID)) {
+  $sql = "select pass from members where name='$login'";
   $rqt = new query($DBH);
   $rqt->query($DBH, $sql);
   $row = $rqt->getrow();
   
   if ($old == $row[0]) {
     if ($new1 == $new2) {
-      $sql = "update members set pass='$new1' where name='".USER_ID."'";
+      $sql = "update members set pass='$new1' where name='$login'";
       $rqt = new query($DBH);
 	  $rqt->query($DBH, $sql);
     }
+    else {
+	send_error($PHP_SELF, translate('PASSWORDS_DONT_MATCH', $DBH));
+    }
 
+  }
+  else {
+	send_error($PHP_SELF, translate('OLD_PASSWORD_ISNOT_GOOD', $DBH));
   }
 
 }