From 51b92c5c0ad3a47b264e3202da74ecf83f0aadd0 Mon Sep 17 00:00:00 2001
From: steinm <steinm@577cc39b-cfd1-4aa2-8bc3-eda205cea05a>
Date: Wed, 12 Oct 2011 06:29:48 +0000
Subject: [PATCH] - added scripts for password change

---
 op/op.ChangePassword.php   | 64 ++++++++++++++++++++++++++++++++++++++
 out/out.ChangePassword.php | 60 +++++++++++++++++++++++++++++++++++
 2 files changed, 124 insertions(+)
 create mode 100644 op/op.ChangePassword.php
 create mode 100644 out/out.ChangePassword.php

diff --git a/op/op.ChangePassword.php b/op/op.ChangePassword.php
new file mode 100644
index 000000000..c25b7af7b
--- /dev/null
+++ b/op/op.ChangePassword.php
@@ -0,0 +1,64 @@
+<?php
+//    MyDMS. Document Management System
+//    Copyright (C) 2002-2005 Markus Westphal
+//    Copyright (C) 2006-2008 Malcolm Cowe
+//    Copyright (C) 2010-2011 Uwe Steinmann
+//
+//    This program is free software; you can redistribute it and/or modify
+//    it under the terms of the GNU General Public License as published by
+//    the Free Software Foundation; either version 2 of the License, or
+//    (at your option) any later version.
+//
+//    This program is distributed in the hope that it will be useful,
+//    but WITHOUT ANY WARRANTY; without even the implied warranty of
+//    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//    GNU General Public License for more details.
+//
+//    You should have received a copy of the GNU General Public License
+//    along with this program; if not, write to the Free Software
+//    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+
+include("../inc/inc.Settings.php");
+include("../inc/inc.LogInit.php");
+include("../inc/inc.Utils.php");
+include("../inc/inc.Language.php");
+include("../inc/inc.ClassSession.php");
+include("../inc/inc.DBInit.php");
+include("../inc/inc.ClassUI.php");
+include("../inc/inc.ClassEmail.php");
+
+function _printMessage($heading, $message) {
+
+	UI::htmlStartPage($heading, "password");
+	UI::globalBanner();
+	UI::pageNavigation($heading);
+	UI::contentContainer($message."<p><a href=\"../out/out.Login.php\">" . getMLText("login") . "</a></p>\n");
+			UI::htmlEndPage();
+	return;
+}
+
+if (isset($_POST["hash"])) {
+	$hash = sanitizeString($_POST["hash"]);
+}
+if (isset($_POST["newpassword"])) {
+	$newpassword = sanitizeString($_POST["newpassword"]);
+}
+if (isset($_POST["newpasswordrepeat"])) {
+	$newpasswordrepeat = sanitizeString($_POST["newpasswordrepeat"]);
+}
+
+if (empty($newpassword) || empty($newpasswordrepeat) || $newpassword != $newpasswordrepeat) {
+	_printMessage(getMLText("password_mismatch_error_title"),	"<p>".getMLText("password_mismatch_error")."</p>\n");
+	exit;
+}
+
+$user = $dms->checkPasswordRequest($hash);
+if($user) {
+	$user->setPwd(md5($newpassword));
+	$dms->deletePasswordRequest($hash);
+}
+
+_printMessage(getMLText("change_password"), "<p>".getMLText("change_password_message")."</p>");
+exit;
+?>
+
diff --git a/out/out.ChangePassword.php b/out/out.ChangePassword.php
new file mode 100644
index 000000000..a8e74c216
--- /dev/null
+++ b/out/out.ChangePassword.php
@@ -0,0 +1,60 @@
+<?php
+//    MyDMS. Document Management System
+//    Copyright (C) 2002-2005 Markus Westphal
+//    Copyright (C) 2006-2008 Malcolm Cowe
+//    Copyright (C) 2010-2011 Uwe Steinmann
+//
+//    This program is free software; you can redistribute it and/or modify
+//    it under the terms of the GNU General Public License as published by
+//    the Free Software Foundation; either version 2 of the License, or
+//    (at your option) any later version.
+//
+//    This program is distributed in the hope that it will be useful,
+//    but WITHOUT ANY WARRANTY; without even the implied warranty of
+//    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//    GNU General Public License for more details.
+//
+//    You should have received a copy of the GNU General Public License
+//    along with this program; if not, write to the Free Software
+//    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+
+include("../inc/inc.Settings.php");
+include("../inc/inc.Language.php");
+include("../inc/inc.ClassUI.php");
+
+UI::htmlStartPage(getMLText("change_password"), "login");
+UI::globalBanner();
+UI::pageNavigation(getMLText("change_password"));
+?>
+
+<?php UI::contentContainerStart(); ?>
+<form action="../op/op.ChangePassword.php" method="post" name="form1" onsubmit="return checkForm();">
+<?php
+if (isset($_REQUEST["referuri"]) && strlen($_REQUEST["referuri"])>0) {
+	echo "<input type='hidden' name='referuri' value='".$_REQUEST["referuri"]."'/>";
+}
+if (isset($_REQUEST["hash"]) && strlen($_REQUEST["hash"])>0) {
+	echo "<input type='hidden' name='hash' value='".$_REQUEST["hash"]."'/>";
+}
+?>
+	<table border="0">
+		<tr>
+			<td><?php printMLText("password");?></td>
+			<td><input type="password" name="newpassword" id="password"></td>
+		</tr>
+		<tr>
+			<td><?php printMLText("password_repeat");?></td>
+			<td><input type="password" name="newpasswordrepeat" id="passwordrepeat"></td>
+		</tr>
+		<tr>
+			<td colspan="2"><input type="Submit" value="<?php printMLText("submit_password") ?>"></td>
+		</tr>
+	</table>
+</form>
+<?php UI::contentContainerEnd(); ?>
+<script language="JavaScript">document.form1.password.focus();</script>
+<p><a href="../out/out.Login.php"><?php echo getMLText("login"); ?></a></p>
+<?php
+	UI::htmlEndPage();
+?>
+