First Commit

ajax/ajax.UserPassword.Update.php

@@ -0,0 +1,60 @@
+<?php
+$ValidAccess = 2010;
+include "include/globals.php";
+
+session_name($sessionName);
+session_start();
+
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   logExit("Session is not active");
+   exit;
+}
+
+include "include/ajax.csrfToken.php";
+
+
+$school_num = intval($_GET['school_num']);
+$user_num = intval($_GET['record_num']);
+
+
+$return_data = array();
+
+$moduleName = "ajax.UserPassword.Update.php";
+startLog($moduleName);
+
+
+// Error logging
+writeLog("school_num: $school_num\n");
+writeLog("user_num: $user_num\n");
+
+
+// Get user record
+$query = "SELECT * FROM users WHERE school_num = $school_num AND record_num = $user_num";
+writeLog("query: $query\n");
+$r = db_query($query);
+$user = db_fetch_assoc($r);
+// writeLog(print_r($user,true));
+
+if (!is_array($user)) exit;
+extract($user);
+
+writeLog($userid);
+$userid = str_replace(' ','',$userid);
+writeLog($userid);
+
+$password = $userid;
+$password_crypt = crypt($password,$date_added);
+$password_crypt = crypt(db_escape_string($password),$user['date_added']);
+writeLog("password: $password\n");
+writeLog("date_added: $date_added\n");
+writeLog("password_crypt: $password_crypt\n");
+
+$query = "UPDATE users SET userid = '$userid', password = '$password', password_crypt = '$password_crypt' " .
+         "WHERE school_num = $school_num AND record_num = $user_num";
+writeLog("query: $query\n");
+db_query($query);
+
+writeLog("complete\n\n");
+
+?>