61 lines
1.4 KiB
PHP
61 lines
1.4 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
include "include/globals.php";
|
|
|
|
session_name($sessionName);
|
|
session_start();
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
logExit("Session is not active");
|
|
exit;
|
|
}
|
|
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
$school_num = intval($_GET['school_num']);
|
|
$user_num = intval($_GET['record_num']);
|
|
|
|
|
|
$return_data = array();
|
|
|
|
$moduleName = "ajax.UserPassword.Update.php";
|
|
startLog($moduleName);
|
|
|
|
|
|
// Error logging
|
|
writeLog("school_num: $school_num\n");
|
|
writeLog("user_num: $user_num\n");
|
|
|
|
|
|
// Get user record
|
|
$query = "SELECT * FROM users WHERE school_num = $school_num AND record_num = $user_num";
|
|
writeLog("query: $query\n");
|
|
$r = db_query($query);
|
|
$user = db_fetch_assoc($r);
|
|
// writeLog(print_r($user,true));
|
|
|
|
if (!is_array($user)) exit;
|
|
extract($user);
|
|
|
|
writeLog($userid);
|
|
$userid = str_replace(' ','',$userid);
|
|
writeLog($userid);
|
|
|
|
$password = $userid;
|
|
$password_crypt = crypt($password,$date_added);
|
|
$password_crypt = crypt(db_escape_string($password),$user['date_added']);
|
|
writeLog("password: $password\n");
|
|
writeLog("date_added: $date_added\n");
|
|
writeLog("password_crypt: $password_crypt\n");
|
|
|
|
$query = "UPDATE users SET userid = '$userid', password = '$password', password_crypt = '$password_crypt' " .
|
|
"WHERE school_num = $school_num AND record_num = $user_num";
|
|
writeLog("query: $query\n");
|
|
db_query($query);
|
|
|
|
writeLog("complete\n\n");
|
|
|
|
?>
|