EATERIO/cust_reset_pwd.php at main · waterthatfrozen/EATERIO · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
<!DOCTYPE html>
<html lang="en">

<head>
    <?php
        session_start(); include("conn_db.php"); include('head.php');
        if(isset($_POST["rst_confirm"])){
            $cust_id = $_POST['cust_id'];
            $newpwd = $_POST['new_pwd'];
            $newcfpwd = $_POST['new_cfpwd'];
            if($newpwd==$newcfpwd){
                $query = "UPDATE customer SET c_pwd = '$newpwd' WHERE c_id=$cust_id";
                $result = $mysqli -> query($query);
                if($result) {
                    header("location: cust_reset_success.php");
                }else{
                    header("location: cust_reset_fail.php?err={$mysqli->errno}");
                }
                exit();
            }else{
            ?>
                <script>
                    alert("Your new password is not match. \nPlease enter it again.");
                    history.back();
                </script>
            <?php
            }
        }else{
        $cust_un = $_POST["fp_username"];
        $cust_em = $_POST["fp_email"];
        $query = "SELECT c_firstname,c_lastname,c_id FROM customer WHERE c_username = '$cust_un' AND c_email = '$cust_em' LIMIT 0,1";
        $result = $mysqli -> query($query);
        if ($result->num_rows == 0){
        ?>
            <script>
                alert("There is no account associated with this username and password");
                history.back();
            </script>
        <?php
            exit(1);
        }else{
            $row = $result -> fetch_array();
            $cust_id = $row["c_id"];
            $cust_fn = $row["c_firstname"];
            $cust_ln = $row["c_lastname"];
        }
    }
    ?>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link href="css/login.css" rel="stylesheet">
    <title>Reset Password | EATERIO</title>
</head>

<body class="d-flex flex-column h-100">
    <header class="navbar navbar-light fixed-top bg-light shadow-sm mb-auto">
        <div class="container-fluid mx-4">
            <a href="index.php">
                <img src="img/LOGO_BLACK.png" width="125" class="me-2" alt="EATERIO Logo">
            </a>
        </div>
    </header>

    <div class="container form-signin mt-auto">
        <a class="nav nav-item text-decoration-none text-muted" href="#" onclick="history.back();">
            <i class="bi bi-arrow-left-square me-2"></i>Go back
        </a>
        <form method="POST" action="cust_reset_pwd.php" class="form-floating">
            <h2 class="mt-4 mb-3 fw-normal text-bold"><i class="bi bi-key me-2"></i>Reset Password</h2>
            <p class="mt-4 fw-normal">Enter your information below.<br/>
            This is an account of <?php echo $cust_fn." ".$cust_ln;?></p>
            <div class="form-floating mb-2">
                <input type="password" class="form-control" id="rst_pwd" minlength="8" maxlength="45" placeholder="New Password" name="new_pwd"
                    required>
                <label for="fp_username">New Password</label>
            </div>
            <div class="form-floating mb-2">
                <input type="password" class="form-control" id="rst_pwd" minlength="8" maxlength="45" placeholder="Confirm New Password"
                    name="new_cfpwd" required>
                <label for="fp_email">Confirm New Password</label>
            </div>
            <input type="hidden" name="cust_id" value="<?=$cust_id?>">
            <button class="w-100 btn btn-success mb-3" name="rst_confirm" type="submit">Reset Password</button>
        </form>
    </div>

    <footer
        class="footer d-flex flex-wrap justify-content-between align-items-center px-5 py-3 mt-auto bg-secondary text-light">
        <span class="smaller-font">&copy; 2021 SeriousEater Group<br /><span class="xsmall-font">Paphana Y. Sirada C.
                Thanakit L.</span></span>
        <ul class="nav justify-content-end list-unstyled d-flex">
            <li class="ms-3"><a class="text-light" target="_blank" href="https://github.com/waterthatfrozen/EATERIO"><i
                        class="bi bi-github"></i></a></li>
        </ul>
    </footer>
</body>

</html>