Соцсеть. Изменение пароля пользователя. Урок 8.

Изменение пароля пользователя.

Создадим новую страницу change-password.php

<?php

include('./classes/DB.php');

include('./classes/Login.php');

if(Login::isLoggedIn()) {

if(isset($_POST['changepassword'])) {

$oldpassword = $_POST['oldpassword'];

$newpassword = $_POST['newpassword'];

$newpasswordrepeat = $_POST['newpasswordrepeat'];

$userid = Login::isLoggedIn();

// верифицируем пароль

if (password_verify($oldpassword, DB::query('SELECT password FROM users WHERE id=:userid', array(':userid'=>$userid))[0]['password'])) {

// проверяем совпадение пароля и его повтора

if($newpassword == $newpasswordrepeat) {

if(strlen($newpassword) >= 6 && strlen($newpassword) <= 60) {

DB::query('UPDATE users SET password=:newpassword WHERE id=:userid', array(':newpassword'=>password_hash($newpassword, PASSWORD_BCRYPT), ':userid'=>$userid));

echo 'Password changed successfully!';

}

} else {

echo 'Password don\'t match';

}

} else {

echo 'Incorrect old password!';

}

}

} else {

die('Not logged in');

}

?>

<h1>Change your Password</h1>

<form action="change-password.php" method="post">

<input type="password" name="oldpassword" value="" placeholder="Current Password..."/><br />

<input type="password" name="newpassword" value="" placeholder="New Password..."/><br />

<input type="password" name="newpasswordrepeat" value="" placeholder="Repeat Password..."/><br />

<input type="submit" name="changepassword" value="Change Password"/>

</form>