2024-10-10

web/swadmin/changepass.php

@@ -0,0 +1,34 @@
+<?php require_once("admin-header.php");?>
+<?php if (!(isset($_SESSION[$OJ_NAME.'_'.'administrator'])|| isset($_SESSION[$OJ_NAME.'_'.'password_setter']) )){
+	echo "<a href='../loginpage.php'>Please Login First!</a>";
+	exit(1);
+}
+if(isset($_POST['do'])){
+	
+	require_once("../include/check_post_key.php");
+
+	require_once("../include/my_func.inc.php");
+	
+	$user_id=$_POST['user_id'];
+    $passwd =$_POST['passwd'];
+    if (false) {
+		$user_id = stripslashes ( $user_id);
+		$passwd = stripslashes ( $passwd);
+	}
+	$passwd=pwGen($passwd);
+	$sql="update `users` set `password`=? where `user_id`=?  and user_id not in( select user_id from privilege where rightstr='administrator') ";
+	
+	if (pdo_query($sql,$passwd,$user_id)==1) echo "Password Changed!";
+  else echo "No such user! or He/Her is an administrator!";
+}
+?>
+<div class="container">
+<form action='changepass.php' method=post>
+	<b>Reset Password:</b><br />
+	<?php echo $MSG_USER_ID?>:<input type=text size=10 name="user_id"><br />
+	<?php echo $MSG_PASSWORD?>:<input type=text size=10 name="passwd"><br />
+	<?php require_once("../include/set_post_key.php");?>
+	<input type='hidden' name='do' value='do'>
+	<input type=submit value='Change'>
+</form>
+</div>