root/trunk/wifidog-auth/wifidog/change_password.php @ 708

<?php
  // $Id$
  /********************************************************************\
   * This program is free software; you can redistribute it and/or    *
   * modify it under the terms of the GNU General Public License as   *
   * published by the Free Software Foundation; either version 2 of   *
   * the License, or (at your option) any later version.              *
   *                                                                  *
   * This program is distributed in the hope that it will be useful,  *
   * but WITHOUT ANY WARRANTY; without even the implied warranty of   *
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the    *
   * GNU General Public License for more details.                     *
   *                                                                  *
   * You should have received a copy of the GNU General Public License*
   * along with this program; if not, contact:                        *
   *                                                                  *
   * Free Software Foundation           Voice:  +1-617-542-5942       *
   * 59 Temple Place - Suite 330        Fax:    +1-617-542-2652       *
   * Boston, MA  02111-1307,  USA       gnu@gnu.org                   *
   *                                                                  *
   \********************************************************************/
  /**@file
   * Login page
   * @author Copyright (C) 2004 Benoit Grégoire et Philippe April
   */
define('BASEPATH','./');
require_once BASEPATH.'include/common.php';
require_once BASEPATH.'classes/MainUI.php';
require_once BASEPATH.'include/common_interface.php';
require_once BASEPATH.'classes/User.php';

isset($_REQUEST["username"]) && $smarty->assign("username", $_REQUEST["username"]);

if (isset($_REQUEST["submit"])) {
    try {
        // If the source is present and that it's in our, save it to a var for later use
                $account_origin = Networt::getObject($_REQUEST['auth_source']);
                
        if (!$account_origin || !$_REQUEST["username"] || !$_REQUEST["oldpassword"] || !$_REQUEST["newpassword"] || !$_REQUEST["newpassword_again"])
            throw new Exception(_('You MUST fill in all the fields.'));
        $username = $db->EscapeString(trim($_REQUEST['username']));
            $current_password = $db->EscapeString(trim($_REQUEST['oldpassword']));
        $new_password = $db->EscapeString(trim($_REQUEST['newpassword']));

                if(empty($account_origin))
                        throw new Exception(_("Sorry, this network does not exist !"));
                                
        if ($_REQUEST["newpassword"] != $_REQUEST["newpassword_again"])
            throw new Exception(_("Passwords do not match."));

        // Warning for now, password change only works for local users, registered through our signup process.
        $user = User::getUserByUsernameAndOrigin($username, $account_origin);
        /**
         * utf8_decode is used for backward compatibility with old passwords
         * containing special characters. 
         * Conversion from UTF-8 to ISO-8859-1 is done to match the MD5 hash 
         */
        if ($user->getPasswordHash() != User::passwordHash(utf8_decode($current_password)))
            throw new Exception(_("Wrong password."));

        $user->SetPassword($new_password);
        $ui = new MainUI();
        $smarty->assign("message", _("Your password has been changed succesfully."));
        $ui->setMainContent($smarty->fetch("templates/validate.html"));
        $ui->display();
        exit;
    } catch (Exception $e) {
        $smarty->assign("error", $e->getMessage());
    }
}

// Add the auth servers list to smarty variables
$sources = array ();
// Preserve keys
$network_array=Network::getAllNetworks();
foreach ($network_array as $network)
        if ($network->getAuthenticator()->isRegistrationPermitted())
                $sources[$network->getId()] = $network->getName();
                
isset ($sources) && $smarty->assign('auth_sources', $sources);
// Pass the account_origin along, if it's set
isset ($_REQUEST["auth_source"]) && $smarty->assign('selected_auth_source', $_REQUEST["auth_source"]);

$ui = new MainUI();
$smarty->assign('SelectNetworkUI', Network::getSelectNetworkUI('auth_source'));
$ui->setMainContent($smarty->fetch("templates/change_password.html"));
$ui->display();
//$smarty->display("templates/change_password.html");
?>