require "lib/mod_xml.lib";
require "lib/mod_xml_ct.lib";
require "lib/system.lib";
require "services/BD3LoadConfiguration.service";
require "services/BD3LoadDBDevice.service";
require "services/BD3ForwardRoutines.service";
$sSystemSource = "services/BD3Login.service";
$db = c();
if($action != "login")
{
setcookie("bd3Auth");
if($QUERY_STRING != "")
{
$QUERY_STRING = base64_decode($QUERY_STRING);
parse_str($QUERY_STRING);
}
// Handling new actions
switch($action)
{
case change_password:
// Now we must to check bd3AuthFlag and compare it with
// 'user_id' variable value
if(!sysIsBD3AuthFlagTrue())
{
break;
}
$sSystemSource = "services/BD3ChangePassword.service";
break;
case validate_new_password:
if(!sysIsBD3AuthFlagTrue())
{
break;
}
// Checking input variables - pswd, new_pswd, new_pswd_1
if($pswd == "" || $new_pswd == "" || $new_pswd != $new_pswd_1 || $pswd == $new_pswd)
{
$sError = "Invalid input data!";
}
// Comparing 'pswd' with database's record for user with
// current 'user_id'
$rUser = q("SELECT login FROM webDate_bd_users WHERE id='$user_id' AND pswd='".sysCrypt($pswd)."'");
if(e($rUser) && $sError == "")
{
$sError = "The password you entered is incorrect.";
}
if($sError != "")
{
$sSystemSource = "services/BD3ChangePassword.service";
break;
}
// Changing user's password and logging user in
q("UPDATE webDate_bd_users SET pswd='".sysCrypt($new_pswd)."', status='0' WHERE id='$user_id'");
$fUser = f($rUser);
$login = $fUser[ login ];
$pswd = $new_pswd;
require "services/BD3LoginRoutines.service";
break;
}
}
else
{
require "services/BD3LoginRoutines.service";
}
?>
$db;
?>