ajgkqsldxvkqsldkqs
azelfkqsmkqsmlkdqsmld
azmlekdqmskdmlqskd
nkldsfkqsmldkqsmdmlskd
<?php
include("init.php");
include_once("classes.php");
if(isset($_GET['id'])){
	$mcrypt = new MCrypt();
	$response = array();
	$session = $mcrypt->decrypt($_GET['id']);
	$cp = $mcrypt->decrypt($_GET['cp']);
	$np = $mcrypt->decrypt($_GET['np']);
	$cnp = $mcrypt->decrypt($_GET['cnp']);
	/* Fetch the information */
	$con = db_connect();
	$sql = session($con,$session);
	$total = 0;
	$message = "";
	if(db_rows($con,$sql)>0){
		/* fetch userid and create session token */
		$query = mysqli_query($con,$sql);
		while($row=mysqli_fetch_array($query)){
			$userid = $row['userid'];
		}
		if(empty($cp)){
			$message = "Please enter new password";
		}else if(empty($np)){
			$message = "Please enter new password";
		}else if(!validatePassword($np)){
			$message = "Please new password is too weak. Password length must be at least 4 characters.";
		}else if($cp==$np){
			$message = "Please new password can't be the same as current password. Please try a different password.";
		}else if(empty($cnp)){
			$message = "Please re-enter new password again in the confirm new password field.";
		}else if(!($np==$cnp)){
			$message = "Please new password and confirm new password must be the same.";
		}else if(!password_correct($con,$userid,$cp)){
			$message = "Please current password is incorrect.";
		}else{
			$sql = "update staff set password='".encryptPassword($np)."' where id=".intval($userid);
			if(mysqli_query($con,$sql)){
				$message = "Password is successfully changed";
			}else{
				$message = "Server error. Please try again later.";
			}
		}
	}else{
		$message = "You have no right to this content";
	}
	echo json_encode(array("message"=>$mcrypt->encrypt($message)));
	db_close($con);
}
?>