PHP-Auth/account.php at master · abdallahk/PHP-Auth · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
<?php

session_start();

$page_name="account";

if($_SESSION['auth']==="true"){

?>
<!-- Header with Styles and Meta Tags -->
<?php include 'partials/header.php'; ?>

  <body class="hold-transition sidebar-mini">
    <div class="wrapper">

      <?php include 'partials/top-nav.php'; ?>

      <!-- Main Sidebar Container -->
      <?php include 'partials/nav.php'; ?>

      <!-- Content Wrapper. Contains page content -->
      <div class="content-wrapper">
        <?php include 'partials/content-header.php'; ?>

        <!-- Main content -->
        <section class="content">
          <div class="container-fluid">
            <div class="card card-default color-palette-box">
              <div class="card-header">
                <div class="pull-left"><h3 class="card-title">
                  <i class="fa fa-user"></i>
                  Account
                </h3></div>
              </div>
              <div class="card-body">

              <?php if(isset($_GET['success']) AND $_GET['success']==="true"){ ?>

                <div class="alert alert-success alert-dismissible fade show" role="alert">Successfully Updated!
                  <button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">&times;</span></button>
                </div>

              <?php } ?>

                <div class="row">

                  <form class="col-md-6" action="auth.php" method="POST">
                    <div class="form-group row">

                      <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>" />
                      <input type="hidden" name="action" value="update_password" />
                      <input type="hidden" name="email" value="<?= $_SESSION['email']; ?>" />

                      <label for="inputEmail1" class="col-sm-3 col-form-label">Your Email</label>
                      <div class="col-sm-8">
                        <input type="text" class="form-control" id="inputEmail1" value="<?= $_SESSION['email']; ?>" disabled>
                      </div>
                    </div>
                    <div class="form-group row">
                      <label for="inputPassword2" class="col-sm-3 col-form-label">Current Password</label>
                      <div class="col-sm-8">
                        <input type="password" name="current_password" class="form-control" id="inputPassword2" placeholder="Password">
                      </div>
                    </div>
                    <div class="form-group row">
                      <label for="inputPassword3" class="col-sm-3 col-form-label">New Password</label>
                      <div class="col-sm-8">
                        <input type="password" name="new_password" class="form-control" id="inputPassword3" placeholder="Password">
                      </div>
                    </div>
                    <div class="form-group row">
                      <div class="col-sm-8">
                        <button type="submit" class="btn btn-primary col-sm-3">Save Changes</button>
                      </div>
                    </div>
                  </form>


                </div>
                <!-- /.row -->

              </div>
              <!-- /.card-body -->
            </div>
          </div>
        </section>

        <!-- /.content -->
      </div>
      <!-- /.content-wrapper -->
      <?php include 'partials/footer.php'; // footer html ?>

      <!-- Control Sidebar -->
      <aside class="control-sidebar control-sidebar-dark">
        <!-- Control sidebar content goes here -->
      </aside>
      <!-- /.control-sidebar -->
    </div>
    <!-- ./wrapper -->

    <?php include 'partials/footer-scripts.php'; // footer scripts ?>

    <?php

  } // auth session check

  else { // if session doesnt exist
    header('location: login.php');
  }
  ?>