Jump to content

Problema em Trocar Senha Site

kaiquegames069

By kaiquegames069
in Duvidas e Pedidos

Recommended Posts

tierrilopes Enthusiast

[Admin] tierrilopes

Posted
Posted 
<head>
<title>M2Empire 2.0</title>
</head>

<div class="con-ui con-top"><div class="marcador_h4"></div><h2><b>ALTERAR SENHA</b></h2></div>
<div class="con-ui con-post"><div class="con-wrapper">
<?PHP
  if(isset($_SESSION['user_admin']) && checkInt($_SESSION['user_admin']) && $_SESSION['user_admin']>=0) {
    if(isset($_POST['submit']) && $_POST['submit']==" ") {
    
      if(checkAnum($_POST['npass']) && !empty($_POST['opass']) && (!empty($_POST['npass']) && strlen($_POST['npass'])>=8 && strlen($_POST['npass'])<=16) && $_POST['npass']==$_POST['npass2']) {
        
        $oldPass = mysql_real_escape_string($_POST['opass']);
        $newPass = mysql_real_escape_string($_POST['npass']);
        
        $sqlCmd = "SELECT id,login FROM account.account WHERE password=PASSWORD('".$oldPass."') AND id='".$_SESSION['user_id']."' LIMIT 1";
		$sqlQry = mysql_query($sqlCmd,$sqlServ);
        
        if(mysql_num_rows($sqlQry)==1) {
        
          $passCmd = "UPDATE account.account SET password=PASSWORD('".$newPass."') WHERE id='".$_SESSION['user_id']."' LIMIT 1;";
          $passUpdate = mysql_query($passCmd,$sqlServ);
          
          if($passUpdate) {
            echo'<p class="meldung">Passwort erfolgreich ge&auml;ndert.</p>';
          }
          else {
            echo'<p class="meldung">&Auml;ndern fehlgeschlagen.</p>';
          }
          
        }
        else {
          echo'<p class="meldung">A senha inserida estava incorreta</p>';
        }
        
      }
      else {
        echo'<p class="meldung">Há não entraram todos os dados corretamente.</p>';
      }
      
    }
  ?>
		<br>
		<form action="index.php?s=senha_p" method="POST">
		<p>Olá <b><?PHP echo $_SESSION['user_name']; ?></b>, Preencha os dados abaixo para alterar a sua senha.
        <table>
        <tr>
		<br>
        <th class="topLine" colspan="2">Editar Senha da Conta<br><br></th>
        </tr>
        <tr>
        <th>* Senha atual:</th>
        <td><input type="password" name="opass" size="16" maxlength="16"/></td>
        </tr>
        <tr>
        <th>* Nova senha:</th>
        <td><input type="password" name="npass" size="16" maxlength="16"/> Min 8 - Max 16 caracteres.</td>
        </tr>
        <tr>
        <th>* Confirmação da senha:</th>
        <td><input type="password" name="npass2" size="16" maxlength="16"/> Min 8 - Max 16 caracteres.</td>
        </tr>
        <tr>
        <th style="text-align:center;" colspan="2"><br><input type="submit" name="submit" value=" "/></th>
        </tr>
        </table>
        </form>

<?PHP
}
else {
echo'<p class="meldung">Favor, realizar o login!</p>';
}
?>

</div>
</div>
<div class="con-ui con-bt">
</div>

Mysql é antigo e inseguro.

Muda para mysqli ou preferencialmente pdo.

Link to comment
kaiquegames069 Newbie

kaiquegames069

Posted
  • Author
Posted
46 minutes ago, Tierri Lopes said: 

<head>
<title>M2Empire 2.0</title>
</head>

<div class="con-ui con-top"><div class="marcador_h4"></div><h2><b>ALTERAR SENHA</b></h2></div>
<div class="con-ui con-post"><div class="con-wrapper">
<?PHP
  if(isset($_SESSION['user_admin']) && checkInt($_SESSION['user_admin']) && $_SESSION['user_admin']>=0) {
    if(isset($_POST['submit']) && $_POST['submit']==" ") {
    
      if(checkAnum($_POST['npass']) && !empty($_POST['opass']) && (!empty($_POST['npass']) && strlen($_POST['npass'])>=8 && strlen($_POST['npass'])<=16) && $_POST['npass']==$_POST['npass2']) {
        
        $oldPass = mysql_real_escape_string($_POST['opass']);
        $newPass = mysql_real_escape_string($_POST['npass']);
        
        $sqlCmd = "SELECT id,login FROM account.account WHERE password=PASSWORD('".$oldPass."') AND id='".$_SESSION['user_id']."' LIMIT 1";
		$sqlQry = mysql_query($sqlCmd,$sqlServ);
        
        if(mysql_num_rows($sqlQry)==1) {
        
          $passCmd = "UPDATE account.account SET password=PASSWORD('".$newPass."') WHERE id='".$_SESSION['user_id']."' LIMIT 1;";
          $passUpdate = mysql_query($passCmd,$sqlServ);
          
          if($passUpdate) {
            echo'<p class="meldung">Passwort erfolgreich ge&auml;ndert.</p>';
          }
          else {
            echo'<p class="meldung">&Auml;ndern fehlgeschlagen.</p>';
          }
          
        }
        else {
          echo'<p class="meldung">A senha inserida estava incorreta</p>';
        }
        
      }
      else {
        echo'<p class="meldung">Há não entraram todos os dados corretamente.</p>';
      }
      
    }
  ?>
		<br>
		<form action="index.php?s=senha_p" method="POST">
		<p>Olá <b><?PHP echo $_SESSION['user_name']; ?></b>, Preencha os dados abaixo para alterar a sua senha.
        <table>
        <tr>
		<br>
        <th class="topLine" colspan="2">Editar Senha da Conta<br><br></th>
        </tr>
        <tr>
        <th>* Senha atual:</th>
        <td><input type="password" name="opass" size="16" maxlength="16"/></td>
        </tr>
        <tr>
        <th>* Nova senha:</th>
        <td><input type="password" name="npass" size="16" maxlength="16"/> Min 8 - Max 16 caracteres.</td>
        </tr>
        <tr>
        <th>* Confirmação da senha:</th>
        <td><input type="password" name="npass2" size="16" maxlength="16"/> Min 8 - Max 16 caracteres.</td>
        </tr>
        <tr>
        <th style="text-align:center;" colspan="2"><br><input type="submit" name="submit" value=" "/></th>
        </tr>
        </table>
        </form>

<?PHP
}
else {
echo'<p class="meldung">Favor, realizar o login!</p>';
}
?>

</div>
</div>
<div class="con-ui con-bt">
</div>

Mysql é antigo e inseguro.

Muda para mysqli ou preferencialmente pdo.

Obrigado Tierri!

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Go to topic listing
×
×
  • Create New...