JezK

Edit File: changePassword.php

<?php 
include("header.php");
$currentPage="settings";
if(isset($_SESSION['updateFailed']))
{
	echo "<script>alert('Error!!! Unable to change password. Internal server error.');</script>";
	unset($_SESSION['updateFailed']);
}
if(isset($_SESSION['updateSuccess']))
{
	echo "<script>alert('Password updated successfully.');</script>";
	unset($_SESSION['updateSuccess']);
}
?>
        <div id="page-wrapper">

<div class="row">
                    <div class="col-lg-12">
                        <h1 class="page-header">
                            <small>Change Password </small>
                        </h1>
                        
                    </div>
                </div>

<form id="changePassword" action="app/changePasswordApp.php" onsubmit="return validatePassword()" method="post">
                <div class="row">
					<div class="col-md-12 text-center ">
						<div class="text-left passwordBlock" style="display:inline-block;text-align:left;">
							<div class="form-group row">
								<label for="oldPassword" class="col-md-6">Old Password:</label>
								<input type="password" maxlength="30" name="oldPassword" id="oldPassword" value="" autofocus class="col-md-6 cs-password">
							</div>
							<div class="form-group row">
								<label for="oldPassword" class="col-md-6">New Password:</label>
								<input type="password" maxlength="30" name="newPassword" id="newPassword" value="" class="col-md-6 cs-password">
							</div>
							<div class="form-group row">
								<label for="oldPassword" class="col-md-6">Confirm Password:</label>
								<input type="password" maxlength="30" name="confirmPassword" id="confirmPassword" class="col-md-6 cs-password">
							</div>
							<div class="col-md-6` text-center">
								<input type="submit" value="Submit" class="btn btn-cs">
							</div>
							
						</div>
					</div>
                </div>
             </form>

</div>

</div>

<?php include("footer.php");?>
<script>
function validatePassword()
{
	var newPassword = document.getElementById('newPassword');
	var confirmPassword = document.getElementById('confirmPassword');
	var oldPassword = document.getElementById('oldPassword');
	var sessionPassword = '<?php echo isset($_SESSION['bcAdminPassword'])?$_SESSION['bcAdminPassword']:""; ?>';
	var flag = 1;
	if(oldPassword.value.trim().length == 0) 
	{
		alert('Password must not be empty.');
		oldPassword.value = "";
		newPassword.value = "";
		confirmPassword.value = "";
		oldPassword.focus();
		flag = 0;
		return false;
	}
	if(oldPassword.value != sessionPassword)
	{
		alert('Invalid old password.');
		oldPassword.value = "";
		newPassword.value = "";
		confirmPassword.value = "";
		oldPassword.focus();
		flag = 0;
		return false;
	}
	if(newPassword.value.trim().length == 0 || confirmPassword.value.trim().length == 0) 
	{
		alert('Password must not be empty.');
		newPassword.value = "";
		confirmPassword.value = "";
		newPassword.focus();
		flag = 0;
		return false;
	}
	if(newPassword.value.trim().length < 6 || confirmPassword.value.trim().length < 6) 
	{
		alert('Password must be minimum 6 characters.');
		newPassword.value = "";
		confirmPassword.value = "";
		newPassword.focus();
		flag = 0;
		return false;
	}
	if(confirmPassword.value != newPassword.value)
	{
		alert('Password mismatch.');
		newPassword.value = "";
		confirmPassword.value = "";
		newPassword.focus();
		flag = 0;
		return false;
	}
	if(flag == 1)
	{
		return true;
	}
}
</script>