JezK

Edit File: changePasswordApp.php

<?php session_start(); include('main.php'); $password = $_POST['newPassword']; $userID = $_SESSION['sliAdminID']; $oldPassword = $_POST['oldPassword']; $userDetails = $sli->userProfile($userId); if ($oldPassword != $userDetails['password']) { echo "<script>alert('Old password is incorrect.');location.replace('../changePassword.php')</script>"; exit; } $passRegex = "/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[\W_]).{12,}$/"; if (!preg_match($passRegex, $password)) { echo "<script>alert('Password must be at least 12 characters long and contain at least one uppercase letter, one lowercase letter, one number, and one special character.');location.replace('../changePassword.php')</script>"; exit; } $result = $sli->changePassword($userID,$password); if($result == -3) //update failed { $_SESSION['updateFailed'] = 1; } else //success { $_SESSION['password'] = $password; $_SESSION['updateSuccess'] = 1; } echo "<script>location.replace('../changePassword.php')</script>"; ?>