<?php
$title='My Account';
require_once('header.inc.php');
require_once('nav.inc.php');
$crf = md5($_SESSION['uid'] . date('D-M-Y'));
if($_POST && isset($_REQUEST['crf'])){
if($_REQUEST['crf'] == $crf){
$pwd = $_POST['edit_pwd'];
$npwd = $_POST['edit_new_pwd'];
$npwd2 = $_POST['edit_new_pwd2'];
$details = $user->details($_SESSION['uid']);
if($pwd == $details['password']){
if(empty($npwd)){
$user->error  = 'Please enter a new password.';
}elseif(empty($npwd)){
$user->error  = 'Please re-enter a new password.';
}elseif($npwd == $npwd2){
$result= $user->update($_SESSION['uid'],'password',base64_encode($npwd));
}else{
$user->error  = 'New passwords does not match.';
}}else{

$user->error  = 'Please enter a correct current password.';

}
}else{
$user->error  = 'Authentication error, Try again.';
}
}
?>
 <div class="page-header">
<h3>Change Account Settings</h3>
</div><?php
if($user->msg){
				echo  "<div class=\"alert alert-success\" style=\"display:block;\">".$user->msg."<button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button></div>";
				}
				if($user->error){
				echo "<div class=\"alert alert-error\" style=\"display:block;\">".$user->error."<button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button></div>";
				}
				?>
				<h4>Change Password</h4>
<form action="account.php" method="post" id="edit-admin" class="form-horizontal">
<div class="control-group">
<label class="control-label" for="edit-admin-email">Email ID:</label>
<div class="controls">
<input disabled type="text" name="edit_email" value="<?php echo $_SESSION['curr_user'];?>" id="edit-admin-email"></div>
</div>
<div class="control-group">
<label class="control-label" for="edit-pwd">Current Password:</label><div class="controls">
<input type="password" name="edit_pwd" value="" id="edit-pwd">
</div></div>
<div class="control-group">
<label class="control-label" for="edit-new-pwd">New Password:</label><div class="controls">
<input type="password" name="edit_new_pwd" value="" id="edit-new-pwd">
</div></div>
<div class="control-group">
<label class="control-label" for="edit-new-pwd2">Reapeat Password:</label><div class="controls">
<input type="password" name="edit_new_pwd2" value="" id="edit-new-pwd2">
</div></div>
<div class="control-group"><div class="controls">
<input name="crf" value="<?php echo $crf;?>" type="hidden">
<button class="btn btn-primary">Update</button>
</div>
</div>

</form>	
<?php
require_once('footer.inc.php');
?>