mirror of https://github.com/nostar/urfd.git
parent
6d729c5d65
commit
750dea0ad5
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,73 @@
|
|||||||
|
<?php
|
||||||
|
// Initialize the session
|
||||||
|
session_start();
|
||||||
|
|
||||||
|
// Check if the user is logged in, otherwise redirect to login page
|
||||||
|
if (!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true) {
|
||||||
|
header("location: login.php");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Include config file
|
||||||
|
require_once "configure.php";
|
||||||
|
|
||||||
|
// find current frequencies and initialize
|
||||||
|
$sql = "SELECT txfreq, rxfreq FROM ysfnodes WHERE callsign = ?";
|
||||||
|
if ($stmt = mysqli_prepare($link, $sql)) {
|
||||||
|
// Bind variables to the prepared statement as parameters
|
||||||
|
mysqli_stmt_bind_param($stmt, "s", $_SESSION["callsign"]);
|
||||||
|
// Attempt to execute the prepared statement
|
||||||
|
if (mysqli_stmt_execute($stmt)) {
|
||||||
|
// Store result
|
||||||
|
mysqli_stmt_store_result($stmt);
|
||||||
|
|
||||||
|
// Check if callsign exists, if yes then verify password
|
||||||
|
if (mysqli_stmt_num_rows($stmt) == 1) {
|
||||||
|
// Bind result variables
|
||||||
|
mysqli_stmt_bind_result($stmt, $tx_freq_hz, $rx_freq_hz);
|
||||||
|
if (mysqli_stmt_fetch($stmt)) {
|
||||||
|
$txfreq = $tx_freq_hz / 1000000.0;
|
||||||
|
$rxfreq = $rx_freq_hz / 1000000.0;
|
||||||
|
} else {
|
||||||
|
die("Can't bind frequencies\n");
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
die("Couldn't find one row for callsign\n");
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
die("Trouble SELECTing row\n");
|
||||||
|
}
|
||||||
|
mysqli_stmt_close($stmt);
|
||||||
|
} else {
|
||||||
|
die("Couldn't prepare SELECT statement\n");
|
||||||
|
}
|
||||||
|
?>
|
||||||
|
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<title>Set Frequency</title>
|
||||||
|
<link rel="stylesheet" href="bootstrap.css">
|
||||||
|
<style type="text/css">
|
||||||
|
body{ font: 14px sans-serif; text-align: center; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="page-header">
|
||||||
|
<h1>Summary for <?php echo htmlspecialchars($_SESSION["callsign"]); ?></h1>
|
||||||
|
</div>
|
||||||
|
<div class="wrapper">
|
||||||
|
<h2>Hot-Spot Frequencies Summary</h2>
|
||||||
|
<p>Hot-spot Callsign: <?php echo htmlspecialchars($_SESSION["callsign"]); ?></p>
|
||||||
|
<p>Transmit Frequency: <?php echo $txfreq; ?> MHz</p>
|
||||||
|
<p>Receive Frequency: <?php echo $rxfreq; ?> MHz</p>
|
||||||
|
<p>It can take up to 15 minutes for the frequency data to be available to the reflector. Please be patient.</p>
|
||||||
|
</div>
|
||||||
|
<p>
|
||||||
|
<a href="frequency.php" class="btn btn-primary">Reset Frequencies</a>
|
||||||
|
<a href="reset-password.php" class="btn btn-warning">Reset Your Password</a>
|
||||||
|
<a href="logout.php" class="btn btn-danger">Sign Out of Your Account</a>
|
||||||
|
</p>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@ -0,0 +1,126 @@
|
|||||||
|
<?php
|
||||||
|
// Initialize the session
|
||||||
|
session_start();
|
||||||
|
|
||||||
|
// Check if the user is logged in, otherwise redirect to login page
|
||||||
|
if (!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true) {
|
||||||
|
header("location: login.php");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Include config file
|
||||||
|
require_once "configure.php";
|
||||||
|
|
||||||
|
// find current frequencies and initialize
|
||||||
|
$sql = "SELECT txfreq, rxfreq FROM ysfnodes WHERE callsign = ?";
|
||||||
|
if ($stmt = mysqli_prepare($link, $sql)) {
|
||||||
|
// Bind variables to the prepared statement as parameters
|
||||||
|
mysqli_stmt_bind_param($stmt, "s", $_SESSION["callsign"]);
|
||||||
|
// Attempt to execute the prepared statement
|
||||||
|
if (mysqli_stmt_execute($stmt)) {
|
||||||
|
// Store result
|
||||||
|
mysqli_stmt_store_result($stmt);
|
||||||
|
|
||||||
|
// Check if callsign exists, if yes then verify password
|
||||||
|
if (mysqli_stmt_num_rows($stmt) == 1) {
|
||||||
|
// Bind result variables
|
||||||
|
mysqli_stmt_bind_result($stmt, $tx_freq_hz, $rx_freq_hz);
|
||||||
|
if (mysqli_stmt_fetch($stmt)) {
|
||||||
|
$txfreq = $tx_freq_hz / 1000000.0;
|
||||||
|
$rxfreq = $rx_freq_hz / 1000000.0;
|
||||||
|
} else {
|
||||||
|
die("Can't bind frequencies\n");
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
die("Couldn't find one row for callsign\n");
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
die("Trouble SELECTing row\n");
|
||||||
|
}
|
||||||
|
mysqli_stmt_close($stmt);
|
||||||
|
} else {
|
||||||
|
die("Couldn't prepare SELECT statement\n");
|
||||||
|
}
|
||||||
|
|
||||||
|
// Processing form data when form is submitted
|
||||||
|
if ($_SERVER["REQUEST_METHOD"] == "POST") {
|
||||||
|
|
||||||
|
// Validate new password
|
||||||
|
if ($txfreq > 1000.0 || $txfreq < 10.0) {
|
||||||
|
$txfreq_err = "TX out of range.";
|
||||||
|
}
|
||||||
|
// Validate confirm password
|
||||||
|
if ($rxfreq > 1000.0 || $rxfreq < 10.0) {
|
||||||
|
$rxfreq_err = "RX out of range.";
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check input errors before updating the database
|
||||||
|
if (empty($txfreq_err) && empty($rxfreq_err)) {
|
||||||
|
// Prepare an update statement
|
||||||
|
$sql = "UPDATE ysfnodes SET txfreq = ?, rxfreq = ? WHERE callsign = ?";
|
||||||
|
|
||||||
|
if($stmt = mysqli_prepare($link, $sql)){
|
||||||
|
// Bind variables to the prepared statement as parameters
|
||||||
|
$tx_freq_hz = $_POST["txfreq"] * 1000000;
|
||||||
|
$rx_freq_hz = $_POST["rxfreq"] * 1000000;
|
||||||
|
mysqli_stmt_bind_param($stmt, "iis", $tx_freq_hz, $rx_freq_hz, $_SESSION["callsign"]);
|
||||||
|
|
||||||
|
// Attempt to execute the prepared statement
|
||||||
|
if(mysqli_stmt_execute($stmt)){
|
||||||
|
// Frequencies updated successfully, go to summary
|
||||||
|
header("location: finish.php");
|
||||||
|
exit();
|
||||||
|
} else{
|
||||||
|
echo "Oops! Something went wrong. Please try again later.";
|
||||||
|
}
|
||||||
|
|
||||||
|
// Close statement
|
||||||
|
mysqli_stmt_close($stmt);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Close connection
|
||||||
|
mysqli_close($link);
|
||||||
|
}
|
||||||
|
?>
|
||||||
|
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<title>Set Frequency</title>
|
||||||
|
<link rel="stylesheet" href="bootstrap.css">
|
||||||
|
<style type="text/css">
|
||||||
|
body{ width: 350px; padding: 20px; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="page-header">
|
||||||
|
<h1>Set Frequencies for <?php echo htmlspecialchars($_SESSION["callsign"]); ?></h1>
|
||||||
|
</div>
|
||||||
|
<div class="wrapper">
|
||||||
|
<h2>Hot-Spot Frequencies</h2>
|
||||||
|
<p>Set your hot-spot frequencies (in MHz) here.</p>
|
||||||
|
<form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post">
|
||||||
|
<div class="form-group <?php echo (!empty($new_txfreq_err)) ? 'has-error' : ''; ?>">
|
||||||
|
<label>Tx Frequency (MHz)</label>
|
||||||
|
<input type="number" size="12" name="txfreq" min="10" max="1000" step="0.0005" class="form-control" value="<?php echo $txfreq; ?>">
|
||||||
|
<span class="help-block"><?php echo $txfreq_err; ?></span>
|
||||||
|
</div>
|
||||||
|
<div class="form-group <?php echo (!empty($rxfreq_err)) ? 'has-error' : ''; ?>">
|
||||||
|
<label>Rx Frequency (MHz)</label>
|
||||||
|
<input type="number" size="12" name="rxfreq" min="10" max="1000" step="0.0005" class="form-control" value="<?php echo $rxfreq; ?>">
|
||||||
|
<span class="help-block"><?php echo $rxfreq_err; ?></span>
|
||||||
|
</div>
|
||||||
|
<div class="form-group">
|
||||||
|
<input type="submit" class="btn btn-primary" value="Submit">
|
||||||
|
<a class="btn btn-link" href="finish.php">Cancel</a>
|
||||||
|
</div>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
<p>
|
||||||
|
<a href="reset-password.php" class="btn btn-warning">Reset Your Password</a>
|
||||||
|
<a href="logout.php" class="btn btn-danger">Sign Out of Your Account</a>
|
||||||
|
</p>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@ -0,0 +1,123 @@
|
|||||||
|
<?php
|
||||||
|
// Initialize the session
|
||||||
|
session_start();
|
||||||
|
|
||||||
|
// Check if the user is already logged in, if yes then redirect him to frequency page
|
||||||
|
if(isset($_SESSION["loggedin"]) && $_SESSION["loggedin"] === true){
|
||||||
|
header("location: frequency.php");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Include config file
|
||||||
|
require_once "configure.php";
|
||||||
|
|
||||||
|
// Define variables and initialize with empty values
|
||||||
|
$callsign = $password = "";
|
||||||
|
$callsign_err = $password_err = "";
|
||||||
|
|
||||||
|
// Processing form data when form is submitted
|
||||||
|
if ($_SERVER["REQUEST_METHOD"] == "POST") {
|
||||||
|
|
||||||
|
// Check if callsign is empty
|
||||||
|
if (empty(trim($_POST["callsign"]))) {
|
||||||
|
$callsign_err = "Please enter your callsign.";
|
||||||
|
} else {
|
||||||
|
$callsign = strtoupper(trim($_POST["callsign"]));
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check if password is empty
|
||||||
|
if (empty(trim($_POST["password"]))) {
|
||||||
|
$password_err = "Please enter your password.";
|
||||||
|
} else {
|
||||||
|
$password = trim($_POST["password"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Validate credentials
|
||||||
|
if (empty($callsign_err) && empty($password_err)) {
|
||||||
|
// Prepare a select statement
|
||||||
|
$sql = "SELECT callsign, password FROM ysfnodes WHERE callsign = ?";
|
||||||
|
|
||||||
|
if ($stmt = mysqli_prepare($link, $sql)) {
|
||||||
|
// Bind variables to the prepared statement as parameters
|
||||||
|
mysqli_stmt_bind_param($stmt, "s", $param_callsign);
|
||||||
|
|
||||||
|
// Set parameters
|
||||||
|
$param_callsign = $callsign;
|
||||||
|
|
||||||
|
// Attempt to execute the prepared statement
|
||||||
|
if (mysqli_stmt_execute($stmt)) {
|
||||||
|
// Store result
|
||||||
|
mysqli_stmt_store_result($stmt);
|
||||||
|
|
||||||
|
// Check if callsign exists, if yes then verify password
|
||||||
|
if (mysqli_stmt_num_rows($stmt) == 1) {
|
||||||
|
// Bind result variables
|
||||||
|
mysqli_stmt_bind_result($stmt, $callsign, $hashed_password);
|
||||||
|
if (mysqli_stmt_fetch($stmt)) {
|
||||||
|
if (password_verify($password, $hashed_password)) {
|
||||||
|
// Password is correct, so start a new session
|
||||||
|
session_start();
|
||||||
|
|
||||||
|
// Store data in session variables
|
||||||
|
$_SESSION["loggedin"] = true;
|
||||||
|
$_SESSION["callsign"] = $callsign;
|
||||||
|
|
||||||
|
// Redirect user to frequency page
|
||||||
|
header("location: frequency.php");
|
||||||
|
} else {
|
||||||
|
// Display an error message if password is not valid
|
||||||
|
$password_err = "The password you entered was not valid.";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
// Display an error message if callsign doesn't exist
|
||||||
|
$callsign_err = "No account found with that callsign.";
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
echo "Oops! Something went wrong. Please try again later.";
|
||||||
|
}
|
||||||
|
|
||||||
|
// Close statement
|
||||||
|
mysqli_stmt_close($stmt);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Close connection
|
||||||
|
mysqli_close($link);
|
||||||
|
}
|
||||||
|
?>
|
||||||
|
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<title>Login</title>
|
||||||
|
<link rel="stylesheet" href="bootstrap.css">
|
||||||
|
<style type="text/css">
|
||||||
|
body{ font: 14px sans-serif; }
|
||||||
|
.wrapper{ width: 350px; padding: 20px; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="wrapper">
|
||||||
|
<h2>Login</h2>
|
||||||
|
<p>Login with your hot-spot callsign.</p>
|
||||||
|
<form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post">
|
||||||
|
<div class="form-group <?php echo (!empty($callsign_err)) ? 'has-error' : ''; ?>">
|
||||||
|
<label>Username</label>
|
||||||
|
<input type="text" name="callsign" class="form-control" value="<?php echo $callsign; ?>">
|
||||||
|
<span class="help-block"><?php echo $callsign_err; ?></span>
|
||||||
|
</div>
|
||||||
|
<div class="form-group <?php echo (!empty($password_err)) ? 'has-error' : ''; ?>">
|
||||||
|
<label>Password</label>
|
||||||
|
<input type="password" name="password" class="form-control">
|
||||||
|
<span class="help-block"><?php echo $password_err; ?></span>
|
||||||
|
</div>
|
||||||
|
<div class="form-group">
|
||||||
|
<input type="submit" class="btn btn-primary" value="Login">
|
||||||
|
</div>
|
||||||
|
<p>Don't have an account? <a href="register.php">Sign up now</a>.</p>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@ -0,0 +1,14 @@
|
|||||||
|
<?php
|
||||||
|
// Initialize the session
|
||||||
|
session_start();
|
||||||
|
|
||||||
|
// Unset all of the session variables
|
||||||
|
$_SESSION = array();
|
||||||
|
|
||||||
|
// Destroy the session.
|
||||||
|
session_destroy();
|
||||||
|
|
||||||
|
// Redirect to login page
|
||||||
|
header("location: login.php");
|
||||||
|
exit;
|
||||||
|
?>
|
||||||
@ -0,0 +1,148 @@
|
|||||||
|
<?php
|
||||||
|
// Include config file
|
||||||
|
require_once "configure.php";
|
||||||
|
|
||||||
|
function IsValidCallsign(string $callsign)
|
||||||
|
{
|
||||||
|
$regex = '/^(([1-9][A-Z])|([A-PR-Z][0-9])|([A-PR-Z][A-Z][0-9]))[0-9A-Z]*[A-Z]$/';
|
||||||
|
$rval = preg_match($regex, $callsign);
|
||||||
|
if (FALSE === $rval)
|
||||||
|
die("trouble with callsign regular expression\n");
|
||||||
|
return $rval;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Define variables and initialize with empty values
|
||||||
|
$callsign = $password = $confirm_password = "";
|
||||||
|
$callsign_err = $password_err = $confirm_password_err = "";
|
||||||
|
|
||||||
|
// Processing form data when form is submitted
|
||||||
|
if ($_SERVER["REQUEST_METHOD"] == "POST") {
|
||||||
|
|
||||||
|
// Validate callsign
|
||||||
|
if (empty(trim($_POST["callsign"]))) {
|
||||||
|
$callsign_err = "Please enter your callsign.";
|
||||||
|
} else if (strlen(trim($_POST["callsign"])) > 7) {
|
||||||
|
$callsign_err = "Callsign is too long.";
|
||||||
|
} else if (! IsValidCallsign(strtoupper(trim($_POST["callsign"])))) {
|
||||||
|
$callsign_err = "Not a valid callsign.";
|
||||||
|
} else {
|
||||||
|
// Prepare a select statement
|
||||||
|
$sql = "SELECT * FROM ysfnodes WHERE callsign = ?";
|
||||||
|
|
||||||
|
if ($stmt = mysqli_prepare($link, $sql)) {
|
||||||
|
// Bind variables to the prepared statement as parameters
|
||||||
|
mysqli_stmt_bind_param($stmt, "s", $param_callsign);
|
||||||
|
|
||||||
|
// Set parameters
|
||||||
|
$param_callsign = strtoupper(trim($_POST["callsign"]));
|
||||||
|
|
||||||
|
// Attempt to execute the prepared statement
|
||||||
|
if (mysqli_stmt_execute($stmt)) {
|
||||||
|
/* store result */
|
||||||
|
mysqli_stmt_store_result($stmt);
|
||||||
|
|
||||||
|
if (mysqli_stmt_num_rows($stmt) == 1) {
|
||||||
|
$callsign_err = "This callsign is already taken.";
|
||||||
|
} else {
|
||||||
|
$callsign = strtoupper(trim($_POST["callsign"]));
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
echo "Oops! Something went wrong. Please try again later.";
|
||||||
|
}
|
||||||
|
|
||||||
|
// Close statement
|
||||||
|
mysqli_stmt_close($stmt);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Validate password
|
||||||
|
if (empty(trim($_POST["password"]))) {
|
||||||
|
$password_err = "Please enter a password.";
|
||||||
|
} elseif (strlen(trim($_POST["password"])) < 6) {
|
||||||
|
$password_err = "Password must have atleast 6 characters.";
|
||||||
|
} else {
|
||||||
|
$password = trim($_POST["password"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Validate confirm password
|
||||||
|
if (empty(trim($_POST["confirm_password"]))) {
|
||||||
|
$confirm_password_err = "Please confirm password.";
|
||||||
|
} else {
|
||||||
|
$confirm_password = trim($_POST["confirm_password"]);
|
||||||
|
if(empty($password_err) && ($password != $confirm_password)){
|
||||||
|
$confirm_password_err = "Password did not match.";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check input errors before inserting in database
|
||||||
|
if (empty($callsign_err) && empty($password_err) && empty($confirm_password_err)) {
|
||||||
|
|
||||||
|
// Prepare an insert statement
|
||||||
|
$sql = "INSERT INTO ysfnodes (callsign, password) VALUES (?, ?)";
|
||||||
|
|
||||||
|
if ($stmt = mysqli_prepare($link, $sql)) {
|
||||||
|
// Bind variables to the prepared statement as parameters
|
||||||
|
mysqli_stmt_bind_param($stmt, "ss", $param_callsign, $param_password);
|
||||||
|
|
||||||
|
// Set parameters
|
||||||
|
$param_callsign = $callsign;
|
||||||
|
$param_password = password_hash($password, PASSWORD_DEFAULT); // Creates a password hash
|
||||||
|
|
||||||
|
// Attempt to execute the prepared statement
|
||||||
|
if (mysqli_stmt_execute($stmt)) {
|
||||||
|
// Redirect to login page
|
||||||
|
header("location: login.php");
|
||||||
|
} else {
|
||||||
|
echo "Something went wrong. Please try again later.";
|
||||||
|
}
|
||||||
|
|
||||||
|
// Close statement
|
||||||
|
mysqli_stmt_close($stmt);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Close connection
|
||||||
|
mysqli_close($link);
|
||||||
|
}
|
||||||
|
?>
|
||||||
|
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<title>Hot-Spot Frequency for WiresX Registration</title>
|
||||||
|
<link rel="stylesheet" href="bootstrap.css">
|
||||||
|
<style type="text/css">
|
||||||
|
body{ font: 14px sans-serif; }
|
||||||
|
.wrapper{ width: 350px; padding: 20px; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="wrapper">
|
||||||
|
<h2>Sign Up</h2>
|
||||||
|
<p>Please fill this form to create an account. Use your hot-spot callsign to register.</p>
|
||||||
|
<form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post">
|
||||||
|
<div class="form-group <?php echo (!empty($callsign_err)) ? 'has-error' : ''; ?>">
|
||||||
|
<label>Your Callsign</label>
|
||||||
|
<input type="text" name="callsign" class="form-control" value="<?php echo $callsign; ?>">
|
||||||
|
<span class="help-block"><?php echo $callsign_err; ?></span>
|
||||||
|
</div>
|
||||||
|
<div class="form-group <?php echo (!empty($password_err)) ? 'has-error' : ''; ?>">
|
||||||
|
<label>Password</label>
|
||||||
|
<input type="password" name="password" class="form-control" value="<?php echo $password; ?>">
|
||||||
|
<span class="help-block"><?php echo $password_err; ?></span>
|
||||||
|
</div>
|
||||||
|
<div class="form-group <?php echo (!empty($confirm_password_err)) ? 'has-error' : ''; ?>">
|
||||||
|
<label>Confirm Password</label>
|
||||||
|
<input type="password" name="confirm_password" class="form-control" value="<?php echo $confirm_password; ?>">
|
||||||
|
<span class="help-block"><?php echo $confirm_password_err; ?></span>
|
||||||
|
</div>
|
||||||
|
<div class="form-group">
|
||||||
|
<input type="submit" class="btn btn-primary" value="Submit">
|
||||||
|
<input type="reset" class="btn btn-default" value="Reset">
|
||||||
|
</div>
|
||||||
|
<p>Already have an account? <a href="login.php">Login here</a>.</p>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@ -0,0 +1,106 @@
|
|||||||
|
<?php
|
||||||
|
// Initialize the session
|
||||||
|
session_start();
|
||||||
|
|
||||||
|
// Check if the user is logged in, otherwise redirect to login page
|
||||||
|
if (!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true) {
|
||||||
|
header("location: login.php");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Include config file
|
||||||
|
require_once "configure.php";
|
||||||
|
|
||||||
|
// Define variables and initialize with empty values
|
||||||
|
$new_password = $confirm_password = "";
|
||||||
|
$new_password_err = $confirm_password_err = "";
|
||||||
|
|
||||||
|
// Processing form data when form is submitted
|
||||||
|
if ($_SERVER["REQUEST_METHOD"] == "POST") {
|
||||||
|
|
||||||
|
// Validate new password
|
||||||
|
if (empty(trim($_POST["new_password"]))) {
|
||||||
|
$new_password_err = "Please enter the new password.";
|
||||||
|
} elseif (strlen(trim($_POST["new_password"])) < 6) {
|
||||||
|
$new_password_err = "Password must have atleast 6 characters.";
|
||||||
|
} else{
|
||||||
|
$new_password = trim($_POST["new_password"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Validate confirm password
|
||||||
|
if (empty(trim($_POST["confirm_password"]))) {
|
||||||
|
$confirm_password_err = "Please confirm the password.";
|
||||||
|
} else {
|
||||||
|
$confirm_password = trim($_POST["confirm_password"]);
|
||||||
|
if (empty($new_password_err) && ($new_password != $confirm_password)) {
|
||||||
|
$confirm_password_err = "Password did not match.";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check input errors before updating the database
|
||||||
|
if (empty($new_password_err) && empty($confirm_password_err)) {
|
||||||
|
// Prepare an update statement
|
||||||
|
$sql = "UPDATE ysfnodes SET password = ? WHERE callsign = ?";
|
||||||
|
|
||||||
|
if($stmt = mysqli_prepare($link, $sql)){
|
||||||
|
// Bind variables to the prepared statement as parameters
|
||||||
|
mysqli_stmt_bind_param($stmt, "ss", $param_password, $param_callsign);
|
||||||
|
|
||||||
|
// Set parameters
|
||||||
|
$param_password = password_hash($new_password, PASSWORD_DEFAULT);
|
||||||
|
$param_callsign = $_SESSION["callsign"];
|
||||||
|
|
||||||
|
// Attempt to execute the prepared statement
|
||||||
|
if(mysqli_stmt_execute($stmt)){
|
||||||
|
// Password updated successfully. Destroy the session, and redirect to login page
|
||||||
|
session_destroy();
|
||||||
|
header("location: login.php");
|
||||||
|
exit();
|
||||||
|
} else{
|
||||||
|
echo "Oops! Something went wrong. Please try again later.";
|
||||||
|
}
|
||||||
|
|
||||||
|
// Close statement
|
||||||
|
mysqli_stmt_close($stmt);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Close connection
|
||||||
|
mysqli_close($link);
|
||||||
|
}
|
||||||
|
?>
|
||||||
|
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<title>Reset Password</title>
|
||||||
|
<link rel="stylesheet" href="bootstrap.css">
|
||||||
|
<style type="text/css">
|
||||||
|
body{ font: 14px sans-serif; }
|
||||||
|
.wrapper{ width: 350px; padding: 20px; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="wrapper">
|
||||||
|
<h2>Reset Password</h2>
|
||||||
|
<p>Please fill out this form to reset your password.</p>
|
||||||
|
<form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post">
|
||||||
|
<div class="form-group <?php echo (!empty($new_password_err)) ? 'has-error' : ''; ?>">
|
||||||
|
<label>New Password</label>
|
||||||
|
<input type="password" name="new_password" class="form-control" value="<?php echo $new_password; ?>">
|
||||||
|
<span class="help-block"><?php echo $new_password_err; ?></span>
|
||||||
|
</div>
|
||||||
|
<div class="form-group <?php echo (!empty($confirm_password_err)) ? 'has-error' : ''; ?>">
|
||||||
|
<label>Confirm Password</label>
|
||||||
|
<input type="password" name="confirm_password" class="form-control">
|
||||||
|
<span class="help-block"><?php echo $confirm_password_err; ?></span>
|
||||||
|
</div>
|
||||||
|
<div class="form-group">
|
||||||
|
<input type="submit" class="btn btn-primary" value="Submit">
|
||||||
|
<a class="btn btn-link" href="finish.php">Cancel</a>
|
||||||
|
</div>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
Loading…
Reference in new issue