X-Git-Url: http://wagnertech.de/gitweb/gitweb.cgi/timetracker.git/blobdiff_plain/251996aed11c648ecaa30f77383e0384bfadf7a5..098a79f0819ebb89b7d48df4a6b154af4560f68e:/password_change.php

diff --git a/password_change.php b/password_change.php
new file mode 100644
index 00000000..82ba11a4
--- /dev/null
+++ b/password_change.php
@@ -0,0 +1,97 @@
+<?php
+// +----------------------------------------------------------------------+
+// | Anuko Time Tracker
+// +----------------------------------------------------------------------+
+// | Copyright (c) Anuko International Ltd. (https://www.anuko.com)
+// +----------------------------------------------------------------------+
+// | LIBERAL FREEWARE LICENSE: This source code document may be used
+// | by anyone for any purpose, and freely redistributed alone or in
+// | combination with other software, provided that the license is obeyed.
+// |
+// | There are only two ways to violate the license:
+// |
+// | 1. To redistribute this code in source form, with the copyright
+// |    notice or license removed or altered. (Distributing in compiled
+// |    forms without embedded copyright notices is permitted).
+// |
+// | 2. To redistribute modified versions of this code in *any* form
+// |    that bears insufficient indications that the modifications are
+// |    not the work of the original author(s).
+// |
+// | This license applies to this document only, not any other software
+// | that it may be combined with.
+// |
+// +----------------------------------------------------------------------+
+// | Contributors:
+// | https://www.anuko.com/time_tracker/credits.htm
+// +----------------------------------------------------------------------+
+
+require_once('initialize.php');
+import('form.Form');
+import('ttUserHelper');
+import('ttUser');
+
+$auth->doLogout();
+
+$cl_ref = $request->getParameter('ref');
+if (!$cl_ref || $auth->isPasswordExternal()) {
+  header('Location: login.php');
+  exit();
+}
+
+// Get user ID.
+$user_id = ttUserHelper::getUserIdByTmpRef($cl_ref);
+if ($user_id) {
+  $user = new ttUser(null, $user_id); // Note: reusing $user from initialize.php.
+  // In case user language is different - reload $i18n.
+  if ($i18n->lang != $user->lang) {
+    $i18n->load($user->lang);
+    $smarty->assign('i18n', $i18n->keys);
+  }
+  if ($user->custom_logo) {
+    $smarty->assign('custom_logo', 'images/'.$user->team_id.'.png');
+    $smarty->assign('mobile_custom_logo', '../images/'.$user->team_id.'.png');
+  }
+  $smarty->assign('user', $user);
+}
+
+$cl_password1 = $request->getParameter('password1');
+$cl_password2 = $request->getParameter('password2');
+
+$form = new Form('newPasswordForm');
+$form->addInput(array('type'=>'text','maxlength'=>'120','name'=>'password1','aspassword'=>true,'value'=>$cl_password1));
+$form->addInput(array('type'=>'text','maxlength'=>'120','name'=>'password2','aspassword'=>true,'value'=>$cl_password2));
+$form->addInput(array('type'=>'hidden','name'=>'ref','value'=>$cl_ref));
+$form->addInput(array('type'=>'submit','name'=>'btn_save','value'=>$i18n->getKey('button.save')));
+
+if ($request->getMethod() == 'POST') {
+  // Validate user input.
+  if (!ttValidString($cl_password1)) $errors->add($i18n->getKey('error.field'), $i18n->getKey('label.password'));
+  if (!ttValidString($cl_password2)) $errors->add($i18n->getKey('error.field'), $i18n->getKey('label.confirm_password'));
+  if ($cl_password1 !== $cl_password2)
+    $errors->add($i18n->getKey('error.not_equal'), $i18n->getKey('label.password'), $i18n->getKey('label.confirm_password'));
+
+  if ($errors->isEmpty()) {
+  	// Use the "limit" plugin if we have one. Ignore include errors.
+    // The "limit" plugin is not required for normal operation of Time Tracker.
+    $cl_login = $user->login; // $cl_login is used in access_check.cpp.
+    @include('plugins/limit/access_check.php');
+  	
+  	ttUserHelper::setPassword($user_id, $cl_password1);
+
+    if ($auth->doLogin($user->login, $cl_password1)) {
+
+      setcookie('tt_login', $user->login, time() + COOKIE_EXPIRE, '/');
+      header('Location: time.php');
+      exit();
+    } else {
+      $errors->add($i18n->getKey('error.auth'));
+    }
+  }
+}
+
+$smarty->assign('forms', array($form->getName() => $form->toArray()));
+$smarty->assign('title', $i18n->getKey('title.change_password'));
+$smarty->assign('content_page_name', 'password_change.tpl');
+$smarty->display('index.tpl');
+?>
\ No newline at end of file