SWAMPy

✎ CARVE FLESH

EDITING: change-password.php

<?php
require_once '../config.php';

header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: POST, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, Authorization');

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    exit;
}

$decoded = authenticate();
$adminId = $decoded['user_id'];

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    sendJsonResponse(['success' => false, 'message' => 'Method not allowed'], 405);
}

$input = getJsonInput();
$currentPassword = $input['current_password'] ?? '';
$newPassword = $input['new_password'] ?? '';

if (empty($currentPassword) || empty($newPassword)) {
    sendJsonResponse(['success' => false, 'message' => 'Current and new passwords are required'], 400);
}

if (strlen($newPassword) < 8) {
    sendJsonResponse(['success' => false, 'message' => 'New password must be at least 8 characters long'], 400);
}

$db = getDbConnection();
$stmt = $db->prepare("SELECT password_hash FROM admins WHERE id = ?");
$stmt->execute([$adminId]);
$admin = $stmt->fetch();

if ($admin && password_verify($currentPassword, $admin['password_hash'])) {
    $newHash = password_hash($newPassword, PASSWORD_DEFAULT);
    $updateStmt = $db->prepare("UPDATE admins SET password_hash = ? WHERE id = ?");
    if ($updateStmt->execute([$newHash, $adminId])) {
        sendJsonResponse(['success' => true, 'message' => 'Password changed successfully.']);
    } else {
        sendJsonResponse(['success' => false, 'message' => 'Failed to update password.'], 500);
    }
} else {
    sendJsonResponse(['success' => false, 'message' => 'Incorrect current password.'], 401);
}
?>

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📄 applications.php	PHP	2.4 KB	2026-05-16 11:22	EDIT
📄 change-password.php	PHP	1.6 KB	2026-05-16 11:22	EDIT
📄 inquiries.php	PHP	2.4 KB	2026-05-16 11:22	EDIT
📄 login.php	PHP	1.1 KB	2026-05-16 11:22	EDIT
📄 packages.php	PHP	2.3 KB	2026-05-16 11:22	EDIT
📄 recent.php	PHP	1.3 KB	2026-05-16 11:22	EDIT
📄 settings.php	PHP	2.6 KB	2026-05-16 12:59	EDIT
📄 stats.php	PHP	1.5 KB	2026-05-16 11:22	EDIT