k_online_backend/service/tools.class.php

<?php

if (!defined('IN_ONLINE')) {
    exit('Access Denied');
}

/**
 * Description of operation_log
 *
 * @author Administrator
 */
class tools {

    private static $_tools;

    public static function getInstance() {
        if (!self::$_tools) {
            $c = __CLASS__;
            self::$_tools = new $c;
        }
        return self::$_tools;
    }

    /*
     * update password when login success
    */
     public function updatePassword() {
        if ($_SESSION['ONLINE_USER']['is_demo'] == "t") {
            $str = "DEMO cannot update password.";
        } else {
            $opsw = common::check_input($_POST ['opsw']);
            $npsw = common::check_input($_POST ['npsw']);
            if (empty(utils::checkPassword($npsw))) {
                $username = _getLoginName();
                $sql = "select ra_password as password from ra_online_user where lower(user_login) = '" . strtolower($username) . "'";
                $rs = common::excuteObjectSql($sql);
                $str = '';
                if (!empty($rs)) {
                    if ($rs['password'] == $opsw) {
                        $sql = "UPDATE ra_online_user SET ra_password = '" . $npsw . "', last_pwd_change = now() WHERE lower(user_login) = '" . strtolower($username) . "'";
                        $rls = common::excuteUpdateSql($sql);
                        if (!$rls) {
                            $str = "Password modification failed!";
                        } else {
                            $str = " Your password has been modified!";
                        }
                    } else {
                        $str = "Old password is incorrect!";
                    }
                } else {
                    $str = "Old password is incorrect!";
                }
            } else {
                $str = "The new password is too simple(must include numbers and letters)";
            }
        }
        $returnData = array("msg" => $str);
        common::echo_json_encode(200, $returnData);
        exit();
    }
    
}

?>