<?php
// Initialization
require_once('tiki-setup.php');

if(!isset($_REQUEST["user"])) $_REQUEST["user"]='';
if(!isset($_REQUEST["oldpass"])) $_REQUEST["oldpass"]='';
$smarty->assign('user',$_REQUEST["user"]);
$smarty->assign('oldpass',$_REQUEST["oldpass"]);  

if(isset($_REQUEST["change"])) {
    
  if($_REQUEST["pass"]!=$_REQUEST["pass2"]) {
    $smarty->assign('msg',tra("The passwords didn't match"));
    $smarty->display("styles/$style_base/error.tpl");
    die;
  }
  
  if($_REQUEST["pass"]==$_REQUEST["oldpass"]) {
    $smarty->assign('msg',tra("You can not use the same password again"));
    $smarty->display("styles/$style_base/error.tpl");
    die;
  }
  
  
  if(!$userlib->validate_user($_REQUEST["user"],$_REQUEST["oldpass"],'','')) {
    $smarty->assign('msg',tra("Invalid old password"));
    $smarty->display("styles/$style_base/error.tpl");
    die;
  }
  
  //Validate password here
  if(strlen($_REQUEST["pass"])<$min_pass_length) {
    $smarty->assign('msg',tra("Password should be at least").' '.$min_pass_length.' '.tra("characters long"));
    $smarty->display("styles/$style_base/error.tpl");
    die; 	
  }
  
  // Check this code
  if($pass_chr_num == 'y') {
    if(!preg_match_all("/[0-9]+/",$_REQUEST["pass"],$foo) || !preg_match_all("/[A-Za-z]+/",$_REQUEST["pass"],$foo)) {
      $smarty->assign('msg',tra("Password must contain both letters and numbers"));
      $smarty->display("styles/$style_base/error.tpl");
      die; 	
    }
  }
  
  $userlib->change_user_password($_REQUEST["user"],$_REQUEST["pass"]);
  // Login the user
  $_SESSION["user"]=$_REQUEST["user"];
  $user = $_REQUEST["user"];
  $smarty->assign_by_ref('user',$user);
  header("location: $tikiIndex");
}

// Display the template
$smarty->assign('mid','tiki-change_password.tpl');
$smarty->display("styles/$style_base/tiki.tpl");
?>