|
|
@ -953,12 +953,13 @@ if (isset($_POST['edit'])) { |
|
|
|
|
|
|
|
|
|
|
|
$user = $db->db_select($query); |
|
|
|
$user = $db->db_select($query); |
|
|
|
|
|
|
|
|
|
|
|
if(!strcmp(md5($user_currentpass), $user[0]['user_pass'])) { |
|
|
|
if (password_verify($user_currentpass, $user[0]['user_pass'])) { |
|
|
|
if(!strcmp($user_newpass1, $user_newpass2)) { |
|
|
|
if(!strcmp($user_newpass1, $user_newpass2)) { |
|
|
|
|
|
|
|
$newhash = password_hash($user_newpass1, PASSWORD_BCRYPT); |
|
|
|
$query = "UPDATE |
|
|
|
$query = "UPDATE |
|
|
|
user |
|
|
|
user |
|
|
|
SET |
|
|
|
SET |
|
|
|
user_pass='" . md5($user_newpass1) . "' |
|
|
|
user_pass='" . $newhash . "' |
|
|
|
WHERE |
|
|
|
WHERE |
|
|
|
user_id=" . $user_id; |
|
|
|
user_id=" . $user_id; |
|
|
|
|
|
|
|
|
|
|
|