User authentication mechanism

1 files changed, 84 insertions, 0 deletions

diff --git a/include/settings.php b/include/settings.php
new file mode 100644
index 0000000..7dfbbc3
--- /dev/null
+++ b/include/settings.php
@@ -0,0 +1,84 @@
+<?php
+/**
+ * BusinessAdmin: administrative software for small companies
+ * Copyright (C) 2015 Camil Staps (ViviSoft)
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+require_once('./index.php');
+require_once('./login.php');
+require('./header.php');
+?>
+
+<div id="wrapper">
+
+	<?php require('nav.php'); ?>
+
+	<!-- Page Content -->
+	<div id="page-wrapper">
+		<div class="row">
+			<div class="col-lg-12">
+				<h1 class="page-header">Settings</h1>
+			</div>
+			<!-- /.col-lg-12 -->
+		</div>
+
+		<div class="row">
+			<div class="col-md-4">
+				<div class="panel panel-default">
+					<div class="panel-heading">Password</div>
+						<div class="panel-body">
+							<?php
+							if (isset($_POST['password_update'])) {
+								if ($_POST['password_update'] != $_POST['password_update2']) {
+									echo '<div class="alert alert-danger">The passwords don\'t match.</div>';
+								} else if (!$_user->verifyPassword($_POST['password_current'])) {
+									echo '<div class="alert alert-danger">The current password was incorrect.</div>';
+								} else {
+									try {
+										$_user->setPassword($_POST['password_update']);
+										echo '<div class="alert alert-success">Password successfully changed.</div>';
+									} catch (PDOException $e) {
+										echo '<div class="alert alert-danger">An unknown error occurred.</div>';
+									}
+								}
+							}
+							?>
+							<form action="" method="post">
+								<div class="form-group">
+									<input class="form-control" type="password" name="password_current" placeholder="Current password"/>
+								</div>
+								<div class="form-group">
+									<input class="form-control" type="password" name="password_update" placeholder="New password"/>
+								</div>
+								<div class="form-group">
+									<input class="form-control" type="password" name="password_update2" placeholder="New password (verification)"/>
+								</div>
+								<input class="btn btn-primary" type="submit" value="Change password"/>
+							</form>
+						</div>
+					</div>
+				</div>
+			</div>
+		</div>
+		<!-- /.row -->
+	</div>
+	<!-- /#page-wrapper -->
+
+</div>
+<!-- /#wrapper -->
+<?php
+require('./footer.php');
+?>