R E D

NAME	SIZE	PERMISSION
ImageController.php	3.52 KB	-rwxr-xr-x
mailController.php	3.02 KB	-rwxr-xr-x
passController.php	2.93 KB	-rwxr-xr-x
statusController.php	3.46 KB	-rwxr-xr-x
userController.php	2.19 KB	-rwxr-xr-x

Code Editor : passController.php

<?php
try {

require_once("../../server/server.php");
    if ($_SERVER["REQUEST_METHOD"] == "POST") {
        $data = json_decode(file_get_contents("php://input"), true);
        if ($data !== "" && count($data) !== 0) {
            if (isset($data["AuthToken"]) && $data["AuthToken"] !== "") {
                $Auth = $data["AuthToken"];
                $id = $_SESSION["lms-ID"];
                $query = $db->prepare("SELECT AuthToken, ID, password FROM user where ID = '$id'");
                if ($query->execute()) {
                    $query = $query->fetch(PDO::FETCH_ASSOC);
                    if (password_verify($Auth, $query["AuthToken"])) {
                        $pass = base64_decode( $data["old"]);
                        $newpass = base64_decode( $data["new"]);
                        if ($pass == "" || $newpass == "") {
                            http_response_code(405);
                            echo json_encode(array("status" => false, "message" => "Server Error!!"));
                            exit;
                        }
                        if (password_verify($pass, $query["password"])) {
                            $newpass = password_hash($newpass, PASSWORD_DEFAULT);
                            $upd = $db->prepare("UPDATE user SET password = '$newpass' where ID = '$id'");
                            if ($upd->execute()) {
                                http_response_code(200);
                                echo json_encode(array("status" => true, "message" => "Success"));
                                exit;
                            }else {
                                http_response_code(405);
                                echo json_encode(array("status" => false, "message" => "Server Error!!"));
                                exit; 
                            }
                        }else {
                            http_response_code(405);
                            echo json_encode(array("status" => false, "message" => "password Invalid!!"));
                            exit;
                        }
                    }else {
                        http_response_code(405);
                        echo json_encode(array("status" => false, "message" => "AuthToken Invalid!!"));
                        exit;
                    }
                }else {
                    http_response_code(405);
            echo json_encode(array("status" => false, "message" => "Server Error!!"));
            exit;
                }
            }
        }else {
            http_response_code(405);
            echo json_encode(array("status" => false, "message" => "Data exist!!"));
            exit;
        }
    } else {
        http_response_code(405);
        echo json_encode(array("status" => false, "message" => "Request method Not accept!!"));
        exit;
    }
} catch (Exception $e) {
    http_response_code(405);
    echo json_encode(array("status" => false, "message" => $e->getMessage()));
    exit;
}

${this.title}

Code Editor : passController.php