changepassword.php

一个页面界面的邮件程序

<?php
require_once("../inc/constants.inc.php");
require_once("../inc/properties.inc.php");
require_once("../inc/tools.inc.php");
require_once("../inc/db.inc.php");

header('Content-type: text/xml;');

if (!isset($_SESSION['user'])) {
	die();
}

if (isset($_POST['password']))
	$password = prepSqlValue(md5($_POST['password']));
else if (isset($_GET['password']))
	$password = prepSqlValue(md5($_GET['password']));
else
	die("Attribute 'password' not found ! Can't change password");

$sql = "UPDATE `user` SET password = $password WHERE id = '" . $_SESSION['user'] ."'";
$result = mysql_query($sql) or die("Error in SQL : " . $sql);

$dom = new DOMDocument('1.0', 'iso-8859-1');
$root = $dom->appendChild(new DOMElement('response'));
$root->setAttribute("updatedSql", prepShowValue($sql));

echo $dom->saveXML();
?>