changepw.php

网址导航

<?php
session_start();
$isadmin=$_SESSION["isadmin"];
$admin=$_SESSION["admin"];
$mp=$_SESSION["mp"];
$adminlevel=$_SESSION["adminlevel"];
if ($isadmin!=true) {
    header("location:index.php?u=$admin");exit();
}
require("../mysql.inc.php");
function showerr($message) {
	echo "<Script>alert('$message');location.replace('changepw.php');</Script>";
	exit();
}
$oldpw=$_REQUEST["oldpw"];
$pw1=$_REQUEST["pw1"];
$pw2=$_REQUEST["pw2"];
$action=$_REQUEST["action"];
$oldpw=htmlspecialchars($oldpw);
$pw1=htmlspecialchars($pw1);
$pw2=htmlspecialchars($pw2);
if ($action=="doit") {
	if ($oldpw=="" || $pw1=="" || $pw2=="") {
		showerr("请按要求填写表单！");
	}
	if ($pw1!=$pw2) showerr("两次输入的密码不一样！");
	//session_start();
	if (md5($oldpw)==$mp && $admin!="") {
		$newmp=md5($pw1);
		if (mysql_query("update wz_admin set password='$newmp' where username='$admin'")) {
			$mp=md5($pw1);
			session_register("mp");
			showerr("修改密码成功！");
		}
		else showerr("未知错误");
	}
	else showerr("输入的原密码不正确或未知错误");
}
?>
<table width='100%' height='100%'><tr>
<td width='100%' align='center' valign='middle'>
<table><tr><td>
<form action="<?echo $PHP_SELF?>" method="post">
<big><big>更改当前管理员密码：</big></big><br>
<br>
请输入原密码：<input type="password" name="oldpw"><br>
请输入新密码：<input type="password" name="pw1"><br>
请确认新密码：<input type="password" name="pw2"><br>
<input type="hidden" value="doit" name="action">
<BR>
&nbsp;&nbsp;&nbsp;&nbsp;<input type="submit">&nbsp;&nbsp;<input type="reset">
</form>
</td></tr></table>
</td></tr></table>