science-ation/user_account.php

<?
/* 
   This file is part of the 'Science Fair In A Box' project
   SFIAB Website: http://www.sfiab.ca

   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
   Copyright (C) 2005 James Grant <james@lightbox.org>
   Copyright (C) 2007 David Grant <dave@lightbox.org>

   This program is free software; you can redistribute it and/or
   modify it under the terms of the GNU General Public
   License as published by the Free Software Foundation, version 2.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
    General Public License for more details.

   You should have received a copy of the GNU General Public License
   along with this program; see the file COPYING.  If not, write to
   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
   Boston, MA 02111-1307, USA.
*/
?>
<?
 require_once("common.inc.php");
 require_once("account.inc.php");

 /* Make sure the user is logged in  (accounts_id is set) */
 if(!isset($_SESSION['accounts_id'])) {
	message_push(error(i18n("You must login to view that page")));
 	header("location: {$config['SFIABDIRECTORY']}/index.php");
 	exit;
 }

 /* Superuser may edit this for any account, if the user is not a superuser, force
  * the accounts_id to be whatever is in the session */
 if($_SESSION['superuser']) {
 	$accounts_id = intval($_GET['accounts_id']);
	if($accounts_id == 0) $accounts_id = $_SESSION['accounts_id'];
 } else {
 	$accounts_id = $_SESSION['accounts_id'];
 }
 
 if(array_key_exists('request_uri', $_SESSION))
 	$back_link = $_SESSION['request_uri'];
 else 
	$back_link = "user_main.php";
 unset($_SESSION['request_uri']);

if($_GET['action']=="save") {
	echo "Not implemented!";
	exit;

	$a = account_load($accounts_id);

	$save_email = false;
	if($a['email'] != $_POST['email']) {
		$save_email = true;
		/* Change email */
		$email = $_POST['email'];
		if(!account_valid_email($email)) {
			error_('Invalid email address');
			$save_email = false;
		}
	}

	$save_username = false;

	$save_pass = false;
	if($_POST['pass1']!='' || $_POST['pass2']!='') {
		$pass = mysql_escape_string($_POST['pass1']);
 		//first, lets see if they choose the same password again (bad bad bad)
		$q=mysql_query("SELECT password FROM accounts WHERE 
					id='{$_SESSION['accounts_id']}' 
					AND password='$pass'");

		if(mysql_num_rows($q))
			error_("You cannot choose the same password again.  Please choose a different password");
		else if($_POST['pass1'] == '') 
			error_("New Password is required");
		else if($_POST['pass1'] != $_POST['pass2']) 
			error_("Passwords do not match");
		else if(account_valid_password($_POST['pass1']) == false) 
			error_("The password contains invalid characters or is not long enough");
		else {
			$pass = $_POST['pass1'];
			$save_pass = true;
		}
	}


	if($save_email) {
		action_create_set_email($accounts_id, $email);
		happy_("An email has been sent to %1 to confirm the new email address", array($email));
	}
	if($save_pass) {
		account_set_password($_SESSION['accounts_id'], $pass);
		unset($_SESSION['password_expired']);

		happy_('Password has been successfully updated');
		header("location: $back_link");
		exit;
	}
 }

 send_header("Account Information",
                  array("Main" => "user_main.php")
				  ,"change_password"
		                  );

 ?>
 <script type="text/javascript" src="<?=$config['SFIABDIRECTORY']?>/js/validate/jquery.validate.pack.js"></script>
<?


 $a = account_load($accounts_id);

 $d = '';

 $email = $a['email'];
 $username_yes = 'checked="checked"';
 $username_no = '';
 $username = $email;
 $ud = 'disabled="disabled"';

 if($_SESSION['password_expired'] == true) {
 	echo info(i18n('Your password has expired.  You must choose a new password now.'));
	$d = 'disabled="disabled"';
 }

?>
<form class="editor" name="account" id="accountform">
<table><tr>
	<td><label for="email"><?=i18n('Email')?>:</label></td>
	<td><input id="email" <?=$d?> name="email" type="text" size="20" value="<?=$email?>"></td>
</tr><tr>
	<td></td><td>
	<div style="font-size: 0.75em;"><?=i18n('Changing the email address will cause a confirmation email to besent to the new email address before the change will take effect.')?></div>
	<br /><br />
	</td>
</tr><tr>
	<td><?=i18n('Username')?>:</td>
	<td>	<input <?=$ud?> <?=$d?> id="username" name=username type="text" size="20" value="<?=$username?>"><br />
		<input id="username_link" <?=$username_yes?> <?=$d?> type="checkbox" name="username_link" value="yes" />
			<?=i18n('Use the email address as the login username')?><br />
		
	</td>
</tr><tr>
	<td colspan="2">
	<br /><br />
	</td>
</tr><tr>
	<td><label for="pass1"><?=i18n('New Password')?>:</label></td>
	<td><input id="pass1" name="pass1" type="password" size="20" value=""></td>
 </tr><tr>
	<td><label for="pass2"><?=i18n('Confirm New Password')?>:</label></td>
	<td><input id="pass2" name="pass2" type="password" size="20" value=""></td>
 </tr><tr>
	<td></td><td>
	<div style="font-size: 0.75em;"><?=i18n('Passwords must be be between 6 and 32 characters, and may NOT contain any quote or a backslash.')?></div>
	</td>
 </tr></table>
 <br />
 <br />
 <input type="submit" value="<?=i18n("Save")?>" />
  </form>


 <br />

<script type="text/javascript">
$.validator.setDefaults({
	submitHandler: function() { alert("submitted!"); }
});


$().ready(function() {

	// validate signup form on keyup and submit
	$("#accountform").validate({
		rules: {
			email: {
				required: true,
				email: true
			},
			username: {
				required: "#username_link:checked",
				minlength: 4
			},
			pass1: {
				required: true,
				minlength: 6,
				maxlength: 32
			},
			pass2: {
				required: true,
				minlength: 6,
				maxlength: 32,
				equalTo: "#pass1"
			}
		},
		messages: {
			email: "Please enter a valid email address",
			username: {
				required: "Please enter a username",
				minlength: "Your username must consist of at least 2 characters"
			},
			pass1: {
				required: "Please provide a password",
				minlength: "Your password must be at least 6 characters long",
				maxlength: "Your password must be at most 32 characters long"
			},
			pass2: {
				required: "Please provide a password",
				minlength: "Your password must be at least 5 characters long",
				maxlength: "Your password must be at most 32 characters long",
				equalTo: "Please enter the same password as above"
			}
		}
	});

	var username_link = $("#username_link").is(":checked");
	$("#username").attr("disabled", username_link);
	$("#username_link").click(function() {
		$("#username").attr("disabled", this.checked);
	});
	
});
</script>


<?
send_footer();
?>