change.php File Reference

Go to the source code of this file.

Functions
if(!function_exists("__"))	_md5cr ($pass, $salt="")
	Hashe un mot de passe en clair en MD5 avec un salt aléatoire. More...

Variables
	$link
if($link)	else
const	SM_PATH '../../'
global	$username
global	$base_uri
global	$key
global	$onetimepad
	$errstr =""

Function Documentation

_md5cr()

if (!function_exists("__")) _md5cr	(		$pass,
			$salt = ""
	)

Hashe un mot de passe en clair en MD5 avec un salt aléatoire.

Parameters

string

$pass

Mot de passe à crypter (max 32 caractères)

Returns

string Retourne le mot de passe crypté @access private

Definition at line 20 of file change.php.

                                  {
    if (!$salt) {
      $chars="./0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
      for ($i=0;$i<12;$i++) {
   $salt.=substr($chars,(mt_rand(0,strlen($chars))),1);
      }
      $salt="$1$".$salt;
    }
    return crypt($pass,$salt);
  }
 
$link=mysql_connect(
          ALTERNC_CHANGEPASS_MYSQL_HOST,
          ALTERNC_CHANGEPASS_MYSQL_USER,
          ALTERNC_CHANGEPASS_MYSQL_PASSWORD
          );
if ($link) {
  mysql_select_db(ALTERNC_CHANGEPASS_MYSQL_DB);
} else {
  __("Can't connect to MySQL server on AlternC!");
}
 
 
define('SM_PATH','../../');
 
/* SquirrelMail required files. */
require_once(SM_PATH . 'include/validate.php');
require_once(SM_PATH . 'functions/page_header.php');
require_once(SM_PATH . 'functions/imap.php');
require_once(SM_PATH . 'include/load_prefs.php');
 
 /* get globals */
sqgetGlobalVar('username', $username, SQ_SESSION);
 
//require_once (SM_PATH . "plugins/alternc_changepass/config.php");
//session_start();
 
textdomain("alternc");
 
global $username, $base_uri, $key, $onetimepad;
 
list($login,$domain)=explode("@",$username,2);
$errstr="";
 
if ($_POST['acp_oldpass'] && $_POST['acp_newpass'] && $_POST['acp_verify']) {
  if ($_POST['acp_newpass']!=$_POST['acp_verify']) {
    $errstr=_("Your new passwords are differents, pleasy try again.");
  } else {
    // Check the old password
    $r=mysql_query("SELECT a.password, a.id FROM address a,domaines d WHERE a.address='".addslashes($login)."' AND a.domain_id=d.id AND d.domaine='".addslashes($domain)."';");
    echo mysql_error();
    if (!($c=mysql_fetch_array($r))) {
      $errstr=_("Your account has not been found, please try again later or ask an administrator.");
    } else {
      if ($c["password"]!=_md5cr($_POST['acp_oldpass'],$c["password"])) {
   $errstr=_("Your current password is incorrect, please try again.");
      } else {
   // FIXME DO Check the password policy : 
   /*
   if (is_callable(array($admin,"checkPolicy"))  && 
       !$admin->checkPolicy("pop",$username,$_POST['acp_newpass'])) {
     $errstr=_("This password is not strong enough for your policy, set a stronger password or call your administrator");
   } else {
   */
     // ok, let's change the password
     $acp_newpass=$_POST['acp_newpass'];
     $newp=_md5cr($acp_newpass);
     mysql_query("UPDATE address SET password='".addslashes($newp)."' WHERE id=".$c["id"]." ;");
     $errstr=_("Your password has been successfully changed. Don't forget to change it in your mail software if you are using one (Outlook, Mozilla, Thunderbird, Eudora ...)");
     
     // Write new cookies for the password
     $onetimepad = OneTimePadCreate(strlen($acp_newpass));
     sqsession_register($onetimepad,'onetimepad');
     $key = OneTimePadEncrypt($acp_newpass, $onetimepad);
     setcookie("key", $key, 0, $base_uri);
     //  }
      }
    }
  }
} // POSTED data ? 

References $i.

Variable Documentation

$base_uri

global $base_uri

Definition at line 59 of file change.php.

$errstr

$errstr =""

Definition at line 62 of file change.php.

Referenced by m_admin\checkalldom(), and m_lxc\sendMessage().

$key

global $key

Definition at line 59 of file change.php.

$link

$link

Initial value:

=mysql_connect(
          ALTERNC_CHANGEPASS_MYSQL_HOST,
          ALTERNC_CHANGEPASS_MYSQL_USER,
          ALTERNC_CHANGEPASS_MYSQL_PASSWORD
          )

Definition at line 31 of file change.php.

Referenced by m_mem\ChangeMail1().

$onetimepad

global $onetimepad

Definition at line 59 of file change.php.

$username

global $username

Definition at line 59 of file change.php.

Referenced by m_aws\_createconf(), m_piwik\clean_user_name(), m_mem\login(), and m_mem\temporary_login().

else

if ( $link) else

Initial value:

{
  __("Can't connect to MySQL server on AlternC!")

Definition at line 38 of file change.php.

SM_PATH

const SM_PATH '../../'

Definition at line 43 of file change.php.