first commit

admin/adminEdit.php

@@ -0,0 +1,84 @@
+<?php
+
+$main_class = 'AdminEdit';
+
+class AdminEdit extends Window
+{
+    protected $tableName = 'admins';
+
+    public function handleUpdate()
+    {
+        if (getVal('Submit')) {
+            $data = $this->getData();
+            global $adminID;
+            $admPassOld = $data['admPassOld'];
+            $admPass1 = $data['admPass1'];
+            $admPass2 = $data['admPass2'];
+            $error = 0;
+            // nova hesla se musi rovnat
+            if ($admPass1 != $admPass2) {
+                $error = 1;
+                // Zadané heslo a kontrolní heslo se neshodují
+                $ErrStr = translate('errorPasswNotEqual');
+            }
+
+            if (strlen($admPass1) < 6) {
+                $error = 15;
+                $ErrStr = translate('errorPasswLength');
+            }
+
+            // kontrola puvodniho hesla
+            $qb = sqlQueryBuilder()->select('id', 'login', 'password', 'OLD_PASSWORD(:admPassOld) AS passwGet')
+                ->from('admins')
+                ->where(\Query\Operator::equals(['id' => $adminID]))
+                ->setParameter('admPassOld', $admPassOld)
+                ->setMaxResults(1)
+                ->execute();
+
+            if ($qb->rowCount() == 1) {
+                $log = $qb->fetch();
+                $admName = $log['login'];
+                if (($log['passwGet'] != $log['password']) && (password_verify($admPassOld, $log['password']) == false)) {
+                    $error = 1;
+                    // Zadané současné heslo není správné
+                    $ErrStr = translate('errorBadPassw');
+                }
+            }
+
+            if ($error == 0) {
+                $new_hash = password_hash($admPass1, PASSWORD_BCRYPT);
+
+                if ($this->updateSQL('admins', ['password' => $new_hash], ['id' => $adminID])) {
+                    $ErrStr = urlencode(sprintf(translate('activityPasswEdited'), $admName));
+                    writeDownActivity(sprintf(translate('activityPasswEdited'), $admName));
+                } else {
+                    $ErrStr = translate('scripterror', 'status');
+                }
+                redirect('launch.php?s=adminEdit.php&acn=passw&ErrStr='.$ErrStr);
+            } else {
+                redirect('launch.php?s=adminEdit.php&acn=passw&ErrStr='.urlencode($ErrStr));
+            }
+        }
+
+        return parent::handleUpdate();
+    }
+
+    public function getData()
+    {
+        $data = parent::getData();
+
+        $data['email'] = getAdminUser()['email'];
+
+        return $data;
+    }
+
+    protected function getID()
+    {
+        return getAdminUser()['id'];
+    }
+
+    protected function getAction()
+    {
+        return 'edit';
+    }
+}