Webbserverprogrammering 1

Show sourcecode

The following files exists in this folder. Click to view.

webbsrvprg/slutprojekt/

admin.php
bilder/
checkUpdates.php
confirmPassword.php
confirmSignIn.php
createadmin.php
endScreen.php
getBoard.php
getChat.php
getHand.php
getTurnPlayer.php
lobbies.php
logIn.php
play.php
playCard.php
signIn.php
start.php
startsida.php
style.css
tables.php
update.php
updatePassword.php
waitInfo.php
waitingRoom.php

confirmPassword.php

38 lines UTF-8 Windows (CRLF)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>Jass</title>
</head>
<body>
  <?php
    /** @var PDO $dbconn */
    include ('../dbconnection.php');

    if (isset($_GET["mailId"]) && isset($_COOKIE["name"]) && isset($_COOKIE["newpwd"]) && isset($_COOKIE["mailId"])) {
      if ($_GET["mailId"] == $_COOKIE["mailId"]) {
        // Om id:t från mailet är rätt, uppdatera lösenordet
        $name = $_COOKIE["name"];

        $pwd = $_COOKIE["newpwd"];
        $pwdHashed = password_hash($pwd, PASSWORD_DEFAULT);

        try {
          $sql = "UPDATE JassPlayers SET password=? WHERE username=?";
          $stmt = $dbconn->prepare($sql);

          $data = array($pwdHashed, $name);
          $stmt->execute($data);

          header("location: logIn.php?username=$name&password=$pwd");

          echo "Password is updated!";
        } catch (PDOException $e) {
          echo $sql . "<br>" . $e->getMessage();
        }
      }
    }
  ?>
</body>
</html>