frodovdr/raspap-webgui
1
0
Fork 0
mirror of https://github.com/billz/raspap-webgui.git synced 2023-10-10 13:37:24 +02:00
Code Issues Releases Wiki Activity

Tabs to spaces

Browse Source
This commit is contained in:
Joseph Haig 2016-07-09 01:00:53 +01:00
parent a28b926b3a
commit c65ddd010f
2 changed files with 65 additions and 65 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

124
includes/admin.php
View File

@ -3,72 +3,72 @@
include_once( 'includes/status_messages.php' ); include_once( 'includes/status_messages.php' );
function DisplayAuthConfig($username, $password){ function DisplayAuthConfig($username, $password){
$status = new StatusMessages(); $status = new StatusMessages();
if (isset($_POST['UpdateAdminPassword'])) { if (isset($_POST['UpdateAdminPassword'])) {
if (CSRFValidate()) { if (CSRFValidate()) {
if (password_verify($_POST['oldpass'], $password)) { if (password_verify($_POST['oldpass'], $password)) {
$new_username=trim($_POST['username']); $new_username=trim($_POST['username']);
if ($_POST['newpass'] != $_POST['newpassagain']) { if ($_POST['newpass'] != $_POST['newpassagain']) {
$status->addMessage('New passwords do not match', 'danger'); $status->addMessage('New passwords do not match', 'danger');
} else if ($new_username == '') { } else if ($new_username == '') {
$status->addMessage('Username must not be empty', 'danger'); $status->addMessage('Username must not be empty', 'danger');
} else { } else {
if ($auth_file = fopen(RASPI_ADMIN_DETAILS, 'w')) { if ($auth_file = fopen(RASPI_ADMIN_DETAILS, 'w')) {
fwrite($auth_file, $new_username.PHP_EOL); fwrite($auth_file, $new_username.PHP_EOL);
fwrite($auth_file, password_hash($_POST['newpass'], PASSWORD_BCRYPT).PHP_EOL); fwrite($auth_file, password_hash($_POST['newpass'], PASSWORD_BCRYPT).PHP_EOL);
fclose($auth_file); fclose($auth_file);
$username = $new_username; $username = $new_username;
$status->addMessage('Admin password updated'); $status->addMessage('Admin password updated');
} else { } else {
$status->addMessage('Failed to update admin password', 'danger'); $status->addMessage('Failed to update admin password', 'danger');
} }
} }
} else { } else {
$status->addMessage('Old password does not match', 'danger'); $status->addMessage('Old password does not match', 'danger');
} }
} else { } else {
error_log('CSRF violation'); error_log('CSRF violation');
} }
} }
?> ?>
<div class="row"> <div class="row">
<div class="col-lg-12"> <div class="col-lg-12">
<div class="panel panel-primary"> <div class="panel panel-primary">
<div class="panel-heading"><i class="fa fa-lock fa-fw"></i>Configure Auth</div> <div class="panel-heading"><i class="fa fa-lock fa-fw"></i>Configure Auth</div>
<div class="panel-body"> <div class="panel-body">
<p><?php $status->showMessages(); ?></p> <p><?php $status->showMessages(); ?></p>
<form role="form" action="/?page=auth_conf" method="POST"> <form role="form" action="/?page=auth_conf" method="POST">
<?php CSRFToken() ?> <?php CSRFToken() ?>
<div class="row"> <div class="row">
<div class="form-group col-md-4"> <div class="form-group col-md-4">
<label for="username">Username</label> <label for="username">Username</label>
<input type="text" class="form-control" name="username" value="<?php echo $username; ?>"/> <input type="text" class="form-control" name="username" value="<?php echo $username; ?>"/>
</div> </div>
</div> </div>
<div class="row"> <div class="row">
<div class="form-group col-md-4"> <div class="form-group col-md-4">
<label for="password">Old password</label> <label for="password">Old password</label>
<input type="password" class="form-control" name="oldpass"/> <input type="password" class="form-control" name="oldpass"/>
</div> </div>
</div> </div>
<div class="row"> <div class="row">
<div class="form-group col-md-4"> <div class="form-group col-md-4">
<label for="password">New password</label> <label for="password">New password</label>
<input type="password" class="form-control" name="newpass"/> <input type="password" class="form-control" name="newpass"/>
</div> </div>
</div> </div>
<div class="row"> <div class="row">
<div class="form-group col-md-4"> <div class="form-group col-md-4">
<label for="password">Repeat new password</label> <label for="password">Repeat new password</label>
<input type="password" class="form-control" name="newpassagain"/> <input type="password" class="form-control" name="newpassagain"/>
</div> </div>
</div> </div>
<input type="submit" class="btn btn-outline btn-primary" name="UpdateAdminPassword" value="Save settings" /> <input type="submit" class="btn btn-outline btn-primary" name="UpdateAdminPassword" value="Save settings" />
</form> </form>
</div><!-- /.panel-body --> </div><!-- /.panel-body -->
</div><!-- /.panel-default --> </div><!-- /.panel-default -->
</div><!-- /.col-lg-12 --> </div><!-- /.col-lg-12 -->
</div><!-- /.row --> </div><!-- /.row -->
<?php <?php
} }

6
includes/status_messages.php
View File

@ -15,8 +15,8 @@ class StatusMessages {
public function showMessages($clear = true) { public function showMessages($clear = true) {
foreach($this->messages as $message) { foreach($this->messages as $message) {
echo $message; echo $message;
} }
if ( $clear ) $this->messages = array(); if ( $clear ) $this->messages = array();
} }
} }
?> ?>