Subversion Repositories personal-webbase

Rev

Rev 8 | Go to most recent revision | Show entire file | Regard whitespace | Details | Blame | Last modification | View Log | RSS feed

Rev 8 Rev 11
Line 26... Line 26...
26 
        {
 26 
        {
27 
          die($header.'<h1>Verwaltung</h1>Sie m&uuml;ssen ein Passwort eingeben.<br><br><a href="'.$_SERVER['PHP_SELF'].'?seite=inhalt&amp;modul='.urlencode($modul).'">Zur&uuml;ck</a>'.$footer);
 27 
          die($header.'<h1>Verwaltung</h1>Sie m&uuml;ssen ein Passwort eingeben.<br><br><a href="'.$_SERVER['PHP_SELF'].'?seite=inhalt&amp;modul='.urlencode($modul).'">Zur&uuml;ck</a>'.$footer);
28 
        }
 28 
        }
29 
        else
 29 
        else
30 
        {
 30 
        {
31 
          db_query("UPDATE `".$mysql_zugangsdaten['praefix']."users` SET `passwort` = '".md5($newpwd1)."' WHERE `username` = '".db_escape($ib_user_username)."'");
 31 
          db_query("UPDATE `".$mysql_zugangsdaten['praefix']."users` SET `passwort` = '".md5($newpwd1)."' WHERE `username` = '".db_escape($ib_user_username)."'");// TODO: use sha3 hash, salted and peppered
32 
          $_SESSION['ib_user_passwort'] = $newpwd1;
 32 
          $_SESSION['ib_user_passwort'] = $newpwd1;
33 
          if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=inhalt&modul='.urlencode($modul).'&fertig=1');
 33 
          if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=inhalt&modul='.urlencode($modul).'&fertig=1');
34 
        }
 34 
        }
35 
      }
 35 
      }
36 
    }
 36 
    }