<?php
class Controller_Admin_Changepassword extends GeneralAction {

	protected function do_show() {
		$tpl = parent::do_show();
        $tpl->assign('catName', 'User');
        $tpl->assign('pageName', 'Change Password');
        $tpl->assign('pageDefault',  Config::load()->root() . "/Templates/Admin/changePassword.html");
		$tpl->display("../Templates/Admin/main.html");
	}
	protected function do_update() {
			require Config::load()->root() . '/Additional/passwordLib.php';
		    $sql = "SELECT udafId, udafPassword, udafHash FROM user WHERE udafId='" . $_SESSION['userId'] . "' and udafStatus='0'";
			$cekUser = Generaldb::instance()->dbgetone($sql);
			$oldpass = $_POST['oldpassword'];
			$newpass = $_POST['newpassword'];
			$cnpass = $_POST['cnpassword'];
			$error = "";
			if(empty($oldpass)) {
				$error .= "Old Password Is Empty \n";
			}
			if(empty($newpass)) {
				$error .= "New Password Is Empty \n";
			}
			if(empty($cnpass)) {
				$error .= "Confirm Password Is Empty \n";
			}
			if($newpass != $cnpass) {
				$error .= "Confirm Password Not Match \n";
			}
			if(empty($error)) {
				if (password_verify(trim($oldpass.$cekUser['udafHash']), trim($cekUser['udafPassword']))) {
					$options = array(
							'cost' => 12,
						);
					$password = password_hash($newpass . $cekUser['udafHash'], PASSWORD_BCRYPT, $options)."\n";
					$update = Database::build()->updateArray("user", 'udaf', array('udafPassword' => $password), "udafId = '".$_SESSION['userId']."'");
					return array('status' => 'ok', 'id' => $_SESSION['userId']);
				} else {
					return array('status' => 'error', 'session' => false, 'error' => 'Check Your Password');
				}
			}else{
				return array('status' => 'error', 'session' => false, 'error' => $error);
			}
	}
}