<?php
include "general2.php";
include "connect.php";
include 'sendmailclient.php';


function rand_string( $length ) {
		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";	
		
		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}
		
		return $str;
	}
	
	
	
	
	 
  $currentPassword =$_REQUEST["currentpass"];
  $newpass =$_REQUEST["newpass"];
  $confirmpass =$_REQUEST["confirmpass"];  
  //echo $currentPassword;
  //exit();
  if ($newpass !=$confirmpass)
  
  {
     header('Location: preferences.php?err=1');
	 exit();
  }
  
  
  if (strlen($newpass) < 6 )
    {
     header('Location: preferences.php?err=3');
	 exit();
  }
  
  if (substr_count($newpass,"'") >0 )
    {
     header('Location: preferences.php?err=7');
	 exit();
  }
  
  
   $username = $_SESSION["username"];  
  $mpass = getpass($username,$domain);
   $email=$_SESSION['email'];
   if ($mpass !=$currentPassword)
  
  {
     header('Location: preferences.php?err=2');
	 exit();
  }
   
   
   
   
   //get smscode


$emailcode =rand_string(10);
$smscode ="Passchg";
//send sms client

$transID= generateTransID();

//$mess ="Dear ". $username ." use the smscode:   ". $smscode . "   to continue your registration";
//$mtype ="1";
//$response = sendSMS( $username,$phonenumber, $transID, $domain,$mess,$sender,$mtype);



$mysub = "Password Verification Code from " . $domain;
$myMessage ="Dear <b>". $username. "</b>,<br><br>";
$myMessage .= "Below is the Email Code to complete your passwor change<br><br>"; 
$myMessage .= "Email Code : <b>" . $emailcode . "</b><br><br>";
$myMessage .= "Thanks for your interest in our service. " . "<br>";
$myMessage .= "<b>Support " . $domain."</b>";

$mysub = "Password Verification Code from " . $domain;
$myMessage2 ="Dear ". $username. ",\n\n";
$myMessage2 .= "Below is the Email Code to complete your password change\n\n"; 
$myMessage2 .= "Email Code : " . $email . "\n\n";
$myMessage2 .= "Thanks for your interest in our service. " . "\n";
$myMessage2 .= "Support " . $domain;

$mymail = sendmailtoclient($email,$myMessage,$myMmessage2,$mysub,$mfrom,$mfromname);

$query ="INSERT INTO Enquiry (username,phonenumber, email,smscode,emailcode,domain, dateused)  VALUES ('". $username."','". $phonenumber ."','". $email."','". $smscode . "','".$emailcode."','". $domain. "','". date('Y-m-d H:i:s')."')";
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
 header('Location: preferences.php?err=2');
  mysqli_close($con);
  die();
}



  $_SESSION['emailcode'] =$emailcode;   
  $_SESSION['cpass'] ="yes";
  $_SESSION['newpass'] =$newpass;
     header('Location: cpassword.php');
	 exit();
  
  

?>