<?php  
$page_title = 'Change Password';
include 'header.php';
?>
<div class="content-wrapper">
	<section class="content mt-4">
		<div class="container-fluid">
			<div class="row">
				<div class="col-md-12">
					<?php include('alert-msg.php'); ?>
					<div class="card card-primary">
						<div class="card-header">
							<h3 class="card-title"><?php echo $page_title; ?></h3>
						</div>
						<form action="" method="POST" enctype="multipart/form-data">
							<div class="card-body">
								<div class="row">
									<div class="col-md-4">
										<div class="form-group">
											<label>Password</label>
											<input type="password" class="form-control" name="password" required />
										</div>
									</div>
									<div class="col-md-4">
										<div class="form-group">
											<label>Confirm Password</label>
											<input type="password" class="form-control" name="confirm_password" required />
										</div>
									</div>
								</div>
								<button type="submit" class="btn btn-primary" name="btnSubmit">Submit</button>
							</div>
						</form>
					</div>
				</div>
			</div>
		</div>
	</section>
</div>
<?php include 'footer.php'; ?>

<?php
if(isset($_POST['btnSubmit']))
{
	$password = $_POST['password'];
	$confirm_password = $_POST['confirm_password'];
	$username = $_SESSION['username'];
	if($password == $confirm_password) {
    	$upd = mysqli_query($con,"UPDATE users SET password='$password' where username='$username'");
    	if($upd)
    	{
    		$_SESSION['success_msg'] = 'Password has been changed...';
    		echo"<script>window.location='change-password.php';</script>";
    	}
    	else
    	{
    		$_SESSION['error_msg'] = 'Unable to change password...';
    		echo"<script>window.location='change-password.php';</script>";
    	}
	}
	else
	{
	    $_SESSION['error_msg'] = 'Please enter password and confirm password same...';
	    echo"<script>window.location='change-password.php';</script>";
	}
}
?>