interface/usergroup/user_info.php

   1 <?php
   2 /**
   3  * User password change tool
   4  *
   5  * @package   OpenEMR
   6  * @link      http://www.open-emr.org
   7  * @author    Roberto Vasquez <robertogagliotta@gmail.com>
   8  * @author    Brady Miller <brady.g.miller@gmail.com>
   9  * @author    Ranganath Pathak <pathak@scrs1.org>
  10  * @copyright Copyright (c) 2017 Roberto Vasquez <robertogagliotta@gmail.com>
  11  * @copyright Copyright (c) 2017-2018 Brady Miller <brady.g.miller@gmail.com>
  12  * @copyright Copyright (c) 2019 Ranganath Pathak <pathak@scrs1.org>
  13  * @license   https://github.com/openemr/openemr/blob/master/LICENSE CNU General Public License 3
  14  */
  15
  16 require_once("../globals.php");
  17 require_once("$srcdir/auth.inc");
  18 require_once("$srcdir/user.inc");
  19
  20 use OpenEMR\Core\Header;
  21 use OpenEMR\OeUI\OemrUI;
  22
  23 if ($GLOBALS['use_active_directory']) {
  24     exit();
  25 }
  26 $userid = $_SESSION['authId'];
  27 $user_name = getUserIDInfo($userid);
  28 $user_full_name = $user_name['fname'] . " " . $user_name['lname'];
  29 ?>
  30 <html>
  31 <head>
  32 <?php Header::setupHeader(); ?>
  33 <title><?php echo xlt('Change Password'); ?></title>
  34
  35 <script src="checkpwd_validation.js" type="text/javascript"></script>
  36
  37 <script language='JavaScript'>
  38 //Validating password and display message if password field is empty - starts
  39 var webroot=<?php echo js_escape($webroot); ?>;
  40 function update_password()
  41 {
  42     top.restoreSession();
  43     // Not Empty
  44     // Strong if required
  45     // Matches
  46
  47     $.post("user_info_ajax.php",
  48         {
  49             curPass:    $("input[name='curPass']").val(),
  50             newPass:    $("input[name='newPass']").val(),
  51             newPass2:   $("input[name='newPass2']").val(),
  52             csrf_token_form: <?php echo js_escape(collectCsrfToken()); ?>
  53         },
  54         function(data)
  55         {
  56             $("input[type='password']").val("");
  57             $("#display_msg").html(data);
  58         }
  59
  60     );
  61     return false;
  62 }
  63
  64 </script>
  65 <?php
  66 $arrOeUiSettings = array(
  67     'heading_title' => xl('Change Password'),
  68     'include_patient_name' => false,
  69     'expandable' => false,
  70     'expandable_files' => array(),//all file names need suffix _xpd
  71     'action' => "",//conceal, reveal, search, reset, link or back
  72     'action_title' => "",
  73     'action_href' => "",//only for actions - reset, link or back
  74     'show_help_icon' => false,
  75     'help_file_name' => ""
  76 );
  77 $oemr_ui = new OemrUI($arrOeUiSettings);
  78 ?>
  79 </head>
  80 <body class="body_top" onload="document.forms[0].curPass.focus()">
  81
  82 <?php
  83
  84 $res = sqlStatement("select fname,lname,username from users where id=?", array($_SESSION["authId"]));
  85 $row = sqlFetchArray($res);
  86       $iter=$row;
  87 ?>
  88 <div id="container_div" class="<?php echo $oemr_ui->oeContainer();?>">
  89     <div class="row">
  90         <div class="col-sm-12">
  91             <div class="page-header">
  92             <?php echo $oemr_ui->pageHeading() . "\r\n"; ?>
  93             </div>
  94         </div>
  95     </div>
  96     <div class="row">
  97         <div class="col-sm-12">
  98             <div id="display_msg"></div>
  99         </div>
 100     </div>
 101     <div class="row">
 102         <div class="col-sm-12">
 103             <form method='post' action='user_info.php' class='form-horizontal' onsubmit='return update_password()'>
 104                 <input type=hidden name=secure_pwd value="<?php echo attr($GLOBALS['secure_password']); ?>">
 105                 <fieldset>
 106                     <legend><?php echo xlt('Change Password for') . " " . $user_full_name; ?></legend>
 107                     <div class="form-group">
 108                         <label class='control-label col-sm-2'><?php echo xlt('Full Name') . ":"; ?></label>
 109                         <div class="col-sm-10">
 110                             <p class="form-control-static"><?php echo text($iter["fname"]) . " " . text($iter["lname"]) ?></p>
 111                         </div>
 112                     </div>
 113                     <div class="form-group">
 114                         <label class='control-label col-sm-2'><?php echo xlt('User Name') . ":"; ?></label>
 115                         <div class="col-sm-10">
 116                             <p class="form-control-static"><?php echo text($iter["username"]) ?></p>
 117                         </div>
 118                     </div>
 119                     <div class="form-group">
 120                         <label for='curPass' class='control-label col-sm-2'><?php echo xlt('Current Password') . ":"; ?></label>
 121                         <div class='col-sm-3'>
 122                             <input type='password' class='form-control'  name='curPass'  id='curPass' value="" autocomplete='off'>
 123                         </div>
 124                     </div>
 125                     <div class="form-group">
 126                         <label class='control-label col-sm-2'><?php echo xlt('New Password') . ":"; ?></label>
 127                         <div class='col-sm-3'>
 128                             <input type='password' class='form-control' name='newPass'  value="" autocomplete='off'>
 129                         </div>
 130                     </div>
 131                     <div class="form-group">
 132                         <label class='control-label col-sm-2'><?php echo xlt('Repeat New Password') . ":"; ?></label>
 133                         <div class='col-sm-3'>
 134                             <input type='password' class='form-control' name=newPass2  value="" autocomplete='off'>
 135                         </div>
 136                     </div>
 137                 </fieldset>
 138                 <div class="form-group">
 139                     <div class='col-sm-offset-2 col-sm-10'>
 140                         <button type="Submit" class='btn btn-default btn-save'><?php echo xlt('Save Changes'); ?></button>
 141                     </div>
 142                 </div>
 143             </form>
 144     </div>
 145     </div>
 146 </div><!--end of container div -->
 147 <?php $oemr_ui->oeBelowContainerDiv();?>
 148
 149 </body>
 150 </html>
 151
 152 <?php
 153 //  da39a3ee5e6b4b0d3255bfef95601890afd80709 == blank
 154 ?>