<?php require('include/header.php'); ?>
<?php require('include/sidebar.php'); ?>
<?php
$msg_error = '';
if (isset($_POST['changepassword'])) {
  $old_pwd = md5(mysqli_real_escape_string($conn, $_POST['old_password']));
  $new_pwd = md5(mysqli_real_escape_string($conn, $_POST['new_password']));
  $con_pwd = md5(mysqli_real_escape_string($conn, $_POST['confirm_password']));
  if ($new_pwd == $con_pwd) {
    if ($new_pwd != $old_pwd) {
      $sql = "SELECT * FROM `grp_login_credential` WHERE `id`='$userid' AND `password` ='$old_pwd'";
      $db_check = $conn->query($sql);
      $count = mysqli_num_rows($db_check);
      if ($count == 1) {
        $conn->query("UPDATE `grp_login_credential` SET `password` = '$new_pwd' WHERE `id`='$userid'");
        $msg_error = '<div class="alert alert-success alert-dismissible fade show"><strong>Your new password update successfully.</strong></div>';
      } else {
        $msg_error = '<div class="alert alert-danger alert-dismissible fade show"><strong>The password you gave is incorrect</strong></div>';
      }
    } else {
      $msg_error = '<div class="alert alert-danger alert-dismissible fade show"><strong>Old password new password same Please try again.</strong></div>';
    }
  } else {
    $msg_error = '<div class="alert alert-danger alert-dismissible fade show"><strong>New password and confirm password do not matched</strong></div>';
  }
}
?>
<div id="content" class="app-content">
  <div class="d-flex align-items-center mb-3">
    <div>
      <ol class="breadcrumb">
        <li class="breadcrumb-item"><a href="dashboard.php">Home</a></li>
        <li class="breadcrumb-item active"><i class="fa fa-arrow-back"></i>Change Password</li>
      </ol>
      <h1 class="page-header mb-0">Change Password</h1>
    </div>
  </div>

  <div class="row">
    <div class="col-lg-12">
      <div class="card border-0 mb-4">
        <div class="card-header h6 mb-0 bg-none p-3">
          <i class="fa fa-user fa-lg fa-fw text-dark text-opacity-50 me-1"></i> Change Password
        </div>
        <div id="msg-error"><?php echo $msg_error; ?></div>
        <form method="post" enctype="multipart/form-data" onsubmit="return validatemployee()">
          <div class="card-body">
            <div class="row">
              <div class="col-md-12">
                <div class="mb-3">
                  <label class="form-label">Old Password <span class="text-danger">*</span></label>
                  <input type="text" class="form-control" id="old_password" name="old_password" placeholder="Old Password" required>
                </div>
              </div>

              <div class="col-md-12">
                <div class="mb-3">
                  <label class="form-label">New Password<span class="text-danger">*</span></label>
                  <input type="text" class="form-control" id="new_password" name="new_password" placeholder="New Password" required>
                </div>
              </div>

              <div class="col-md-12">
                <div class="mb-3">
                  <label class="form-label">Confirm Password <span class="text-danger">*</span></label>
                  <input type="text" class="form-control" id="confirm_password" name="confirm_password" placeholder="Confirm Password" required>
                </div>
              </div>
            </div>
          </div>
          <div class="card-footer bg-none d-flex p-3">
            <button class="btn btn-primary" name="changepassword" type="submit"><i class="fas fa-check"></i> CLICK TO CHANGE PASSWORD </button>
            <a href="dashboard.php" class="btn btn-danger ms-2">CANCEL</a>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>
<?php require('include/footer-data.php'); ?>