230b8a8aeb
- Corregido warning de session_save_path/session_name al iniciar sesion - CSRF ahora usa Session::init() para configuracion correcta de sesion - Agregada pagina independiente para cambiar contraseña de ayudantes - Boton Cambiar Contraseña en navbar de pagina de ayudantes - Mejorada disposicion de tablas en pagina de asignaciones
120 lines
4.9 KiB
PHP
120 lines
4.9 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../src/Auth.php';
|
|
require_once __DIR__ . '/../src/User.php';
|
|
require_once __DIR__ . '/../src/CSRF.php';
|
|
|
|
$auth = new Auth();
|
|
$auth->requireAuth();
|
|
|
|
if ($auth->isAdmin()) {
|
|
header('Location: /admin/index.php');
|
|
exit;
|
|
}
|
|
|
|
$user = $auth->getCurrentUser();
|
|
$message = '';
|
|
$messageType = '';
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
if (!CSRF::isValidRequest()) {
|
|
$message = 'Error de validación del formulario';
|
|
$messageType = 'danger';
|
|
} else {
|
|
$passwordActual = $_POST['password_actual'] ?? '';
|
|
$passwordNueva = $_POST['password_nueva'] ?? '';
|
|
$passwordConfirmar = $_POST['password_confirmar'] ?? '';
|
|
|
|
if (empty($passwordActual) || empty($passwordNueva) || empty($passwordConfirmar)) {
|
|
$message = 'Todos los campos son obligatorios';
|
|
$messageType = 'danger';
|
|
} elseif ($passwordNueva !== $passwordConfirmar) {
|
|
$message = 'Las contraseñas nuevas no coinciden';
|
|
$messageType = 'danger';
|
|
} elseif (strlen($passwordNueva) < 6) {
|
|
$message = 'La contraseña debe tener al menos 6 caracteres';
|
|
$messageType = 'danger';
|
|
} else {
|
|
$userModel = new User();
|
|
$userData = $userModel->getById($user['id']);
|
|
|
|
if ($userData && password_verify($passwordActual, $userData['password'])) {
|
|
if ($userModel->updatePassword($user['id'], $passwordNueva)) {
|
|
$message = 'Contraseña actualizada correctamente';
|
|
$messageType = 'success';
|
|
} else {
|
|
$message = 'Error al actualizar la contraseña';
|
|
$messageType = 'danger';
|
|
}
|
|
} else {
|
|
$message = 'La contraseña actual es incorrecta';
|
|
$messageType = 'danger';
|
|
}
|
|
}
|
|
}
|
|
}
|
|
?>
|
|
<!DOCTYPE html>
|
|
<html lang="es">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>Cambiar Contraseña - Contenedor Ibiza</title>
|
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
|
|
</head>
|
|
<body>
|
|
<nav class="navbar navbar-dark bg-primary">
|
|
<div class="container">
|
|
<a class="navbar-brand" href="/ayudante.php">Contenedor Ibiza</a>
|
|
<span class="navbar-text">
|
|
Hola, <?= htmlspecialchars($user['nombre']) ?>
|
|
</span>
|
|
<a href="/ayudante.php" class="btn btn-outline-light btn-sm">Volver</a>
|
|
</div>
|
|
</nav>
|
|
|
|
<div class="container mt-4">
|
|
<div class="row justify-content-center">
|
|
<div class="col-md-6">
|
|
<div class="card shadow">
|
|
<div class="card-header bg-dark text-white">
|
|
<h5 class="mb-0">Cambiar Contraseña</h5>
|
|
</div>
|
|
<div class="card-body">
|
|
<?php if ($message): ?>
|
|
<div class="alert alert-<?= $messageType ?>"><?= htmlspecialchars($message) ?></div>
|
|
<?php endif; ?>
|
|
|
|
<form method="POST">
|
|
<?= CSRF::getTokenField() ?>
|
|
|
|
<div class="mb-3">
|
|
<label for="password_actual" class="form-label">Contraseña Actual</label>
|
|
<input type="password" class="form-control" id="password_actual" name="password_actual" required>
|
|
</div>
|
|
|
|
<div class="mb-3">
|
|
<label for="password_nueva" class="form-label">Nueva Contraseña</label>
|
|
<input type="password" class="form-control" id="password_nueva" name="password_nueva" required minlength="6">
|
|
<small class="text-muted">Mínimo 6 caracteres</small>
|
|
</div>
|
|
|
|
<div class="mb-4">
|
|
<label for="password_confirmar" class="form-label">Confirmar Nueva Contraseña</label>
|
|
<input type="password" class="form-control" id="password_confirmar" name="password_confirmar" required minlength="6">
|
|
</div>
|
|
|
|
<div class="d-flex gap-2">
|
|
<button type="submit" class="btn btn-primary">Actualizar Contraseña</button>
|
|
<a href="/ayudante.php" class="btn btn-secondary">Cancelar</a>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
|
|
</body>
|
|
</html>
|