84 lines
2.8 KiB
PHP
84 lines
2.8 KiB
PHP
<?php
|
|
|
|
if( isset( $_POST[ 'Change' ] ) && ( $_POST[ 'step' ] == '1' ) ) {
|
|
// Hide the CAPTCHA form
|
|
$hide_form = true;
|
|
|
|
// Get input
|
|
$pass_new = $_POST[ 'password_new' ];
|
|
$pass_conf = $_POST[ 'password_conf' ];
|
|
|
|
// Check CAPTCHA from 3rd party
|
|
$resp = recaptcha_check_answer(
|
|
$_DVWA[ 'recaptcha_private_key' ],
|
|
$_POST['g-recaptcha-response']
|
|
);
|
|
|
|
// Did the CAPTCHA fail?
|
|
if( !$resp ) {
|
|
// What happens when the CAPTCHA was entered incorrectly
|
|
$html .= "<pre><br />The CAPTCHA was incorrect. Please try again.</pre>";
|
|
$hide_form = false;
|
|
return;
|
|
}
|
|
else {
|
|
// CAPTCHA was correct. Do both new passwords match?
|
|
if( $pass_new == $pass_conf ) {
|
|
// Show next stage for the user
|
|
$html .= "
|
|
<pre><br />You passed the CAPTCHA! Click the button to confirm your changes.<br /></pre>
|
|
<form action=\"#\" method=\"POST\">
|
|
<input type=\"hidden\" name=\"step\" value=\"2\" />
|
|
<input type=\"hidden\" name=\"password_new\" value=\"{$pass_new}\" />
|
|
<input type=\"hidden\" name=\"password_conf\" value=\"{$pass_conf}\" />
|
|
<input type=\"hidden\" name=\"passed_captcha\" value=\"true\" />
|
|
<input type=\"submit\" name=\"Change\" value=\"Change\" />
|
|
</form>";
|
|
}
|
|
else {
|
|
// Both new passwords do not match.
|
|
$html .= "<pre>Both passwords must match.</pre>";
|
|
$hide_form = false;
|
|
}
|
|
}
|
|
}
|
|
|
|
if( isset( $_POST[ 'Change' ] ) && ( $_POST[ 'step' ] == '2' ) ) {
|
|
// Hide the CAPTCHA form
|
|
$hide_form = true;
|
|
|
|
// Get input
|
|
$pass_new = $_POST[ 'password_new' ];
|
|
$pass_conf = $_POST[ 'password_conf' ];
|
|
|
|
// Check to see if they did stage 1
|
|
if( !$_POST[ 'passed_captcha' ] ) {
|
|
$html .= "<pre><br />You have not passed the CAPTCHA.</pre>";
|
|
$hide_form = false;
|
|
return;
|
|
}
|
|
|
|
// Check to see if both password match
|
|
if( $pass_new == $pass_conf ) {
|
|
// They do!
|
|
$pass_new = ((isset($GLOBALS["___mysqli_ston"]) && is_object($GLOBALS["___mysqli_ston"])) ? mysqli_real_escape_string($GLOBALS["___mysqli_ston"], $pass_new ) : ((trigger_error("[MySQLConverterToo] Fix the mysql_escape_string() call! This code does not work.", E_USER_ERROR)) ? "" : ""));
|
|
$pass_new = md5( $pass_new );
|
|
|
|
// Update database
|
|
$insert = "UPDATE `users` SET password = '$pass_new' WHERE user = '" . dvwaCurrentUser() . "';";
|
|
$result = mysqli_query($GLOBALS["___mysqli_ston"], $insert ) or die( '<pre>' . ((is_object($GLOBALS["___mysqli_ston"])) ? mysqli_error($GLOBALS["___mysqli_ston"]) : (($___mysqli_res = mysqli_connect_error()) ? $___mysqli_res : false)) . '</pre>' );
|
|
|
|
// Feedback for the end user
|
|
$html .= "<pre>Password Changed.</pre>";
|
|
}
|
|
else {
|
|
// Issue with the passwords matching
|
|
$html .= "<pre>Passwords did not match.</pre>";
|
|
$hide_form = false;
|
|
}
|
|
|
|
((is_null($___mysqli_res = mysqli_close($GLOBALS["___mysqli_ston"]))) ? false : $___mysqli_res);
|
|
}
|
|
|
|
?>
|