1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
<?php
////////////////////////////////////////////////////////////////////////////////
//BOCA Online Contest Administrator
// Copyright (C) 2003-2012 by BOCA Development Team (bocasystem@gmail.com)
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
// You should have received a copy of the GNU General Public License
// along with this program. If not, see <http://www.gnu.org/licenses/>.
////////////////////////////////////////////////////////////////////////////////
// Last modified 05/aug/2012 by cassio@ime.usp.br
//optionlower.php: parte de baixo da tela de option.php, que eh igual para
// todos os usuarios
require_once("globals.php");
if(!ValidSession()) { // || $_SESSION["usertable"]["usertype"] == 'team') {
InvalidSession("optionlower.php");
ForceLoad("index.php");
}
$loc = $_SESSION['loc'];
if (isset($_GET["username"]) && isset($_GET["userfullname"]) && isset($_GET["userdesc"]) &&
isset($_GET["passwordo"]) && isset($_GET["passwordn"])) {
$username = myhtmlspecialchars($_GET["username"]);
$userfullname = myhtmlspecialchars($_GET["userfullname"]);
$userdesc = myhtmlspecialchars($_GET["userdesc"]);
$passwordo = $_GET["passwordo"];
$passwordn = $_GET["passwordn"];
DBUserUpdate($_SESSION["usertable"]["contestnumber"],
$_SESSION["usertable"]["usersitenumber"],
$_SESSION["usertable"]["usernumber"],
$_SESSION["usertable"]["username"], // $username, but users should not change their names
$userfullname,
$userdesc,
$passwordo,
$passwordn);
ForceLoad("option.php");
}
$a = DBUserInfo($_SESSION["usertable"]["contestnumber"],
$_SESSION["usertable"]["usersitenumber"],
$_SESSION["usertable"]["usernumber"]);
?>
<script language="JavaScript" src="<?php echo $loc; ?>/sha256.js"></script>
<script language="JavaScript" src="<?php echo $loc; ?>/hex.js"></script>
<script language="JavaScript">
function computeHASH()
{
var username, userdesc, userfull, passHASHo, passHASHn1, passHASHn2;
if (document.form1.passwordn1.value != document.form1.passwordn2.value) return;
if (document.form1.passwordn1.value == document.form1.passwordo.value) return;
username = document.form1.username.value;
userdesc = document.form1.userdesc.value;
userfull = document.form1.userfull.value;
passMDo = js_myhash(js_myhash(document.form1.passwordo.value)+'<?php echo session_id(); ?>');
passMDn = bighexsoma(js_myhash(document.form1.passwordn2.value),js_myhash(document.form1.passwordo.value));
document.form1.passwordo.value = ' ';
document.form1.passwordn1.value = ' ';
document.form1.passwordn2.value = ' ';
document.location='option.php?username='+username+'&userdesc='+userdesc+'&userfullname='+userfull+'&passwordo='+passMDo+'&passwordn='+passMDn;
}
</script>
<br><br>
<form name="form1" action="javascript:computeHASH()">
<center>
<table border="0">
<tr>
<td width="35%" align=right>Username:</td>
<td width="65%">
<input type="text" readonly name="username" value="<?php echo $a["username"]; ?>" size="20" maxlength="20" />
</td>
</tr>
<tr>
<td width="35%" align=right>User Full Name:</td>
<td width="65%">
<input type="text" readonly name="userfull" value="<?php echo $a["userfullname"]; ?>" size="50" maxlength="50" />
</td>
</tr>
<tr>
<td width="35%" align=right>User Description:</td>
<td width="65%">
<input type="text" name="userdesc" value="<?php echo $a["userdesc"]; ?>" size="50" maxlength="250" />
</td>
</tr>
<tr>
<td width="35%" align=right>Old Password:</td>
<td width="65%">
<input type="password" name="passwordo" size="20" maxlength="200" />
</td>
</tr>
<tr>
<td width="35%" align=right>New Password:</td>
<td width="65%">
<input type="password" name="passwordn1" size="20" maxlength="200" />
</td>
</tr>
<tr>
<td width="35%" align=right>Retype New Password:</td>
<td width="65%">
<input type="password" name="passwordn2" size="20" maxlength="200" />
</td>
</tr>
</table>
</center>
<center>
<input type="submit" name="Submit" value="Send">
</center>
</form>
</body>
</html>
|
