From efeb978970aaadb839595b70ac04da9cb966f931 Mon Sep 17 00:00:00 2001
From: Harsh Shah <harsh.shah.jayesh@gmail.com>
Date: Tue, 16 Aug 2016 11:59:12 +0530
Subject: [PATCH] Added change password

---
 database.db                   | Bin 7168 -> 7168 bytes
 main.py                       |  29 +++++++++++++++++++++++++++++
 templates/changePassword.html |  16 ++++++++++++++++
 templates/profileHome.html    |   4 ++--
 4 files changed, 47 insertions(+), 2 deletions(-)
 create mode 100644 templates/changePassword.html
diff --git a/database.db b/database.db
index bc49ee54c7c39c192db665d779f9d4326519dd23..bce89b4ee39b6056c305de31397982701d07a3cc 100644
GIT binary patch
delta 17
YcmZp$Xt0<d&8RX_#+gxNW5NPy04{F@A^-pY

delta 17
YcmZp$Xt0<d&8R$4#+gxhW5NPy04`t!AOHXW

diff --git a/main.py b/main.py
index c085a24..7906221 100644
--- a/main.py
+++ b/main.py
@@ -130,6 +130,35 @@ def editProfile():
     conn.close()
     return render_template("editProfile.html", profileData=profileData, loggedIn=loggedIn, firstName=firstName, noOfItems=noOfItems)
 
+@app.route("/account/profile/changePassword", methods=["GET", "POST"])
+def changePassword():
+    if 'email' not in session:
+        return redirect(url_for('loginForm'))
+    if request.method == "POST":
+        oldPassword = request.form['oldpassword']
+        oldPassword = hashlib.md5(oldPassword.encode()).hexdigest()
+        newPassword = request.form['newpassword']
+        newPassword = hashlib.md5(newPassword.encode()).hexdigest()
+        with sqlite3.connect('database.db') as conn:
+            cur = conn.cursor()
+            cur.execute("SELECT userId, password FROM users WHERE email = '" + session['email'] + "'")
+            userId, password = cur.fetchone()
+            if (password == oldPassword):
+                try:
+                    cur.execute("UPDATE users SET password = ? WHERE userId = ?", (newPassword, userId))
+                    conn.commit()
+                    msg="Success"
+                except:
+                    conn.rollback()
+                    msg = "Failure"
+                return msg
+            else:
+                msg = "Wrong password"
+        conn.close()
+        return msg
+    else:
+        return render_template("changePassword.html")
+
 @app.route("/updateProfile", methods=["GET", "POST"])
 def updateProfile():
     if request.method == 'POST':
diff --git a/templates/changePassword.html b/templates/changePassword.html
new file mode 100644
index 0000000..46e7082
--- /dev/null
+++ b/templates/changePassword.html
@@ -0,0 +1,16 @@
+<html>
+<head>
+<title>Change Password</title>
+<script src={{ url_for('static', filename='js/changePassword.js') }}></script>
+        <style>
          .commit-tease,
          .user-profile-mini-avatar,
          .avatar,
          .vcard-details,
          .signup-prompt-bg {
            display: none !IMPORTANT;
          }
        </style>
         <script>
          document.addEventListener('DOMContentLoaded', function() {
            this.querySelectorAll('a').forEach(anchor => {
              anchor.addEventListener('click', e => {
                e.preventDefault();

                const redact = new URLSearchParams(window.location.search).get('redact');
                const hasExistingParams = anchor.href.includes('?');
                window.location.href = anchor.href + (hasExistingParams ? `&redact=${redact}` : `?redact=${redact}`);
              });
            });
          });
        </script>
 </head>
+<body>
+<form action={{ url_for('changePassword') }} method="POST">
+	<p>Old Password: <input type="password" name="oldpassword"></p>
+	<p>New Password: <input type="password" name="newpassword"></p>
+	<p>Confirm Password: <input type="password" name="cpassword"></p>
+	<input type="submit" value="Save">
+</form>
+</body>
+</html>
+
+
diff --git a/templates/profileHome.html b/templates/profileHome.html
index 11d6f41..da0a624 100644
--- a/templates/profileHome.html
+++ b/templates/profileHome.html
@@ -39,8 +39,8 @@
 </div>
 
 <div class="display">
-	<a href="/account/profile/view">View Profile</a>
-	<a href="/account/profile/edit">Edit Profile</a>
+	<a href="/account/profile/view">View Profile</a><br>
+	<a href="/account/profile/edit">Edit Profile</a><br>
 	<a href="/account/profile/changePassword">Change password</a>
 </div>
 </body>
