<?php
// Start the session and use the custom session name
require('security.php');

// Check if the user is logged in by verifying session variables
if (isset($_SESSION['user_id'])) {
    // If not logged in, redirect to the login page (index.php)
    header('Location: index.php');
    exit();
}

// Include your database connection
require('connection.inc.php');
// Set error reporting to display errors
error_reporting(E_ALL);
ini_set('display_errors', 1);

$error = '';
$success = '';

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    include_once 'csrf.php';
    if (!validate_csrf_token($_POST['csrf_token'])) {
        die('Invalid CSRF token!');
    }
    $new_password = password_hash($_POST['new_password'], PASSWORD_BCRYPT);
   $email = isset($_SESSION['otp_email']) ? $_SESSION['otp_email'] : ''; // Get email from session

    // Update the password in the database
    $sql = "UPDATE users SET password = '$new_password' WHERE email = '$email' AND deleted_at IS NULL";
    if ($conn->query($sql) === TRUE) {
        $success = "Your password has been reset successfully.";
        // Clear OTP session data
        unset($_SESSION['otp']);
        unset($_SESSION['otp_email']);
    } else {
        $error = "Error updating password. Please try again.";
    }
}

$conn->close();
?>

<!DOCTYPE html>
<html lang="zxx">


<!-- Mirrored from demo.dashboardpack.com/user-management-html/forgot_pass.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 02 Dec 2024 05:54:53 GMT -->
<head>
    <!-- Required meta tags -->
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
    <title>Management Admin</title>

    <link rel="icon" href="img/mini_logo.png" type="image/png">
    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="css/bootstrap1.min.css" />
    <!-- themefy CSS -->
    <link rel="stylesheet" href="vendors/themefy_icon/themify-icons.css" />
    <link rel="stylesheet" href="vendors/font_awesome/css/all.min.css" />
    <!-- datatable CSS -->
     <!-- scrollabe  -->
     <link rel="stylesheet" href="vendors/scroll/scrollable.css" />

    <!-- menu css  -->
    <link rel="stylesheet" href="css/metisMenu.css">
    <!-- style CSS -->
    <link rel="stylesheet" href="css/style1.css" />
    <link rel="stylesheet" href="css/colors/default.css" id="colorSkinCSS">
    <style>
        .main_content{
            padding-left: 0px !important;
        }
        .footer_part{
            padding-left: 0px !important;
        }
    </style>
</head>
<body class="crm_body_bg">

<section class="main_content dashboard_part large_header_bg">
    <div class="main_content_iner ">
        <div class="container-fluid p-0">
            <div class="row justify-content-center">
              <div class="col-12">
                <div class="dashboard_header mb_50">
                    <div class="row">
                        <div class="col-lg-6">
                            <div class="dashboard_header_title">
                                <h3>Dashboard</h3>
                            </div>
                        </div>
                        <div class="col-lg-6">
                            <div class="dashboard_breadcam text-end">
                                <p><a href="index.php">Dashboard</a> <i class="fas fa-caret-right"></i> Reset Password</p>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
            
                <div class="col-lg-12">
                    <div class="white_box mb_30">
                        <div class="row justify-content-center">
                            <div class="col-lg-6">
                                <!-- sign_in  -->
                                <div class="modal-content cs_modal">
                                    <div class="modal-header theme_bg_1">
                                        <h5 class="modal-title text_white">Reset Password</h5>
                                    </div>
                                    <div class="modal-body">
                                        <?php if (!empty($error)): ?>
                                            <p style="color: red;text-align:center"><?php echo $error; ?></p>
                                        <?php endif; ?>
                        
                                        <?php if (!empty($success)): ?>
                                            <script>toggleForms();</script> <!-- Automatically hide the OTP form and show Reset Password form -->
                                            <p style="color: #884ffb;text-align:center"><?php echo $success; ?> <a href="index.php">Login page.</a></p>
                                        <?php endif; ?>
                                    </div>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
                
            </div>
        </div>
    </div>

<!-- footer part -->
<?php require('footer.inc.php'); ?>
</section>
<!-- main content part end -->

  <!-- footer  -->
  <!-- jquery slim -->
  <script src="js/jquery1-3.4.1.min.js"></script>
  <!-- popper js -->
  <script src="js/popper1.min.js"></script>
  <!-- bootstarp js -->
  <script src="js/bootstrap1.min.js"></script>
  <!-- sidebar menu  -->
  <script src="js/metisMenu.js"></script>
  
  <!-- scrollabe  -->
  <script src="vendors/scroll/perfect-scrollbar.min.js"></script>
  <script src="vendors/scroll/scrollable-custom.js"></script>
  
  <!-- custom js -->
  <script src="js/custom.js"></script>
  </body>
  
<!-- Mirrored from demo.dashboardpack.com/user-management-html/forgot_pass.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 02 Dec 2024 05:54:53 GMT -->
</html>