21 lines
527 B
PHP
21 lines
527 B
PHP
<?php
|
|
session_start();
|
|
require_once 'db/config.php';
|
|
|
|
if (!isset($_SESSION['user_id']) || !$_SESSION['is_admin']) {
|
|
header('Location: index.php');
|
|
exit;
|
|
}
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
$new_password = $_POST['new_password'];
|
|
$hashed_password = password_hash($new_password, PASSWORD_DEFAULT);
|
|
|
|
$pdo = db();
|
|
$stmt = $pdo->prepare("UPDATE users SET password = ? WHERE id = ?");
|
|
$stmt->execute([$hashed_password, $_SESSION['user_id']]);
|
|
|
|
header('Location: admin.php');
|
|
exit;
|
|
}
|
|
?>
|