博客程序开发历程【6】-[会员系统-密码重置]{附源码}

<?php
if (!defined('IN_BLOG')){
echo "access violations";
echo '<META HTTP-EQUIV="Refresh" CONTENT="1;URL=http://'.$_SERVER['HTTP_HOST'].'">';
exit();
}

get_paper('header');
if (!isset($_SESSION['uid'])){
header("location: ?file=member&action=login");
}
elseif (isset($_POST['submit'])){
resetpwd($_POST['password1'],$_POST['password2']);

}
else {
display_resetpwd_form();
}
get_paper('footer');
?>

function resetpwd($pwd1,$pwd2){
if (md5($pwd1)==$_SESSION['password']){
$pwd2=md5($pwd2);
$dsn='mysql:host='.DB_HOST.';'.'dbname='.DB_NAME;
$pdo=new PDO($dsn,DB_USER,DB_PASSWORD);

$sql="UPDATE members SET password='$pwd2' WHERE id='$_SESSION[uid]'";

$ex=$pdo->exec($sql) or die(print_r($pdo->errorInfo(),true));
if($ex){
session_destroy();
exit ('<script language="javascript">alert("密码已修改。")</script>');
}
else{
exit ('<script language="javascript">alert("发生了错误。")</script>');
}
}

else {
exit ('<script language="javascript">alert("旧密码错误。")</script>');
}

}