<?php

        /***************************************************************************
        * Expresso Livre                                                           *
        * http://www.expressolivre.org                                             *
        * --------------------------------------------                             *
        *  This program is free software; you can redistribute it and/or modify it *
        *  under the terms of the GNU General Public License as published by the   *
        *  Free Software Foundation; either version 2 of the License, or (at your  *
        *  option) any later version.                                              *
        \**************************************************************************/

   		// Default number of letters = 3
		if (!$GLOBALS['phpgw_info']['server']['num_letters_userpass'])
			$GLOBALS['phpgw_info']['server']['num_letters_userpass'] = 3;
		// Default number of special letters = 0
		if (!$GLOBALS['phpgw_info']['server']['num_special_letters_userpass'])
			$GLOBALS['phpgw_info']['server']['num_special_letters_userpass'] = 0;
		if (! $GLOBALS['phpgw']->auth->authenticate($GLOBALS['phpgw_info']['user']['account_lid'], $a_passwd))
		{
			$errors[] = lang('Your actual password is wrong');
		}
		else if ($n_passwd != $n_passwd_2)
		{
			$errors[] = lang('The two passwords are not the same');
		}
		else if ($a_passwd == $n_passwd)
		{
			$errors[] = lang('Your old password and your new password are the same. Choose a different new password');
		}
		else if (! $n_passwd)
		{
			$errors[] = lang('You must enter a password');
		}
		else if ( strlen( $n_passwd ) < $GLOBALS['phpgw_info']['server']['num_letters_userpass'] )
		{
			$errors[] = lang('Your password must contain %1 or more letters', $GLOBALS['phpgw_info']['server']['num_letters_userpass']);
		}

		// Special Letters
		$speccial_letter = 0;
		for ($i=0; $i<strlen($n_passwd); $i++)
		{
			$letter = $n_passwd[$i];
			if (! ereg ("[a-zA-Z]", $letter ) )
				$speccial_letter++;
		}
		if ($speccial_letter < $GLOBALS['phpgw_info']['server']['num_special_letters_userpass'])
		{
			$errors[] = lang('Your password must contain at least %1 numbers or characters special', $GLOBALS['phpgw_info']['server']['num_special_letters_userpass']);
		}

		if(is_array($errors))
		{
			$GLOBALS['phpgw']->template->set_var('messages',$GLOBALS['phpgw']->common->error_list($errors));
			$GLOBALS['phpgw']->template->pfp('out','form');
			$GLOBALS['phpgw']->common->phpgw_exit(True);
		}

		$o_passwd = $GLOBALS['phpgw_info']['user']['passwd'];
		$passwd_changed = $GLOBALS['phpgw']->auth->change_password($o_passwd, $n_passwd);
		if(!$passwd_changed)
		{
			$errors[] = lang('Failed to change password') . ". " . lang('Please contact your administrator') . '.';
			$GLOBALS['phpgw']->template->set_var('messages',$GLOBALS['phpgw']->common->error_list($errors));
			$GLOBALS['phpgw']->template->pfp('out','form');
			$GLOBALS['phpgw']->common->phpgw_exit(True);
		}
		else
		{
			$GLOBALS['phpgw_info']['user']['passwd'] = $passwd_changed;
			$_SESSION['phpgw_info']['expresso']['user']['account_lid'] = $GLOBALS['phpgw_info']['user']['account_lid'];
			include(dirname( __FILE__ ).'/../../../expressoAdmin1_2/inc/class.db_functions.inc.php');
			$db_functions = new db_functions();
			$db_functions->write_log('modified user password','User change its own password in preferences');
			$GLOBALS['hook_values']['account_id'] = $GLOBALS['phpgw_info']['user']['account_id'];
			$GLOBALS['hook_values']['old_passwd'] = $o_passwd;
			$GLOBALS['hook_values']['new_passwd'] = $n_passwd;
			$GLOBALS['phpgw']->hooks->process('changepassword');

			if($GLOBALS['phpgw_info']['server']['certificado'])
			{
			if(!$GLOBALS['phpgw_info']['server']['atributousuarios'] or $GLOBALS['phpgw_info']['server']['atributousuarios'] == "person")
				{
					$RR = grava_senha_criptografada_com_certificado_no_ldap($GLOBALS['phpgw_info']['user']['account_id'],$n_passwd);
				}
			}

			if ($GLOBALS['phpgw_info']['server']['use_https'] == 1)
				Header('Location: http://' . $_SERVER['HTTP_HOST'] . $GLOBALS['phpgw_info']['server']['webserver_url'] . '/preferences/index.php');
			else
				$GLOBALS['phpgw']->redirect_link('/preferences/index.php','cd=18');
		}

?>