<?PHP
$PARENT_SCRIPTNAME='change_password.php';
include_once 'script_auth.php';
include_once("session_checker.php");

include_once 'init/initialisation_parameter.php';
include_once 'headerFile.php';

header("Cache-Control: no-cache, must-revalidate");
// Date in the past
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");


if ($_REQUEST['action'] == "changePwd") {
	$result = changePassword();
} else if ($_REQUEST['action'] == "getParam") {
	$result = getParam();
} else {
	$result = -1;
}

echo $result;

function changePassword(){
	$CHANGEPWDPROG = "change_personal_password.php";
	$sock = fsockopen("tcp://".USERMANAGERIP, USERMANAGERPORT, $errno, $errstr, 30);

	if (!$sock) die("$errstr ($errno)\n");

	$data = "appsid=" . urlencode(APPSID) . "&encPwd=" . urlencode($_REQUEST['encPwd']) . "&encOldPwd=" . urlencode($_REQUEST['encOldPwd']) . "&KD_USER=" . urlencode($_SESSION['KD_USER']) . "&APPSID=" . urlencode(APPSID)  . "&REQ_ADDR=" . urlencode($_SERVER['SERVER_ADDR'].":".$_SERVER['SERVER_PORT']) ;

	fwrite($sock, "POST /$CHANGEPWDPROG HTTP/1.0\r\n");
	fwrite($sock, "Host: $USERMANAGERIP\r\n");
	fwrite($sock, "Content-type: application/x-www-form-urlencoded\r\n");
	fwrite($sock, "Content-length: " . strlen($data) . "\r\n");
	fwrite($sock, "Accept: */*\r\n");
	fwrite($sock, "\r\n");
	fwrite($sock, "$data\r\n");
	fwrite($sock, "\r\n");

	$headers = "";
	while ($str = trim(fgets($sock, 4096)))
	$headers .= "$str\n";

	$body = "";
	while (!feof($sock))
	$body .= fgets($sock, 4096);

	fclose($sock);

	$result = $body;
	return $result;
}


function getParam() {
	$CHANGEPWDPROG = "user_param_login.php";
	$sock = fsockopen("tcp://".USERMANAGERIP, USERMANAGERPORT, $errno, $errstr, 30);

	if (!$sock) die("$errstr ($errno)\n");

	$data = "APPSID=".urlencode(APPSID).
			"&PARAMID=".urlencode($_REQUEST['paramid']).
			"&REQ_ADDR=".urlencode($_SERVER['SERVER_ADDR'].":".$_SERVER['SERVER_PORT']);

	fwrite($sock, "POST /$CHANGEPWDPROG HTTP/1.0\r\n");
	fwrite($sock, "Host: $USERMANAGERIP\r\n");
	fwrite($sock, "Content-type: application/x-www-form-urlencoded\r\n");
	fwrite($sock, "Content-length: " . strlen($data) . "\r\n");
	fwrite($sock, "Accept: */*\r\n");
	fwrite($sock, "\r\n");
	fwrite($sock, "$data\r\n");
	fwrite($sock, "\r\n");

	$headers = "";
	while ($str = trim(fgets($sock, 4096)))
	$headers .= "$str\n";

	$body = "";
	while (!feof($sock))
	$body .= fgets($sock, 4096);

	fclose($sock);

	$result = decompress($body);
	$paramVal = 0;
	if (strlen($result) > 1) {
		$paramRawArray = explode("\t",$result);
		foreach ($paramRawArray as $rkey => $rval) {
			list($key,$val) = explode('=',$rval);
			$paramArray[0][$key]=$val;
		}
		foreach ($paramArray as $ukey => $uval) {						
			if ($_REQUEST['paramid'] == $uval['PARAMID']) {			
				$paramVal = $uval['PARAMVALUE'];
				break;
			}
		}
	}
	return $paramVal;
}


function decompress ($data){
	$total = strlen($data);
	for ($j=0;$j<$total;$j=$j+2){
		$text .= chr(hexdec(substr($data,$j,2)));
	}

	return $text;
}

function compress ($data){
	$total = strlen($data);
	for ($i=0;$i<$total;$i++){
		$temp = dechex(ord(substr($data,$i,1)));
		if (strlen($temp)<2) {
			$temp = '0'.$temp;
		}
		$text .= $temp;
	}
	return $text;
}
?>