HEX
Server: Apache/2.4.41 (Amazon) OpenSSL/1.0.2k-fips PHP/5.6.40
System: Linux ip-172-31-40-18 4.14.146-93.123.amzn1.x86_64 #1 SMP Tue Sep 24 00:45:23 UTC 2019 x86_64
User: apache (48)
PHP: 5.6.40
Disabled: NONE
Upload Files
File: //var/www/html/qcr24/app/application/controllers/admin/Change_password.php
<?php
defined('BASEPATH') or exit('No direct script access allowed');

class Change_password extends MY_Controller
{

	public function __construct()
	{
		parent::__construct();
		$this->load->model('admin/mchange_password');
		$this->load->model('mcommon');
	}
	/**
	 * Index Page for this controller.
	 *
	 * Maps to the following URL
	 * 		http://example.com/index.php/welcome
	 *	- or -
	 * 		http://example.com/index.php/welcome/index
	 *	- or -
	 * Since this controller is set as the default controller in
	 * config/routes.php, it's displayed at http://example.com/
	 *
	 * So any other public methods not prefixed with an underscore will
	 * map to /index.php/welcome/<method_name>
	 * @see https://codeigniter.com/user_guide/general/urls.html
	 */
	public function updatepassword()
	{
		$old_password = md5($this->input->post('old_password'));
		$password = $this->input->post('password');
		$confirm_password = $this->input->post('confirm_password');
		$check_old_password_count = $this->mchange_password->check_old_password($old_password, $this->admin_session_data['user_id']);
		if ($check_old_password_count <= 0) {
			echo json_encode(array('status' => false, 'msg' => 'Old password is not correct'));exit();
		}
		if ($password != $confirm_password) {
			echo json_encode(array('status' => false, 'msg' => 'New password does not match with confirm password'));exit();
		}

		$data = array(
			'password' => md5($password)
		);

		$condition = array('user_id' => $this->admin_session_data['user_id']);

		$result = $this->mchange_password->update_password($condition, $data);

		if ($result) {
			echo json_encode(array('status' => true, 'msg' => 'Password Updated Successfully'));exit();
		}
	}
}