HEX
Server: Apache/2.4.41 (Amazon) OpenSSL/1.0.2k-fips PHP/5.6.40
System: Linux ip-172-31-40-18 4.14.146-93.123.amzn1.x86_64 #1 SMP Tue Sep 24 00:45:23 UTC 2019 x86_64
User: apache (48)
PHP: 5.6.40
Disabled: NONE
Upload Files
File: /var/www/html/nt/application/controllers/admin/Change_password.php
<?php
defined('BASEPATH') or exit('No direct script access allowed');

class Change_password extends MY_Controller
{

	public function __construct()
	{
		parent::__construct();
		$this->load->model('admin/mchange_password'); 
		$this->load->model('mcommon'); 

	}
	/**
	 * Index Page for this controller.
	 *
	 * Maps to the following URL
	 * 		http://example.com/index.php/welcome
	 *	- or -
	 * 		http://example.com/index.php/welcome/index
	 *	- or -
	 * Since this controller is set as the default controller in
	 * config/routes.php, it's displayed at http://example.com/
	 *
	 * So any other public methods not prefixed with an underscore will
	 * map to /index.php/welcome/<method_name>
	 * @see https://codeigniter.com/user_guide/general/urls.html
	 */
	public function index()
	{
		$data['content'] = 'admin/change_password/add';
		$this->load->view('admin/layouts/index', $data);
	}
	public function updatepassword()
	{
			$old_password=md5($this->input->post('old_password'));
			$password=$this->input->post('password');
			$confirm_password=$this->input->post('confirm_password');
			$check_old_password_count = $this->mchange_password->check_old_password($old_password,$this->admin_session_data['user_id']);
			if($check_old_password_count <= 0){
				$this->session->set_flashdata('error_msg', 'Old password is not correct');
				redirect("admin/account");
			} 
			if($password != $confirm_password){
				$this->session->set_flashdata('error_msg', 'New password does not match with confirm password');
				redirect("admin/account");
			} 
				
				$data = array(
					'password' => md5($password)
				);

			$condition = array('user_id' => $this->admin_session_data['user_id']);
			
			$result = $this->mchange_password->update_password($condition,$data);
				
			if ($result) {
				$this->session->set_flashdata('success_msg', 'Password Updated Successfully');
				redirect("admin/account");
			}
	}

}