var minisrv_service_file = true;
session_data.loadSessionData();
var user_id = (request_headers.query.user_id) ? request_headers.query.user_id : session_data.user_id;
// security
if (session_data.user_id != 0 && session_data.user_id != user_id) {
user_id = null; // force unset
var errpage = wtvshared.doErrorPage(400, "You are not authorized to change the selected user's password.");
headers = errpage[0];
data = errpage[1];
}
if (user_id != null) {
var userSession = null;
if (session_data.user_id == request_headers.query.user_id) userSession = session_data;
else {
userSession = new WTVClientSessionData(minisrv_config, socket.ssid);
userSession.user_id = user_id;
}
if (!userSession.loadSessionData()) {
var errpage = wtvshared.doErrorPage(400, "Invalid user ID.");
headers = errpage[0];
data = errpage[1];
}
else {
headers = `200 OK
Connection: Keep-Alive
Content-Type: text/html`;
data = `
Change ${(user_id == session_data.user_id) ? 'your' : 'user'} password
|
|
Change ${(user_id == session_data.user_id) ? 'your' : 'user'} password
|
|
|
|
| |
`;
}
}
if (userSession) userSession = null;