<?php
	/**
	 * Action for changing a user's password
	 * 
	 * @package Elgg
	 * @subpackage Core
	 * @license http://www.gnu.org/licenses/old-licenses/gpl-2.0.html GNU Public License version 2
	 * @author Curverider Ltd
	 * @copyright Curverider Ltd 2008
	 * @link http://elgg.org/
	 */

	require_once(dirname(dirname(dirname(__FILE__))) . "/engine/start.php");
	global $CONFIG;

	gatekeeper();
	
	$password = get_input('password');
	$password2 = get_input('password2');
	$user_id = get_input('guid');
	$user = "";
	
	if (!$user_id)
		$user = $_SESSION['user'];
	else
		$user = get_entity($user_id);
		
	if (($user) && ($password!=""))
	{
		if (strlen($password)>=4)
		{
			if ($password == $password2)
			{
				$user->password = generate_user_password($user, $password);
				if ($user->save())
					system_message(elgg_echo('user:password:success'));
				else
					register_error(elgg_echo('user:password:fail'));
			}
			else
				register_error(elgg_echo('user:password:fail:notsame'));
		}
		else
			register_error(elgg_echo('user:password:fail:tooshort'));
	}
	
	//forward($_SERVER['HTTP_REFERER']);
	//exit;
?>