phpnuxbill/system/controllers/accounts.php

<?php
/**
* PHP Mikrotik Billing (https://ibnux.github.io/phpmixbill/)
**/
_auth();
$ui->assign('_title', $_L['My_Account'].'- '. $config['CompanyName']);
$ui->assign('_system_menu', 'accounts');

$action = $routes['1'];
$user = User::_info();
$ui->assign('_user', $user);

use PEAR2\Net\RouterOS;
require_once 'system/autoload/PEAR2/Autoload.php';

switch ($action) {

    case 'change-password':
        run_hook('customer_view_change_password'); #HOOK
        $ui->display('user-change-password.tpl');
        break;

    case 'change-password-post':
        $password = _post('password');
        run_hook('customer_change_password'); #HOOK
        if($password != ''){
            $d = ORM::for_table('tbl_customers')->where('username',$user['username'])->find_one();
            if($d){
                $d_pass = $d['password'];
				$npass = _post('npass');
                $cnpass = _post('cnpass');

                if(Password::_uverify($password,$d_pass) == true){
					if(!Validator::Length($npass,15,2)){
                        r2(U.'accounts/change-password','e','New Password must be 3 to 14 character');
                    }
                    if($npass != $cnpass){
                        r2(U.'accounts/change-password','e','Both Password should be same');
                    }

					$c = ORM::for_table('tbl_user_recharges')->where('username',$user['username'])->find_one();
					if ($c){
						$mikrotik = Mikrotik::info($c['routers']);
						if($c['type'] == 'Hotspot'){
                            if(!$_c['radius_mode']){
                                $client = Mikrotik::getClient($mikrotik['ip_address'], $mikrotik['username'], $mikrotik['password']);
                                Mikrotik::setHotspotUser($client,$c['username'],$npass);
                                Mikrotik::removeHotspotActiveUser($client,$user['username']);
                            }
							$d->password = $npass;
							$d->save();

							_msglog('s',$_L['Password_Changed_Successfully']);
							_log('['.$user['username'].']: Password changed successfully','User',$user['id']);

							r2(U.'login');

						}else{
                            if(!$_c['radius_mode']){
                                $client = Mikrotik::getClient($mikrotik['ip_address'], $mikrotik['username'], $mikrotik['password']);
                                Mikrotik::setPpoeUser($client,$c['username'],$npass);
                                Mikrotik::removePpoeActive($client,$user['username']);
                            }
							$d->password = $npass;
							$d->save();

							_msglog('s',$_L['Password_Changed_Successfully']);
							_log('['.$user['username'].']: Password changed successfully','User',$user['id']);

							r2(U.'login');
						}
					}else{
						$d->password = $npass;
						$d->save();

						_msglog('s',$_L['Password_Changed_Successfully']);
						_log('['.$user['username'].']: Password changed successfully','User',$user['id']);

						r2(U.'login');
					}

                }else{
                    r2(U.'accounts/change-password','e',$_L['Incorrect_Current_Password']);
                }
            }else{
                r2(U.'accounts/change-password','e',$_L['Incorrect_Current_Password']);
            }
        }else{
            r2(U.'accounts/change-password','e',$_L['Incorrect_Current_Password']);
        }
        break;

    case 'profile':

        $id  = $_SESSION['uid'];
        $d = ORM::for_table('tbl_customers')->find_one($id);
        if($d){
            run_hook('customer_view_edit_profile'); #HOOK
            $ui->assign('d',$d);
            $ui->display('user-profile.tpl');
        }else{
            r2(U . 'accounts/users', 'e', $_L['Account_Not_Found']);
        }
        break;

    case 'edit-profile-post':
        $fullname = _post('fullname');
        $address = _post('address');
        $phonenumber = _post('phonenumber');
        run_hook('customer_edit_profile'); #HOOK
        $msg = '';
        if(Validator::Length($fullname,31,2) == false){
            $msg .= 'Full Name should be between 3 to 30 characters'. '<br>';
        }
		if(Validator::UnsignedNumber($phonenumber) == false){
			$msg .= 'Phone Number must be a number'. '<br>';
		}

        $id = _post('id');
        $d = ORM::for_table('tbl_customers')->find_one($id);
        if($d){
        }else{
            $msg .= $_L['Data_Not_Found']. '<br>';
        }

        if($msg == ''){
            $d->fullname = $fullname;
			$d->address = $address;
			$d->phonenumber = $phonenumber;
            $d->save();

			_log('['.$user['username'].']: '.$_L['User_Updated_Successfully'],'User',$user['id']);
            r2(U . 'accounts/profile', 's', $_L['User_Updated_Successfully']);
        }else{
            r2(U . 'accounts/profile', 'e', $msg);
        }
        break;

    default:
        echo 'action not defined';
}