hcuProfilePwd.prg

<?php
  /*
   * File: hcuProfilePwd
   *
   * Purpose:  Handle the client-side updating of the user's password info.
   *
   */

  // ** SET SCRIPT LEVEL VARIABLES
  $serviceShowInfo = true;
  $serviceLoadMenu = true;
  $serviceShowMenu = true;

  // ** INCLUDE MAIN GLOBAL SCRIPT -- Handles security / global variable values
  require_once(dirname(__FILE__) . '/../library/hcuService.i');

  /*
   * ** CHECK USER FEATURE PERMISSIONS **
   * NOTE: DOES NOT RETURN ON FAILURE
   */
  PermCheckFeatureScreen($dbh, $HB_ENV, $MC, FEATURE_BASIC);

  // ** INSERT BUSINESS LOGIC FOR THIS FORM


  // ** SET VARIABLES FOR WEBSITE FLAGS

  // ** INCLUDE PRE CONTENT SCRIPT
  require_once(dirname(__FILE__) . '/../includes/hcuPreContent.i');

  /*
   * ** START CONTENT
   */
  // allowed special characters (this needs to also match in hucProfile.data and hcuProfileRequire)
  $specialCharacters = Get_PwdSpecialCharacters();

  // read the password requirements, if any
  $pwdConfigAry = Get_PwdRules( $dbh, $HB_ENV );

  // flag if using password requirements
  $hasPwdRequirements = 1;
  if ( $hasPwdRequirements ) {
    $pwdConfigJSON = json_encode( $pwdConfigAry );
  } else {
    $pwdConfigJSON = "{}";
  }

  // set up the messages regarding what is being checked
  $pwdRequirements = array();
  if (HCU_array_key_value("len", $pwdConfigAry) > 0) {
    $text = ( $pwdConfigAry["len"] > 1 ) ? $MC->msg("Characters", HCU_DISPLAY_AS_HTML) : $MC->msg("Character", HCU_DISPLAY_AS_HTML);
    $pwdRequirements[] = array( "which"=>"len", "text"=>"{$pwdConfigAry["len"]} {$text}" );
  }
  if (HCU_array_key_value("upper", $pwdConfigAry) > 0) {
    $text = ( $pwdConfigAry["upper"] > 1 ) ? $MC->msg("UPPER letters", HCU_DISPLAY_AS_HTML) : $MC->msg("UPPER letter", HCU_DISPLAY_AS_HTML);
    $pwdRequirements[] = array( "which"=>"upper", "text"=>"{$pwdConfigAry["upper"]} {$text}" );
  }
  if (HCU_array_key_value("lower", $pwdConfigAry) > 0) {
    $text = ( $pwdConfigAry["lower"] > 1 ) ? $MC->msg("lower letters", HCU_DISPLAY_AS_HTML) : $MC->msg("lower letter", HCU_DISPLAY_AS_HTML);
    $pwdRequirements[] = array( "which"=>"lower", "text"=>"{$pwdConfigAry["lower"]} {$text}" );
  }
  if (HCU_array_key_value("letter", $pwdConfigAry) > 0) {
    // there is always only "1" letter, since that is a legacy default
    $text = $MC->msg("Letter", HCU_DISPLAY_AS_HTML);
    $pwdRequirements[] = array( "which"=>"letter", "text"=>"{$pwdConfigAry["letter"]} {$text}" );
  }
  if (HCU_array_key_value("spec", $pwdConfigAry) > 0) {
    $text = ( $pwdConfigAry["spec"] > 1 ) ? $MC->msg("Special characters", HCU_DISPLAY_AS_HTML) : $MC->msg("Special character", HCU_DISPLAY_AS_HTML);
    $pwdRequirements[] = array( "which"=>"spec", "text"=>"{$pwdConfigAry["spec"]} {$text} <span class='fa fa-question-circle-o' style='color: #333' id='specialTip'></span>" );
  }
  if (HCU_array_key_value("digit", $pwdConfigAry) > 0) {
    $text = ( $pwdConfigAry["digit"] > 1 ) ? $MC->msg("Numbers", HCU_DISPLAY_AS_HTML) : $MC->msg("Number", HCU_DISPLAY_AS_HTML);
    $pwdRequirements[] = array( "which"=>"digit", "text"=>"{$pwdConfigAry["digit"]} {$text}" );
  }

  // figure out the password help doc
  $pwdHelpAry = Get_NoticeInfo($dbh, $HB_ENV, $MC, "D", "pwdRules", FALSE);
  $pwdHelpURL = "";

  if ( $pwdHelpAry["status"]["code"] == "000" && HCU_array_key_exists('0', $pwdHelpAry["notice"]) && HCU_array_key_exists('notice_id', $pwdHelpAry["notice"][0]) ) {
    $noticeOption = $pwdHelpAry['notice'][0];

    $noticeOptions = Array (
          'docsid'      => $noticeOption['notice_id'],
          'docstype'    => $noticeOption['notice_type'],
          'device'      => 'D',
          'noticeOnly'  => '1',
          'expireTime'  => mktime() + 86400
      );

    $encryptedDocDetails= HCU_PayloadEncode($HB_ENV['Cu'], $noticeOptions);

    // build the url encoded string
    $pwdHelpURL = $HB_ENV['homebankingpath'] . '/hcuViewNotice.prg?cu=' . $HB_ENV['cu'] . '&x=' . urlencode($encryptedDocDetails);
  }

  ?>
<script type="text/javascript">
function validateForm() {
  // this will validate the current password limit
  var formValid = $.homecuValidator.validate();

  // this will validate the new/confirm password limits
  var testStepThree = false;
  var testVal = $("#profilePasswordNew1").val();
  var testLength = testVal.length >= pwdRequirements['len'];

  var testUpper = RegExp("([A-Z].*){" + pwdRequirements['upper'] + "}");
  testUpper = testUpper.test(testVal);

  var testLower = RegExp("([a-z].*){" + pwdRequirements['lower'] + "}");
  testLower = testLower.test(testVal);

  var testDigit = RegExp("(\\d.*){" + pwdRequirements['digit'] + "}");
  testDigit = testDigit.test(testVal);

  var testSpecial = pwdSpecial.join("|");
  testSpecial = testSpecial.replace(/[-\/\\^$*+?.()|[\]{}]/g, '\\$&');
  testSpecial = RegExp("([" + testSpecial + "].*){" + pwdRequirements['spec'] + "}");
  testSpecial = testSpecial.test(testVal);

  var testLetter = testUpper && testLower;

  if (pwdRequirements['len'] > 0 && testLength == false) { testStepThree = false; }
  else if (pwdRequirements['upper'] > 0 && testUpper == false) { testStepThree = false; }
  else if (pwdRequirements['lower'] > 0 && testLower == false) { testStepThree = false; }
  else if (pwdRequirements['digit'] > 0 && testDigit == false) { testStepThree = false; }
  else if (pwdRequirements['spec'] > 0 && testSpecial == false) { testStepThree = false; }
  else if (pwdRequirements['letter'] > 0 && testLetter == false) { testStepThree = false; }
  else { testStepThree = true; }

  var stepThreeError = "<?php echo $MC->msg('New password requirements', HCU_DISPLAY_AS_HTML) ?>";
  var errors = $.homecuValidator.homecuKendoValidator.errors();

  // strip the first message if length is 0
  if (!testLength) {
    var index = $.inArray(stepThreeError, errors);
    if (index > -1) {
      errors.splice(index, 1);
    }
  }

  if (!testStepThree) {
    errors.push(stepThreeError);
    $.homecuValidator.displayMessage(errors, $.homecuValidator.settings.statusError);
  }

  return formValid && testStepThree;
}

function show_help()
{
  <?php
  if ( strlen( $pwdHelpURL ) > 0 ) {
  ?>
    ShowNotice( "<?php echo $pwdHelpURL ?>" );
  <?php
  }
  ?>
}

  var pwdRequirements = <?php echo $pwdConfigJSON; ?>;
  var pwdSpecial = <?php echo HCU_JsonEncode(explode(",", $specialCharacters )); ?>;
  $(document).ready(function() {

      // status will be shown in the default info location
      function ShowStatus( statusMessage ) {
        $.homecuValidator.settings.formStatusField = "formStatus";
        $.homecuValidator.settings.formInfoTitle = "";
        $.homecuValidator.displayMessage(statusMessage);
      }

      function ClearStatus( ) {
        $.homecuValidator.settings.formStatusField = "formStatus";
        $.homecuValidator.settings.formInfoTitle = "";
        $.homecuValidator.displayMessage(null);
      }

    $("#btnUpdate").click( function() {
      if ( validateForm() ) {
        var request = {
          action: "pwd_save",
          old: $("#profilePasswordCurr").val(),
          new1: $("#profilePasswordNew1").val(),
          new2: $("#profilePasswordNew2").val(),
          sawhints: "Y"
        };

      // use AJAX to update because it is difficult to use the datasource for a simple POST command
      $.ajax({
            url: "hcuProfile.data?cu=<?php echo $HB_ENV["cu"] ?>",
            type: "post",
            data: request,
            beforeSend: function( xhr ) {
              ShowWaitWindow();
            }
        })
        .done(function( data, textStatus, jqXHR ) {
          if ( data && data.homecuErrors ) {
            // show the error information
            $.homecuValidator.displayMessage(data.homecuErrors, $.homecuValidator.settings.statusError);
          } else {
            if ( data && data.homecuInfo && (data.homecuInfo.message.length > 0) ) {
              ShowStatus( data.homecuInfo.message );
            }


            // present the device key to the apps
            if ( data.homecuData &&
                 data.homecuData.homecuKey &&
                 (data.homecuData.homecuKey.length > 0) ) {
                var appInfo = JSON.stringify( { deviceKey: data.homecuData.homecuKey,
                                                newPassword: $("#profilePasswordNew1").val() } );

              <?php if ( $HB_ENV["platform"] == "ADA" ) :  ?>
                    AndroidController.notifyCommand("NEW_DEVICE_KEY", appInfo);
              <?php elseif ( $HB_ENV["platform"] == "APP" ) :  ?>
                    var postObject = {
                            body: {
                                cmd: "NEW_DEVICE_KEY",
                                params: appInfo
                            }
                        };
                    window.webkit.messageHandlers.interOp.postMessage(postObject);
              <?php endif ?>
            }

            // if no error, clear out the values
            $("#profilePasswordCurr").val("");
            $("#profilePasswordNew1").val("");
            $("#profilePasswordNew2").val("");

            // if no error reset requirements list
            $("#len .fa").removeClass("fa-check").addClass("fa-times");
            $("#len").css("color", "red");
            $("#upper .fa").removeClass("fa-check").addClass("fa-times");
            $("#upper").css("color", "red");
            $("#lower .fa").removeClass("fa-check").addClass("fa-times");
            $("#lower").css("color", "red");
            $("#letter .fa").removeClass("fa-check").addClass("fa-times");
            $("#letter").css("color", "red");
            $("#spec .fa:first").removeClass("fa-check").addClass("fa-times");
            $("#spec").css("color", "red");
            $("#digit .fa").removeClass("fa-check").addClass("fa-times");
            $("#digit").css("color", "red");

          <?php
            // let apps know we did an update to profile info
            if ( $HB_ENV["platform"] == "APP" || $HB_ENV["platform"] == "ADA" ) {
                $paramsForApps = array( "script" => "ProfilePwd" );
                $paramsJSON = HCU_JsonEncode($paramsForApps);
          ?>
                var appInfo = '<?php echo $paramsJSON; ?>';

                <?php if ( $HB_ENV["platform"] == "ADA" ) :  ?>
                      AndroidController.notifyCommand("PROFILE_UPDATE", appInfo);
                <?php elseif ( $HB_ENV["platform"] == "APP" ) :  ?>
                      var postObject = {
                              body: {
                                  cmd: "PROFILE_UPDATE",
                                  params: appInfo
                              }
                          };
                      window.webkit.messageHandlers.interOp.postMessage(postObject);
                <?php endif ?>
          <?php
            }
          ?>


          }
        })
        .fail(function(jqXHR, textStatus, errorThrown) {
          // show the error information
          $.homecuValidator.displayMessage(textStatus, $.homecuValidator.settings.statusError);
        })
        .always(function(jqXHR, textStatus, errorThrown) {
          // stop the progress bar
          CloseWaitWindow();
        });
      }
    });

    // set up some validation, using the default error location
    $.homecuValidator.setup({formValidate: "formProfile",
                             formErrorTitle: "<?php echo $MC->msg("Error Occurred", HCU_DISPLAY_AS_JS) ?>"});

    homecuTooltip.bind({
        reenterTip: "<?php echo $MC->msg("Tip Re-enter Password", HCU_DISPLAY_AS_JS); ?>",
        newTip1: "<?php echo $MC->msg( "New password requirements", HCU_DISPLAY_AS_JS ) . "<br />" . $MC->msg('Case Sensitive', HCU_DISPLAY_AS_JS); ?>",
        newTip2: "<?php echo $MC->msg("Enter NEW password again to confirm", HCU_DISPLAY_AS_JS); ?>"
      });

    function revertPassword() {
      $("#showPasswordText").val( "" );
      $("#showPasswordText").css( "display", "none" );
      $("#profilePasswordNew1").css( "display", "inline" );
    }

    $("#showPassword").click(function() {
      $("#showPasswordText").val( $("#profilePasswordNew1").val() )
      $("#profilePasswordNew1").css( "display", "none" );
      $("#showPasswordText").css( "display", "inline" );
      setTimeout(revertPassword, 1000);
    });

  <?php
    if ( $hasPwdRequirements ) {
  ?>

      homecuTooltip.bind({
        specialTip: "<?php echo $MC->msg("Special characters allowed", HCU_DISPLAY_AS_JS); ?>: <?php echo implode( " ", explode( ",", $specialCharacters ) ); ?>"
      });

      $("#profilePasswordNew1").keyup(function () {
        // see which requirements are passing or failing
        var testVal = $("#profilePasswordNew1").val();
        var testLength = false;
        var testUpper = false;
        var testLower = false;
        var testDigit = false;
        var testSpeciel = false;
        var testLetter = false;

        testLength = testVal.length >= pwdRequirements['len'];

        testUpper = RegExp("([A-Z].*){" + pwdRequirements['upper'] + "}");
        testUpper = testUpper.test(testVal);

        testLower = RegExp("([a-z].*){" + pwdRequirements['lower'] + "}");
        testLower = testLower.test(testVal);

        testDigit = RegExp("(\\d.*){" + pwdRequirements['digit'] + "}");
        testDigit = testDigit.test(testVal);

        testSpecial = pwdSpecial.join("|");
        testSpecial = testSpecial.replace(/[-\/\\^$*+?.()|[\]{}]/g, '\\$&');
        testSpecial = RegExp("([" + testSpecial + "].*){" + pwdRequirements['spec'] + "}");
        testSpecial = testSpecial.test(testVal);

        testLetter = testUpper && testLower;

        // test overal length requirement
        if (pwdRequirements["len"] > 0) {
          if ( testLength ) {
            $("#len .fa").removeClass("fa-times").addClass("fa-check");
            $("#len").css("color", "green");
          } else {
            $("#len .fa").removeClass("fa-check").addClass("fa-times");
            $("#len").css("color", "red");
          }
        }

        if ( pwdRequirements["upper"] > 0 ) {
          if ( testUpper ) {
            $("#upper .fa").removeClass("fa-times").addClass("fa-check");
            $("#upper").css("color", "green");
          } else {
            $("#upper .fa").removeClass("fa-check").addClass("fa-times");
            $("#upper").css("color", "red");
          }
        }

        if ( pwdRequirements["lower"] > 0 ) {
          if ( testLower ) {
            $("#lower .fa").removeClass("fa-times").addClass("fa-check");
            $("#lower").css("color", "green");
          } else {
            $("#lower .fa").removeClass("fa-check").addClass("fa-times");
            $("#lower").css("color", "red");
          }
        }

        if ( pwdRequirements["digit"] > 0 ) {
          if ( testDigit ) {
            $("#digit .fa").removeClass("fa-times").addClass("fa-check");
            $("#digit").css("color", "green");
          } else {
            $("#digit .fa").removeClass("fa-check").addClass("fa-times");
            $("#digit").css("color", "red");
          }
        }

        if ( pwdRequirements["spec"] > 0 ) {
          if ( testSpecial ) {
            $("#spec .fa:first").removeClass("fa-times").addClass("fa-check");
            $("#spec").css("color", "green");
          } else {
            $("#spec .fa:first").removeClass("fa-check").addClass("fa-times");
            $("#spec").css("color", "red");
          }
        }

        if ( pwdRequirements["letter"] > 0 ) {
          if ( testLetter ) {
            $("#letter .fa").removeClass("fa-times").addClass("fa-check");
            $("#letter").css("color", "green");
          } else {
            $("#letter .fa").removeClass("fa-check").addClass("fa-times");
            $("#letter").css("color", "red");
          }
        }
      });

  <?php
    }
  ?>

  });


</script>
<!-- STYLE CONTENT -->
<style type="text/css">
.hcuProfilePwdDiv {
  min-width: 300px;
  max-width: 700px;
  margin-left: 0px;
  margin-top: 15px;
}

.container-fluid-margin {
  margin: 15px;
}

.k-block > .k-header {
  white-space: normal;
  height: 100%;
}

.hcu-info-margin, .hcu-error-margin {
  margin: 15px 0;
}

.hcu-info-padding, .hcu-error-padding {
  padding: 15px;
}

.hcu-full-width {
  width: 100%;
}

/* top-bottom margin */
.hcu-container-margin {
  margin: 15px 0;
}

.hcu-no-padding {
  padding: 0;
}

.pwd-fail {color:red}
.pwd-pass {color: green}
</style>

<!-- HTML CONTENT -->
<div class="container-fluid hcuProfilePwdDiv">
  <div class="well well-sm">

    <!-- HEADER -->
    <div>
      <h3><?php echo $MC->msg('Change Password', HCU_DISPLAY_AS_HTML); ?></h3>
    </div>

    <!-- FORM ELEMENTS -->
    <form id="formProfile" name="formProfile">
      <fieldset>
        <div class="col-xs-12 hcu-container-margin">
          <label for="profilePasswordCurr" class="hcu-full-width">
            <span><?php echo $MC->msg('Re-enter Password', HCU_DISPLAY_AS_HTML); ?>: </span>
            <span class="fa fa-question-circle-o" id="reenterTip"></span>
          </label>

          <input type="password" name="profilePasswordCurr"
            id="profilePasswordCurr"
            class="k-textbox hcu-full-width"
            placeholder="<?php echo $MC->msg('Re-enter Password', HCU_DISPLAY_AS_HTML); ?>"
            data-required-msg="<?php echo $MC->msg('Invalid Authentication', HCU_DISPLAY_AS_HTML) ?>"
            required >

          <?php if ( strlen( $pwdHelpURL ) > 0 ) { ?>
            <div class="hcu-full-width">
              <br>
              <span><?php echo $MC->combo_msg('Password Hints Doc', HCU_DISPLAY_AS_HTML, "#link#", "javascript:show_help();"); ?></span>
            </div>
          <?php } ?>

        </div>
      </fieldset>

      <fieldset>
        <div class="col-xs-12 col-sm-6 hcu-container-margin">
          <label for="profilePasswordNew1" class="hcu-full-width">
            <span><?php echo $MC->msg('New Password', HCU_DISPLAY_AS_HTML); ?>:</span>
            <span class="fa fa-question-circle-o" id="newTip1"></span>
          </label>

          <input type="text" name="showPasswordText" id="showPasswordText" class="k-textbox hcu-full-width" style="display:none;">

          <input type="password" name="profilePasswordNew1"
            id="profilePasswordNew1"
            class="k-textbox hcu-full-width must_equal"
            placeholder="<?php echo $MC->msg('New Password', HCU_DISPLAY_AS_HTML); ?>"
            maxlength="20"
            homecu-minlen="6"
            homecu-maxlen="20"
            data-required-msg="<?php echo $MC->msg('New password requirements', HCU_DISPLAY_AS_HTML) ?>"
            data-homecuCustomMinLen-msg="<?php echo $MC->msg( "New password requirements", HCU_DISPLAY_AS_HTML) ?>"
            data-homecuCustomMaxLen-msg="<?php echo $MC->msg( "New password requirements", HCU_DISPLAY_AS_HTML) ?>"
            required >
        </div>

        <div class="col-xs-12 col-sm-6 hcu-container-margin">
          <label class="hcu-full-width hidden-xs">&nbsp;</label>

          <button type='button' id='showPassword' class='k-button'>
            <span><?php echo $MC->msg( "Show", HCU_DISPLAY_AS_HTML ); ?></span>
          </button>
        </div>
      </fieldset>

      <fieldset>
        <div class="col-xs-12 col-sm-6 hcu-container-margin">
          <label for="profilePasswordNew2">
            <span><?php echo $MC->msg('Confirm New Password', HCU_DISPLAY_AS_HTML); ?>: </span>
            <span class="fa fa-question-circle-o" id="newTip2"></span>
          </label>

          <input type="password" name="profilePasswordNew2"
            id="profilePasswordNew2"
            class="k-textbox hcu-full-width"
            placeholder="<?php echo $MC->msg('Confirm New Password', HCU_DISPLAY_AS_HTML); ?>"
            maxlength="20"
            homecu-minlen="6"
            homecu-maxlen="20"
            homecu-equals="must_equal"
            data-required-msg="<?php echo $MC->msg('New passwords do not match', HCU_DISPLAY_AS_HTML) ?>"
            data-homecuCustomEquals-msg="<?php echo $MC->msg('New passwords do not match', HCU_DISPLAY_AS_HTML) ?>"
            required>
        </div>

        <div class="col-xs-12 col-sm-6 hcu-container-margin">
          <label for="passRequirements">
            <span><?php echo $MC->msg("Password Requirements", HCU_DISPLAY_AS_HTML); ?>:</span>
          </label>

          <div class="k-block k-shadow">
            <?php
            for($i = 0; $i < count($pwdRequirements); $i++) {
              print "
              <span id='{$pwdRequirements[$i]["which"]}' style='color: red;'>
                <span class='fa fa-times'></span>
                <span>{$pwdRequirements[$i]["text"]}</span>
              </span><br />";
            }
            ?>
          </div>
        </div>
      </fieldset>

    </form>
  </div>
  <div class="hcu-template">
    <div class="hcu-edit-buttons k-state-default">
      &emsp;
      <a href="##" id="btnUpdate" class="k-button k-primary">
        <i class="fa fa-check fa-lg"></i><?php echo $MC->msg("Update", HCU_DISPLAY_AS_HTML); ?>
      </a>
    </div>
  </div>
</div>
<?php
  /*
   * ** END CONTENT
   */

  // ** INCLUDE POST CONTENT SCRIPT
  require_once(dirname(__FILE__) . '/../includes/hcuPostContent.i');

?>