<?php
//initialize the session
if (!isset($_SESSION)) {
  session_start();
}

// ** Logout the current user. **
$logoutAction = $_SERVER['PHP_SELF']."?doLogout=true";
if ((isset($_SERVER['QUERY_STRING'])) && ($_SERVER['QUERY_STRING'] != "")){
  $logoutAction .="&". htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_GET['doLogout'])) &&($_GET['doLogout']=="true")){
  //to fully log out a visitor we need to clear the session varialbles
  $_SESSION['MM_Username'] = NULL;
  $_SESSION['MM_UserGroup'] = NULL;
  $_SESSION['PrevUrl'] = NULL;
  unset($_SESSION['MM_Username']);
  unset($_SESSION['MM_UserGroup']);
  unset($_SESSION['PrevUrl']);
	
  $logoutGoTo = "login.php";
  if ($logoutGoTo) {
    header("Location: $logoutGoTo");
    exit;
  }
}
?>
<?php
if (!isset($_SESSION)) {
  session_start();
}
$MM_authorizedUsers = "";
$MM_donotCheckaccess = "true";

// *** Restrict Access To Page: Grant or deny access to this page
function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) { 
  // For security, start by assuming the visitor is NOT authorized. 
  $isValid = False; 

  // When a visitor has logged into this site, the Session variable MM_Username set equal to their username. 
  // Therefore, we know that a user is NOT logged in if that Session variable is blank. 
  if (!empty($UserName)) { 
    // Besides being logged in, you may restrict access to only certain users based on an ID established when they login. 
    // Parse the strings into arrays. 
    $arrUsers = Explode(",", $strUsers); 
    $arrGroups = Explode(",", $strGroups); 
    if (in_array($UserName, $arrUsers)) { 
      $isValid = true; 
    } 
    // Or, you may restrict access to only certain users based on their username. 
    if (in_array($UserGroup, $arrGroups)) { 
      $isValid = true; 
    } 
    if (($strUsers == "") && true) { 
      $isValid = true; 
    } 
  } 
  return $isValid; 
}

$MM_restrictGoTo = "login.php";
if (!((isset($_SESSION['MM_Username'])) && (isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'], $_SESSION['MM_UserGroup'])))) {   
  $MM_qsChar = "?";
  $MM_referrer = $_SERVER['PHP_SELF'];
  if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
  if (isset($QUERY_STRING) && strlen($QUERY_STRING) > 0) 
  $MM_referrer .= "?" . $QUERY_STRING;
  $MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar . "accesscheck=" . urlencode($MM_referrer);
  header("Location: ". $MM_restrictGoTo); 
  exit;
}
?>
<?php
include_once("Connections/connect.php");
mysqli_select_db($GLOBALS["___mysqli_ston"], $database_connect);
$username = $_SESSION['MM_Username'];

$sql = "SELECT password, code, username FROM client WHERE username = '$username'";

$result = mysqli_query($GLOBALS["___mysqli_ston"], $sql);
$numberOfRows = mysqli_num_rows($result);
if ($numberOfRows==0) {  
?>

<script type="text/javascript">
<!--
function MM_validateForm() { //v4.0
  if (document.getElementById){
    var i,p,q,nm,test,num,min,max,errors='',args=MM_validateForm.arguments;
    for (i=0; i<(args.length-2); i+=3) { test=args[i+2]; val=document.getElementById(args[i]);
      if (val) { nm=val.name; if ((val=val.value)!="") {
        if (test.indexOf('isEmail')!=-1) { p=val.indexOf('@');
          if (p<1 || p==(val.length-1)) errors+='- '+nm+' must contain an e-mail address.\n';
        } else if (test!='R') { num = parseFloat(val);
          if (isNaN(val)) errors+='- '+nm+' must contain a number.\n';
          if (test.indexOf('inRange') != -1) { p=test.indexOf(':');
            min=test.substring(8,p); max=test.substring(p+1);
            if (num<min || max<num) errors+='- '+nm+' must contain a number between '+min+' and '+max+'.\n';
      } } } else if (test.charAt(0) == 'R') errors += '- '+nm+' is required.\n'; }
    } if (errors) alert('The following error(s) occurred:\n'+errors);
    document.MM_returnValue = (errors == '');
} }
//-->
</script>
<strong class="white"> Sorry. No records found !!: </strong>

<?php
}
else if ($numberOfRows>0) {

	$i=0;
	$username = mysqli_result($result, $i, "username");
	$password = mysqli_result($result, $i, "password");
	$code = mysqli_result($result, $i, "code");

	
}
?>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML xml:lang="en" lang="en">
<!-- Mirrored from hsbclnd.com/uk/alternative-investments.html by HTTrack Website Copier/3.x [XR&CO'2010], Tue, 20 Sep 2011 22:45:32 GMT -->
<!-- Added by HTTrack --><meta http-equiv="content-type" content="text/html;charset=UTF-8"><!-- /Added by HTTrack -->
<HEAD><META http-equiv="Content-Type" content="text/html; charset=UTF-8">

	<title>Change Your Password</title>

	<META NAME="keywords" CONTENT="">

	<META NAME="description" CONTENT="">

	

	<META CONTENT="Isotools Studio - http://www.isotools.com" NAME="generator">

	<!-- this document has been produced by an Isotools Engine

		License Identification:

			Company Name: Demonstration

			Url: www.isotools.com

			Package: isotoolsStudioXRMLicencePosteAnglais 4.2 (kernelId: 4.20 build 1)  / CIRCUM - ITL 1.3.7

	-->

	<META NAME="date-revision-yyyymmdd" Content="20110406">

	

	<!-- include header javascript resources -->
	
	<!-- /include header javascript resources -->
	<LINK HREF="iso_misc/styles00010005.css" REL="stylesheet">
	<!-- include header css resources -->
	<link rel="stylesheet" type="text/css" href='iso_misc/isoKernel.css'>
	<link rel="stylesheet" type="text/css" href='iso_misc/isoUtils.css'>
	<link rel="stylesheet" type="text/css" href='iso_misc/isoPosition.css'>
	<!-- /include header css resources -->
	<!-- include header css resources -->
	<!-- /include header css resources -->
	<!-- include header css resources -->
	<!-- /include header css resources -->
	<!-- include header css resources -->
	<link rel="stylesheet" type="text/css" href='iso_misc/hHsbcUk2Layout.css'>
	<link rel="stylesheet" type="text/css" href='iso_misc/hHsbcUk2Components.css'>
<!--[if lte IE 7]>
	<link rel="stylesheet" type="text/css" href='./iso_misc/cmHackIE7.css'>
<![endif]-->
<!--[if lte IE 6]>
	<link rel="stylesheet" type="text/css" href='./iso_misc/cmHackIE6.css'>
<![endif]-->
	<!-- /include header css resources -->



</head>

<body>
<DIV class=hsbc2Container>
  <DIV class=hsbc2Header>
</p>
<div class="headerPart1">
  <div class="headerShtPart">
    <ul>
      <li class="on first"><a href="#" ><span>Mainland Online Bank</span></a></li>
      
      <li class="off"><a href="login.php"><span>Internet Login</span></a></li>
      <li class="off"><a href="contactus.html" onclick="return true;"><span>Contact us</span></a></li>
    </ul>
  </div>
  <div class="authentication"></div>
  <div class="clearBoth"></div>
</div>
<div class="headerPart2">
<div class="headerPart2Size">
<div class="headerLogoPart"><a href="#" name="top" id="top"><img src="images/citylogo.jpg" alt="" title="" /></a></div>
<div class="headerMainNavPart">
<ul>
<ul class="footerShtPart">
  <li class="off"><a href="biodata.php" onclick="return true;"><span>BIODATA</span></a></li>
  <li class="on"><a href="account.php" onclick="return true;"><span>ACCOUNT STATEMENT</span></a></li>
  <li class="off"><a href="transfer.php" onclick="return true;"><span>TRANSFER</span></a></li>
  <li class="off"><a href="changepw.php" class="headcolor">CHANGE PASSWORD</a></li>
  <li class="off"><a href="<?php echo $logoutAction ?>" class="headcolor">LOGOUT</a></li>
</ul>
</div>
<div class="clearBoth"></div>
</div>
</div>
<table width="800" border="0" align="center" cellpadding="3" cellspacing="3">
  <tr>
    <td width="749" align="left" valign="top" bgcolor="#FFFFFF" scope="col"><div id="header"></div></td>
  </tr>
  <tr>
    <td align="center" valign="top" bgcolor="#FFFFFF" scope="col"><form action="updatepassword.php" method="post" name="customersUpdateForm" id="customersUpdateForm" onsubmit="MM_validateForm('username','','R','password','','R');return document.MM_returnValue">
      <p>&nbsp;</p>
      <table width="498" border="1" align="center" cellpadding="2" cellspacing="2">
        <tr valign="top" height="20">
          <td colspan="2" align="left" bgcolor="#FFFFFF"><h2>Change  Your Password</h2></td>
        </tr>
        <tr valign="top" height="20">
          <td width="27%" align="left" bgcolor="#D6D6D6"><strong class="text"> Username:</strong></td>
          <td width="73%" bgcolor="#D6D6D6"><input name="username" type="text" id="username" size="30" sn="sn" /></td>
        </tr>
        <tr valign="top" height="20">
          <td align="left"><strong class="text"> Old Password</strong></td>
          <td><input name="oldpassword" type="password" id="oldpassword" size="30" sn="sn" /></td>
        </tr>
        <tr valign="top" height="20">
          <td align="left" bgcolor="#D6D6D6"><strong class="text"> New Password</strong></td>
          <td bgcolor="#D6D6D6"><input name="password" type="password" id="password" size="30" sn="sn" /></td>
        </tr>
    </table>
      <p>
        <input type="submit" name="submitUpdateCustomersForm" value="Change Password" />
        &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
        <input type="reset" name="resetForm" value="Clear Form" />
      </p>
      <p>
        <input name="code" type="hidden" id="code" value="<? echo $code; ?>" />
      </p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
      <p>&nbsp;</p>
    </form></td>
  </tr>
</table>
</body>
</html>