<?php

include __DIR__.'/account.php';

/**
 * Updates the user password.
 **/
class ChangePassword extends Vn\Web\JsonRequest {
	const PARAMS = ['newPassword'];

	function run($db) {
		$newPassword = $_REQUEST['newPassword'];
		$oldPassword = $_REQUEST['oldPassword'];

		$db->query('CALL account.myUser_changePassword(#, #)',
			[$oldPassword, $newPassword]);
		Account::sync($db, $_SESSION['user'], $newPassword);
		return TRUE;
	}
}