From af0ba28c58d84091ea43379104876a98857e3a8d Mon Sep 17 00:00:00 2001
From: Sky Johnson <skylearj@gmail.com>
Date: Wed, 27 Aug 2025 15:02:14 -0500
Subject: [PATCH] add change password

---
 data/control.json             |   2 +-
 data/dk.db                    | Bin 94208 -> 94208 bytes
 internal/actions/fight.go     |   2 --
 internal/routes/index.go      |  62 ++++++++++++++++++++++++++++++++++
 main.go                       |   2 ++
 templates/changepassword.html |  26 ++++++++++++++
 6 files changed, 91 insertions(+), 3 deletions(-)
 create mode 100644 templates/changepassword.html

diff --git a/data/control.json b/data/control.json
index 8ea3c81..8581af3 100644
--- a/data/control.json
+++ b/data/control.json
@@ -3,7 +3,7 @@
   "open": 1,
   "admin_email": "",
   "email_mode": "file",
-  "email_file_path": "data/emails.txt",
+  "email_file_path": "emails.txt",
   "smtp_host": "",
   "smtp_port": "587",
   "smtp_username": "",
diff --git a/data/dk.db b/data/dk.db
index 19f144262e6326124711ec8f5978de76ec63b4a3..c8e41cd8add5a647c1d0b4ad8215bb8d11aa79bc 100644
GIT binary patch
delta 433
zcmZXPzfS@&6vx|Aq&+yFfZ^0d7Q^8A1H>O2vT5RAf{sQ{M310gj!SS81_qoYkQjD1
z0Syd>xESNA(M=X%^dE4yXJU-;<+ZQ<=JWc#&G+s3zWs*Gj$9%RB?KSPg%{|+Cp<z4
z8c=P!{TZl~B4a*|5aN74d7w*@Z4_GvGfUc?$jZ4BW)P99NUjc=ZTC=7wikAAVXG4C
zDGDZ-F)V_M%9s+6tq4@MdnZe~XJj?)-^k?B5=bJ+@G~WhNZy#4jHlKTnyDuYf7Ce2
z7(q3p&Z}W{QC(2yD(3qg6?R_B<)>Dk`Wb;163$z~Z4JU9;ziR_V&h`y#CK(wamF}S
zILDY$hs(CF9cB}R>(}8cYh82!Px?4S5xl_zG@%AX$Uz)7Au7HUfKv~5AdHzpi8H2a
zdkN9ibTOfEE>mLNJPwQCf?&VIz#qc?kEna8rD4%UrP#4%q{LHokIf<63-L#5+}@Al
G<@GNkGG%xG

delta 244
zcmZp8z}oPDbpw-u#Cir!{!Rw|7yLK*FYxc=|H^-azmtCn|CG&w3i<q#JME>!m^rza
zB{|bF(=$qn85kJ2I7^FDi;6ezwD*|64dgTNl`!z@^ObBC6v*J4Tyk%>L8Bj|E`w;J
zzd8pm3kxR)2ct9xBN%WpGIDSL2}VvJ&A}nA&I<zklaJi3(3BNt^2}2R$uH02<mckz
z=MrRQXW|kLF3C*J_DM}F$w)0ya4gErFEZTpfJK3gk^d$G|4pD95ApLFF$y#20Wrv6
gj_Eh~8MV2X`PVV<-{3#QzYeHm0sr=O@{B<N0EuinGXMYp

diff --git a/internal/actions/fight.go b/internal/actions/fight.go
index f9066db..b8c9c5d 100644
--- a/internal/actions/fight.go
+++ b/internal/actions/fight.go
@@ -146,8 +146,6 @@ func HandleSpell(fight *fights.Fight, user *users.User, spellID int) *FightResul
 		}
 	}
 
-	fmt.Printf("new MP is %d\n", user.MP-spell.MP)
-
 	result := &FightResult{
 		UserUpdates: map[string]any{"mp": user.MP - spell.MP},
 	}
diff --git a/internal/routes/index.go b/internal/routes/index.go
index f8d306f..96948b3 100644
--- a/internal/routes/index.go
+++ b/internal/routes/index.go
@@ -10,6 +10,7 @@ import (
 	"strconv"
 
 	sushi "git.sharkk.net/Sharkk/Sushi"
+	"git.sharkk.net/Sharkk/Sushi/password"
 )
 
 func Index(ctx sushi.Ctx) {
@@ -135,3 +136,64 @@ func Teleport(ctx sushi.Ctx) {
 	sess.SetFlash("success", "You teleported to "+town.Name+" successfully!")
 	ctx.Redirect("/town")
 }
+
+func ShowChangePassword(ctx sushi.Ctx) {
+	components.RenderPage(ctx, "Change Password", "changepassword.html", nil)
+}
+
+func ChangePassword(ctx sushi.Ctx) {
+	sess := ctx.GetCurrentSession()
+	user := ctx.GetCurrentUser().(*users.User)
+
+	currentPassword := ctx.Form("p").String()
+	newPassword := ctx.Form("p2").String()
+	confirmPassword := ctx.Form("p3").String()
+
+	// Validate inputs
+	if currentPassword == "" || newPassword == "" || confirmPassword == "" {
+		sess.SetFlash("error", "All fields are required")
+		ctx.Redirect("/change-password")
+		return
+	}
+
+	if len(newPassword) < 6 {
+		sess.SetFlash("error", "New password must be at least 6 characters")
+		ctx.Redirect("/change-password")
+		return
+	}
+
+	if newPassword != confirmPassword {
+		sess.SetFlash("error", "New passwords do not match")
+		ctx.Redirect("/change-password")
+		return
+	}
+
+	// Verify current password
+	isValid, err := password.VerifyPassword(currentPassword, user.Password)
+	if err != nil {
+		sess.SetFlash("error", "Password verification failed")
+		ctx.Redirect("/change-password")
+		return
+	}
+	if !isValid {
+		sess.SetFlash("error", "Current password is incorrect")
+		ctx.Redirect("/change-password")
+		return
+	}
+
+	// Update password
+	err = database.Transaction(func() error {
+		return database.Update("users", map[string]any{
+			"password": password.HashPassword(newPassword),
+		}, "id", user.ID)
+	})
+
+	if err != nil {
+		sess.SetFlash("error", "Failed to update password")
+		ctx.Redirect("/change-password")
+		return
+	}
+
+	sess.SetFlash("success", "Password changed successfully!")
+	ctx.Redirect("/")
+}
diff --git a/main.go b/main.go
index f8870db..f63ec8f 100644
--- a/main.go
+++ b/main.go
@@ -180,6 +180,8 @@ func start(port string) error {
 	protected.Get("/explore", routes.Explore)
 	protected.Post("/move", routes.Move)
 	protected.Get("/teleport/:to", routes.Teleport)
+	protected.Get("/change-password", routes.ShowChangePassword)
+	protected.Post("/change-password", routes.ChangePassword)
 
 	routes.RegisterAuthRoutes(app)
 	routes.RegisterTownRoutes(app)
diff --git a/templates/changepassword.html b/templates/changepassword.html
new file mode 100644
index 0000000..36535a8
--- /dev/null
+++ b/templates/changepassword.html
@@ -0,0 +1,26 @@
+{include "layout.html"}
+
+{block "content"}
+<h1>Change Password</h1>
+
+<form class="standard mb-1" action="/change-password" method="post">
+	{csrf}
+
+	<div class="row">
+		<label for="p">Current Password</label>
+		<input id="p" class="text" type="password" name="p" required>
+	</div>
+
+	<div class="row">
+		<label for="p2">New Password</label>
+		<input id="p2" class="text" type="password" name="p2" required>
+		<label for="p3">Confirm New Password</label>
+		<input id="p3" class="text" type="password" name="p3" required>
+	</div>
+
+	<div class="actions">
+		<a href="/"><button class="btn" type="button">Never mind</button></a>
+		<button class="btn btn-primary" type="submit">Change Password</button>
+	</div>
+</form>
+{/block}