/***************************************************************************
 *  Copyright (C) 2003-2006 Polytechnique.org                              *
 *  http://opensource.polytechnique.org/                                   *
 *                                                                         *
 *  This program is free software; you can redistribute it and/or modify   *
 *  it under the terms of the GNU General Public License as published by   *
 *  the Free Software Foundation; either version 2 of the License, or      *
 *  (at your option) any later version.                                    *
 *                                                                         *
 *  This program is distributed in the hope that it will be useful,        *
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
 *  GNU General Public License for more details.                           *
 *                                                                         *
 *  You should have received a copy of the GNU General Public License      *
 *  along with this program; if not, write to the Free Software            *
 *  Foundation, Inc.,                                                      *
 *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
 ***************************************************************************/

document.write('<script language="javascript" src="{rel}/javascript/secure_hash.js.php"></script>');

{literal}
function EnCryptedResponse() {
    pw1 = document.forms.changepass.nouveau.value;
    pw2 = document.forms.changepass.nouveau2.value;
    if (pw1 != pw2) {
        alert ("\nErreur : les deux champs ne sont pas identiques !")
            return false;
        exit;
    }
    if (pw1.length < 6) {
        alert ("\nErreur : le nouveau mot de passe doit faire au moins 6 caractères !")
            return false;
        exit;
    }
    
    old_pass = hash_encrypt(document.forms.changepass.ancien.value);
    
    str = old_pass + ":" +
        document.forms.changepass.challenge.value;
    document.forms.changepass2.response.value = hash_encrypt(str);

    str = hash_xor(hash_encrypt(document.forms.changepass.nouveau.value), old_pass);
    document.forms.changepass2.response2.value = str;
    
    alert ("Le mot de passe que tu as rentré va être chiffré avant de nous parvenir par Internet ! Ainsi il ne circulera pas en clair.");
    document.forms.changepass2.submit();
    return true;
}
{/literal}