try {
/**
* Pobieranie wszystkich informacji o użytkowniku z dołączeniem tabeli group
*/
$sql = "SELECT *, DATE_FORMAT(created, '%d.%m.%Y') AS created from _users JOIN _groups on _users.gid = _groups.gid WHERE _users.uid=:uid";
$query = $dbh->prepare($sql);
$query->bindValue(':uid', $uid);
$query->execute();
$profile = $query->fetch(PDO::FETCH_ASSOC);
$uid = $profile['uid'];
$u_404 = 0 ;
// Zmiana hasła
if (isset($_POST['new-pass1'])) {
$validation = true;
$newpass = filter_input(INPUT_POST, 'new-pass', FILTER_SANITIZE_STRING);
$newpass1 = filter_input(INPUT_POST, 'new-pass1', FILTER_SANITIZE_STRING);
if ($newpass != $newpass1) {
$validation = false;
$_SESSION['changepass-error'] = "Podane hasła się od siebie różnią !";
echo '<script>window.location.href = "?p=profile&uid=.'.$uid.'.&changepass=0"</script>';
}
if ((strlen($newpass)<8) || (strlen($newpass)>20)) {
$validation = false;
$_SESSION['changepass-error'] = "Hasło musi posiadać od 8 do 20 znaków!";
echo '<script>window.location.href = "?p=profile&uid='.$uid.'&changepass=0"</script>';
}
$pass_hash = password_hash($newpass1, PASSWORD_DEFAULT);
if ($validation == true) {
try {
$query = $dbh->prepare('UPDATE `users` SET `password`=:password WHERE `name`=:name');
$query->bindValue(':name', $name);
$query->bindValue(':password', $pass_hash);
$query->execute();
$_SESSION['changepass'] = "Zmiana hasła udana";
echo '<script>window.location.href = "?p=profile&uid='.$uid.'&changepass=1"</script>';
} catch (PDOException $error) {
exit('Zmiana hasła nie udana. Database error' . $error->getMessage());
}
}
} // Zmiana emaila
elseif (isset($_POST['old-email']) && isset($_POST['new-email'])) {
$validation = true;
$email = filter_input(INPUT_POST, 'old-email', FILTER_VALIDATE_EMAIL);
$email = filter_var($email, FILTER_SANITIZE_EMAIL);
$email1 = filter_input(INPUT_POST, 'new-email', FILTER_VALIDATE_EMAIL);
$email1 = filter_var($email1, FILTER_SANITIZE_EMAIL);
if (empty($email) || empty($email1)) {
$validation = false;
$_SESSION['changeemail-error'] = "Twój email nie jest poprawny !";
echo '<script>window.location.href = "?p=profile&uid='.$uid.'&changeemail=0"</script>';
}
try {
$query = $dbh->prepare('SELECT * FROM users WHERE email=:email1');
$query->bindValue(':email1', $email1, PDO::PARAM_STR);
$query->execute();
$Checkemail = $query->fetchColumn();
if ($Checkemail > 0) {
$validation = false;
$_SESSION['changeemail-error'] = 'Email jest już zajęty';
echo '<script>window.location.href = "?p=profile&uid='.$uid.'&changeemail=0"</script>';
}
if ($validation == true) {
$query = $db->prepare('UPDATE `users` SET `email`=:email1 WHERE `name`=:name');
$query->bindValue(':name', $name);
$query->bindValue(':email1', $email1);
$query->execute();
$_SESSION['changeemail'] = "Zmiana emaila udana";
echo '<script>window.location.href = "?p=profile&uid='.$uid.'&changeemail=1"</script>';
}
} catch (PDOException $error) {
exit('Zmiana emaila nie udana. Database error' . $error->getMessage());
}
}
$adm_info = "Jesteś Administratorem i możesz edytować użytkowników";
$smarty->assign('name', $profile['name']);
$smarty->assign('uid', $profile['uid']);
$smarty->assign('created', $profile['created']);
$smarty->assign('uid1', $uid1);
$smarty->assign('email', $profile['email']);
$smarty->assign('adm_info', $adm_info);
$smarty->assign('gid', $profile['gid']);
$smarty->assign('u_404', $u_404);
$smarty->assign('avatar', $profile['avatar']);
$smarty->display("profile.tpl");
} catch (PDOException $error) {
exit($error->getMessage());
}
...