diff options
| author | citizenz7 <citizenz7@protonmail.com> | 2017-04-20 18:50:55 +0200 |
|---|---|---|
| committer | citizenz7 <citizenz7@protonmail.com> | 2017-04-20 18:50:55 +0200 |
| commit | 5fd9fa480f302902328b81f912dd67ce378284f8 (patch) | |
| tree | 66234843ae2857fda12442e4f7577c527d48977c /Html/admin/edit-user.php | |
| parent | ebe731862c7c741171138b1083906f391fc35aff (diff) | |
| download | freetorrent-5fd9fa480f302902328b81f912dd67ce378284f8.tar.xz freetorrent-5fd9fa480f302902328b81f912dd67ce378284f8.zip | |
V.1.4.6
Diffstat (limited to 'Html/admin/edit-user.php')
| -rw-r--r-- | Html/admin/edit-user.php | 166 |
1 files changed, 166 insertions, 0 deletions
diff --git a/Html/admin/edit-user.php b/Html/admin/edit-user.php new file mode 100644 index 0000000..cc4dab9 --- /dev/null +++ b/Html/admin/edit-user.php @@ -0,0 +1,166 @@ +<?php +//include config +require_once('../includes/config.php'); + +//Si pas connecté OU si le membre n'est pas admin, pas de connexion à l'espace d'admin --> retour sur la page login +if(!$user->is_logged_in()) { + header('Location: login.php'); +} + +if(isset($_SESSION['userid'])) { + if($_SESSION['userid'] != 1) { + header('Location: '.SITEURL); + } +} + +// titre de la page +$pagetitle = 'Admin : édition du profil de '.$_SESSION['username']; +require('../includes/header.php'); +?> + +<body> +<div id="container"> + + <?php + require('../includes/header-logo.php'); + require('../includes/nav.php'); + ?> + + <div id="body"> + <div id="content"> + + <?php include('menu.php');?> + <p><a href="users.php">Liste des membres</a></p> + + <h2>Edition du profil membre</h2> + + + <?php + + //if form has been submitted process it + if(isset($_POST['submit'])){ + + //collect form data + extract($_POST); + + //very basic validation + if($username ==''){ + $error[] = 'Veuillez entrer un pseudo.'; + } + + if( strlen($password) > 0){ + + if($password ==''){ + $error[] = 'Veuillez entrer un mot de passe.'; + } + + if($passwordConfirm ==''){ + $error[] = 'Veuillez confirmer le mot de passe.'; + } + + if($password != $passwordConfirm){ + $error[] = 'Les mots de passe ne concordent pas.'; + } + + } + + + if($email ==''){ + $error[] = 'Veuillez entrer une adresse e-mail.'; + } + if(!isset($error)){ + + try { + + if(isset($password)){ + + $hashedpassword = $user->password_hash($password, PASSWORD_BCRYPT); + + //update into database + $stmt = $db->prepare('UPDATE blog_members SET username = :username, password = :password, email = :email WHERE memberID = :memberID') ; + $stmt->execute(array( + ':username' => $username, + ':password' => $hashedpassword, + ':email' => $email, + ':memberID' => $memberID + )); + + + } else { + + //update database + $stmt = $db->prepare('UPDATE blog_members SET username = :username, email = :email WHERE memberID = :memberID') ; + $stmt->execute(array( + ':username' => $username, + ':email' => $email, + ':memberID' => $memberID + )); + + } + + + //redirect to index page + header('Location: users.php?action=updated'); + exit; + + } catch(PDOException $e) { + echo $e->getMessage(); + } + + } + + } + + ?> + <?php + //check for any errors + if(isset($error)){ + foreach($error as $error){ + echo $error.'<br />'; + } + } + + try { + + $stmt = $db->prepare('SELECT memberID, username, email FROM blog_members WHERE memberID = :memberID') ; + $stmt->execute(array(':memberID' => $_GET['id'])); + $row = $stmt->fetch(); + + } catch(PDOException $e) { + echo $e->getMessage(); + } + + ?> + + <form action='' method='post'> + <input type='hidden' name='memberID' value='<?php echo $row['memberID'];?>'> + + <p><label>Pseudo</label><br /> + <input type='text' name='username' value='<?php echo $row['username'];?>'></p> + + <p><label>Mot de passe (seulement en cas de changement)</label><br /> + <input type='password' name='password' value=''></p> + + <p><label>Confirmez le mot de passe</label><br /> + <input type='password' name='passwordConfirm' value=''></p> + + <p><label>E-mail</label><br /> + <input type='text' name='email' value='<?php echo $row['email'];?>'></p> + + <p><input type='submit' class="searchsubmit formbutton" name='submit' value='Mise à jour du profil membre'></p> + + </form> + </div> + + <?php require('../sidebar.php'); ?> + + <div class="clear"></div> + </div> +</div> + +<div id="footer"> + <?php require('../includes/footer.php'); ?> +</div> + +</body> +</html> |