session_write_close();
require_once("common.php");
require_once("loggedinuser.php");
require_once("languages.php");
require_once("contenthandler.php");
session_start();
$loggedInUser = $_SESSION['LoggedInUser'];
if (!isset($loggedInUser) || ($loggedInUser == null)) {
die("Error: not logged in!");
}
if (!isset($_POST['realname']) && !isset($_POST['email']) &&
!isset($_POST['password1']) && !isset($_POST['password2'])) {
$db = getDBConnection();
$result = mysql_query("SELECT realname,email FROM VerifiedUsers WHERE UID=" . $loggedInUser->getUID(), $db);
if (!$result)
die("Error while retrieving user information!");
$row = mysql_fetch_row($result);
$realname = $row[ 0 ];
$email = $row[ 1 ];
?>
Edit user information
Edit Account
} else {
$realname = $_POST['realname'];
$email = $_POST['email'];
$password1 = $_POST['password1'];
$password2 = $_POST['password2'];
if (!isVarGood($realname, false) || !isVarGood($email, false) ||
!isVarGood($password1, true) || !isVarGood($password2, true)) {
die("Form variables invalid and/or incomplete!");
}
if (($password1 != "") && ($password1 != $password2))
die("Passwords do not match!");
$theQuery = "UPDATE VerifiedUsers SET realname='" . $realname .
"',email='" . $email . "'";
if ($password1 != "") {
$pwsalt = mt_rand();
settype($pwsalt, "string");
$pwhash = sha1($pwsalt . $password1);
settype($pwsalt, "integer");
$theQuery = $theQuery . ",pwsalt='" . $pwsalt .
"',pwhash='" . $pwhash . "'";
}
$theQuery = $theQuery . " WHERE UID=" . $loggedInUser->getUID();
//echo $theQuery . "
";
$db = getDBConnection();
$result = mysql_query($theQuery, $db);
if (!$result)
die("Error while updating user info!");
mysql_close($db);
echo "User information updated successfully.";
}
?>