Outfitters.com/update_user.php at main · CodeDevvv/Outfitters.com · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
<?php
include 'components/connect.php';

session_start();

if (isset($_SESSION['user_id'])) {
    $user_id = $_SESSION['user_id'];
} else {
    $user_id = '';
}

if (isset($_POST['submit'])) {

    $name = $_POST['name'];
    $name = filter_var($name, FILTER_SANITIZE_STRING);
    $email = $_POST['email'];
    $email = filter_var($email, FILTER_SANITIZE_STRING);

    // Update profile details
    $update_profile = $conn->prepare("UPDATE `users` SET name = ?, email = ? WHERE id = ?");
    $update_profile->execute([$name, $email, $user_id]);

    $empty_pass = 'da39a3ee5e6b4b0d3255bfef95601890afd80709';  // Empty hash value for comparison
    $prev_pass = $_POST['prev_pass'];  // Previous password from hidden input
    $old_pass = $_POST['old_pass'];    // User input for old password
    $new_pass = $_POST['new_pass'];    // New password
    $cpass = $_POST['cpass'];          // Confirm new password

    // Retrieve the plain text password for the current user from the database
    $select_user = $conn->prepare("SELECT password FROM `users` WHERE id = ?");
    $select_user->execute([$user_id]);
    $fetch_user = $select_user->fetch(PDO::FETCH_ASSOC);
    $stored_password = $fetch_user['password'];

    // Password validation without hashing
    if (empty($old_pass)) {
        $message[] = 'Please Enter Old Password!';
    } elseif ($old_pass != $stored_password) {
        $message[] = 'Old Password Not Matched!';
    } elseif ($new_pass != $cpass) {
        $message[] = 'Confirm Password Not Matched!';
    } else {
        if ($new_pass != $empty_pass) {
            if (strlen($new_pass) < 8) {
                $message[] = 'New Password must be at least 8 characters long!';
            } else {
                // Update the new plain text password in the database
                $update_user_pass = $conn->prepare("UPDATE `users` SET password = ? WHERE id = ?");
                $update_user_pass->execute([$new_pass, $user_id]);
                $message[] = 'Password Updated Successfully!';
            }
        } else {
            $message[] = 'Please Enter A New Password!';
        }
    }
}
?>


<!DOCTYPE html>
<html lang="en">

    <head>
        <meta charset="UTF-8">
        <meta http-equiv="X-UA-Compatible" content="IE=edge">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>register</title>

        <!-- font awesome cdn link  -->
        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css">

        <!-- custom css file link  -->
        <link rel="stylesheet" href="css/style.css">

    </head>

    <body>

        <?php include 'components/user_header.php'; ?>

        <section class="form-container">

            <form action="" method="post">
                <h3>update now</h3>
                <input type="hidden" name="prev_pass" value="<?= $fetch_profile["password"]; ?>">
                <input type="text" name="name" required placeholder="Enter your username" maxlength="20" class="box"
                    value="<?= $fetch_profile["name"]; ?>">
                <input type="email" name="email" required placeholder="Enter your email" maxlength="50" class="box"
                    oninput="this.value = this.value.replace(/\s/g, '')" value="<?= $fetch_profile["email"]; ?>">
                <input type="password" name="old_pass" placeholder="Enter your old password" maxlength="20" class="box"
                    oninput="this.value = this.value.replace(/\s/g, '')">
                <input type="password" name="new_pass" placeholder="Enter your new password" maxlength="20" class="box"
                    oninput="this.value = this.value.replace(/\s/g, '')">
                <input type="password" name="cpass" placeholder="Confirm your new password" maxlength="20" class="box"
                    oninput="this.value = this.value.replace(/\s/g, '')">
                <input type="submit" value="update now" class="btn" name="submit">
            </form>

        </section>


        <?php include 'components/footer.php'; ?>

        <script src="js/script.js"></script>

    </body>

</html>