File size: 9.64Kb
<?php require_once('header.php'); ?>
<?php
if(isset($_POST['form1'])) {
if($_SESSION['user']['role'] == 'Super Admin') {
$valid = 1;
if(empty($_POST['full_name'])) {
$valid = 0;
$error_message .= "Имя не может быть пустым<br />";
}
if(empty($_POST['email'])) {
$valid = 0;
$error_message .= 'Адрес электронной почты не может быть пустым<br />';
} else {
if (filter_var($_POST['email'], FILTER_VALIDATE_EMAIL) === false) {
$valid = 0;
$error_message .= 'Электронный адрес должен быть действительным<br />';
} else {
// current email address that is in the database
$statement = $pdo->prepare("SELECT * FROM nrd_user WHERE id=?");
$statement->execute(array($_SESSION['user']['id']));
$result = $statement->fetchAll(PDO::FETCH_ASSOC);
foreach($result as $row) {
$current_email = $row['email'];
}
$statement = $pdo->prepare("SELECT * FROM nrd_user WHERE email=? and email!=?");
$statement->execute(array($_POST['email'],$current_email));
$total = $statement->rowCount();
if($total) {
$valid = 0;
$error_message .= 'Адрес электронной почты уже существует<br />';
}
}
}
if($valid == 1) {
$_SESSION['user']['full_name'] = $_POST['full_name'];
$_SESSION['user']['email'] = $_POST['email'];
// updating the database
$statement = $pdo->prepare("UPDATE nrd_user SET full_name=?, email=?, phone=? WHERE id=?");
$statement->execute(array($_POST['full_name'],$_POST['email'],$_POST['phone'],$_SESSION['user']['id']));
$success_message = 'Информация о пользователе успешно обновлена.';
}
}
else {
$_SESSION['user']['phone'] = $_POST['phone'];
// updating the database
$statement = $pdo->prepare("UPDATE nrd_user SET phone=? WHERE id=?");
$statement->execute(array($_POST['phone'],$_SESSION['user']['id']));
$success_message = 'Информация о пользователе успешно обновлена.';
}
}
if(isset($_POST['form2'])) {
$valid = 1;
$path = $_FILES['photo']['name'];
$path_tmp = $_FILES['photo']['tmp_name'];
if($path!='') {
$ext = pathinfo( $path, PATHINFO_EXTENSION );
$file_name = basename( $path, '.' . $ext );
if( $ext!='jpg' && $ext!='png' && $ext!='jpeg' && $ext!='gif' ) {
$valid = 0;
$error_message .= 'Вы должны загрузить файл jpg, jpeg, gif или png.<br />';
}
}
if($valid == 1) {
// removing the existing photo
if($_SESSION['user']['photo']!='') {
unlink('../assets/uploads/'.$_SESSION['user']['photo']);
}
// updating the data
$final_name = 'user-'.$_SESSION['user']['id'].'.'.$ext;
move_uploaded_file( $path_tmp, '../assets/uploads/'.$final_name );
$_SESSION['user']['photo'] = $final_name;
// updating the database
$statement = $pdo->prepare("UPDATE nrd_user SET photo=? WHERE id=?");
$statement->execute(array($final_name,$_SESSION['user']['id']));
$success_message = 'Фотография пользователя успешно обновлена.';
}
}
if(isset($_POST['form3'])) {
$valid = 1;
if( empty($_POST['password']) || empty($_POST['re_password']) ) {
$valid = 0;
$error_message .= "Пароль не может быть пустым<br />";
}
if( !empty($_POST['password']) && !empty($_POST['re_password']) ) {
if($_POST['password'] != $_POST['re_password']) {
$valid = 0;
$error_message .= "Пароли не соответствуют<br />";
}
}
if($valid == 1) {
$_SESSION['user']['password'] = md5($_POST['password']);
// updating the database
$statement = $pdo->prepare("UPDATE nrd_user SET password=? WHERE id=?");
$statement->execute(array(md5($_POST['password']),$_SESSION['user']['id']));
$success_message = 'Пароль пользователя успешно обновлен.';
}
}
?>
<section class="content-header">
<div class="content-header-left">
<h1>Изменение профиля</h1>
</div>
</section>
<?php
$statement = $pdo->prepare("SELECT * FROM nrd_user WHERE id=?");
$statement->execute(array($_SESSION['user']['id']));
$statement->rowCount();
$result = $statement->fetchAll(PDO::FETCH_ASSOC);
foreach ($result as $row) {
$full_name = $row['full_name'];
$email = $row['email'];
$phone = $row['phone'];
$photo = $row['photo'];
$status = $row['status'];
$role = $row['role'];
}
?>
<section class="content">
<div class="row">
<div class="col-md-12">
<div class="nav-tabs-custom">
<ul class="nav nav-tabs">
<li class="active"><a href="#tab_1" data-toggle="tab">Обновить информацию</a></li>
<li><a href="#tab_2" data-toggle="tab">Обновить фото</a></li>
<li><a href="#tab_3" data-toggle="tab">Обновить пароль</a></li>
</ul>
<div class="tab-content">
<div class="tab-pane active" id="tab_1">
<form class="form-horizontal" action="" method="post">
<div class="box box-info">
<div class="box-body">
<div class="form-group">
<label for="" class="col-sm-2 control-label">Имя <span>*</span></label>
<?php
if($_SESSION['user']['role'] == 'Super Admin') {
?>
<div class="col-sm-4">
<input type="text" class="form-control" name="full_name" value="<?php echo $full_name; ?>">
</div>
<?php
} else {
?>
<div class="col-sm-4" style="padding-top:7px;">
<?php echo $full_name; ?>
</div>
<?php
}
?>
</div>
<div class="form-group">
<label for="" class="col-sm-2 control-label">Существующая фотография</label>
<div class="col-sm-6" style="padding-top:6px;">
<img src="../assets/uploads/<?php echo $photo; ?>" class="existing-photo" width="140">
</div>
</div>
<div class="form-group">
<label for="" class="col-sm-2 control-label">Email <span>*</span></label>
<?php
if($_SESSION['user']['role'] == 'Super Admin') {
?>
<div class="col-sm-4">
<input type="email" class="form-control" name="email" value="<?php echo $email; ?>">
</div>
<?php
} else {
?>
<div class="col-sm-4" style="padding-top:7px;">
<?php echo $email; ?>
</div>
<?php
}
?>
</div>
<div class="form-group">
<label for="" class="col-sm-2 control-label">Телефон </label>
<div class="col-sm-4">
<input type="text" class="form-control" name="phone" value="<?php echo $phone; ?>">
</div>
</div>
<div class="form-group">
<label for="" class="col-sm-2 control-label">Должность <span>*</span></label>
<div class="col-sm-4" style="padding-top:7px;">
<?php echo $role; ?>
</div>
</div>
<div class="form-group">
<label for="" class="col-sm-2 control-label"></label>
<div class="col-sm-6">
<button type="submit" class="btn btn-success pull-left" name="form1">Обновить</button>
</div>
</div>
</div>
</div>
</form>
</div>
<div class="tab-pane" id="tab_2">
<form class="form-horizontal" action="" method="post" enctype="multipart/form-data">
<div class="box box-info">
<div class="box-body">
<div class="form-group">
<label for="" class="col-sm-2 control-label">Новое фото</label>
<div class="col-sm-6" style="padding-top:6px;">
<input type="file" name="photo">
</div>
</div>
<div class="form-group">
<label for="" class="col-sm-2 control-label"></label>
<div class="col-sm-6">
<button type="submit" class="btn btn-success pull-left" name="form2">Обновить</button>
</div>
</div>
</div>
</div>
</form>
</div>
<div class="tab-pane" id="tab_3">
<form class="form-horizontal" action="" method="post">
<div class="box box-info">
<div class="box-body">
<div class="form-group">
<label for="" class="col-sm-2 control-label">Пароль </label>
<div class="col-sm-4">
<input type="password" class="form-control" name="password">
</div>
</div>
<div class="form-group">
<label for="" class="col-sm-2 control-label">Повторите пароль </label>
<div class="col-sm-4">
<input type="password" class="form-control" name="re_password">
</div>
</div>
<div class="form-group">
<label for="" class="col-sm-2 control-label"></label>
<div class="col-sm-6">
<button type="submit" class="btn btn-success pull-left" name="form3">Обновить</button>
</div>
</div>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
</section>
<?php require_once('footer.php'); ?>