-
Notifications
You must be signed in to change notification settings - Fork 0
/
change_adress.php
47 lines (43 loc) · 1.84 KB
/
change_adress.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
<?php
session_start();
if(isset($_POST['password'])){
$password = $_POST['password'];
$new_city = $_POST['new_city'];
$new_street = $_POST['new_street'];
$new_street_number = $_POST['new_street_number'];
$new_post_code = $_POST['new_post_code'];
require_once "connect.php";
$connection = @new mysqli($db_host, $db_user, $db_password, $db_name);
$connection->set_charset('utf8');
if ($connection->connect_errno != 0) {
$_SESSION['change_adress_i'] = "Wystąpił błąd";
} else {
$sql = "SELECT password, id FROM users WHERE id=".$_SESSION['id'];
$result = mysqli_query($connection, $sql);
if (!$result || is_null($password) || is_null($new_city) || is_null($new_street) || is_null($new_street_number) || is_null($new_post_code)) {
$_SESSION['change_adress_i'] = "Wystąpił błąd";
header("Location:" . $_SESSION['last_page']);
$connection->close();
} else {
$row = mysqli_fetch_assoc($result);
if(password_verify($password, $row['password'])){
$sql = "UPDATE users SET city = '".$new_city."', street='".$new_street."', street_number=".$new_street_number.", post_code='".$new_post_code."' WHERE id = ".$row['id'];
$connection -> query($sql);
$_SESSION['change_adress_i'] = "Zmieniono adres";
header('Location:'.$_SESSION['last_page']);
$connection -> close();
} else {
$_SESSION['change_adress_i'] = "Złe hasło";
header('Location:'.$_SESSION['last_page']);
$connection -> close();
}
}
}
} else {
$_SESSION['change_adress_i'] = "Wystąpił błąd";
if(isset($_SESSION["last_page"]))
header('Location:'.$_SESSION['last_page']);
else
header("Location: index.php");
}
?>