Changeset 240 for quests/Options.php

Timestamp:

Jan 17, 2008, 2:02:18 PM (17 years ago)

Author:

maron

Message:

Mrtě oprav

File:

• quests/Options.php (modified) (2 diffs)

quests/Options.php

@@ -6 +6 @@
     $User = @$_SESSION['User'];
 
-  if (array_key_exists('Email', $_GET)) {
-    $Email = $_GET['Email'];
-    
-    $Database->SQLCommand("UPDATE user SET Email = '$Email' WHERE user = '$User'");
-      echo 'Úprava nastavení probìhla v poøádku, Email: <b>'.$Email.'</b> U¾ivatel: <b>'.$User.'</b>';
+  if (array_key_exists('Email', $_POST)) {
+    $Email = $_POST['Email'];
+    $OldPass = $_POST['OldPass'];
+    $NewPass = $_POST['NewPass'];
+    $NewPass2 = $_POST['NewPass2'];
+
+    $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE ID = ".$_SESSION['UserID']));
+    if (($Line['pass'] == $OldPass) and ($NewPass == $NewPass2)) {
+      $Database->SQLCommand("UPDATE user SET pass = '$NewPass' WHERE ID = ".$_SESSION['UserID']);
+      echo 'Heslo zmìnìno!<br />';
+    } else echo '<br />Hesla se neshodují!<br />';
+    $Database->SQLCommand("UPDATE user SET Email = '$Email' WHERE ID = ".$_SESSION['UserID']);
+      echo 'Úprava nastavení probìhla v poøádku, Email: <b>'.$Email.'</b> U¾ivatel: <b>'.$User.'</b><br />';
+      WriteLog('Úprava nastavení!', 3);
   } else {
-    $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE user = '$User'"));    
+    $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE ID = ".$_SESSION['UserID']));    
 ?>
-  <form action="Options.php" method="get">
+  <form action="Options.php" method="post">
   <table>
     <tr>
@@ -21 +30 @@
     </tr>
     <tr>
-      <th><input type="submit" value="ulozit"></th>
+      <td>Pùvodní heslo: </td>
+      <td><input type="password" name="OldPass"></td>
+    </tr>
+    <tr>
+      <td>Nové heslo: </td>
+      <td><input type="password" name="NewPass"></td>
+    </tr>
+    <tr>
+      <td>Nové heslo pro potvrzení: </td>
+      <td><input type="password" name="NewPass2"></td>
+    </tr>
+    <tr>
+      <th><input type="submit" value="Ulo¾it"></th>
     </tr>
   </table>