UCMverse/profile_script.php at master · KNXKO/UCMverse · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
<?php
error_reporting(-1);
ini_set('display_errors', 'On');

  $mysqli= new mysqli('localhost','root','','ucm_verse') or die($mysqli->connect_error);
     $table ='users';
     $p_table = 'posts';

     if(isset($_POST['submit'])){

       $file=$_FILES['picture'];
        $extensions=array('jpg','png','gif','jpeg');

        $file_ext = explode('.',$file['name']);

       // $msg = @$_POST['msg'];
       $user_id=@$_POST['user_id'];
       $name = @$_POST['name'];
       $vorname = @$_POST['vorname'];
       $email = @$_POST['email'];
       $birthday = @$_POST['birthday'];
       $picture=@$_POST['pic'];

       /* NEPOTREBNE $name=$file_ext[0];
        $name= preg_replace("!-!"," ",$name);
        $name= preg_replace("!_!"," ",$name);
        $name = ucfirst($name);*/

        $file_ext = end($file_ext);

        $result=$mysqli->query("SELECT * FROM $table WHERE usersId LIKE '%$user_id%' ") or die($mysqli->error);

        $data = $result->fetch_assoc();

        if($data['usersName']!=$name)
        {
          $mysqli->query("UPDATE IGNORE  $p_table  SET author_name='$name' WHERE author_user_id LIKE '%$user_id%'")  or die($mysqli->error);
        }
        if($data['usersLastname']!=$vorname)
        {
          $mysqli->query("UPDATE IGNORE  $p_table  SET author_last_name='$vorname' WHERE author_user_id LIKE '%$user_id%'")  or die($mysqli->error);
        }


        /*if (!in_array($file_ext,$extensions))
        {
            echo "$file_array[$i]['name'] - Invalid file extension!";
        }
        else{*/

        $img_dir='images/profiles/'.$file['name'];
        move_uploaded_file($file['tmp_name'],$img_dir);

        if($img_dir=='images/profiles/')
        {
          $sql = "UPDATE IGNORE $table SET usersName='$name',usersLastname='$vorname',usersEmail='$email',usersBdate='$birthday',usersImgdir='$picture' WHERE usersId='$user_id' ";
          $mysqli->query($sql) or die($mysqli->error);

        }
        else{
          $sql = "UPDATE IGNORE $table SET usersName='$name',usersLastname='$vorname',usersEmail='$email',usersBdate='$birthday',usersImgdir='$img_dir' WHERE usersId='$user_id' ";
        $mysqli->query($sql) or die($mysqli->error);

        $mysqli->query("UPDATE IGNORE  $p_table  SET author_photo_dir='$img_dir' WHERE author_user_id LIKE '%$user_id%'")  or die($mysqli->error);

        echo $file['name'].' - '.$phpFileUploadErrors[$file['error']];
        }


        /* echo '
<script type="text/javascript">
location.reload();
</script>';*/

      //  $page = $_SERVER['PHP_SELF'];


        //}
    //}
    header("location:profil.php");
}


?>