124 |
125 |
157 |
158 |
159 |
160 |
161 |
--------------------------------------------------------------------------------
/bookstore/edituser.php:
--------------------------------------------------------------------------------
1 | connect_error) {
22 | die("Connection failed: " . $conn->connect_error);
23 | }
24 |
25 | $sql = "USE bookstore";
26 | $conn->query($sql);
27 |
28 | $sql = "SELECT users.UserName, users.Password, customer.CustomerName, customer.CustomerIC, customer.CustomerEmail, customer.CustomerPhone, customer.CustomerGender, customer.CustomerAddress
29 | FROM users, customer
30 | WHERE users.UserID = customer.UserID AND users.UserID = ".$_SESSION['id']."";
31 | $result = $conn->query($sql);
32 | while($row = $result->fetch_assoc()){
33 | $oUserName = $row['UserName'];
34 | $oPassword = $row['Password'];
35 | $oName = $row['CustomerName'];
36 | $oIC = $row['CustomerIC'];
37 | $oEmail = $row['CustomerEmail'];
38 | $oPhone = $row['CustomerPhone'];
39 | $oAddress = $row['CustomerAddress'];
40 | }
41 |
42 |
43 | if ($_SERVER["REQUEST_METHOD"] == "POST") {
44 | if (empty($_POST["name"])) {
45 | $nameErr = "Please enter your name";
46 | }else{
47 | if (!preg_match("/^[a-zA-Z ]*$/", $name)){
48 | $nameErr = "Only letters and white space allowed";
49 | $name = "";
50 | }else{
51 | $name = $_POST['name'];
52 |
53 | if (empty($_POST["uname"])) {
54 | $usernameErr = "Please enter your Username";
55 | $uname = "";
56 | }else{
57 | $uname = $_POST['uname'];
58 |
59 | if (empty($_POST["upassword"])) {
60 | $passwordErr = "Please enter your Password";
61 | $upassword = "";
62 | }else{
63 | $upassword = $_POST['upassword'];
64 |
65 | if (empty($_POST["ic"])){
66 | $icErr = "Please enter your IC number";
67 | }else{
68 | if(!preg_match("/^[0-9 -]*$/", $ic)){
69 | $icErr = "Please enter a valid IC number";
70 | $ic = "";
71 | }else{
72 | $ic = $_POST['ic'];
73 |
74 | if (empty($_POST["email"])){
75 | $emailErr = "Please enter your email address";
76 | }else{
77 | if (filter_var($email, FILTER_VALIDATE_EMAIL)){
78 | $emailErr = "Invalid email format";
79 | $email = "";
80 | }else{
81 | $email = $_POST['email'];
82 |
83 | if (empty($_POST["contact"])){
84 | $contactErr = "Please enter your phone number";
85 | }else{
86 | if(!preg_match("/^[0-9 -]*$/", $contact)){
87 | $contactErr = "Please enter a valid phone number";
88 | $contact = "";
89 | }else{
90 | $contact = $_POST['contact'];
91 |
92 | if (empty($_POST["gender"])){
93 | $genderErr = "* Gender is required!";
94 | $gender = "";
95 | }else{
96 | $gender = $_POST['gender'];
97 |
98 | if (empty($_POST["address"])){
99 | $addressErr = "Please enter your address";
100 | $address = "";
101 | }else{
102 | $address = $_POST['address'];
103 |
104 | $servername = "localhost";
105 | $username = "root";
106 | $password = "";
107 |
108 | $conn = new mysqli($servername, $username, $password);
109 |
110 | if ($conn->connect_error) {
111 | die("Connection failed: " . $conn->connect_error);
112 | }
113 |
114 | $sql = "USE bookstore";
115 | $conn->query($sql);
116 |
117 | $sql = "UPDATE users SET UserName = '".$uname."', Password = '".$upassword."' WHERE UserID = "
118 | .$_SESSION['id']."";
119 | $conn->query($sql);
120 |
121 | $sql = "UPDATE customer SET CustomerName = '".$name."', CustomerPhone = '".$contact."',
122 | CustomerIC = '".$ic."', CustomerEmail = '".$email."', CustomerAddress = '".$address."',
123 | CustomerGender = '".$gender."'";
124 | $conn->query($sql);
125 |
126 | header("Location:index.php");
127 | }
128 | }
129 | }
130 | }
131 | }
132 | }
133 | }
134 | }
135 | }
136 | }
137 | }
138 | }
139 | }
140 | function test_input($data){
141 | $data = trim($data);
142 | $data = stripcslashes($data);
143 | $data = htmlspecialchars($data);
144 | return $data;
145 | }
146 | ?>
147 |
148 | 7 |