richard
/
blogartisanal


			
							123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115
							<?php session_start(); ?>
<!DOCTYPE html>
<html>
<head>
</head>
<body>
<center>
<section>
<?php

require_once('config.php');
require_once('verifications.php');
$page_name='Profile Modification';
include_once('top.php');

//récupération du formulaire
$email=formulaires($_POST['email']);
$pass_enc=formulaires($_POST['pass_enc']);
$new_pass=formulaires($_POST['new_pass']);
$new_pass2=formulaires($_POST['new_pass2']);

if(!$email)
   	{
?>

	E-mail inexisant.<br /><a href='profile.php' onClick='history.back()'>Back</a>
	</section>


</center>

</body>

</html>
	
<?php
	include_once('bottom.php');
	return FALSE;
   	}

if(isset($pass_enc))
	{
	if(!$new_pass || !$new_pass2 || strlen($new_pass) < 5)
	{
	?>
	
Your password or its confirmation is inexistant or your password is less than 5 characters<br /><a href="profile.php" onClick="history.back()">Back</a>
</section>


</center>

</body>

</html>
	
	
<?php
	include_once('bottom.php');
	return FALSE;
	}
if($new_pass!=$new_pass2)
	{
	?>
	Passwords don't match !<br /><a href="profile.php" onClick="history.back()">Back</a>
	</section>

</center>

</body>

</html>
<?php
	include_once('bottom.php');
	return FALSE;
	}
	$pass_enc=md5($pass_enc);
$reponse_pass=mysql_query("SELECT pass FROM user WHERE pass='$pass_enc' AND session='$session'") or die ('error : '.mysql_error());	//verification si mot de passe valide
$count_pass=mysql_num_rows($reponse_pass);
if($count_pass == 0)
	{
	?>
	
The old password is not correct.<br /><a href="profile.php" onClick="history.back()">Back</a>
</section>


</center>

</body>

</html>
	
	<?php
	include_once('bottom.php');
	return FALSE;
	}
	$new_pass=md5($new_pass);
	mysql_query("UPDATE user SET pass='$new_pass' WHERE session='$session'") or die ('error : '.mysql_error());
	}
mysql_query("UPDATE user SET email='$email' WHERE session='$session'") or die ('error : '.mysql_error());
echo"<div align=center>Your profile settings have been saved.<br /><a href='profile.php' onClick='history.back()'>Back</a></div>";
include_once('bottom.php');
?>

</section>


</center>

</body>

</html>