diff --git a/html/compte.php b/html/compte.php index fb7abcc9..88cf5735 100644 --- a/html/compte.php +++ b/html/compte.php @@ -9,23 +9,27 @@ if(isset($_SESSION['userid']) == false) { } if(isset($_POST['delete_account'])) { - $bdd = connect($dbhost, $dbname, $dbuser, $dbpass); + $bdd = connect($dbhost, $dbname, $dbuser, $dbpass); $req = $bdd->prepare("DELETE FROM users WHERE ID = :id"); $req->bindParam(':id', $_SESSION['userid']); + if($req->execute()) { header("Location: logout.php"); exit(); } else { die("Erreur SQL"); } -} else if (isset($_POST['display_name']) && isset($_POST['email'])){ - $bdd = connect($dbhost, $dbname, $dbuser, $dbpass); - $req = $bdd->prepare("UPDATE users SET display_name = :display_name, email = :email WHERE ID = :userid"); - $req->bindParam(':display_name', $_SESSION['display_name']); - $req->bindParam(':email', $_SESSION['email']); +} else if (isset($_POST['display_name']) && isset($_POST['email'])) && isset($_POST['username']) { + + $bdd = connect($dbhost, $dbname, $dbuser, $dbpass); + $req = $bdd->prepare("UPDATE users SET display_name = :display_name, email = :email, username = :username WHERE ID = :userid"); + $req->bindParam(':display_name', htmlspecialchars($_POST['display_name'])); + $req->bindParam(':email', htmlspecialchars($_POST['email'])); + $req->bindParam(':username', htmlspecialchars($_POST['username'])); $req->bindParam(':userid', $_SESSION['userid']); + if($req->execute()) { $status = "Informations mises à jour"; } else { @@ -114,6 +118,7 @@ if(isset($_POST['delete_account'])) { "; echo "
"; + echo ""; echo ""; ?>