');
foreach ($userResult as $user) {
$userPPURL = $user['profile_picture'] == NULL ? "https://abs.twimg.com/sticky/default_profile_images/default_profile_400x400.png" : $user['profile_picture'];
- userWidget($userPPURL, $user['display_name'], $user['username'], $user['certification'], $badges, $rootPageURL);
+ userWidget($userPPURL, $user['display_name'], $user['username'], $user['badge_svg'], $rootPageURL);
}
echo ('
');
}
diff --git a/html/settings/index.php b/html/settings/index.php
index 93d97098..9037f757 100755
--- a/html/settings/index.php
+++ b/html/settings/index.php
@@ -23,7 +23,7 @@ if (isset($_POST['username']) && isset($_POST['email'])) {
if($result && $result[0]['ID'] != $_SESSION['userID']) {
$status = "Le nom d'utilisateur n'est pas disponible";
} else {
- $sqlRequest = "UPDATE users SET username = :username, email = :email WHERE ID = :userID";
+ $sqlRequest = "UPDATE users SET username = :username, email = :email, last_update = now() WHERE ID = :userID";
$request = $pdo->prepare($sqlRequest);
$request->bindParam(":username", htmlspecialchars(substr($_POST['username'], 0, 20)));
$request->bindParam(":email", htmlspecialchars($_POST['email']));
diff --git a/html/upload/index.php b/html/upload/index.php
index 266415e5..daec8e50 100755
--- a/html/upload/index.php
+++ b/html/upload/index.php
@@ -7,7 +7,7 @@ require("../../include/panels.php");
$pdo = sqlConnect($sqlDatabaseHost, $sqlDatabaseName, $sqlDatabaseUser, $sqlDatabasePass);
-if ($_SESSION['level'] < 1) {
+if ($_SESSION['userRole'] < 1) {
header("Location: login.php");
http_response_code(404);
}
diff --git a/html/users/index.php b/html/users/index.php
index f825104e..f3bdba7a 100755
--- a/html/users/index.php
+++ b/html/users/index.php
@@ -9,7 +9,7 @@ require("../../include/panels.php");
$pdo = sqlConnect($sqlDatabaseHost, $sqlDatabaseName, $sqlDatabaseUser, $sqlDatabasePass);
if(isset($_GET['u']) && empty($_GET['u']) == false) {
- $request = $pdo->prepare("SELECT ID, username, display_name, profile_picture, banner, bio, certification FROM users WHERE username = :username");
+ $request = $pdo->prepare("SELECT users.ID, users.username, users.display_name, users.profile_picture, users.banner, users.bio, roles.badge_svg FROM users JOIN roles ON users.role = roles.ID WHERE users.username = :username");
$request->bindParam(":username", htmlspecialchars($_GET['u']));
$request->execute();
$result = $request->fetchAll(PDO::FETCH_ASSOC);
@@ -21,7 +21,7 @@ if(isset($_GET['u']) && empty($_GET['u']) == false) {
$userPPURL = $result[0]['profile_picture'] == NULL ? "https://abs.twimg.com/sticky/default_profile_images/default_profile_400x400.png" : $result[0]['profile_picture'];
$userBanner = $result[0]['banner'] = NULL ? "" : $result[0]['banner'];
$userBio = $result[0]['bio'];
- $userCertification = $result[0]['certification'];
+ $userBadgeSVG = $userBadgeSVG = $result[0]['badge_svg'];
} else {
$userID = 0;
$userName = htmlspecialchars($_GET['u']);
@@ -29,7 +29,7 @@ if(isset($_GET['u']) && empty($_GET['u']) == false) {
$userPPURL = "https://abs.twimg.com/sticky/default_profile_images/default_profile_400x400.png";
$userBanner = "";
$userBio = "";
- $userCertification = 0;
+ $userBadgeSVG = "";
}
} else {
$userID = 0;
@@ -38,7 +38,7 @@ if(isset($_GET['u']) && empty($_GET['u']) == false) {
$userPPURL = "https://abs.twimg.com/sticky/default_profile_images/default_profile_400x400.png";
$userBanner = "";
$userBio = "";
- $userCertification = 0;
+ $userBadgeSVG = "";
}
?>
@@ -93,11 +93,7 @@ if(isset($_GET['u']) && empty($_GET['u']) == false) {
0) {
- echo ('');
- }
+ echo($userBadgeSVG)
?>
@
@@ -117,10 +113,10 @@ if(isset($_GET['u']) && empty($_GET['u']) == false) {
prepare("SELECT ID, title, date, miniature, resume FROM articles WHERE (title LIKE :search OR ID LIKE :search) AND author = :userID AND classification <= :userLevel ORDER BY date DESC");
+ $request = $pdo->prepare("SELECT ID, title, creation_date, miniature, resume FROM articles WHERE (title LIKE :search OR ID LIKE :search) AND author = :userID AND classification <= :userRole ORDER BY creation_date DESC");
$request->bindParam(":search", $search);
$request->bindParam(":userID", $userID);
- $request->bindParam(":userLevel", $_SESSION['userLevel']);
+ $request->bindParam(":userRole", $_SESSION['userRole']);
$request->execute();
$result = $request->fetchAll(PDO::FETCH_ASSOC);
echo ('