34788-vm/profile.php
2025-10-08 11:45:34 +00:00

78 lines
2.2 KiB
PHP

<?php
session_start();
if (!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true) {
header("location: login.php");
exit;
}
require_once 'db/config.php';
$user_id = $_SESSION["id"];
$name = $email = "";
$name_err = $email_err = "";
$success_message = "";
// Fetch user data
$pdo = db();
$sql = "SELECT name, email FROM users WHERE id = :id";
if ($stmt = $pdo->prepare($sql)) {
$stmt->bindParam(":id", $user_id, PDO::PARAM_INT);
if ($stmt->execute()) {
if ($stmt->rowCount() == 1) {
if ($row = $stmt->fetch()) {
$name = $row["name"];
$email = $row["email"];
}
}
}
unset($stmt);
}
unset($pdo);
// Include header
include 'includes/header.php';
?>
<div class="container mt-5">
<h2>User Profile</h2>
<p>Edit your personal information.</p>
<?php
if (!empty($_SESSION['success_message'])) {
echo '<div class="alert alert-success">' . $_SESSION['success_message'] . '</div>';
unset($_SESSION['success_message']);
}
if (!empty($_SESSION['error_message'])) {
echo '<div class="alert alert-danger">' . $_SESSION['error_message'] . '</div>';
unset($_SESSION['error_message']);
}
?>
<form action="update_profile.php" method="post">
<div class="form-group">
<label>Name</label>
<input type="text" name="name" class="form-control" value="<?php echo htmlspecialchars($name); ?>">
</div>
<div class="form-group">
<label>Email</label>
<input type="email" name="email" class="form-control" value="<?php echo htmlspecialchars($email); ?>">
</div>
<div class="form-group">
<label>New Password (optional)</label>
<input type="password" name="new_password" class="form-control">
</div>
<div class="form-group">
<label>Confirm New Password</label>
<input type="password" name="confirm_password" class="form-control">
</div>
<div class="form-group">
<input type="submit" class="btn btn-primary" value="Update Profile">
</div>
</form>
</div>
<?php
// Include footer
include 'includes/footer.php';
?>