prepare("SELECT * FROM users WHERE id = ?"); $stmt->execute([$user_id]); $user = $stmt->fetch(); if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_POST['update_profile'])) { $full_name = $_POST['full_name']; $email = $_POST['email']; $phone = $_POST['phone']; $address = $_POST['address']; $password = $_POST['password']; $profile_image = $user['profile_image']; // Handle Profile Image Upload if (isset($_FILES['profile_image']) && $_FILES['profile_image']['error'] === UPLOAD_ERR_OK) { $upload_dir = 'uploads/profiles/'; if (!is_dir($upload_dir)) mkdir($upload_dir, 0775, true); $file_ext = pathinfo($_FILES['profile_image']['name'], PATHINFO_EXTENSION); $new_file_name = time() . '_u' . $user_id . '.' . $file_ext; $target_file = $upload_dir . $new_file_name; if (move_uploaded_file($_FILES['profile_image']['tmp_name'], $target_file)) { $profile_image = $target_file; } } if (!empty($password)) { $hashed_password = password_hash($password, PASSWORD_DEFAULT); $stmt = db()->prepare("UPDATE users SET full_name = ?, email = ?, phone = ?, address = ?, password = ?, profile_image = ? WHERE id = ?"); $stmt->execute([$full_name, $email, $phone, $address, $hashed_password, $profile_image, $user_id]); } else { $stmt = db()->prepare("UPDATE users SET full_name = ?, email = ?, phone = ?, address = ?, profile_image = ? WHERE id = ?"); $stmt->execute([$full_name, $email, $phone, $address, $profile_image, $user_id]); } $_SESSION['success'] = 'تم تحديث الملف الشخصي بنجاح'; redirect('profile.php'); } } // Get session messages if (isset($_SESSION['success'])) { $success_msg = $_SESSION['success']; unset($_SESSION['success']); } ?>