prepare("SELECT u.*, b.name_en as branch_name_en, b.name_ar as branch_name_ar
FROM users u
LEFT JOIN branches b ON u.branch_id = b.id
WHERE u.id = ?");
$stmt->execute([$current_user_id]);
$user = $stmt->fetch();
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$full_name_en = $_POST['full_name_en'] ?? '';
$full_name_ar = $_POST['full_name_ar'] ?? '';
$email = $_POST['email'] ?? '';
$password = $_POST['password'] ?? '';
$confirm_password = $_POST['confirm_password'] ?? '';
// Handle Profile Picture Upload
$profile_picture = $user['profile_picture'];
if (isset($_FILES['profile_picture']) && $_FILES['profile_picture']['error'] === UPLOAD_ERR_OK) {
$ext = pathinfo($_FILES['profile_picture']['name'], PATHINFO_EXTENSION);
$filename = 'user_' . $current_user_id . '_' . time() . '.' . $ext;
$target = 'assets/images/users/' . $filename;
if (!is_dir('assets/images/users/')) {
mkdir('assets/images/users/', 0775, true);
}
if (move_uploaded_file($_FILES['profile_picture']['tmp_name'], $target)) {
$profile_picture = $target;
}
}
if ($password !== '' && $password !== $confirm_password) {
$error = 'Passwords do not match';
} else {
try {
if ($password !== '') {
$password_hash = password_hash($password, PASSWORD_DEFAULT);
$stmt = db()->prepare("UPDATE users SET full_name_en = ?, full_name_ar = ?, email = ?, profile_picture = ?, password_hash = ? WHERE id = ?");
$stmt->execute([$full_name_en, $full_name_ar, $email, $profile_picture, $password_hash, $current_user_id]);
} else {
$stmt = db()->prepare("UPDATE users SET full_name_en = ?, full_name_ar = ?, email = ?, profile_picture = ? WHERE id = ?");
$stmt->execute([$full_name_en, $full_name_ar, $email, $profile_picture, $current_user_id]);
}
// Update Session
$_SESSION['full_name'] = is_arabic() ? ($full_name_ar ?: $full_name_en) : $full_name_en;
$success = __('success_update');
// Refresh data
$stmt = db()->prepare("SELECT u.*, b.name_en as branch_name_en, b.name_ar as branch_name_ar
FROM users u
LEFT JOIN branches b ON u.branch_id = b.id
WHERE u.id = ?");
$stmt->execute([$current_user_id]);
$user = $stmt->fetch();
// Refresh header data
$current_user_data = $user;
} catch (Exception $e) {
$error = __('error_update') . ' ' . $e->getMessage();
}
}
}
?>