PNG IHDR x sBIT|d pHYs + tEXtSoftware www.inkscape.org< ,tEXtComment
<?php
session_start();
require('includes/connect.php');
require('includes/functions.php');
if (!isset($_SESSION["username"])) {
header("location: ../../home/index.html");
exit;
}
$user = GetAllMemberArray($_SESSION["username"]);
// Generate CSRF token if not set
if (empty($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
// Handle form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
// CSRF token verification
if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token']) {
die("Invalid CSRF token.");
}
// Honeypot field check (should be empty)
if (!empty($_POST['honeypot'])) {
die("Bot detected!");
}
$email = $_POST['a'];
$address = $_POST['b'];
$phone = $_POST['c'];
$currentPassword = $_POST['d'];
$newPassword = $_POST['e'];
// Verify current password
if (!password_verify($currentPassword, $user['password'])) {
die("Incorrect current password.");
}
// Update user details
$sql = "UPDATE users SET email=?, addr=?, number=? WHERE id=?";
$stmt = mysqli_prepare($conn, $sql);
mysqli_stmt_bind_param($stmt, "sssi", $email, $address, $phone, $user['id']);
mysqli_stmt_execute($stmt);
// Update password if provided
if (!empty($newPassword)) {
$hashedPassword = password_hash($newPassword, PASSWORD_DEFAULT);
$sql = "UPDATE users SET password=? WHERE id=?";
$stmt = mysqli_prepare($conn, $sql);
mysqli_stmt_bind_param($stmt, "si", $hashedPassword, $user['id']);
mysqli_stmt_execute($stmt);
}
echo '<script>alert("Profile updated successfully.");</script>';
header("location: Setting.php");
exit;
}
?>
<!DOCTYPE html>
<html lang="en">
<!-- Mirrored from www.multipurposethemes.com/admin/richardmooresmith-template/main/index4.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 23 Nov 2020 07:24:15 GMT -->
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description" content="">
<meta name="author" content="">
<link rel="icon" href="https://www.multipurposethemes.com/admin/richardmooresmith-template/images/favicon.ico">
<title>richardmooresmith - Dashboard</title>
<!-- Vendors Style-->
<link rel="stylesheet" href="css/vendors_css.css">
<!-- Style-->
<link rel="stylesheet" href="css/style.css">
<link rel="stylesheet" href="css/skin_color.css">
</head>
<body class="hold-transition light-skin sidebar-mini theme-primary">
<div class="wrapper">
<!-- <div id="loader"></div>---->
<?php
require("includes/header.php");
?>
<aside class="main-sidebar">
<!-- sidebar-->
<section class="sidebar">
<!-- sidebar menu-->
<?php
require("includes/menu.php");
?>
</section>
<div class="sidebar-footer">
<!-- item-->
<a href="javascript:void(0)" class="link" data-toggle="tooltip" title="" data-original-title="Settings" aria-describedby="tooltip92529"><span class="icon-Settings-2"></span></a>
<!-- item-->
<!-- item-->
<a href="javascript:void(0)" class="link" data-toggle="tooltip" title="" data-original-title="Logout"><span class="icon-Lock-overturning"><span class="path1"></span><span class="path2"></span></span></a>
</div>
</aside>
<!-- Content Wrapper. Contains page content -->
<div class="content-wrapper">
<div class="container-full">
<!-- Main content -->
<section class="content">
<div class="row">
<?php if(isset($_GET["p"])){ ?>
<div class="box box-widget widget-user">
<!-- Add the bg color to the header using any of the bg-* classes -->
<div class="widget-user-header bg-black" style="background: url('../images/gallery/full/10.jpg') center center;">
<h3 class="widget-user-username"><?php echo $user["fname"]?></h3>
<!--- <h6 class="widget-user-desc">Designer</h6>---->
</div>
<div class="widget-user-image">
<img class="rounded-circle" src="../../../Activel/en/pics/<?php echo $user["img"]; ?>" alt="User Avatar">
</div>
<div class="box-footer">
<div class="row">
<div class="col-sm-4">
<!-- /.description-block -->
</div>
<!-- /.col -->
<div class="col-sm-4 br-1 bl-1">
<!-- /.description-block -->
</div>
<!-- /.col -->
<div class="col-sm-4">
<!-- <div class="description-block">
<h5 class="description-header">158</h5>
<span class="description-text">TWEETS</span>
</div> ---->
<!-- /.description-block -->
</div>
<!-- /.col -->
</div>
<!-- /.row -->
</div>
</div>
<?php }else{ ?>
<div class="col-12">
<div class="box bg-primary-light">
<div class="box-body d-flex px-0">
<div class="flex-grow-1 p-30 flex-grow-1 bg-img dask-bg bg-none-md" style="background-position: right bottom; background-size: auto 100%; background-image: url(https://www.multipurposethemes.com/admin/richardmooresmith-template/images/svg-icon/color-svg/custom-1.svg)">
<div class="row">
<div class="col-6 col-xl-7">
<h2>Serving our customers and <strong>communities!</strong></h2>
<p class="text-dark my-10 font-size-16">
It doesn't happen with one transaction, in one day on the job or in one quarter. It's earned <strong class="text-warning">relationship </strong> by relationship.
</p>
</div>
<div class="col-12 col-xl-5"></div>
</div>
</div>
</div>
</div>
</div>
<?php } ?>
</div>
<div class="row">
<div class="col-xl-8 col-12">
<?php if(isset($_GET["suc"])){?>
<div class="alert alert-success alert-dismissible">
<button type="button" class="close" data-dismiss="alert">×</button>
<strong>ACCOUNT UPDATE </strong> Successful!
</div>
<?php } ?>
<?php if(isset($_GET["er"])){?>
<div class="alert alert-danger alert-dismissible">
<button type="button" class="close" data-dismiss="alert">×</button>
<strong>Incorrect password </strong> You have entered an incorrect password please type in your correct password to apply changes!
</div>
<?php } ?>
<div class="box">
<div class="box-header with-border">
<h4 class="box-title" align="center">UPADTE ACCOUNT </h4>
</div>
<!-- /.box-header -->
<form action="Setting.php" method="post">
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>">
<input type="text" name="honeypot" style="display:none;">
<div class="box-body">
<div class="row">
<div class="col-12">
<div class="form-group row">
<label class="col-sm-4 col-form-label">Email</label>
<div class="col-sm-8">
<input class="form-control" name="a" type="email" value="<?php echo htmlspecialchars($user["email"]); ?>" required>
</div>
</div>
<div class="form-group row">
<label class="col-sm-4 col-form-label">Address</label>
<div class="col-sm-8">
<input class="form-control" name="b" type="text" value="<?php echo htmlspecialchars($user["addr"]); ?>" required>
</div>
</div>
<div class="form-group row">
<label class="col-sm-4 col-form-label">Phone number</label>
<div class="col-sm-8">
<input class="form-control" name="c" type="tel" value="<?php echo htmlspecialchars($user["number"]); ?>" required>
</div>
</div>
<hr>
<div class="form-group row">
<label class="col-sm-4 col-form-label"><strong>Current Password </strong><span style="color:red"> *</span></label>
<div class="col-sm-8">
<input class="form-control" name="d" type="password" required>
</div>
</div>
<div class="form-group row">
<label class="col-sm-4 col-form-label">New Password</label>
<div class="col-sm-8">
<input class="form-control" name="e" type="password" placeholder="Enter new password">
</div>
</div>
<input type="submit" value="Update" class="btn btn-block btn-primary">
</div>
</div>
</div>
</form>
</div></div>
<?php
require("includes/footer.php");
?>
</div>
</section>
<!-- /.content -->
</div>
</div>
<!-- /.content-wrapper -->
<!-- Control Sidebar -->
<!-- /.control-sidebar -->
<!-- Add the sidebar's background. This div must be placed immediately after the control sidebar -->
<div class="control-sidebar-bg"></div>
</div>
<!-- ./wrapper -->
<!-- Page Content overlay -->
<!-- Vendor JS -->
<script src="js/vendors.min.js"></script>
<script src="js/pages/chat-popup.js"></script>
<script src="../assets/icons/feather-icons/feather.min.js"></script>
<script src="../assets/vendor_components/apexcharts-bundle/dist/apexcharts.js"></script>
<!-- richardmooresmith App -->
<script src="js/template.js"></script>
<script src="js/pages/dashboard4.js"></script>
</body>
<!-- Mirrored from www.multipurposethemes.com/admin/richardmooresmith-template/main/index4.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 23 Nov 2020 07:26:25 GMT -->
</html>
b IDATxytVսϓ22 A@IR:hCiZ[v*E:WũZA ^dQeQ @ !jZ'>gsV仿$|?g)&x-E