Guest User

Untitled

a guest
Sep 10th, 2018
155
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.48 KB | None | 0 0
  1. <form id="cAccess" method="post" autocomplete="off" enctype="multipart/form-data">
  2. <div class="form-group">
  3. <div class="row">
  4. <div class="field field-block">
  5. <input type="text" name="username">
  6. <label class="required">Usuario</label>
  7. </div>
  8. <div class="clearfix"> </div>
  9. </div>
  10. </div>
  11. <div class="form-group">
  12. <div class="row">
  13. <div class="field field-block">
  14. <input type="email" name="email">
  15. <label class="required">Email</label>
  16. </div>
  17. <div class="clearfix"> </div>
  18. </div>
  19. </div>
  20. <div class="form-group">
  21. <div class="row">
  22. <div class="field field-block">
  23. <input type="password" name="password">
  24. <label class="required">Ingresé su contraseña para confirmar cambios</label>
  25. </div>
  26. <div class="clearfix"> </div>
  27. </div>
  28. </div>
  29. <hr>
  30. <input class="btn-two" type="submit" name="c_access" id="submit_btn_three" value="Actualizar Datos de Acceso" formnovalidate>
  31. </form>
  32.  
  33. <?php
  34. session_start();
  35. include "../data.ini.php";
  36. if (isset($_POST['c_access'])) {
  37. $Uusername = $_POST['username'];
  38. $Uemail = $_POST['email'];
  39. $Upassword = $_POST['password'];
  40.  
  41. if (empty($_POST['username'])){
  42. echo json_encode(['status'=> false, 'message'=>"<strong>Por favor, ingresé un nombre de usuario para continuar.</strong>"]);
  43. exit;
  44. }
  45.  
  46. if (empty($_POST['email'])){
  47. echo json_encode(['status'=> false, 'message'=>"<strong>Por favor, ingresé su correo electrónico para continuar.</strong>"]);
  48. exit;
  49. }
  50.  
  51. if (!preg_match("/^([a-zA-Z0-9])+([a-zA-Z0-9._-])*@([a-zA-Z0-9_-])+([a-zA-Z0-9._-]+)+$/", $_POST['email'])) {
  52. echo json_encode(['status'=> false, 'message'=>"<strong>El email que ingreso no es valido.</strong>"]);
  53. exit;
  54. }
  55.  
  56. $stmtPassword = $con->prepare("SELECT password FROM users WHERE id_user=? LIMIT 1");
  57. $stmtPassword->bind_param("i", $id_user);
  58. $stmtPassword->execute();
  59. $stmtPassword->bind_result($user_password);
  60. $stmtPassword->fetch();
  61. $stmtPassword->close();
  62.  
  63. if (!password_verify($Upassword, $user_password)) {
  64. echo json_encode(['status'=> false, 'message'=>"<strong>La contraseña no es correcta.</strong>"]);
  65. exit;
  66. }
  67.  
  68. /*$stmtEmail = $con->prepare("SELECT * FROM users WHERE email=? AND id_user NOT IN (?)");
  69. $stmtEmail->bind_param("si",$Uemail,$id_user);*/
  70.  
  71. $stmtEmail = $con->prepare("SELECT * FROM users WHERE email=? OR username=?");
  72. $stmtEmail->bind_param("ss",$Uemail,$Uusername);
  73. $stmtEmail->execute();
  74. $stmtEmail->store_result();
  75.  
  76. if ($stmtEmail->num_rows>0) {
  77. echo json_encode(['status'=> false, 'message'=>"<strong>¡El usuario con este correo electrónico ya existe!</strong>"]);
  78. exit;
  79. } else {
  80. $stmtUpAccounts = $con->prepare("UPDATE users SET username=? email=? WHERE id_user=?");
  81. $stmtUpAccounts->bind_param("ssi", $Uusername,$Uemail,$id_user);
  82. if ($stmtUpAccounts->execute()) {
  83. echo json_encode(['status'=> true, 'message'=>"Tus datos se actualizaron correctamente"]);
  84. exit;
  85. } else {
  86. echo json_encode(['status'=> false, 'message'=>"Lo sentimos, pero no podemos procesar su solicitud. Inténtalo más tarde."]);
  87. exit;
  88. }
  89. }
  90. }
  91. ?>
  92.  
  93. $stmtUpAccounts->bind_param("ssi", $Uusername,$Uemail,$id_user);
Add Comment
Please, Sign In to add comment