<?php
session_start();

if(isset($_SESSION['USER_ID']))
{
    if ($_SESSION['RUOLO'] == 'N' )
    {
            if (isset($_POST['submit']))
            {
                include 'FILE_DI_CONNESSIONE.php';

                $id = $VARIABILE_FILE_DI_CONNESSIONE->real_escape_string($_POST['id']);
                $role = $VARIABILE_FILE_DI_CONNESSIONE->real_escape_string($_POST['role']);
                $commerciali = $VARIABILE_FILE_DI_CONNESSIONE->real_escape_string($_POST['commerciali']);

                $query = mysqli_query($VARIABILE_FILE_DI_CONNESSIONE, "UPDATE tabella SET role='$role', commerciali='$commerciali'  WHERE id = ".$_SESSION['USER_ID']);

                if( $query )
                {
                    if(isset($_POST['role']))
                    {
                         $role = ($_POST['role']);
                         echo "ok";
                    }

                    else
                    {
                        echo "errore";
                    }
                }


            }
    }

}
?>


<form method="post" action="n.php">
<input class="form-control"  name="id" value="<?php echo $_SESSION['USER_ID'];  ?>"><br>

<label>Privacy</label>
<input class="form-control" type="checkbox" value="S" required   name="role" placeholder="<?php echo $_SESSION['RUOLO']; ?>"><br>

<label>Termini e Condizioni</label>
<input class="form-control" type="checkbox" value="S"  name="commerciali" placeholder="<?php echo $_SESSION['RUOLO']; ?>"><br>



<input class="btn btn-primary" name="submit" type="submit" value="Register..."><br>
</form>