caca

<?php
    session_start();
    include("./etc/bdd.php");
    include("./etc/functions.php");
    if(isset($_SESSION["id"])) update_timestamp($_SESSION["id"]);
    if(!isset($_SESSION["id"])) redire("index.php");
    $query = $GLOBALS["db"]->prepare("SELECT * FROM users WHERE id=:id");
    $query->bindValue(":id", $_SESSION["id"], PDO::PARAM_STR);
    $query->execute();
    $user = $query->fetch(PDO::FETCH_ASSOC);

    // ---- FILE UPLOAD -----------------------------------------------------------------------------------------
    $errors = array();
    if(isset($_POST["submit_f"]))
    {
        $avatar = $_FILES["avatar"]["name"];
        $avatarTmp = $_FILES["avatar"]["tmp_name"];

        if(!empty($avatarTmp))
        {
            $image = explode('.', $avatar);
            $extention = $image[1];
            if(strtolower($extention) == "jpg")
            {
                if(empty($image[2]))
                {
                    if($_FILES['avatar']['size'] <= $_POST["MAX_FILE_SIZE"])
                    {
                        if($_FILES['avatar']['type'] == "image/jpeg")
                        {
                            $filename = "img/avatars/".md5($_SESSION["username"]).".jpg";
                            move_uploaded_file($_FILES['avatar']['tmp_name'], $filename);
                            $query = $GLOBALS["db"]->prepare("UPDATE users SET avatarurl=:filename WHERE id=:id");
                            $query->bindValue(":filename", $filename, PDO::PARAM_STR);
                            $query->bindValue(":id", $_SESSION["id"], PDO::PARAM_INT);
                            $query->execute();
                            redire("config.php");
                        }else $errors[] = "Fais pas de connerie Jack";
                    }else $errors[] = "Veuillez envoyer une image plus petite que 1048576 octets";
                }else $errors[] = "Evite ça Pierrot l'escargot !";
            }else $errors[] = "Veuillez envoyer une image jpeg (*.jpg)";
        }else $errors[] = "Veuillez devez spécifier un fichier";
    }
    //-----------------------------------------------------------------------------------------------------------

    // ---- Password Changing -----------------------------------------------------------------------------------
    $errors2 = array();
    if(isset($_POST["submit_p"]))
    {
        $aPass = htmlspecialchars(trim($_POST["actual_p"]));
        $pass1 = htmlspecialchars(trim($_POST["new_p"]));
        $pass2 = htmlspecialchars(trim($_POST["new_p2"]));
        if(!empty($aPass) && !empty($pass1) && !empty($pass2) && $pass1 == $pass2)
        {
            $aPass = md5($aPass);
            $query = $GLOBALS["db"]->prepare("SELECT * FROM users WHERE password=:password AND id=:id");
            $query->bindValue(":password", $aPass, PDO::PARAM_STR);
            $query->bindValue(":id", $_SESSION["id"], PDO::PARAM_INT);
            $query->execute();

            if($query->rowCount() == 1)
            {
                $pass = md5($pass1);
                $query = $GLOBALS["db"]->prepare("UPDATE users SET password=:pass WHERE id=:id");
                $query->bindValue(":pass", $pass, PDO::PARAM_STR);
                $query->bindValue(":id", $_SESSION["id"], PDO::PARAM_INT);
                $query->execute();
                $errors2[] = "Votre mot de passe à été changé avec succes !";
            }else $errors2[] = "Vous avez entré un mot de passe incorrect";
        }else $errors2[] = "Les deux mots de passe doivent être égales , et vous devez remplir tout les champs";

    }
    //-----------------------------------------------------------------------------------------------------------

    // ---- Web Site Updating -----------------------------------------------------------------------------------
    $error = "";
    if(isset($_POST["submit_w"]))
    {
        $website = htmlspecialchars(trim($_POST["website"]));
        if(!empty($website))
        {
            if(isURL($website))
            {
                $query = $GLOBALS["db"]->prepare("UPDATE users SET website=:website WHERE id=:id");
                $query->bindValue(":website", $website, PDO::PARAM_STR);
                $query->bindValue(":id", $_SESSION["id"], PDO::PARAM_INT);
                $query->execute();
                $error = "Site web mis à jour";
            }else $error = "Site web invalide";
        }else $error = "Veuillez entrer un site web";
    }
    //-----------------------------------------------------------------------------------------------------------

?>