<?php
//FUNGERER IKKE!!
//Skjekk om submit er satt
if (isset($_POST["submit"])) {
  echo "<!--Submit er satt-->";
  $menu = $_POST["menu"];
  $form = $_POST["form"];
  if (isset($_POST["oldpassword"], $_POST["newpassword1"], $_POST["newpassword2"])) {
    $oldpassword = $_POST["oldpassword"];
    $newpassword1 = $_POST["newpassword1"];
    $newpassword2 = $_POST["newpassword2"];
  }
  $user_name_new = $_POST["user_name_new"];
  $user_login_new = $_POST["user_login_new"];
  $user_email_new = $_POST["user_email_new"];
  $user_phone_new = $_POST["user_phone_new"];
  $user_adress_street_new = $_POST["user_adress_street_new"];
  $user_adress_zip_new = $_POST["user_adress_zip_new"];
  $user_adress_country = $_POST["user_adress_country"];
  //Finn ut hvilken form som skal håndteres
  //BYTT PASSORD
  if ($form == "changepassword") {
    echo "<!--Change password FORM-->";
    if ($newpassword1 == $newpassword2) {
      $sql = "SELECT * from webshop.user where user_id='$user_id';";
      $resultat = $kobling->query($sql);
      while ($rad = $resultat->fetch_assoc()) {
        $user_passord = $rad["user_passord"];
        if ($user_passord == $oldpassword) {
          $sql = "UPDATE webshop.user set user_passord='$newpassword1' where user_id='$user_id';";
          if ($kobling->query($sql)) {
            echo "<!--Spørringen $sql ble utført-->";
          } else {
            echo "<!--(!!!)Spørringen $sql ble IKKE utført-->";
          }
        } else {
          echo "<!-- Passord fra DB(user_passord($user_passord)) =/= oldpassord($oldpassword) from form) -->";
        }
      }
    } else {
      echo "<!-- new password 1 and 2 do not match -->";
    }
  } elseif ($form == "changedetails") {
    echo "<!--Change details FORM-->";
    $sql = "UPDATE webshop.user set user_name='$user_name_new', user_login='$user_login_new', user_phone='$user_phone_new', user_email='$user_email_new', user_adress_street='$user_adress_street_new', user_adress_zip='$user_adress_zip_new', user_adress_country='$user_adress_country', user_deactivated='0' where user_id='$user_id';";
    if ($kobling->query($sql)) {
      echo "<!-- Spørringen $sql ble utført -->";
    } else {
      echo "<!-- (!!!) Spørringen $sql ble IKKE utført -->";
    }
  } elseif ($form == "removeaccount") {
    echo "Remove account FORM-->";
    $sql = "UPDATE webshop.user set user_deactivated='1' where faq_id=$user_id;";
    if ($kobling->query($sql)) {
      echo "<!--Spørringen $sql ble utført-->";
      echo "<script type='text/javascript'>location.href = '../index.html';</script>";
    } else {
      echo "<!--(!!!)Spørringen $sql ble IKKE utført-->";
    }
  }
} else {
  echo "<!--Submit er ikke satt -->";
}
?>
<span class="headerTitleMini">User settings</span><br>
<span class="headerTitleMini1">Change password</span>
<form class="" action="mypage.php" method="post">
  <input type="hidden" name="menu" value="usersettings">
  <input type="hidden" name="form" value="changepassword">
  Your old password:
  <br> <input type="password" name="oldpassword"> <br>
  Your new password:
  <br> <input type="password" name="newpassword1"> <br>
  Repeat your new password:
  <br> <input type="password" name="newpassword2"> <br>
  <input type="submit" class="mypagesubmit" name="submit" value="Change Password!">
</form> <br>
<?php
$sql = "SELECT * from webshop.user where user_id='$user_id';";
$resultat = $kobling->query($sql);
while ($rad = $resultat->fetch_assoc()) {
  $user_name = $rad["user_name"];
  $user_login = $rad["user_login"];
  $user_phone = $rad["user_phone"];
  $user_email = $rad["user_email"];
  $user_adress_street = $rad["user_adress_street"];
  $user_adress_zip = $rad["user_adress_zip"];
  $user_adress_country = $rad["user_adress_country"];
  echo "<span class='headerTitleMini1'>User details</span>";
  echo "<form class='' action='mypage.php' method='post'>";
  echo "<input type='hidden' name='menu' value='usersettings'>";
  echo "<input type='hidden' name='form' value='changedetails'>";
  echo "Name:";
  echo "<br> <input type='text' name='user_name_new' value='$user_name'> <br>";
  echo "Username:";
  echo "<br> <input type='text' name='user_login_new' value='$user_login'> <br>";
  echo "Phonenumber:";
  echo "<br> <input type='text' name='user_phone_new' value='$user_phone'> <br>";
  echo "Email adress:";
  echo "<br> <input type='text' name='user_email_new' value='$user_email'> <br>";
  echo "Postal adress:";
  echo "<br> <input type='text' name='user_adress_street_new' value='$user_adress_street'> <br>";
  echo "Zip code and area:";
  echo "<br> <input type='text' name='user_adress_zip_new' value='$user_adress_zip'>";
  echo "Country:";
  echo "<br>";
  include 'include/iso3countries.html';
  echo "<br> <input class='mypagesubmit' type='submit' name='submit' value='Submit changes!'>";
  echo "</form>";
}
?>
<br> <span class="headerTitleMini1">Remove account</span>
<form action="../index.php" method="post">
  <input type="hidden" name="form" value="removeaccount">
  <input type="submit" class="mypagesubmit" name="submit" value="Are you sure you would like to permanently remove your account?">
</form>