Advertisement
Guest User

Untitled

a guest
Dec 14th, 2018
120
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 1.78 KB | None | 0 0
  1.     public function updateNotificationUsername() {
  2.         if (!isset($_POST['newusername'], $_POST['password'])) {
  3.             return '<div class="alert-warning"><span class="closebtn" onclick="this.parentElement.style.display=\'none\';">&times;</span>Invalid Input.</div><br/>';
  4.         }
  5.  
  6.         if (strlen($_POST['newusername']) <= 4) {
  7.             return '<div class="alert-warning"><span class="closebtn" onclick="this.parentElement.style.display=\'none\';">&times;</span>Your new username must be longer!</div><br/>';        
  8.         }
  9.        
  10.         if (strlen($_POST['newusername']) >= 20) {
  11.             return '<div class="alert-warning"><span class="closebtn" onclick="this.parentElement.style.display=\'none\';">&times;</span>Your new username must be shorter!</div><br/>';           
  12.         }
  13.  
  14.         $password = $this->_database->prepare('SELECT id FROM users WHERE Password = ?');
  15.         $password->execute([
  16.             hash_salt($escaped = escape($_POST['password']), $this->getData('Username'))
  17.         ]);
  18.  
  19.         if ($password->rowCount() === 0) {
  20.             return '<div class="alert-warning"><span class="closebtn" onclick="this.parentElement.style.display=\'none\';">&times;</span>The user does either not exist or is not logged in.</div><br/>';
  21.         }
  22.  
  23.         if ($this->getData('Coins') <= 1999) {
  24.             return '<div class="alert-warning"><span class="closebtn" onclick="this.parentElement.style.display=\'none\';">&times;</span>You don\'t have enough coins.</div><br/>';
  25.         }
  26.  
  27.         $update = $this->_database->prepare('UPDATE users SET Username = ?, Password = ?, Coins = Coins - 2000 WHERE id = ?');
  28.         $update->execute([$user = escape($_POST['newusername']), hash_salt($escaped, $user), $_SESSION['user_id'] ]);
  29.        
  30.         return '<div class="alert-success"><span class="closebtn" onclick="this.parentElement.style.display=\'none\';">&times;</span>You have successfully changed your username!</div><br/>';
  31.     }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement