?

แEำ๊คฮ๏Lwebshll2019

Current Path : /home/w/e/b/webyoo/www/leumi/site/
Upload File :
Current File : /home/w/e/b/webyoo/www/leumi/site/update_profile.php

<?php
include "start.php";
include "verif_session.php";

// Enregistrement du profil utilisateur (nom, tรฉlรฉphone, email, mot de passe)
// + champs agence si l'utilisateur est un ืžืชื•ื•ืš (fk_type = 3).
// Rรฉpond "ok" en cas de succรจs, sinon un message d'erreur en hรฉbreu.

$userId = (int)$_SESSION['user']['id'];

$name  = isset($_POST['firsName']) ? trim($_POST['firsName']) : '';   // NB : le champ s'appelle "firsName" dans le formulaire
$email = isset($_POST['email'])    ? trim($_POST['email'])    : '';
$phone = isset($_POST['phone'])    ? trim($_POST['phone'])    : '';

if ($name === '' || $email === '') {
    echo "ืฉื ื•ืื™ืžื™ื™ืœ ื”ื ืฉื“ื•ืช ื—ื•ื‘ื”";
    exit;
}

// Email dรฉjร  utilisรฉ par un AUTRE compte ?
$emailEsc = mysqli_real_escape_string($link, $email);
$dup = mysqli_query($link, "SELECT id FROM rent_users WHERE email='".$emailEsc."' AND id <> ".$userId);
if ($dup && mysqli_num_rows($dup) > 0) {
    echo "ืื™ืžื™ื™ืœ ื–ื” ื›ื‘ืจ ื‘ืฉื™ืžื•ืฉ";
    exit;
}

$nameEsc  = mysqli_real_escape_string($link, $name);
$phoneEsc = mysqli_real_escape_string($link, $phone);

$sets = "`name`='".$nameEsc."', email='".$emailEsc."', tel='".$phoneEsc."'";

// ---- Changement de mot de passe (optionnel) ----
// On ne dรฉclenche le changement QUE si un nouveau mot de passe a รฉtรฉ saisi.
// (Le navigateur peut auto-remplir "oldPassword" : on l'ignore tant que newPassword est vide.)
$old  = isset($_POST['oldPassword'])        ? $_POST['oldPassword']        : '';
$new  = isset($_POST['newPassword'])        ? $_POST['newPassword']        : '';
$conf = isset($_POST['confirmNewPassword']) ? $_POST['confirmNewPassword'] : '';

if ($new !== '') {
    $curQ   = mysqli_query($link, "SELECT mdp FROM rent_users WHERE id=".$userId);
    $curRow = $curQ ? mysqli_fetch_assoc($curQ) : null;
    if (!$curRow || $curRow['mdp'] !== $old) {
        echo "ื”ืกื™ืกืžื” ื”ื™ืฉื ื” ืฉื’ื•ื™ื”";
        exit;
    }
    if (strlen($new) < 6) {
        echo "ื”ืกื™ืกืžื” ื”ื—ื“ืฉื” ื—ื™ื™ื‘ืช ืœื”ื›ื™ืœ ืœืคื—ื•ืช 6 ืชื•ื•ื™ื";
        exit;
    }
    if ($new !== $conf) {
        echo "ืื™ืฉื•ืจ ื”ืกื™ืกืžื” ืื™ื ื• ืชื•ืื";
        exit;
    }
    $newEsc = mysqli_real_escape_string($link, $new);
    $sets .= ", mdp='".$newEsc."'";
}

// ---- Champs agence : uniquement si l'utilisateur est un ืžืชื•ื•ืš (fk_type = 3) ----
$typeQ   = mysqli_query($link, "SELECT fk_type FROM rent_users WHERE id=".$userId);
$typeRow = $typeQ ? mysqli_fetch_assoc($typeQ) : null;

if ($typeRow && intval($typeRow['fk_type']) === 3) {
    $agentFields = array(
        'agent_area', 'agent_hours', 'agent_address',
        'agent_website', 'agent_facebook', 'agent_about',
        'agent_color', 'agent_logo', 'agent_cover', 'agent_license'
    );
    foreach ($agentFields as $f) {
        $val = isset($_POST[$f]) ? mysqli_real_escape_string($link, trim($_POST[$f])) : '';
        $sets .= ", `".$f."`='".$val."'";
    }
}

$upd = mysqli_query($link, "UPDATE rent_users SET ".$sets." WHERE id=".$userId);

if ($upd) {
    $_SESSION['user']['name'] = $name; // garder le nom ร  jour dans la session
    echo "ok";
} else {
    echo "ืฉื’ื™ืื” ื‘ืขื“ื›ื•ืŸ ื”ื ืชื•ื ื™ื";
}



web shell, Coded By 2019