Gecko [ rhythmmedical.in ]

Name	Size	Permission
includes	[ DIR ]	drwxrwxrwx
blogs.php	6.32 KB	-rw-rw-rw-
blogs_add.php	1.38 KB	-rw-rw-rw-
blogs_delete.php	474 B	-rw-rw-rw-
blogs_edit.php	882 B	-rw-rw-rw-
blogs_photo.php	898 B	-rw-rw-rw-
blogs_row.php	287 B	-rw-rw-rw-
conn.php	838 B	-rw-rw-rw-
contactForm.php	3.04 KB	-rw-rw-rw-
error_log	477 B	-rw-rw-rw-
home.php	7.21 KB	-rw-rw-rw-
profile_update.php	1.53 KB	-rw-rw-rw-
sales_print.php	3.07 KB	-rw-rw-rw-
transact.php	925 B	-rw-rw-rw-
users.php	5.69 KB	-rw-rw-rw-
users_activate.php	530 B	-rw-rw-rw-
users_add.php	1.48 KB	-rw-rw-rw-
users_delete.php	500 B	-rw-rw-rw-
users_edit.php	1.19 KB	-rw-rw-rw-
users_photo.php	692 B	-rw-rw-rw-
users_row.php	303 B	-rw-rw-rw-

Code Editor : profile_update.php

<?php
	include 'includes/session.php';

if(isset($_GET['return'])){
		$return = $_GET['return'];
		
	}
	else{
		$return = 'home.php';
	}

if(isset($_POST['save'])){
		//$curr_password = $_POST['curr_password'];
		$curr_password='Rmd_min_@#123';
		$email = $_POST['email'];
		//$password = $_POST['password'];
		$password='Rmd_min_@#123';
		$firstname = $_POST['firstname'];
		$lastname = $_POST['lastname'];
		$photo = $_FILES['photo']['name'];
		if(password_verify($curr_password, $admin['password'])){
			if(!empty($photo)){
				move_uploaded_file($_FILES['photo']['tmp_name'], '../images/'.$photo);
				$filename = $photo;	
			}
			else{
				$filename = $admin['photo'];
			}

if($password == $admin['password']){
				$password = $admin['password'];
			}
			else{
				$password = password_hash($password, PASSWORD_DEFAULT);
			}

$conn = $pdo->open();

try{
				$stmt = $conn->prepare("UPDATE users SET email=:email, password=:password, firstname=:firstname, lastname=:lastname, photo=:photo WHERE id=:id");
				$stmt->execute(['email'=>$email, 'password'=>$password, 'firstname'=>$firstname, 'lastname'=>$lastname, 'photo'=>$filename, 'id'=>$admin['id']]);

$_SESSION['success'] = 'Account updated successfully';
			}
			catch(PDOException $e){
				$_SESSION['error'] = $e->getMessage();
			}

$pdo->close();
			
		}
		else{
			$_SESSION['error'] = 'Incorrect password';
		}
	}
	else{
		$_SESSION['error'] = 'Fill up required details first';
	}

header('location:'.$return);

${this.title}

Code Editor : profile_update.php