-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathupdateUser.php
60 lines (49 loc) · 1.55 KB
/
updateUser.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
<?
require("sessionCheck.php");
require("config.php");
$ID= $HTTP_POST_VARS["id"];
$uname= $HTTP_POST_VARS["uname"];
$passwd= $HTTP_POST_VARS["passwd"];
$status= $HTTP_POST_VARS["status"];
$comment= $HTTP_POST_VARS["comment"];
$name= $HTTP_POST_VARS["name"];
$email= $HTTP_POST_VARS["email"];
if($status < $accesslevel) {
print "<h1>ERROR: You cant assign a user a better access level than you have.</h1>";
print "Logged and noted.";
exit;
}
$Connect = mysqli_connect($DB_SERVER, $user, $password) or die ("Cant connect to MySQL at $DB_SERVER");
mysqli_select_db($DATABASE,$Connect) or die ("Cant connect to $DATABASE database");
$sql_select="SELECT * FROM access where passwd='$passwd'";
$result=mysqli_query($sql_select);
if(!$result) {
print "MySQL error: " . mysqli_error();
exit;
}
$n=mysqli_num_rows($result);
//print "sql: $sql_select <br>\n";
//print "n : $n <br>\n";
if ($n==0) {
// New password
print "Changing passwd..<br>\n";
$sql_update="UPDATE access SET uname='$uname', passwd=PASSWORD('$passwd'), status='$status', comment='$comment', Name='$name', Email='$email', time=NOW() WHERE id='$ID'";
} else {
// No change to password.
$sql_update="UPDATE access SET uname='$uname', status='$status', comment='$comment', Name='$name', Email='$email', time=NOW() WHERE id='$ID'";
print "Not changing passwd..<br>\n";
}
$result=mysqli_query($sql_update);
if(!$result) {
print "MySQL error: " . mysqli_error();
exit;
}
//header("Location: root.php?SID=$sidVAR");
?>
<html>
<?
print $pageStyle;
//print "sql: $sql_update <br>\n";
?>
Update complete
</html>