LittleDemon WebShell

<?php
if ((!isset($_SESSION['gen256']))  ) {
  echo "<script>
        window.open('login.php','_self');
    </script>";  
}

?>
<?php

$currentUserId = $_SESSION['gen256']['id'];

// Fetch current user data
$stmt = $conn->prepare("SELECT fname, oname, gender, tel, email, image FROM users WHERE id = ?");
$stmt->bind_param("i", $currentUserId);
$stmt->execute();
$result = $stmt->get_result();
$user = $result->fetch_assoc();
$stmt->close();

// Handle POST update
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $fname = trim($_POST['fname']);
    $oname = trim($_POST['lname']);
    $gender = $_POST['gender'];
    $tel = $_POST['tel'];
    $email = $_POST['email'];

    // Update password if fields filled
    $newPassword = $_POST['new_password'] ?? '';
    $confirmPassword = $_POST['confirm_password'] ?? '';
    $passwordSQL = '';
    if (!empty($newPassword)) {
        if ($newPassword !== $confirmPassword) {
            $error = "Passwords do not match!";
        } else {
            $hash1 = sha1($newPassword);
            $hash2 = md5($hash1);
            $passwordSQL = ", password='$hash2'";
        }
    }

    if (empty($error)) {
        $updateSQL = "UPDATE users SET fname=?, oname=?, gender=?, tel=?, email=? $passwordSQL WHERE id=?";
        $stmt = $conn->prepare($updateSQL);
        $stmt->bind_param("sssssi", $fname, $oname, $gender, $tel, $email, $currentUserId);
        if ($stmt->execute()) {
            $success = "Profile updated successfully!";
        } else {
            $error = "Update failed: " . $stmt->error;
        }
        $stmt->close();
    }
}
?>


    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
    <style>
        .settings-card { transition: 0.3s; cursor: pointer; }
        .settings-card:hover { transform: translateY(-5px); box-shadow: 0 8px 20px rgba(0,0,0,0.2);}
        .profile-pic { width:120px; height:120px; object-fit:cover; border-radius:50%; }
    </style>

<div class="container mt-5">
    <h2 class="mb-4 text-center">User Settings</h2>

    <?php if (!empty($error)): ?>
        <div class="alert alert-danger"><?= htmlspecialchars($error) ?></div>
    <?php endif; ?>
    <?php if (!empty($success)): ?>
        <div class="alert alert-success"><?= htmlspecialchars($success) ?></div>
    <?php endif; ?>

    <div class="row g-4">

        <!-- Profile Info -->
        <div class="col-md-6">
            <div class="card p-4 settings-card">
                <h5 class="card-title mb-3">Profile Information</h5>
                <form method="post" enctype="multipart/form-data">
                    <div class="mb-3 text-center">
                        <img src="img/<?= $user['image'] ?: 'default.png' ?>" class="profile-pic mb-2" alt="Profile Pic">
                    </div>
                    <div class="mb-3">
                        <label class="form-label">First Name</label>
                        <input type="text" name="fname" class="form-control" value="<?= htmlspecialchars($user['fname']) ?>" required>
                    </div>
                    <div class="mb-3">
                        <label class="form-label">Other Name</label>
                        <input type="text" name="lname" class="form-control" value="<?= htmlspecialchars($user['oname']) ?>" required>
                    </div>
                    <div class="mb-3">
                        <label class="form-label">Gender</label>
                        <select name="gender" class="form-select" required>
                            <option value="">Select Gender</option>
                            <option <?= $user['gender']=='Male'?'selected':'' ?>>Male</option>
                            <option <?= $user['gender']=='Female'?'selected':'' ?>>Female</option>
                        </select>
                    </div>
                    <div class="mb-3">
                        <label class="form-label">Contact</label>
                        <input type="text" name="tel" class="form-control" value="<?= htmlspecialchars($user['tel']) ?>">
                    </div>
                    <div class="mb-3">
                        <label class="form-label">Email</label>
                        <input type="email" name="email" class="form-control" value="<?= htmlspecialchars($user['email']) ?>">
                    </div>
                    <button type="submit" class="btn btn-primary w-100">Update Profile</button>
                </form>
            </div>
        </div>

        <!-- Password Change -->
        <div class="col-md-6">
            <div class="card p-4 settings-card">
                <h5 class="card-title mb-3">Change Password</h5>
                <form method="post">
                    <div class="mb-3">
                        <label class="form-label">New Password</label>
                        <input type="password" name="new_password" class="form-control">
                    </div>
                    <div class="mb-3">
                        <label class="form-label">Confirm Password</label>
                        <input type="password" name="confirm_password" class="form-control">
                    </div>
                    <button type="submit" class="btn btn-warning w-100">Update Password</button>
                </form>
            </div>
        </div>

    </div>
</div>

<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>