"; //var_dump($_REQUEST); //echo "

incoming array
"; //var_dump($incoming); // ******** begin database manipulation ******** if ($update_colors) { if ($newbgc) putsetting("background_color",$newbgc,$user_id); if ($newmbgc) putsetting("menubg_color",$newmbgc,$user_id); if ($newtc) putsetting("text_color",$newtc,$user_id); if ($newlc) putsetting("link_color",$newlc,$user_id); if ($newvlc) putsetting("vlink_color",$newvlc,$user_id); if ($newhc) putsetting("heading_color",$newhc,$user_id); echo ""; } if ($reset_colors) { mysqli_query($drs_db,"delete from profile where name like \"%_color\" and user=\"$user_id\""); echo ""; } if ($edit_user) { if ($update_user) { // do error checking // remove html tags from user name $user_fname=strip_tags($user_fname); $user_lname=strip_tags($user_lname); $user_login=strip_tags($user_login); // test for first name supplied if (strlen(trim($user_fname))) { $fnamesuppld=true; } else { $fnamesuppld=false; $fnamesuppld_err=true; } // test for last name supplied if (strlen(trim($user_lname))) { $lnamesuppld=true; } else { $lnamesuppld=false; $lnamesuppld_err=true; } // test for name unique if (mysqli_num_rows(mysqli_query($drs_db,"select id from users where firstname=\"$user_fname\" and lastname=\"$user_lname\" and id!=\"$user_id\""))) { if (mysqli_num_rows(mysqli_query($drs_db,"select id from users where firstname=\"$user_fname\" and lastname=\"$user_lname\""))) { $nameunique=false; $nameunique_err=true; } else { $nameunique=true; } } else { $nameunique=true; } // test for login supplied if (strlen(trim($user_login))) { $loginsuppld=true; } else { $loginsuppld=false; $loginsuppld_err=true; } // test for login unique if (mysqli_num_rows(mysqli_query($drs_db,"select id from users where login=\"$user_login\" and id!=\"$user_id\""))) { if (mysqli_num_rows(mysqli_query($drs_db,"select id from users where login=\"$user_login\""))) { $loginunique=false; $loginunique_err=true; } else { $loginunique=true; } } else { $loginunique=true; } // sanitize first name, last name, login $clean_fname=mysqli_real_escape_string($drs_db,$user_fname); $clean_lname=mysqli_real_escape_string($drs_db,$user_lname); $clean_login=mysqli_real_escape_string($drs_db,$user_login); if ($user_pass!="password_is_unchanged") { // test passwords $passresults=validate_password($user_pass,$user_passconf); if ($passresults['match']) { $passmatch=true; } else { $passmatch=false; $passmatch_err=true; } if ($passresults['complex']) { $passcomplex=true; } else { $passcomplex=false; $passcomplex_err=true; } if ($passmatch && $passcomplex) { $passhash=password_hash($user_pass,PASSWORD_DEFAULT); $updqry="update users set firstname=\"$clean_fname\",lastname=\"$clean_lname\",login=\"$clean_login\",password_hash=\"$passhash\" where id=\"$user_id\""; } } else { $passmatch=true; $passcomplex=true; $updqry="update users set firstname=\"$clean_fname\",lastname=\"$clean_lname\",login=\"$clean_login\" where id=\"$user_id\""; } if ($fnamesuppld && $lnamesuppld && $nameunique && $loginsuppld && $loginunique && $passcomplex && $passmatch) { // modify the table mysqli_query($drs_db,$updqry); } } } // ******** end database manipulation ******** pagetable("begin"); if (!$print) { pageblock("left","begin"); sidemenu(); pageblock("left","end"); } pageblock("right","begin"); banner($print); echo "
"; echo "

"; if ($usernameunique_err) format_message(1,"User name already exists."); if ($fnamesuppld_err) format_message(1,"First name cannot be blank."); if ($lnamesuppld_err) format_message(1,"Last name cannot be blank."); if ($loginsuppld_err) format_message(1,"Login cannot be blank."); if ($loginunique_err) format_message(1,"Login already exists."); if ($passcomplex_err) format_message(1,"Password doesn't meet complexity requirements."); if ($passmatch_err) format_message(1,"The supplied passwords don't match."); // set form options for editing $sectiontitle="Modify Account

"; $formtag="

"; $buttontags="
"; // pull current values from database $currentvalues=mysqli_fetch_assoc(mysqli_query($drs_db,"select * from users where id=$user_id")); $user_fname=$currentvalues["firstname"]; $user_lname=$currentvalues["lastname"]; $user_login=$currentvalues["login"]; $user_pass=$user_passconf="password_is_unchanged"; $password_help="Password must be at least 8 characters in length and contain at least one upper case letter, one lower case letter, one number, and one special character."; echo " $sectiontitle $formtag

First Name:

Last Name:

Login:

Password:

Repeat Password:

Need a random password? "; $rpwok=false; while (!$rpwok) { $rpw=substr(str_shuffle(password_hash(microtime(),PASSWORD_DEFAULT)), 10, 12); $rpwtst=validate_password($rpw,$rpw); if ($rpwtst['complex']) $rpwok=true; } echo " $rpw

$buttontags

"; echo "

"; $curbgc=getsetting("background_color",$user_id); $curmbgc=getsetting("menubg_color",$user_id); $curtc=getsetting("text_color",$user_id); $curlc=getsetting("link_color",$user_id); $curvlc=getsetting("vlink_color",$user_id); $curhc=getsetting("heading_color",$user_id); echo " Color Configuration Parameters

$\"\"$

R H
G S
B V

#

"; echo "

"; echo "
"; banner($print); pageblock("right","end"); pagetable("end"); framework("end","","",$print); ?>