просто создал страницу «changedetails.php», где пользователи могут изменять свои данные, такие как «пароль» и «электронная почта». Они все работают успешно, но я пытаюсь разрешить пользователю изменять их электронную почту, не изменяя свой пароль.
Таким образом, в основном, если пользователь только хотел изменить свой адрес электронной почты, он будет обновляться в БД без необходимости менять свои пароли.
Код:
<title>Honda |</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <link href='http://fonts.googleapis.com/css?family=Julius+Sans+One' rel='stylesheet' type='text/css'> <link href="../css/style.css" rel="stylesheet" type="text/css" media="all" /> <?php session_start(); $username = $_SESSION['sess_user']; echo '<div class="search1"><h2>'.$username.'</h2></div>'; if (isset($_SESSION['sess_user'])) { //user is logged in if (isset($_POST['submit'])) { //start changing password //check fields $oldpassword = md5($_POST['oldpassword']); $newpassword = md5($_POST['newpassword']); $email = $_POST['email']; $repeatnewpassword = md5($_POST['repeatnewpassword']); //check password against db include('../includes/config.php'); $queryget = mysql_query("SELECT password FROM login WHERE username='$username'") or die ("change password failed"); $row = mysql_fetch_assoc($queryget); $oldpassworddb = $row['password']; //check passwords if ($oldpassword==$oldpassworddb) { //check two new passwords if ($newpassword==$repeatnewpassword) { //successs //change password in db $querychange = mysql_query("UPDATE login SET password='$newpassword' WHERE username='$username'"); $querychange = mysql_query("UPDATE login SET email='$email' WHERE username='$username'"); die("<div class='successmate'> Your password has been changed. <a href='index2.php'> <br><br> Return</a></div>"); } else { die("<div class='results'>New password doesn't match!</div>"); } } else { die("<div class='results'>Old password doesn't match!</div>"); } } else { echo "<form class='search1' action='changepassword.php' method='POST'>"; echo "<label>Old Password:</label> <input type='password' id='password' name='oldpassword'>"; echo "<p><label>New Password:</label> "; echo "<input type='password' id='password' name='newpassword'>"; echo "<p><label>Repeat New Password:</label> "; echo "<input type='password' name='repeatnewpassword'><p>"; echo "<label>Email:</label> <input type='email' name='email'>"; echo "<p><input type='submit' name='submit' class='submit' value='submit'>"; echo "<br><br><br><h2><p><a href='index2.php'>Back</a></p></h2></form>"; } } else { die ("You must be logged in to change your password"); } ?> <img src="../images/main.jpg"> Благодаря!
ОБНОВЛЕНИЕ 2:
if ($newpassword != "") { //check passwords if ($oldpassword==$oldpassworddb) { //check two new passwords if ($newpassword==$repeatnewpassword) { //successs //change password in db $querychange = mysql_query("UPDATE login SET password='$newpassword' WHERE username='$username'"); } else die("<div class='results'>New password doesn't match!</div>"); }else die("<div class='results'>Old password doesn't match!</div>"); } } if ($email != "") { $querychange = mysql_query("UPDATE login SET email='$email' WHERE username='$username'"); die("<div class='successmate'>Your password has been changed. <a href='index2.php'><br><br> Return</a></div>"); } } else { echo" <form class='search1' action='changepassword.php' method='POST'> <label>Current Password:</label> <input type='password' id='password' name='oldpassword'><p> <label>New Password:</label> <input type='password' id='password' name='newpassword'><p> <label>Repeat New Password:</label> <input type='password' name='repeatnewpassword'><p> <label>Email:</label> <input type='email' name='email'><p> <input type='submit' name='submit' class='submit' value='submit'><br><br><br> <h2><p><a href='index2.php'>Back</a></p></h2> </form> "; } {else die ("You must be logged in to change your password"); ?>