Server : LiteSpeed System : Linux nl-srv-web1396.main-hosting.eu 4.18.0-553.83.1.lve.el8.x86_64 #1 SMP Wed Nov 12 10:04:12 UTC 2025 x86_64 User : u107206879 ( 107206879) PHP Version : 7.2.34 Disable Function : NONE Directory : /home/u107206879/domains/annoncelights.dk/public_html/services_html/ |
<?php
include "../db_connection.php";
include "../sessioncheck.php";
$response = array();
if(isset($_POST) && !empty($_POST)){
$updated_columns = '';
$email_column = '';
$password_column = '';
$username_column = '';
$set = '';
$new_email = '';
$new_password = '';
$new_user_name = '';
$user_id=$_SESSION['id'];
$user_sql=mysqli_query($connection,"SELECT * FROM user WHERE id=".$user_id);
$user_result = mysqli_fetch_assoc($user_sql);
$current_email = $user_result['email'];
$current_password = $user_result['password'];
$current_user_name = $user_result['usrname'];
$current_status = $user_result['status'];
$now_date = date('Y-m-d H:i:s');
if(isset($_POST['email_id']) && !empty($_POST['email_id'])){
$new_email=$_POST['email_id'];
$new_email = stripslashes($new_email);
$new_email = mysqli_real_escape_string($connection, $new_email);
if($current_email != $new_email){
$email_sql=mysqli_query($connection,"SELECT email FROM user WHERE email='".$new_email."' AND id!=".$user_id);
$email_result = mysqli_num_rows($email_sql);
if($email_result != 0){
$response['message'] = 'Email er allerede brugt! Brug en anden email!';
echo json_encode($response);
return;
}
$activationcode=md5($new_email.time());
$set .= (!empty($set) ? ', ' : '') . "new_email_request='".$new_email."', activationcode='".$activationcode."', last_mail_sent='".$now_date."'";
$updated_columns .= (!empty($updated_columns) ? ', ' : '') . "Email";
$email_column = 'Email';
}
}
if(isset($_POST['username']) && !empty($_POST['username'])){
$new_user_name=$_POST['username'];
$new_user_name = stripslashes($new_user_name);
$new_user_name = mysqli_real_escape_string($connection, $new_user_name);
if($current_user_name != $new_user_name){
$username_sql=mysqli_query($connection,"SELECT usrname FROM user WHERE usrname='".$new_user_name."' AND id!=".$user_id);
$username_result = mysqli_num_rows($username_sql);
if($username_result == 0){
$set .= (!empty($set) ? ', ' : '') . "usrname='".$new_user_name."'";
$updated_columns .= (!empty($updated_columns) ? ', ' : '') . "Username";
$username_column = 'Brugernavn';
}else{
$response['message'] = 'Dette brugernavn er allerede taget af nogen! Vælg et andet brugernavn!';
echo json_encode($response);
return;
}
}
}
if(isset($_POST['new_password']) && !empty($_POST['new_password'])){
$new_password=$_POST['new_password'];
$new_password = stripslashes($new_password);
$new_password = mysqli_real_escape_string($connection, $new_password);
if($current_password != $new_password){
$set .= (!empty($set) ? ', ' : '') . "password='".$new_password."'";
$updated_columns .= (!empty($updated_columns) ? ', ' : '') . "Password";
$password_column = 'Adgangskode';
}
}
if(isset($_POST['pref_lang']) && !empty($_POST['pref_lang'])){
$pref_lang=$_POST['pref_lang'];
$pref_lang = stripslashes($pref_lang);
$pref_lang = mysqli_real_escape_string($connection, $pref_lang);
$set .= (!empty($set) ? ', ' : '') . "pref_lang='".$pref_lang."'";
$updated_columns .= (!empty($updated_columns) ? ', ' : '') . "Foretrukne sprog";
$pref_lang_column = 'Foretrukne sprog';
}
if($set != ''){
$update_sql = "UPDATE user SET $set WHERE id=$user_id";
$result=mysqli_query($connection,$update_sql);
if($result && $current_email != $new_email){
$to=$new_email;
$msg= "Kære $current_user_name \n";
$subject="Email verifikation (".MAIN_EMAIL_NAME.")";
$headers='From:'.MAIN_EMAIL_NAME.' <'.MAIN_EMAIL.'>';
$msg.="Oplysninger ændret succesfuldt. Du har også anmodet om ændring af e-mail\n";
$msg.="Klik venligst på Følgende link for at bekræfte og ændre din email-adresse. \n
\n".SUB_URL."/email_verification.php?code=$activationcode";
mail($to,$subject,$msg,$headers);
$message = '';
if(!empty($email_column)){
$message .= $email_column."<br>";
}
if(!empty($password_column)){
$message .= $password_column."<br>";
}
if(!empty($username_column)){
$message .= $username_column."<br>";
}
$message .= 'Opdateret med succes.<br>';
$message .= "Tjek din email for at bekræfte den nye e-mail.";
if($current_status == 1){
$response['change_notification'] = '<label class="notify_change">Vennligst bekræft <strong class="new-email">'.$new_email.'</strong> for at ændre gældende e-mail ! <br> Tjek postkassen for at bekræfte ! <br> Husk at tjekke mappen spam !</label><button type="button" name="verification_link" id="verification_link" class="btn btn-custom btn-sm" data-email="'.$new_email.'">Send bekræftelseslinket igen</button>';
}else{
$response['change_notification'] = $new_email;
}
$response['current_status'] = $current_status;
$response['message'] = $message;
}elseif($result){
$message = '';
if(!empty($email_column)){
$message .= $email_column."<br>";
}
if(!empty($password_column)){
$message .= $password_column."<br>";
}
if(!empty($username_column)){
$message .= $username_column."<br>";
}
if(!empty($pref_lang_column)){
$message .= $pref_lang_column."<br>";
}
$message .= 'Opdateret med succes.';
$response['message'] = $message;
}else{
$response['message'] = "Fejl i datopdateringen.";
}
}
echo json_encode($response);
}
?>