useredit.php | Blog van Carlo

Legenda:
Sprint 3
index.php (de log in scherm)
session.php (dit checkt of de persoon die inlogt admin is)
planning.php (de ticket overzicht voor de user)
ticketinsert.php
ticketedit.php
ticketdelete.php
board.php (de ticket overzicht voor de admin)
user.php (de users overzicht voor de admin)
<?php

require "session.php" ;
/**
 * haal de informatie indien nodig op
 * zet de nieuwe informatie in de tabel op de juiste plek als er de informatie al een plek (ID) had
 */


session_start();
require "session.php" ;
$id= $_GET['id'];
$db= mysqli_connect('localhost', 'root', '', 'qrp');
$sql = "SELECT * FROM users WHERE id= '$id'";
$result= mysqli_query($db, $sql);

$username ='';
$password ='';
$email    ='';
$company  ='';
if(isset($_POST['submit']) && $_POST['verify'] === $_POST['password'] ){
    $ok=true;
    $username = $_POST['username'];
    $password = mysqli_real_escape_string($db, $_POST['password']);
    $email    = $_POST['email'];
    $company  = $_POST['company'];
    $hash= md5($password);
    $db= mysqli_connect('localhost', 'root', '', 'qrp');
    $sql = "UPDATE users SET username='$username', password='$hash', email='$email', company='$company' WHERE id='$id'";
    $result= mysqli_query($db, $sql);
    mysqli_close($db);
    header("Location: user.php");

    if (!isset($_POST['username']) || $_POST['username']=== ""){
        $ok=false;
    }
    if (!isset($_POST['password']) || $_POST['password']=== ""){
        $ok=false;
    }
    if (!isset($_POST['verify']) || $_POST['verify']=== ""){
        $ok=false;
    }
    if (!isset($_POST['email']) || $_POST['email']=== ""){
        $ok=false;
    }
    if (!isset($_POST['company']) || $_POST['company']=== ""){
        $ok=false;
    }

}
if($row = mysqli_fetch_assoc($result)){
$rowusername = $row['username'];
$rowemail = $row['email'];
$rowcompany = $row['company'];
mysqli_close($db);
?>
<!DOCTYPE html>
<html>
<link href="css/style.css" type="text/css" rel="stylesheet">
<head>

</head>
<body>
<div class="wrapper">
    <div class="banner">
        <nav>
            <a id="home-button2" class="nav-buttons" href="planning.php">Quick Response Portal</a>
            <a class="nav-buttons" href="board.php">Board</a>
            <a class="nav-buttons" href="user.php">Users</a>
            <a id="sign-out" href="logout.php">Log Out</a>
        </nav>
    </div>
    <div class="form-frame-user2">
        <form method="post" action="">
            <div>
                <p class="form-title">Edit User</p>
            </div>
            <div class="username">
                <label class="label">Username</label>
                <input class="text-field" type="text" name="username" value="<?=$rowusername?>" placeholder="Type your username here"><br>
            </div>
            <div class="password">
                <label class="label">Password</label>
                <input class="text-field" type="password" name="password" value=""
                       placeholder="Type your password here"><br>
                <label class="label">Verify Password</label>
                <input class="text-field" type="password" name="verify" value=""
                       placeholder="Verify your password here"><br>
            </div>
            <div class="email">
                <label class="label">Email</label>
                <input class="text-field" type="text" name="email" value="<?=$rowemail?>" placeholder="Type your email here"><br>
            </div>
            <div class="company-name">
                <label class="label">Company Name</label>
                <input class="text-field" type="text" name="company" value="<?=$rowcompany?>" placeholder="Type your company name here"><br>

                <p class="fill-up2"></p>
                <input class="login" type="submit" name="submit" value="Submit">
                <?php
                }
                ?>
            </div>
        </form>
    </div>
</div>
</body>
</html>
Portofolio Blog
