Project

General

Profile

1
<?php
2
/**
3
 *
4
 * @category        frontend
5
 * @package         account
6
 * @author          WebsiteBaker Project
7
 * @copyright       2004-2009, Ryan Djurovich
8
 * @copyright       2009-2010, Website Baker Org. e.V.
9
 * @link			http://www.websitebaker2.org/
10
 * @license         http://www.gnu.org/licenses/gpl.html
11
 * @platform        WebsiteBaker 2.8.x
12
 * @requirements    PHP 4.3.4 and higher
13
 * @version         $Id: email.php 1277 2010-01-28 05:18:18Z Luisehahne $
14
 * @filesource		$HeadURL: svn://isteam.dynxs.de/wb-archiv/branches/2.8.x/wb/account/email.php $
15
 * @lastmodified    $Date: 2010-01-28 06:18:18 +0100 (Thu, 28 Jan 2010) $
16
 *
17
 */
18

    
19
if(!defined('WB_URL')) {
20
	header('Location: ../index.php');
21
	exit(0);
22
}
23

    
24
// Get the values entered
25
$current_password = $wb->get_post('current_password');
26
$email = $wb->get_post('email');
27

    
28
// Create a javascript back link
29
$js_back = "javascript: history.go(-1);";
30

    
31
// Get existing password
32
$database = new database();
33
$query = "SELECT user_id FROM ".TABLE_PREFIX."users WHERE user_id = '".$wb->get_user_id()."' AND password = '".md5($current_password)."'";
34
$results = $database->query($query);
35

    
36
// Validate values
37
if($results->numRows() == 0) {
38
	$wb->print_error($MESSAGE['PREFERENCES']['CURRENT_PASSWORD_INCORRECT'], $js_back, false);
39
}
40
// Validate values
41
if(!$wb->validate_email($email)) {
42
	$wb->print_error($MESSAGE['USERS']['INVALID_EMAIL'], $js_back, false);
43
}
44

    
45
$email = $wb->add_slashes($email);
46

    
47
// Update the database
48
$database = new database();
49
$query = "UPDATE ".TABLE_PREFIX."users SET email = '$email' WHERE user_id = '".$wb->get_user_id()."' AND password = '".md5($current_password)."'";
50
$database->query($query);
51
if($database->is_error()) {
52
	$wb->print_error($database->get_error,'index.php', false);
53
} else {
54
	$wb->print_success($MESSAGE['PREFERENCES']['EMAIL_UPDATED'], WB_URL.'/account/preferences.php');
55
	$_SESSION['EMAIL'] = $email;
56
}
57

    
58
?>
(2-2/14)