WB 2.11.0

<?php

/**

 *

 * @category        frontend

 * @package         account

 * @author          WebsiteBaker Project

 * @copyright       2004-2009, Ryan Djurovich

 * @copyright       2009-2011, Website Baker Org. e.V.

 * @link            http://www.websitebaker2.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.x

 * @requirements    PHP 5.2.2 and higher

 * @version         $Id: email.php 2 2017-07-02 15:14:29Z Manuela $

 * @filesource        $HeadURL: svn://isteam.dynxs.de/wb/2.10.x/trunk/account/email.php $

 * @lastmodified    $Date: 2017-07-02 17:14:29 +0200 (Sun, 02 Jul 2017) $

 *

 */

// Must include code to stop this file being access directly

if(defined('WB_PATH') == false) { die("Cannot access this file directly"); }

// Get entered values

    $password = $wb->get_post('current_password');

    $email = $wb->get_post('email');

// validate password

    $sql  = 'SELECT `user_id` FROM `'.TABLE_PREFIX.'users` '

          . 'WHERE `user_id` = '.$wb->get_user_id().' AND `password` = \''.md5($password).'\'';

    $rowset = $database->query($sql);

// Validate values

    if($rowset->numRows() == 0) {

        $error[] = $MESSAGE['PREFERENCES_CURRENT_PASSWORD_INCORRECT'];

    }else {

        if(!$wb->validate_email($email)) {

            $error[] = $MESSAGE['USERS_INVALID_EMAIL'];

        }else {

            $email = $wb->add_slashes($email);

// Update the database

            $sql  = 'UPDATE `'.TABLE_PREFIX.'users` '

                  . 'SET `email` = \''.$database->escapeString($email).'\' '

                  . 'WHERE `user_id` = \''.$wb->get_user_id().'\'';

             $database->query($sql);

            if($database->is_error()) {

                $error[] = $database->get_error();

            } else {

                $success[] = $MESSAGE['PREFERENCES_EMAIL_UPDATED'];

                $_SESSION['EMAIL'] = $email;

            }

        }

    }