| 1 | <?php
 | 
  
    | 2 | /**
 | 
  
    | 3 |  *
 | 
  
    | 4 |  * @category        frontend
 | 
  
    | 5 |  * @package         account
 | 
  
    | 6 |  * @author          WebsiteBaker Project
 | 
  
    | 7 |  * @copyright       2004-2009, Ryan Djurovich
 | 
  
    | 8 |  * @copyright       2009-2010, Website Baker Org. e.V.
 | 
  
    | 9 |  * @link			http://www.websitebaker2.org/
 | 
  
    | 10 |  * @license         http://www.gnu.org/licenses/gpl.html
 | 
  
    | 11 |  * @platform        WebsiteBaker 2.8.x
 | 
  
    | 12 |  * @requirements    PHP 4.3.4 and higher
 | 
  
    | 13 |  * @version         $Id: email.php 1289 2010-02-10 15:13:21Z kweitzel $
 | 
  
    | 14 |  * @filesource		$HeadURL: svn://isteam.dynxs.de/wb-archiv/trunk/wb/account/email.php $
 | 
  
    | 15 |  * @lastmodified    $Date: 2010-02-10 16:13:21 +0100 (Wed, 10 Feb 2010) $
 | 
  
    | 16 |  *
 | 
  
    | 17 |  */
 | 
  
    | 18 | 
 | 
  
    | 19 | if(!defined('WB_URL')) {
 | 
  
    | 20 | 	header('Location: ../index.php');
 | 
  
    | 21 | 	exit(0);
 | 
  
    | 22 | }
 | 
  
    | 23 | 
 | 
  
    | 24 | // Get the values entered
 | 
  
    | 25 | $current_password = $wb->get_post('current_password');
 | 
  
    | 26 | $email = $wb->get_post('email');
 | 
  
    | 27 | 
 | 
  
    | 28 | // Create a javascript back link
 | 
  
    | 29 | $js_back = "javascript: history.go(-1);";
 | 
  
    | 30 | 
 | 
  
    | 31 | // Get existing password
 | 
  
    | 32 | $database = new database();
 | 
  
    | 33 | $query = "SELECT user_id FROM ".TABLE_PREFIX."users WHERE user_id = '".$wb->get_user_id()."' AND password = '".md5($current_password)."'";
 | 
  
    | 34 | $results = $database->query($query);
 | 
  
    | 35 | 
 | 
  
    | 36 | // Validate values
 | 
  
    | 37 | if($results->numRows() == 0) {
 | 
  
    | 38 | 	$wb->print_error($MESSAGE['PREFERENCES']['CURRENT_PASSWORD_INCORRECT'], $js_back, false);
 | 
  
    | 39 | }
 | 
  
    | 40 | // Validate values
 | 
  
    | 41 | if(!$wb->validate_email($email)) {
 | 
  
    | 42 | 	$wb->print_error($MESSAGE['USERS']['INVALID_EMAIL'], $js_back, false);
 | 
  
    | 43 | }
 | 
  
    | 44 | 
 | 
  
    | 45 | $email = $wb->add_slashes($email);
 | 
  
    | 46 | 
 | 
  
    | 47 | // Update the database
 | 
  
    | 48 | $database = new database();
 | 
  
    | 49 | $query = "UPDATE ".TABLE_PREFIX."users SET email = '$email' WHERE user_id = '".$wb->get_user_id()."' AND password = '".md5($current_password)."'";
 | 
  
    | 50 | $database->query($query);
 | 
  
    | 51 | if($database->is_error()) {
 | 
  
    | 52 | 	$wb->print_error($database->get_error,'index.php', false);
 | 
  
    | 53 | } else {
 | 
  
    | 54 | 	$wb->print_success($MESSAGE['PREFERENCES']['EMAIL_UPDATED'], WB_URL.'/account/preferences.php');
 | 
  
    | 55 | 	$_SESSION['EMAIL'] = $email;
 | 
  
    | 56 | }
 | 
  
    | 57 | 
 | 
  
    | 58 | ?>
 |