| 1 | <?php
 | 
  
    | 2 | 
 | 
  
    | 3 | // $Id: email.php 519 2007-12-23 14:37:02Z Ruebenwurzel $
 | 
  
    | 4 | 
 | 
  
    | 5 | /*
 | 
  
    | 6 | 
 | 
  
    | 7 |  Website Baker Project <http://www.websitebaker.org/>
 | 
  
    | 8 |  Copyright (C) 2004-2008, Ryan Djurovich
 | 
  
    | 9 | 
 | 
  
    | 10 |  Website Baker is free software; you can redistribute it and/or modify
 | 
  
    | 11 |  it under the terms of the GNU General Public License as published by
 | 
  
    | 12 |  the Free Software Foundation; either version 2 of the License, or
 | 
  
    | 13 |  (at your option) any later version.
 | 
  
    | 14 | 
 | 
  
    | 15 |  Website Baker is distributed in the hope that it will be useful,
 | 
  
    | 16 |  but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
  
    | 17 |  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
  
    | 18 |  GNU General Public License for more details.
 | 
  
    | 19 | 
 | 
  
    | 20 |  You should have received a copy of the GNU General Public License
 | 
  
    | 21 |  along with Website Baker; if not, write to the Free Software
 | 
  
    | 22 |  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 | 
  
    | 23 | 
 | 
  
    | 24 | */
 | 
  
    | 25 | 
 | 
  
    | 26 | // Print admin header
 | 
  
    | 27 | require('../../config.php');
 | 
  
    | 28 | require_once(WB_PATH.'/framework/class.admin.php');
 | 
  
    | 29 | $admin = new admin('Preferences');
 | 
  
    | 30 | 
 | 
  
    | 31 | // Get entered values
 | 
  
    | 32 | $password = $admin->get_post('current_password');
 | 
  
    | 33 | $email = $admin->get_post('email');
 | 
  
    | 34 | 
 | 
  
    | 35 | // Create a javascript back link
 | 
  
    | 36 | $js_back = "javascript: history.go(-1);";
 | 
  
    | 37 | 
 | 
  
    | 38 | // Get password
 | 
  
    | 39 | $database = new database();
 | 
  
    | 40 | $query = "SELECT user_id FROM ".TABLE_PREFIX."users WHERE user_id = '".$admin->get_user_id()."' AND password = '".md5($password)."'";
 | 
  
    | 41 | $results = $database->query($query);
 | 
  
    | 42 | 
 | 
  
    | 43 | // Validate values
 | 
  
    | 44 | if($results->numRows() == 0) {
 | 
  
    | 45 | 	$admin->print_error($MESSAGE['PREFERENCES']['CURRENT_PASSWORD_INCORRECT']);
 | 
  
    | 46 | }
 | 
  
    | 47 | if(!$admin->validate_email($email)) {
 | 
  
    | 48 | 	$admin->print_error($MESSAGE['USERS']['INVALID_EMAIL']);
 | 
  
    | 49 | }
 | 
  
    | 50 | 
 | 
  
    | 51 | $email = $admin->add_slashes($email);
 | 
  
    | 52 | 
 | 
  
    | 53 | // Update the database
 | 
  
    | 54 | $database = new database();
 | 
  
    | 55 | $query = "UPDATE ".TABLE_PREFIX."users SET email = '$email' WHERE user_id = '".$admin->get_user_id()."'";
 | 
  
    | 56 | $database->query($query);
 | 
  
    | 57 | if($database->is_error()) {
 | 
  
    | 58 | 	$admin->print_error($database->get_error);
 | 
  
    | 59 | } else {
 | 
  
    | 60 | 	$admin->print_success($MESSAGE['PREFERENCES']['EMAIL_UPDATED']);
 | 
  
    | 61 | 	$_SESSION['EMAIL'] = $email;
 | 
  
    | 62 | }
 | 
  
    | 63 | 
 | 
  
    | 64 | // Print admin footer
 | 
  
    | 65 | $admin->print_footer();
 | 
  
    | 66 | 
 | 
  
    | 67 | ?>
 |