Forum Moderators: coopster
Thanks in advance!
<?php
// edit user profile
$u = $_GET['u'];
// create update form
function createform() {
echo '<form action="cms.php?action='. $_GET['action'] .'&u='. $_SESSION['uid'] .'" method="POST">
<p>First Name: <INPUT TYPE="TEXT" NAME="firstname" VALUE="'. $_SESSION['firstname'] .'" /></p>
<p>Last Name: <INPUT TYPE="TEXT" NAME="lastname" VALUE="'. $_SESSION['lastname'] .'" /></p>
<input type="submit" name="submit" value="submit">
<input type="hidden" name="edit_profile" value="1">
</form>';
}
// check for form submit
if (($_POST['edit_profile'] == '1') && ($action == 'edit'))
{
$firstname = $_POST['firstname'];
$lastname = $_POST['lastname'];
$query = "UPDATE users SET firstname ='$firstname', lastname = '$lastname' WHERE id = ('$u')";
$result = mysql_query($query);
if (mysql_query($query))
{
echo '<h4>Success - Profile Updated</h4>
<p><a href="cms.php">Click here</a> to continue.</p>';
} else {
echo '<h4>Error - Profile Not Updated';
echo '<p>'. mysql_error() .'</p>';
createform();
} // end if
} else {
$query = "SELECT * FROM users WHERE id ='$u' LIMIT 1";
$result = mysql_query($query);
while($row=mysql_fetch_array($result))
{
echo '<h4>Edit User Profile</h4>';
createform();
} // end while
} // end main if
?>
$query = "UPDATE users SET firstname ='$firstname', lastname = '$lastname' WHERE id = ('$u')";
$result = mysql_query($query);
if (mysql_query($query))
Corrected:
$query = "UPDATE users SET firstname ='$firstname', lastname = '$lastname' WHERE id = '$u'";
if (mysql_query($query))
However, now it's not populating the fields in createform() anymore.
<?php
// edit user profile
$u = $_GET['u'];
// create update form
function createform() {
echo '<form action="cms.php?action='. $_GET['action'] .'&u='. $_SESSION['uid'] .'" method="POST">
<p>First Name: <INPUT TYPE="TEXT" NAME="firstname" VALUE="'. $row['firstname'] .'" /></p>
<p>Last Name: <INPUT TYPE="TEXT" NAME="lastname" VALUE="'. $row['lastname'] .'" /></p>
<input type="submit" name="submit" value="submit">
<input type="hidden" name="edit_profile" value="1">
</form>';
}
// check for form submit
if (($_POST['edit_profile'] == '1') && ($action == 'edit'))
{
$firstname = $_POST['firstname'];
$lastname = $_POST['lastname'];
$query = "UPDATE users SET firstname ='$firstname', lastname = '$lastname' WHERE id = '$u'";
$result = mysql_query($query);
if (mysql_query($query))
{
// update session
$_SESSION['firstname'] = $firstname;
$_SESSION['lastname'] = $lastname;
echo '<h4>Success - Profile Updated</h4>
<p><a href="cms.php">Click here</a> to continue.</p>';
} else {
echo '<h4>Error - Profile Not Updated';
echo '<p>'. mysql_error() .'</p>';
createform();
} // end if
} else {
$query = "SELECT * FROM users WHERE id ='$u' LIMIT 1";
$result = mysql_query($query);
while($row=mysql_fetch_array($result))
{
echo '<h4>Edit User Profile</h4>';
createform();
} // end while
} // end main if
?>