FM / Inc

/home/techb158/immovalet.ca/Master/Inc

Name	Size	Mode	Actions
Publish_Post.php	5994	0666	edit dl rm
Update_Profile.php	3556	0666	edit dl rm
Update_Publish_Post.php	6318	0666	edit dl rm
upload.php	2458	0666	edit dl rm

Edit: /home/techb158/immovalet.ca/Master/Inc/Update_Profile.php (3556B)

<?php

include_once '../includes/db_connect.php';
include_once '../includes/psl-config.php';

sec_session_start();
$error_msg = "";

if(isset($_POST["submit"])) {

if (isset ($_POST['emails'],$_POST['Company'],$_POST['FirstName'], $_POST['LastName'], $_POST['Location_Address'], $_POST['Contact_Phone'], $_POST['Location_City'], $_POST['Location'],$_POST['Location_State'],$_POST['Location_ZipCode'], $_POST['No_Of_Employee'])) {
   
   $FirstName = $_POST['FirstName'];   
   $LastName = $_POST['LastName'];   
   // $Address = $_POST['Location_Address'];
    $Contact_Phone = $_POST['Contact_Phone'];   
    $Company = $_POST['Company'];
     $Admin_ID=  $_SESSION['user_id'];
     $Location_Address=  $_POST['Location_Address'];
     $Location_City=  $_POST['Location_City'];
     $Location=  $_POST['Location'];
     $Location_State=  $_POST['Location_State'];
     $Location_ZipCode=  $_POST['Location_ZipCode'];
     $No_Of_Employee=  $_POST['No_Of_Employee'];
         
    $email = filter_input(INPUT_POST, 'emails', FILTER_SANITIZE_EMAIL);
    $email = filter_var($email, FILTER_VALIDATE_EMAIL);
    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        // Not a valid email
        //$error_msg .= '<p class="error">The email address you entered is not valid</p>';
		$texts="n'est pas valide";
		 header('Location: modifier_profil.php?error=Courriel que vous avez entré '.$texts.'!');
    exit(); 
    }
   // header('Location: modifier_profil.php?error='.$Admin_ID);
   // exit();
//$error_msg .= $FUserNames .' '. $Admin_ID .' '. $LUserNames;
 // $error_msg .= $FUserNames .' '. $random_salt .' '. $LUserNames .' '. $Address .' '. $Phones .' '. $CompanyNames .' '. $Admin_ID  .' '. $email  .' '. $password ;
    
	if (!$mysqli->query("UPDATE Master SET First_Name='$FirstName', Last_name='$LastName', Company_Name ='$Company', No_Of_Employee ='$No_Of_Employee', Email='$email', Phone ='$Contact_Phone', Address ='$Location_Address', City ='$Location_City', Location ='$Location', State ='$Location_State', ZipCode ='$Location_ZipCode' WHERE M_ID ='$Admin_ID'")) {
		 header('Location: modifier_profil.php?error=Votre mise à jour a échoué!');
	exit(); 
	}else{
		 header('Location: modifier_profil.php?error=Votre mise à jour est réussie!');
    exit(); 
	}		
  
      
}else{
header('Location: modifier_profil.php?error=Toutes les informations sont obligatoires!');
  exit();
    
}

}else if(isset($_POST["submitr"])) {

if($_POST['p'] != "")
	{		
		$Admin_username=  $_SESSION['username'];
		
		$password = filter_input(INPUT_POST, 'p', FILTER_SANITIZE_STRING);
		if (strlen($password) != 128) {
			// The hashed pwd should be 128 characters long.
			// If it's not, something really odd has happened
			//$error_msg .= '<p class="error">Invalid password configuration.</p>';
			header('Location: modifier_profil.php?error=Configuration du mot de passe invalide.');
			exit();
		
		}
     $random_salt = hash('sha512', uniqid(openssl_random_pseudo_bytes(16), TRUE));
        // Create salted password 
        $password = hash('sha512', $password . $random_salt);
	
	
     $Admin_ID=  $_SESSION['user_id'];    
	if (!$mysqli->query("UPDATE Master SET Password ='$password', salt='$random_salt' WHERE M_ID ='$Admin_ID'")) {
		 header('Location: modifier_profil.php?error=Votre mise à jour a échoué!');
	exit(); 
	}else{ header('Location: modifier_profil.php?error=Votre mise à jour est un succès!');
    exit(); 
	}	
    
	
}

}

cmd: