FM / Master

/home/techb158/immovalet.ca/Master

Name	Size	Mode	Actions
img/	-	0777	rm
Inc/	-	0777	rm
local/	-	0777	rm
acceptprofile.php	5652	0666	edit dl rm
alertes_cv.php	13181	0666	edit dl rm
archives_cv.php	5559	0666	edit dl rm
authorizedpage.php	1216	0666	edit dl rm
bootstrap-cerulean.min.css	121997	0666	edit dl rm
charisma-app.css	41790	0666	edit dl rm
dashboard.php	9901	0666	edit dl rm
delete_offer_employee.php	519	0666	edit dl rm
emplois_offerts.php	17556	0666	edit dl rm
emplois_offert_Ex.php	14292	0666	edit dl rm
footer.php	2440	0666	edit dl rm
head.php	3451	0666	edit dl rm
header.php	2267	0666	edit dl rm
mes_annonces.php	6401	0666	edit dl rm
mes_applications.php	7969	0666	edit dl rm
mes_factures.php	7709	0666	edit dl rm
mes_produits.php	6550	0666	edit dl rm
mes_rapports.php	6238	0666	edit dl rm
modifier_profil.php	12751	0666	edit dl rm
plan_valeurs.php	7342	0666	edit dl rm
search.php	761	0666	edit dl rm
searchs.php	562	0666	edit dl rm
submit_offer_employee.php	12394	0666	edit dl rm
UpdatePostStatus.php	910	0666	edit dl rm
update_offer_employee.php	15209	0666	edit dl rm
Update_Profile.php	3558	0666	edit dl rm
Update_Publish_Post.php	5022	0666	edit dl rm
upload.php	2479	0666	edit dl rm
vori_talent_profil.php	9503	0666	edit dl rm

Edit: /home/techb158/immovalet.ca/Master/Update_Profile.php (3558B)

<?php

include_once '../includes/db_connect.php';
include_once '../includes/psl-config.php';

sec_session_start();
$error_msg = "";

if(isset($_POST["submit"])) {

if (isset ($_POST['emails'],$_POST['Company'],$_POST['FirstName'], $_POST['LastName'], $_POST['Location_Address'], $_POST['Contact_Phone'], $_POST['Location_City'], $_POST['Location'],$_POST['Location_State'],$_POST['Location_ZipCode'], $_POST['No_Of_Employee'])) {
   
   $FirstName = $_POST['FirstName'];   
   $LastName = $_POST['LastName'];   
   // $Address = $_POST['Location_Address'];
    $Contact_Phone = $_POST['Contact_Phone'];   
    $Company = $_POST['Company'];
     $Admin_ID=  $_SESSION['user_id'];
     $Location_Address=  $_POST['Location_Address'];
     $Location_City=  $_POST['Location_City'];
     $Location=  $_POST['Location'];
     $Location_State=  $_POST['Location_State'];
     $Location_ZipCode=  $_POST['Location_ZipCode'];
     $No_Of_Employee=  $_POST['No_Of_Employee'];
         
    $email = filter_input(INPUT_POST, 'emails', FILTER_SANITIZE_EMAIL);
    $email = filter_var($email, FILTER_VALIDATE_EMAIL);
    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        // Not a valid email
        //$error_msg .= '<p class="error">The email address you entered is not valid</p>';
		$texts="n'est pas valide";
		 header('Location: modifier_profil.php?error=Courriel que vous avez entré '.$texts.'!');
    exit(); 
    }
   // header('Location: modifier_profil.php?error='.$Admin_ID);
   // exit();
//$error_msg .= $FUserNames .' '. $Admin_ID .' '. $LUserNames;
 // $error_msg .= $FUserNames .' '. $random_salt .' '. $LUserNames .' '. $Address .' '. $Phones .' '. $CompanyNames .' '. $Admin_ID  .' '. $email  .' '. $password ;
    
	if (!$mysqli->query("UPDATE Master SET First_Name='$FirstName', Last_name='$LastName', Company_Name ='$Company', No_Of_Employee ='$No_Of_Employee', Email='$email', Phone ='$Contact_Phone', Address ='$Location_Address', City ='$Location_City', Location ='$Location', State ='$Location_State', ZipCode ='$Location_ZipCode' WHERE M_ID ='$Admin_ID'")) {
		 header('Location: modifier_profil.php?error=Votre mise à jour a échoué!');
	exit(); 
	}else{
		 header('Location: modifier_profil.php?error=Votre mise à jour est un succès!');
    exit(); 
	}		
  
      
}else{
header('Location: modifier_profil.php?error=Toutes les informations sont obligatoires!');
  exit();
    
}

}else if(isset($_POST["submitr"])) {

if($_POST['p'] != "")
	{		
		$Admin_username=  $_SESSION['username'];
		
		$password = filter_input(INPUT_POST, 'p', FILTER_SANITIZE_STRING);
		if (strlen($password) != 128) {
			// The hashed pwd should be 128 characters long.
			// If it's not, something really odd has happened
			//$error_msg .= '<p class="error">Invalid password configuration.</p>';
			header('Location: modifier_profil.php?error=Configuration du mot de passe invalide.');
			exit();
		
		}
     $random_salt = hash('sha512', uniqid(openssl_random_pseudo_bytes(16), TRUE));
        // Create salted password 
        $password = hash('sha512', $password . $random_salt);
	
	
     $Admin_ID=  $_SESSION['user_id'];    
	if (!$mysqli->query("UPDATE Master SET Password ='$password', salt='$random_salt' WHERE M_ID ='$Admin_ID'")) {
		 header('Location: modifier_profil.php?error=Votre mise à jour a échoué!');
	exit(); 
	}else{ header('Location: modifier_profil.php?error=Votre mise à jour est un succès!');
    exit(); 
	}	
    
	
}

}

cmd: