alert('Please select account before submiting');");
$Error++;
}
else {
$UserName = $_POST['Users'];
}
if ($Error == 0) {
$dbName = "brentsweldingadmin";
//Create Connection
$conDataBase = new mysqli($ServerName, $ServerUserName, $ServerPassword, $dbName);
if ($conDataBase->connect_error) {
die ("Connection Failed: " . $conDataBase->connect_error);
}
$sql = "SELECT password, firstname, lastname, email FROM users where username='".$UserName."'";
$result = $conDataBase->query($sql);
if ($result->num_rows > 0) {
while ($row = $result->fetch_assoc()) {
$Password = $row['password'];
$RePassword = $row['password'];
$Email = $row['email'];
$FirstName = $row['firstname'];
$LastName = $row['lastname'];
}
}
else {
$UserNameErr = "0 Results";
}
$conDataBase->close();
}
}
if (!empty($_POST['submit'])) {
if (empty($_POST['username'])) {
$UserNameErr = "UserName is required";
$Error++;
}
else {
$User = test_input($_POST["username"]);
$User = filter_var($User, FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z0-9]*$/", $User)) {
$UserNameErr = "UserName can only contain letters and numbers";
$Error++;
}
}
if (empty($_POST['password'])) {
$PasswordErr = "Password is required";
$Error++;
}
else {
$Pass = test_input($_POST["password"]);
$Pass = filter_var($Pass, FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z0-9]*$/", $Pass)) {
$PasswordErr = "Password can only have letters and numbers";
$Error++;
}
}
if (empty($_POST['repassword'])) {
$PasswordErr = "RePassword is required";
$Error++;
}
else {
$RePass = test_input($_POST['repassword']);
$RePass = filter_var($RePass, FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z0-9]*$/", $RePass)) {
$RePasswordErr = "RePassword can only have letters and numbers";
$Error++;
}
}
if ($Pass != $RePass) {
$PasswordErr = "Passwords do not match";
$Error++;
}
if (empty($_POST['email'])) {
$EmailErr = "Email is required";
$Error++;
}
else {
$Em = test_input($_POST['email']);
$Em = filter_var($Em, FILTER_SANITIZE_EMAIL);
if (!filter_var($Em, FILTER_SANITIZE_EMAIL)) {
$EmailErr = "Invalid email format";
$Error++;
}
}
if (empty($_POST['firstname'])) {
$FirstNameErr = "First Name is required";
$Error++;
}
else {
$First = test_input($_POST['firstname']);
$First = filter_var($First, FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z]*$/", $First)) {
$FirstNameErr = "First name can only have letters";
$Error++;
}
}
if (empty($_POST['lastname'])) {
$LastNameErr = "Last name is required";
$Error++;
}
else {
$Last = test_input($_POST['lastname']);
$Last = filter_var($Last, FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z]*$/", $Last)) {
$LastNameErr = "Last name can only have letters";
$Error++;
}
}
if ($Error == 0) {
$dbName = "brentsweldingadmin";
Update($User, $Pass, $Em, $First, $Last, $dbName);
}
}
if (!empty($_POST['submitAccount2'])) {
if (empty($_POST['Users2'])) {
$Error++;
echo ("");
}
else {
$UserName2 = $_POST['Users2'];
}
if ($Error == 0) {
$dbName = "brentswelding";
//Create Connection
$conDataBase = new mysqli($ServerName, $ServerUserName, $ServerPassword, $dbName);
if ($conDataBase->connect_error) {
die ("Connection failed: " . $conDataBase->connect_error);
}
$sql = "SELECT id, password, firstname, lastname, email FROM users where username='".$UserName2."'";
$result = $conDataBase->query($sql);
if ($result->num_rows > 0) {
while ($row = $result->fetch_assoc()) {
$Password2 = $row['password'];
$RePassword2 = $row['password'];
$FirstName2 = $row['firstname'];
$LastName2 = $row['lastname'];
$Email2 = $row['email'];
}
}
else {
echo ("0 Results
");
}
$conDataBase->close();
}
}
if (!empty($_POST['submit2'])) {
if (empty($_POST['username2'])) {
$UserName2Err = "UserName is required";
$Error++;
}
else {
$User = test_input($_POST['username2']);
$User = filter_var(FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z0-9]*$/", $User)) {
$UserName2Err = "UserName can only have letters and numbers";
$Error++;
}
}
if (empty($_POST['password2'])) {
$Password2Err = "Password is required";
$Error++;
}
else {
$Pass = test_input($_POST['password2']);
$Pass = filter_var($Pass, FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z0-9]*$/", $Pass)) {
$Password2Err = "Password can only have letters and numbers";
$Error++;
}
}
if (empty($_POST['repassword2'])) {
$RePassword2Err = "Please Re Enter Password";
$Error++;
}
else {
$RePass2 = test_input($_POST['repassword2']);
$RePass2 = filter_var($RePass2, FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z0-9]*$/", $RePass2)) {
$RePassword2Err = "Password can only have letters and numbers";
$Error++;
}
}
if ($Pass2 != $RePass2) {
$Password2Err = "Passwords do not match";
$Error++;
}
if (empty($_POST['email2'])) {
$Email2Err = "Email is required";
$Error++;
}
else {
$Em2 = test_input($_POST['email2']);
$Em2 = filter_var($Em2, FILTER_SANITIZE_EMAIL);
if (!filter_var($Em2, FILTER_SANITIZE_EMAIL)) {
$Email2Err = "Invalid email format";
$Error++;
}
}
if (empty($_POST['firstname2'])) {
$FirstName2Err = "First name is required";
$Error++;
}
else {
$First2 = test_input($_POST['firstname2']);
$First2 = filter_var($First2, FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z]*$/", $First2)) {
$FirstName2Err = "First name can only have letters";
$Error++;
}
}
if (empty($_POST['lastname2'])) {
$LastName2Err = "Last name is required";
$Error++;
}
else {
$Last2 = test_input($_POST['lastname2']);
$Last2 = filter_var($Last2, FILTER_SANITIZE_STRING);
if (!preg_match("/^[a-zA-Z]*$/", $Last2)) {
$LastName2Err = "Last name can only have letters";
$Error++;
}
}
if ($Error == 0) {
$dbName = "brentswelding";
Update($User2, $Pass2, $Em2, $First2, $Last2, $dbName);
}
}
function test_input($data)
{
$data = trim($data);
$data = stripslashes($data);
$data = htmlspecialchars($data);
return $data;
}
function Update($User, $Pass, $Em, $First, $Last, $dbName)
{
$ServerName = "localhost";
$ServerUserName = "root";
$ServerPassword = "root";
$conDataBase = new mysqli($ServerName, $ServerUserName, $ServerPassword, $dbName);
if ($conDataBase->connect_error) {
die ("Connection failed: " . $conDataBase->connect_error);
}
$sql = "UPDATE users SET username='".$User."', password='".$Pass."', firstname='".$First."', lastname='".$Last."', email='".$Em."' where username='".$User."';";
if ($conDataBase->query($sql) === TRUE) {
echo("");
}
else {
echo("");
}
$conDataBase->close();
}
?>
Admin Accounts
User Accounts