32 lines
916 B
PHP
32 lines
916 B
PHP
<?php
|
|
if(isset($_POST["dealerName"])){
|
|
|
|
require_once('ini/conn.php');
|
|
$sql = "SELECT password FROM dealer WHERE dealerID='$_GET[dealerID]'";
|
|
$result = mysqli_query($conn, $sql) or die(mysqli_error($conn));
|
|
$record = mysqli_fetch_assoc($result);
|
|
if($_POST["pwdOld"]!=$record["password"])
|
|
header("location:dealerSetting.php?pwdOld=FALSE");
|
|
else if($_POST["pwdNew"]!=$_POST["pwdNewConf"])
|
|
header("location:dealerSetting.php?pwdNew=FALSE");
|
|
else{
|
|
extract($_POST);
|
|
$sql = "UPDATE dealer SET name='$dealerName', password='$pwdNew', address='$dealerAddr', phoneNumber=$phone WHERE dealerID='$_GET[dealerID]'";
|
|
$result = mysqli_query($conn, $sql) or die(mysqli_error($conn));
|
|
if(mysqli_affected_rows($conn)>0){
|
|
setcookie("DealerName",$_GET["dealerID"],time()*60*15);
|
|
header("location:dealerSetting.php?Update=TRUE");
|
|
}else
|
|
header("location:dealerSetting.php?Update=FALSE");
|
|
}
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
?>
|