prepare("UPDATE " . DB_PREFIX . "users SET email = ? WHERE id = ?")->execute([$email, $_SESSION['user_id']]); $message = ['type' => 'success', 'text' => 'Профиль обновлен']; } catch (Exception $e) { $message = ['type' => 'error', 'text' => 'Ошибка']; } }
else { $message = ['type' => 'error', 'text' => 'Укажите корректный email']; }
} elseif ($action === 'password') {
$current = $_POST['current_password'] ?? ''; $new = $_POST['new_password'] ?? ''; $confirm = $_POST['confirm_password'] ?? '';
if (empty($current) || empty($new) || empty($confirm)) { $message = ['type' => 'error', 'text' => 'Заполните все поля']; }
elseif ($new !== $confirm) { $message = ['type' => 'error', 'text' => 'Пароли не совпадают']; }
elseif (strlen($new) < 6) { $message = ['type' => 'error', 'text' => 'Пароль минимум 6 символов']; }
else { $stmt = $pdo->prepare("SELECT password FROM " . DB_PREFIX . "users WHERE id = ?"); $stmt->execute([$_SESSION['user_id']]); $user = $stmt->fetch(); if ($user && password_verify($current, $user['password'])) { $pdo->prepare("UPDATE " . DB_PREFIX . "users SET password = ? WHERE id = ?")->execute([password_hash($new, PASSWORD_DEFAULT), $_SESSION['user_id']]); $message = ['type' => 'success', 'text' => 'Пароль изменен']; } else { $message = ['type' => 'error', 'text' => 'Текущий пароль неверен']; } }
}
}
$stmt = $pdo->prepare("SELECT * FROM " . DB_PREFIX . "users WHERE id = ?"); $stmt->execute([$_SESSION['user_id']]); $user = $stmt->fetch();
?>