Merge pull request #17 from PeGaSuS-Coder/patch-1

[irc/unrealircd/unrealircd-webpanel.git] / plugins / sql_auth / sql_auth.php

diff --git a/plugins/sql_auth/sql_auth.php b/plugins/sql_auth/sql_auth.php
index a78a9d0c7c850a80c6fdd9090d9cdfb8b9dd24f4..69f55ba7115c773c50b22fa5b91daccb39da14d0 100644 (file)
--- a/plugins/sql_auth/sql_auth.php
+++ b/plugins/sql_auth/sql_auth.php
@@ -25,6 +25,7 @@ class sql_auth
                Hook::func(HOOKTYPE_USER_DELETE, 'sql_auth::user_delete');
                Hook::func(HOOKTYPE_EDIT_USER, 'sql_auth::edit_core');
                Hook::func(HOOKTYPE_PRE_OVERVIEW_CARD, 'sql_auth::add_pre_overview_card');
+               AuthModLoaded::$status = 1;
 
                if (defined('SQL_DEFAULT_USER')) // we've got a default account
                {
@@ -310,27 +311,46 @@ class sql_auth
                $info = $arr['info'];
                foreach($info as $key => $val)
                {
-                       if (!$val)
+                       $value = NULL;
+                       if (!$val || !strlen($val) || BadPtr($val))
                                continue;
-                       if (!strcmp($key,"update_fname"))
+                       if (!strcmp($key,"update_fname") && $val != $user->first_name)
+                       {
                                $value = "user_fname";
-
-                       elseif (!strcmp($key,"update_lname"))
+                               $valuestr = "first name";
+                       }
+                       elseif (!strcmp($key,"update_lname") && $val != $user->last_name)
+                       {
                                $value = "user_lname";
-
-                       elseif (!strcmp($key,"update_bio"))
+                               $valuestr = "last name";
+                       }
+                       elseif (!strcmp($key,"update_bio") && $val != $user->bio)
+                       {
                                $value = "user_bio";
-                       
+                               $valuestr = "bio";
+                       }
                        elseif (!strcmp($key,"update_pass") || !strcmp($key,"update_pass_conf"))
+                       {
                                $value = "user_pass";
-
-                       elseif(!strcmp($key,"update_email"))
+                               $valuestr = "password";
+                       }
+                       elseif(!strcmp($key,"update_email") && $val != $user->email)
+                       {
                                $value = "user_email";
-                       else
-                               die("Malfunction");
+                               $valuestr = "email address";
+                       }
+                       
+                       if (!$value)
+                               continue;
                        $query = "UPDATE " . SQL_PREFIX . "users SET $value=:value WHERE user_id = :id";
                        $stmt = $conn->prepare($query);
                        $stmt->execute(["value" => $val, "id" => $user->id]);
+
+                       if (!$stmt->rowCount() && $stmt->errorInfo()[0] != "00000")
+                               Message::Fail("Could not update $valuestr for $user->username: ".$stmt->errorInfo()[0]." (CODE: ".$stmt->errorCode().")");
+
+                       else
+                               Message::Success("Successfully updated the $valuestr for $user->username");
                }
        }
 }