iolovolio/components/account/account.html

<?php
  @include('components/breadcrumb/breadcrumb.php');
  setlocale(LC_MONETARY, 'it_IT.UTF-8');

  if(!$getQ[1]) {
    header("location: /account/ordini");
  }

  $message = '';

  if(isset($_POST['update_address'])) {
    $query = "UPDATE `users` SET
      `first_name` = '".trim($_POST['first_name'])."', `last_name` = '".trim($_POST['last_name'])."',
      `phone` = '".trim($_POST['phone'])."',
      `address` = '".trim($_POST['address'])."', `city` = '".trim($_POST['city'])."',
      `zip_code` = '".trim($_POST['zip_code'])."', `province` = '".trim($_POST['province'])."'
      WHERE id = ".$_POST['update_address'];
    $q = mysqli_query($conn, $query);
    $q = mysqli_query($conn, "SELECT * FROM users WHERE id = ".$_POST['update_address']);
    $r = mysqli_fetch_array($q);
    $_SESSION['AUTH'] = $r;
    $message = "Indirizzo aggiornato!";
  }

  if(isset($_POST['update_password'])) {
    if($_SESSION['AUTH']['password'] != md5(trim($_POST['old_pwd']))) {
      $message = 'La vecchia password non è corretta';
    } else if(trim($_POST['new_pwd']) != trim($_POST['confirm_pwd'])) {
      $message = 'Le passwords non corrispondono';
    } else {
      $query = "UPDATE `users` SET
        `password` = '".md5(trim($_POST['new_pwd']))."' WHERE id = ".$_POST['update_password'];
      $q = mysqli_query($conn, $query);
      $q = mysqli_query($conn, "SELECT * FROM users WHERE id = ".$_POST['update_password']);
      $r = mysqli_fetch_array($q);
      $_SESSION['AUTH'] = $r;
      $message = "Password aggiornata!";
    }
  }

?>

<div class="component-account">
  <div class="container">
    <div class="row">

      <?php
        if($message) {
          echo "<div class=\"message col-12\">$message</div>";
        }
      ?>

      <?php
      if(!isset($_SESSION['AUTH'])) {
      ?>
      <div class="content col-12">
        <div class="row">
          <div class="col-12 col-md-4 mr-auto mb-5">
            <span class="title">Sei già registrato?</span>
            <form class="login-form <?= $_POST['login_usr'] && $_POST['login_pwd'] ? 'error' : '';?>" action="/account/ordini" method="POST">
              <div class="row">
                <div class="col-12">
                  <span class="label">E-mail</span>
                  <input type="email" name="login_usr" class="input-text">
                </div>
                <div class="col-12">
                  <span class="label">Password</span>
                  <input type="password" name="login_pwd" class="input-text">
                </div>
                <div class="col-12 text-right">
                  <a href="/recupera-password" class="text-black font-12 d-block pt-2">Hai dimenticato la password?</a>
                </div>
                <div class="col-12 mt-4">
                  <button class="button button-brown button-big ml-auto">Accedi</button>
                </div>
              </div>
            </form>
          </div>
          <div class="col-12 col-md-7">
            <span class="title">Non sei registrato?</span>
            <div class="row new-user-form">
              <div class="col-12 col-md-6 pr-2 pr-md-4">
                <span class="label">Nome *</span>
                <input type="text" name="first_name" class="input input-text" required>
              </div>
              <div class="col-12 col-md-6 pr-2 pr-md-4">
                <span class="label">Cognome *</span>
                <input type="text" name="last_name" class="input input-text" required>
              </div>
              <div class="col-12 col-md-6 pr-2 pr-md-4">
                <span class="label">E-mail *</span>
                <input type="email" name="email" class="input input-text" required>
              </div>
              <div class="col-12 col-md-6 pr-2 pr-md-4">
                <span class="label">Telefono</span>
                <input type="tel" name="phone" class="input input-text">
              </div>
              <div class="col-12 col-md-6 pr-2 pr-md-4">
                <span class="label">Indirizzo *</span>
                <input type="text" name="address" class="input input-text" required>
              </div>
              <div class="col-12 col-md-6 pr-2 pr-md-4">
                <span class="label">Città *</span>
                <input type="text" name="city" class="input input-text" required>
              </div>
              <div class="col-12 col-md-4 pr-2 pr-md-4 mr-auto">
                <span class="label">CAP *</span>
                <input type="text" name="zip_code" class="input input-text" required>
              </div>
              <div class="col-12 col-md-4 pr-2 pr-md-4 mr-auto">
                <span class="label">Provincia *</span>
                <select name="province" class="input input-select" required>
                  <?php
                    foreach($PROV as $k => $p) {
                      echo "<option value=\"".$k."\">".$p."</option>";
                    }
                  ?>
                </select>
              </div>
              <div class="col-12 col-md-6 pr-2 pr-md-4">
                <span class="label">Scegli una password *</span>
                <input type="password" name="password" class="input input-text" required>
                <span class="font-10">deve essere di almeno 8 caratteri contenere almeno un numero, un carattere maiuscolo, uno minuscolo, sono consentiti i seguenti caratteri speciali: @$!%*#?&^+-</span>
              </div>
              <div class="col-12 col-md-6 pr-2 pr-md-4">
                <span class="label">Conferma password *</span>
                <input type="password" name="password_confirm" class="input input-text" required>
              </div>

              <div class="col-12 mt-4">
                <button class="register button button-brown button-big ml-auto">Registrati</button>
              </div>
            </div>
          </div>
        </div>
      </div>

      <?php
      } else {
      ?>

      <div class="content col-12 col-md-8 mr-auto order-1 order-md-0">
        <?php
          if($getQ[1] == 'indirizzo') {
      ?>
        <form method="post">
          <span class="title">Indirizzo</span>
          <div class="row">
            <div class="col-12 col-md-6 pr-2 pr-md-4">
              <span class="label">Nome *</span>
              <input type="text" name="first_name" class="input input-text"
                      value="<?= $_SESSION['AUTH']['first_name'];?>" required>
            </div>
            <div class="col-12 col-md-6 pr-2 pr-md-4">
              <span class="label">Cognome *</span>
              <input type="text" name="last_name" class="input input-text"
                      value="<?= $_SESSION['AUTH']['last_name'];?>" required>
            </div>
            <div class="col-12 col-md-6 pr-2 pr-md-4">
              <span class="label">E-mail *</span>
              <input type="email" name="email" class="input input-text"
                      value="<?= $_SESSION['AUTH']['email'];?>" disabled required>
            </div>
            <div class="col-12 col-md-6 pr-2 pr-md-4">
              <span class="label">Telefono</span>
              <input type="tel" name="phone" class="input input-text"
                      value="<?= $_SESSION['AUTH']['phone'];?>">
            </div>
            <div class="col-12 col-md-6 pr-2 pr-md-4">
              <span class="label">Indirizzo *</span>
              <input type="text" name="address" class="input input-text"
                      value="<?= $_SESSION['AUTH']['address'];?>" required>
            </div>
            <div class="col-12 col-md-6 pr-2 pr-md-4">
              <span class="label">Città *</span>
              <input type="text" name="city" class="input input-text"
                      value="<?= $_SESSION['AUTH']['city'];?>" required>
            </div>
            <div class="col-12 col-md-4 pr-2 pr-md-4 mr-auto">
              <span class="label">CAP *</span>
              <input type="text" name="zip_code" class="input input-text"
                      value="<?= $_SESSION['AUTH']['zip_code'];?>" required>
            </div>
            <div class="col-12 col-md-4 pr-2 pr-md-4 mr-auto">
              <span class="label">Provincia *</span>
              <?php
                if(isset($_SESSION['AUTH'])) {
                  echo "<input type=\"text\" name=\"province\" class=\"input input-text\"
                      value=\"".$_SESSION['AUTH']['province']."\" required>";
                } else {
              ?>
              <select name="province" class="input input-select" required>
                <?php
                  foreach($PROV as $k => $p) {
                    echo "<option value=\"".$k."\" ".($_SESSION['AUTH']['province'] == $k ? 'selected' : '').">".$p."</option>";
                  }
                ?>
              </select>
              <?php
                }
              ?>
            </div>
            <div class="col-12 col-md-6 pt-4">
              <button type="submit" name="update_address" value="<?= $_SESSION['AUTH']['id'];?>" class="submit button button-big button-brown">salva</button>
            </div>
          </div>
        </form>

      <?php
        }
        if($getQ[1] == 'password') {
      ?>
        <form method="post" id="pwdform">
          <span class="title">Modifica password</span>
          <div class="row">
            <div class="col-12 col-md-6 pr-2 pr-md-4">
              <span class="label">Vecchia password</span>
              <input type="password" name="old_pwd" class="input input-text" required>
            </div>
            <div class="col-12 col-md-6 pr-2 pr-md-4"></div>
            <div class="col-12 col-md-6 pr-2 pr-md-4">
              <span class="label">Nuova password</span>
              <input type="password" name="new_pwd" class="input input-text" required>
              <span class="font-10">deve essere di almeno 8 caratteri contenere almeno un numero, un carattere maiuscolo, uno minuscolo, sono consentiti i seguenti caratteri speciali: @$!%*#?&^+-</span>
            </div>
            <div class="col-12 col-md-6 pr-2 pr-md-4">
              <span class="label">Confrema password</span>
              <input type="password" name="confirm_pwd" class="input input-text" required>
            </div>
            <div class="col-12 col-md-6 pt-4">
              <input type="hidden" name="update_password" value="<?= $_SESSION['AUTH']['id'];?>">
              <button type="button" class="submit update-password button button-big button-brown">salva</button>
            </div>
          </div>
        </form>

      <?php
        }
        if($getQ[1] == 'ordini') {
          $q = mysqli_query($conn, "SELECT * FROM orders WHERE uid = ".$_SESSION['AUTH']['id']." ORDER BY date DESC");
      ?>

        <span class="title">I tuoi ordini</span>
        <?php
          if( mysqli_num_rows($q)) {
        ?>
        <div class="row no-gutters orders-head">
          <div class="col-3 col-md-2">N. ordine</div>
          <div class="col-3 col-md-2">Data</div>
          <div class="col-3 col-md-3">Totale</div>
          <div class="col-3 col-md-2">Stato</div>
          <div class="col-12 col-md-3"></div>
        </div>
        <?php
          } else {
            ?>
            <div class="row no-gutters orders-head">Nessun ordine presente</div>
            <?php
          }
          while($r = mysqli_fetch_array($q)) {
        ?>
        <div class="row no-gutters order-row" data-id="order_<?= $r['id'];?>">
          <div class="col-3 col-md-2"><?= $r['id'];?></div>
          <div class="col-3 col-md-2"><?= conv_date($r['date']);?></div>
          <div class="col-3 col-md-3"><?= money_format('%.2n', $r['total']);?></div>
          <div class="col-3 col-md-2"><?= conv_status($r['status']);?></div>
          <div class="col-3 col-md-3 ml-auto text-md-right toggle">
            <span class="open">Vedi dettagli</span>
            <span class="close">Chiudi dettagli</span>
          </div>


          <div class="col-12 order-details">
          <?php
            $items = json_decode($r['items']);
            foreach($items as $item) {
              $qp = mysqli_query($conn, "SELECT * FROM products WHERE id=".$item->pid);
              $p = mysqli_fetch_array($qp);
              ?>
              <div class="row no-gutters detail-row">
                <div class="col-12 row-title"><?= $p['name'];?></div>
                <!--<div class="col-12"><?= $p['type'];?></div>-->
                <div class="col-12">Quantità: <?= $item->qty;?></div>
                <div class="col-12">Prezzo: <?= money_format('%.2n', $item->price);?></div>
              </div>
              <?php
            }
          ?>
          </div>
        </div>

        <?php
          }
        }
      }
      ?>
      </div>
      <div class="col-12 col-md-3 col-3 ml-auto order-0 order-md-1">
      <?php
        if(isset($_SESSION['AUTH'])) {
      ?>
        <ul class="sections">
          <!--<li class="item <?php if($getQ[1] == 'fatturazione') {echo 'selected';}?>">
            <a class="link" href="/account/fatturazione">Fatturazione</a>
          </li>-->
          <li class="item <?php if($getQ[1] == 'indirizzo') {echo 'selected';}?>">
            <a class="link" href="/account/indirizzo">Indirizzo</a>
          </li>
          <li class="item <?php if($getQ[1] == 'password') {echo 'selected';}?>">
            <a class="link" href="/account/password">Password</a>
          </li>
          <li class="item <?php if($getQ[1] == 'ordini') {echo 'selected';}?>">
            <a class="link" href="/account/ordini">Ordini</a>
          </li>
          <li class="item">
            <a class="link" href="/logout">Log-out</a>
          </li>
        </ul>
      <?php
        }
      ?>
      </div>
    </div>
  </div>
</div>