Working on adding profiles

This commit is contained in:
Michał Gdula 2022-09-22 12:43:22 +00:00
parent 94563eb6f4
commit 1b8e92d144
6 changed files with 297 additions and 94 deletions

View file

@ -61,12 +61,20 @@ class Account {
Returns array with user info
*/
function get_user_info($conn, $id) {
// Setting SQL query
$sql = "SELECT id, username FROM users WHERE id = ".$id;
// Getting results
$query = mysqli_query($conn, $sql);
// Fetching associated info
$user_array = mysqli_fetch_assoc($query);
$sql = "SELECT id, username, created_at FROM users WHERE id = ?";
if ($stmt = mysqli_prepare($conn, $sql)) {
// Bind variables to the prepared statement as parameters
mysqli_stmt_bind_param($stmt, "i", $param_user_id);
$param_user_id = $id;
$stmt->execute();
$query = $stmt->get_result();
// Fetching associated info
$user_array = mysqli_fetch_assoc($query);
}
return($user_array);
}
@ -79,11 +87,21 @@ class Account {
function is_admin($conn, $id) {
if (isset($id) || !empty($id)) {
// Setting SQL query
$sql = "SELECT admin FROM users WHERE id = ".$id;
// Getting results
$query = mysqli_query($conn, $sql);
// Fetching associated info
$user_array = mysqli_fetch_assoc($query);
$sql = "SELECT admin FROM users WHERE id = ?";
if ($stmt = mysqli_prepare($conn, $sql)) {
// Bind variables to the prepared statement as parameters
mysqli_stmt_bind_param($stmt, "i", $param_user_id);
$param_user_id = $id;
$stmt->execute();
$query = $stmt->get_result();
// Fetching associated info
$user_array = mysqli_fetch_assoc($query);
}
if ($user_array['admin'] || $id == 1) {
return True;