prepare("SELECT id, name, email, photo FROM users WHERE id=? AND role='admin'"); $stmt->execute([$_SESSION['admin_id']]); $admin = $stmt->fetch(PDO::FETCH_ASSOC); if (!$admin) { session_destroy(); header("Location: login.php"); exit; } /* ===== UPDATE PROFILE ===== */ $msg = ""; $msg_type = ""; if (isset($_POST['update_profile'])) { $name = trim($_POST['name']); $password = trim($_POST['password']); if ($name != "") { $pdo->prepare("UPDATE users SET name=? WHERE id=?") ->execute([$name, $admin['id']]); } if ($password != "") { $hash = password_hash($password, PASSWORD_BCRYPT); $pdo->prepare("UPDATE users SET password=? WHERE id=?") ->execute([$hash, $admin['id']]); } // Photo Upload if (!empty($_FILES['photo']['name'])) { $ext = strtolower(pathinfo($_FILES['photo']['name'], PATHINFO_EXTENSION)); $allow = ['jpg','jpeg','png','webp']; if (in_array($ext, $allow)) { $dir = $_SERVER['DOCUMENT_ROOT'].'/uploads/profile/'; if (!is_dir($dir)) { mkdir($dir, 0755, true); } $file = 'admin_'.$admin['id'].'_'.time().'.'.$ext; $path = 'uploads/profile/'.$file; if (move_uploaded_file($_FILES['photo']['tmp_name'], $dir.$file)) { $pdo->prepare("UPDATE users SET photo=? WHERE id=?") ->execute([$path, $admin['id']]); } } } $msg = "Profile updated successfully!"; $msg_type = "success"; // Refresh Data $stmt->execute([$_SESSION['admin_id']]); $admin = $stmt->fetch(PDO::FETCH_ASSOC); } ?>
My Profile - SejiStore
My Profile
Update your account information
Full Name
Email (Read Only)
New Password
Profile Photo
Save Changes