SAE_web/tools/updater.php

<?php
require_once $_SERVER['DOCUMENT_ROOT'] . '/tools/dbConnect.php';
session_start();

if (isset($_COOKIE['userData'])) {
    $userDataEncoded = $_COOKIE['userData'];
    $userData = json_decode($userDataEncoded, true);

    $email = $userData['email'];
    $oldEmail = $userData['email'];
    $name = $userData['name'];
    $familyName = $userData['familyName'];
    $role = $userData['role'];
}
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $name = htmlspecialchars($_POST["name"]);
    $familyName = htmlspecialchars($_POST["family_name"]);
    $email = htmlspecialchars($_POST["email"]);
    $password = htmlspecialchars($_POST["password"]);
    $hashedPassword = sha1($password);



    $updateUser = "UPDATE `user` SET `name`='$name',`family_name`='$familyName',`password`='$hashedPassword' WHERE mail = '$oldEmail'";
    $resultUpdateUser = mysqli_query($db, $updateUser);
    if ($resultUpdateUser) {
        setcookie("userData", "", time() - 3600, "/");
        $role = $userData['role'];
        $userData = array(
            "email" => $email,
            "name" => $name,
            "familyName" => $familyName,
            "role" => $role,
        );
        $userDataEncoded = json_encode($userData);
        setcookie("userData", $userDataEncoded, time() + 3600, "/");
        echo "<p class='text'>Utilisateur mis à jour avec succès. </p>";
        header("Location: /account/profile?result=updatesuccess");
    } else {
        echo "<p class='text'>Erreur lors de l'exécution de la requête.</p>";
        header("Location: /account/profile?result=updatefailed");
    }
}

?>