<?php
  // include shared code
  include '../lib/common.php';
  include '../lib/db.php';
  include '../lib/functions.php';
  include '../lib/User.php';
  
  // 401 file referenced since user should be logged in to view this page
  include '401.php';
  
  // generate user information form
  $user\; =\; User::getById($_SESSION['userId']);
  
  ob_start();
  ?>
  <form action="<?php echo htmlspecialchars($\_SERVER[\text{'}PHP\_SELF\text{'}]);\; ?>"\; method="post">$<table>
    <tr>
     <td><label>Username</label></td>
     <td><input type="text" name="username"  disabled="disabled"
      readonly="readonly"value="<?php echo user->username; ?>"/></td>
    </tr><tr>
     <td><label for="email">Email Address</label></td>
     <td><input type="text" name="email" id="email"
      value="<?php echo (isset($\_POST[\text{'}email\text{'}]))?\; htmlspecialchars($_POST['email']) : $user->emailAddr;\; ?>"/>$</td>
    </tr><tr>
     <td><label for="password">New Password</label></td>
     <td><input type="password" name="password1" id="password1"/></td>
    </tr><tr>
     <td><label for="password2">Password Again</label></td>
     <td><input type="password" name="password2" id="password2"/></td>
    </tr><tr>
    <td> </td>
     <td><input type="submit" value="Save"/></td>
     <td><input type="hidden" name="submitted" value="1"/></td>
    </tr><tr>
   </table>
  </form>
  
  <?php
  form = ob_get_contents();
  ob_end_clean();
  
  // show the form if this is the first time the page is viewed
  if (!isset($\_POST[\text{'}submitted\text{'}]))\; \{$GLOBALS['TEMPLATE']['content'] = $form;\; \}$// otherwise process incoming data
  else
  {
      // validate password
      password1 = (isset(_POST['password1']) ?
          sha1($\_POST[\text{'}password1\text{'}])\; :$user->password;
      $password2\; =\; (isset($_POST['password2']) && $\_POST[\text{'}password2\text{'}])\; ?\; sha1($_POST['password2']) : $user->password;$password = ($password1\; ==$password2) ? $password1\; :\; \text{'}\text{'};$// update the record if the input validates
      if (User::validateEmailAddr(_POST['email']) && $password)\; \{$user->emailAddr = $\_POST[\text{'}email\text{'}];$user->password = $password;$user->save();
  
          $GLOBALS[\text{'}TEMPLATE\text{'}][\text{'}content\text{'}]\; =\; \text{'}$<p><strong>Information ' .
              'in your record has been updated.</strong></p>';
      }
      // there was invalid data
      else
      {
          GLOBALS['TEMPLATE']['content'] .= '<p><strong>You provided some ' .
              'invalid data.</strong></p>';
          $GLOBALS[\text{'}TEMPLATE\text{'}][\text{'}content\text{'}]\; .=$form;
      }
  }
  
  // display the page
  include '../templates/template-page.php';
  ?>