<?
session_start();

if(!$_SESSION['userid']){
    header("Location: $basehttp/login");exit();
}

if($_POST) {
    $uniq = uniqid();
    $newpassword = mysql_real_escape_string($_POST['newpassword']); 
    $age = mysql_real_escape_string(htmlentities($_POST['age'])); 
    $gender = mysql_real_escape_string(htmlentities($_POST['gender'])); 
    $description = mysql_real_escape_string(htmlentities($_POST['description'])); 
    $location = mysql_real_escape_string(htmlentities($_POST['location']));
    $email = mysql_real_escape_string(htmlentities($_POST['email'])); 
    $custom = mysql_real_escape_string(serialize($_POST['custom'])); 
    $inbox = intval($_POST[inboxEmail]); 
	$wall = intval($_POST[wallPostEmail]); 
	$friendsEmail = intval($_POST[friendsEmail]); 
		
    if(!filter_var($email, FILTER_VALIDATE_EMAIL)) {
		$errors[] = "Invalid Email Address";
	}
    
    if(!$errors){
        dbQuery("UPDATE users SET email = '$email', location = '$location', age = '$age', gender = '$gender', description = '$description', custom = '$custom', wallPostEmail = '$wall', inboxEmail = '$inbox', friendsEmail ='$friendsEmail' WHERE record_num = '$_SESSION[userid]'",false);
        $message = "Your information has been updated.";

        if($_POST['newpassword']) {
            $getSalt = dbQuery("SELECT salt FROM users WHERE record_num = '".$_SESSION['userid']."'",false);
		 	$getSalt = $getSalt[0];	
            $newpass = mysql_real_escape_string(md5($_POST['newpassword'].$getSalt['salt'])); 
            dbQuery("UPDATE users SET password = '$newpass' WHERE record_num = '".$_SESSION['userid']."'",false);
        }
        if($_FILES['file']['tmp_name']) { 
            if(filesize($_FILES[file]['tmp_name']) > 51200) {
                $message = "Your avatar is too big. It can be a maximum of 50kb in GIF,JPG, or PNG format.";
            }
            else {
                $ext = explode(".",strtolower($_FILES['file']['name'])); 
                $ext = array_reverse($ext); 
                if($ext[0] != 'jpg' && $ext[0] != 'jpeg' && $ext[0] != 'png' && $ext[0] != 'gif') { 
                    $message = "You may only upload image files.";
                }
                else {
                    $filename = $uniq.'.'.$ext[0]; ;									
                    $target = $misc_path.'/'.$filename;
                    $target_big = $misc_path.'/'."big-".$filename;	
                    move_uploaded_file($_FILES[file][tmp_name],$target_big);	
                    makeImageThumbnail($target_big,$target,800,600,'mogrify');
                    makeImageThumbnail($target_big,$target,170,130);
                    dbQuery("UPDATE users SET avatar = '$filename' WHERE record_num = '".$_SESSION['userid']."'",false);
                    $message = "Your information has been updated.";
                }
            }
        }
    }
}

$title = 'Edit Profile';
$headertitle = 'Edit Profile';

$userRes = dbQuery("SELECT * FROM users WHERE record_num = '".$_SESSION['userid']."'",false);
$urow = $userRes[0];
$custom = unserialize($urow['custom']);

getTemplate("template.overall_header.php");
getTemplate("template.edit_profile.php");
getTemplate("template.overall_footer.php");
?>