php 如何允许登录的用户更新/编辑他们的个人资料设置/信息

how to allow users logged in to UPDATE / EDIT their profile settings/information

提问by This Guy

Question at hand:

手头问题：

How do I create the php code to let users who are logged into my site edit/update their profile settings/information?

如何创建 php 代码以让登录到我网站的用户编辑/更新他们的个人资料设置/信息？

I have 1 part working correctly for users to change their password, however, have no idea where to start when it comes to allowing users who are logged in to edit/update their other settings such as:

我有 1 部分工作正常，用户可以更改密码，但是，在允许登录的用户编辑/更新其他设置时，不知道从哪里开始，例如：

(1)nickname, (2)country, (3)date of birth, (4)gender, (5)motto and (6)bio

(1)昵称， (2)国家， (3)出生日期， (4)性别， (5)座右铭和 (6)生物

---

---

I'll provide the php and html code below that I have that is working for changing password, but I know that I need more to let users change/edit/update their other information. I tried using what is below as a reference to create the php code for the other information, but it didn't work so I have no idea where to even begin! Any help will be much appreciated...

我将在下面提供用于更改密码的 php 和 html 代码，但我知道我需要更多内容来让用户更改/编辑/更新他们的其他信息。我尝试使用下面的内容作为参考来为其他信息创建 php 代码，但它没有用，所以我什至不知道从哪里开始！任何帮助都感激不尽...

PHP reference code:

PHP参考代码：

if($_POST['submit']=='Change')
{
    $err = array();
    if(!$_POST['password1'] || !$_POST['passwordnew1'])
        $err[] = 'All the fields must be filled in!';
    if(!count($err))
    {
        $_POST['password1'] = mysql_real_escape_string($_POST['password1']);
        $_POST['passwordnew1'] = mysql_real_escape_string($_POST['passwordnew1']);
        $row = mysql_fetch_assoc(mysql_query("SELECT id,username FROM members WHERE username='{$_SESSION['username']}' AND pass='".md5($_POST['password1'])."'"));
        if($row['username'])
    {
        $querynewpass = "UPDATE members SET pass='".md5($_POST['passwordnew1'])."' WHERE username='{$_SESSION['username']}'";
        $result = mysql_query($querynewpass) or die(mysql_error());
        $_SESSION['msg']['passwordchange-success']='* You have successfully changed your password!';
    }
        else $err[]='Wrong password to start with!';
    }
    if($err)
    $_SESSION['msg']['passwordchange-err'] = implode('<br />',$err);
    header("Location: members.php?id=" . $_SESSION['username']);
    exit;
}

HTML reference code:

HTML 参考代码：

<form action="" method="post"> 
    <label class="grey" for="password1">Current Password:</label>
    <input class="field" type="password" name="password1" id="password1" value="" size="23" />
    <label class="grey" for="password">New Password:</label>
    <input class="field" type="password" name="passwordnew1" id="passwordnew1" size="23" />
    <input type="submit" name="submit" value="Change" class="bt_register" style="margin-left: 382px;" />
      <div class="clear"></div>
    <?php
    if($_SESSION['msg']['passwordchange-err'])
    {
        echo '<div class="err">'.$_SESSION['msg']['passwordchange-err'].'</div>';
        unset($_SESSION['msg']['passwordchange-err']);
    }
    if($_SESSION['msg']['passwordchange-success'])
    {
        echo '<div class="success">'.$_SESSION['msg']['passwordchange-success'].'</div>';
        unset($_SESSION['msg']['passwordchange-success']);
    }
    ?>
</form>

So how would I create the php code to make this work for users to be able to edit/update their own profile settings/information from the numeric list I provided above (1-6)?

那么我将如何创建 php 代码来使用户能够从我上面提供的数字列表中编辑/更新他们自己的配置文件设置/信息（1-6）？

And I know using mysqli/pdo is a better alternative to use, but I unfortunately need to use the old deprecated mysql_* stuff for this project at this time...

而且我知道使用 mysqli/pdo 是更好的选择，但不幸的是，我此时需要为此项目使用旧的已弃用的 mysql_* 东西......

If you need more info, let me know ;)

如果您需要更多信息，请告诉我；）

EDIT: Additional Question,

编辑：附加问题，

I'd assume too that I'd need to create variables for each column too such as:

我也假设我也需要为每一列创建变量，例如：

$nickname = $_POST['nickname'];

$昵称 = $_POST['昵称'];

$country = $_POST['country'];

$country = $_POST['country'];

etc...or is that not correct?

等等...或者这不正确吗？

RE-EDIT:

重新编辑：

Would something like this be applicable?

这样的事情是否适用？

$id = $_SESSION['id'];
if ($_POST['country']) {
    $country = $_POST['country'];
    $nickname = $_POST['nickname'];
    $DOB = $_POST['DOB'];
    $gender = $_POST['gender'];
    $motto = $_POST['motto'];
    $bio = $_POST['bio'];
    $sql = mysql_query("UPDATE members SET country='$country', nickname='$nickname', DOB='$DOB', gender='$gender', motto='$motto', bio='$bio' WHERE id='$id'"); 

exit;
}

$sql = mysql_query("SELECT * FROM members WHERE id='$id' LIMIT 1");
while($row = mysql_fetch_array($sql)){
$country = $row["country"];
$nickname = $row["nickname"];
$DOB = $row["DOB"];
$gender = $row["gender"];
$motto = $row["motto"];
$bio = $row["bio"];
}

Or am I way off base?

还是我离基地很远？

回答by rechandler

short version ;)

精简版 ;）

HTMLfile:

HTML文件：

<form action="./change.php" method="post"> 
    Nickname: <input type="text" name="nickname"><br />
    Country: <input type="text" name="country"><br />
    Date of birth: <input type="text" name="date_of_birth"><br />
    Gender: <input type="text" name="gender"><br />
    Motto: <input type="text" name="motto"><br />
    Bio: <input type="text" name="bio"><br />
    <input type="submit" value="Submit">
</form>

change.php:

更改.php：

<?php
    function filter($date)
    {
        return trim(htmlspecialchars($date));
    }

    $nickname = filter($_POST['nickname'])
    $country = filter($_POST['country'])
    $date_of_birth = filter($_POST['date_of_birth'])
    $gender = filter($_POST['gender'])
    $motto = filter($_POST['motto'])
    $bio = filter($_POST['bio'])

    if (isUserLogIn)
    {
        //SQL update query
    }

?>