<?php

session_start();

include "../config.php";
include "../header.php";
include "../style.php";

if (isset($_POST['Userid'])) {
   $userid = $_POST['Userid'];
}
if (isset($_POST['Password'])) {
   $password = $_POST['Password'];
}
if (isset($_POST['Password2'])) {
   $password2 = $_POST['Password2'];
}
if (isset($_POST['Name'])) {
   $name = $_POST['Name'];
}
if (isset($_POST['PaypalEmail'])) {
   $paypalemail = $_POST['PaypalEmail'];
}
if (isset($_POST['AlertpayEmail'])) {
   $alertpayemail = $_POST['AlertpayEmail'];
}
if (isset($_POST['oldemail'])) {
   $oldemail = $_POST['oldemail'];
}
if (isset($_POST['ContactEmail'])) {
   $contactemail = $_POST['ContactEmail'];
}


if( ($userid<>"")&&($password<>"") ) {

    include("navigation.php");
    include("../banners.php");

	// errorchecking first:

	if (empty($password)) {
		echo "Password field is empty.";
	    exit;
	    }
    if (empty($userid)) {
        echo "Userid  field is empty.";
        exit;
        }
    if (empty($name)) {
        echo "Name field is empty do not match.";
        exit;
        }

    if ($password != $password2 ) {
        echo "Passwords do not match.";
        exit;
        }
		
$sql = mysql_query("SELECT * FROM banned_emails");
while($each = mysql_fetch_array($sql)) {
	if(strpos(strtolower($contactemail), trim(strtolower($each['email']))) !== false) {
		echo "That email address has been banned.";
		exit;	
	}
}   		
	
	if(strpos($contactemail, "@")) {

	    $query = "update members set ";
	    $query .= "pword='$password',name='$name',contact_email='$contactemail',subscribed_email='$contactemail',paypal_email='$paypalemail',alertpay_email='$alertpayemail'";
	    $query .= " where userid='$userid'";

	    $result = mysql_query ($query)
	         or die ("Update failed, please try again.");
	    if ($oldemail != $contactemail) {
	        $query2 = "update members set verified=0 where userid='$Userid'";
	        $result2 = mysql_query ($query2);
			$message = "Dear ".$name.",\n\n"
	               ."Please verify your email address by clicking this link ".$domain."/verify.php?userid=".$userid."&email=".$contactemail."\n\n"
		           ."Thank you!\n\n\n"
		           .$sitename." Admin\n"
		           ."".$adminemail."\n\n\n\n";

			$headers .= "From: $sitename<$adminemail>\n";
			$headers .= "Reply-To: <$adminemail>\n";
			$headers .= "X-Sender: <$adminemail>\n";
			$headers .= "X-Mailer: PHP4\n";
			$headers .= "X-Priority: 3\n";
			$headers .= "Return-Path: <$adminemail>\n";

			@mail($contactemail, $sitename." Email Verification", wordwrap(stripslashes($message)),$headers);
	        echo "<font size=2 face='$fonttype' color='$fontcolour'><p><b><center>";
	    	echo "<br><center><p>Your email address has changed. A verification email has been sent to your new address, please click the verification link.</p></center>";
	    }
	     	echo "<font size=2 face='$fonttype' color='$fontcolour'><p><b><center>";
	    	echo "<br><center>Profile successfully updated.</center>";
		
		
	} else {
	
		echo "<br><br><center>You cannot delete your email address altogether.  You can only change it to a new email address.<br>  
If you cannot verify the new address, you will not be able to use the website.
<br>
  To go on vacation and receive no solo ads while you
are away, click on Go on vacation below.<br><br>";
?>
			    <form method="POST" action="vacation.php?action=go">
                <input type="submit" value="Go on vacation">
	        	</form>
<?	
		echo "</center>";
	}
    echo "</font></td></tr></table>";
	
}
else
  { ?>

  <font size=3 face="<? echo $fonttype; ?>" color="<? echo $fontcolour; ?>"><p><b><center>You must be logged in to access this site. Please <a href="../index.php">click here</a> to login.</p></b></font>

  <? }

include "../footer.php";
mysql_close($dblink);
?>