requireRole(['super_admin', 'admin']);
$db = DB();
$user = Auth()->getUser();
$flash = getFlashMessage();
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
// CSRF Protection
if (!Auth()->verifyCSRFToken($_POST['csrf_token'] ?? '')) {
redirectWithMessage('profile.php', 'Security session expired. Please try again.', 'danger');
}
$fullName = cleanInput($_POST['full_name'] ?? '');
$email = cleanInput($_POST['email'] ?? '');
$mobile = cleanInput($_POST['mobile'] ?? '');
// Simple update for now
$db->update('users', [
'full_name' => $fullName,
'email' => $email,
'mobile' => $mobile,
'updated_at' => date('Y-m-d H:i:s')
], ['id' => $user['id']]);
// Handle password update
if (!empty($_POST['new_password'])) {
$password = password_hash($_POST['new_password'], PASSWORD_DEFAULT);
$db->update('users', ['password' => $password], ['id' => $user['id']]);
}
redirectWithMessage('profile.php', 'Profile updated successfully.', 'success');
}
?>
My Profile - <?= APP_SHORT_NAME ?>