cypress/delete_account.php at master · CDBAT/cypress · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
<?php
session_start();

$mysql_connect = mysqli_connect("localhost", "id16543739_cdbat", "Cypress@12345", "id16543739_cypress");

// check if database connected properly
if(!$mysql_connect){
    die(mysqli_connect_error());
}
include 'header.php';


// get user email
$email = $_SESSION['email'];


//user deleting account
if(isset($_POST['delete_account'])){

    $reason = $_POST['delete_reason'];
    $security = $_POST['security'];

    // select everything from the table Accounts where the column email = userEmail and column password = userpassword
    $sqlQuery = "SELECT * FROM Accounts WHERE email ='$email' AND security ='$security'";

    // get query result
    $queryResult = $mysql_connect -> query($sqlQuery);
    $queryRows = mysqli_num_rows($queryResult);

    // account found
    if($queryRows == 1){


        // add reason to database
        $sqlQuery = "INSERT INTO delete_reasons (reason) VALUES ('$reason')";
        $mysql_connect -> query($sqlQuery);

        // delete all forms made by user
        $sqlQuery = "DELETE FROM Forms WHERE email = '$email' ";
        $mysql_connect -> query($sqlQuery);

        // delete all suggestion from user
        $sqlQuery = "DELETE FROM chat_message WHERE to_user = '$email'";
        $mysql_connect -> query($sqlQuery);

        // delete user vote
        $sqlQuery = "DELETE FROM voting WHERE to_user = '$email'";
        $mysql_connect -> query($sqlQuery);
        // delete user account
        $sqlQuery = "DELETE FROM Accounts WHERE email = '$email'";

        // execute query result
        $queryResult = $mysql_connect -> query($sqlQuery);
        // log user out
        unset($_SESSION['email']);

        $message = checkLanguageAlert("You successfully deleted your account.","Vous avez supprimé votre compte avec succès.");
        echo "<script type='text/javascript'>alert('$message');</script>";
        // redirect
        echo'
        <script>
        window.location.replace("https://cypress-cdbat.000webhostapp.com/index.php");
        </script>
        ';
    }else{
        $message = checkLanguageAlert("INCORRECT secret question. FAILED to DELETE ACCOUNT","Question secrète INCORRECTE. Échec de la suppression du compte.");
        echo "<script type='text/javascript'>alert('$message');</script>";    }
}


?>
<!doctype html>

<html lang="en">

<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
    <title>Account Settings</title>

</head>

<body style ="background-color:white;">
<?php
$sqlQuery = "SELECT * FROM Accounts WHERE email ='$email'";

// get query result
$queryResult = $mysql_connect -> query($sqlQuery);
foreach ($queryResult as $row){

?>
    <div class="jumbotron"  style ="background-color:white;">
        <div class="bg order-1 order-md-2"></div>
        <div class="contents order-2 order-md-1">
            <div class="container">
                <div class="row align-items-center justify-content-center">
                    <div class="col-md-7 py-5">
                        <h3><?php checkLanguage("Delete Account","Supprimer le compte"); ?></h3>
                        </p>
                        <form  onsubmit = "return confirm_delete();" action="#" method="POST">
                        <div class="row">
                            <div class="col-md-12">
                                <div class="form-group first">
                                    <label for="email"><?php checkLanguage("Email Address","Adresse e-mail");?></label>
                                    <input type="email" class="form-control" value="<?php print($row['email']) ;?>" id="email" disabled>
                                </div>
                            </div>
                        </div>

                            <div class="row">
                            <div class="col-md-12">
                                <div class="form-group first">
                                    <label for="address"><?php checkLanguage("Secret Question","Question secrète");?></label>
                                    <input type="input" class="form-control"  id="security" name = "security">
                                </div>
                            </div>
                          </div>
                          <input type="text" id="delete_reason" name="delete_reason" style = "display:none;"/>

                            <!-- change to button -->
                            <button type="submit"  class="btn px-5 btn-danger" id = "delete_account" name = "delete_account" ><?php checkLanguage("Delete Account","Supprimer le compte"); ?></button>
                            <br>
                            <br>
                            <br>
                            <br>


                        </form>

                        <?php
                        }
                        ?>
                    </div>
                </div>
            </div>

        </div>
    </div>

</body>


<script src="scripts/delete_account.js"></script>

</html>