Къде е грешката ?
Код:
<table>
<tr>
<form action='' method='post' name='user'>
<th colspan='2'><font color='#000000' size='4'>Промяна на паролата</font></th></tr>
<tr><td> Стара парола</td><td><input type='password' name='old_password'></td></tr>
<tr><td>Нова парола</td><td> <input type='password' name='new_password'></td></tr>
<tr><td colspan='2'><input type='submit' name='button1' value='Запиши промените'></td></tr>
</form>
</table>
<table>
<tr>
<form action='' method='post' name='other'>
<th colspan='2'><font color='#000000' size='4'>Друга информация</font></th></tr>
<tr><td>Смени email</td><td> <input type='text' name='email'></td></tr>
<tr><td> Смени skype</td><td> <input type='text' name='skype'></td></tr>
<tr><td colspan='2'><input type='submit' name='button2' value='Запиши промените'></td></tr>
</form>
</table>";
$old_password = trim($_POST['old_password']);
$new_password = trim($_POST['new_password']);
$email = $_POST['email'];
$skype = addslashes(htmlspecialchars($_POST['skype']));
$button1 = $_POST['butto1'];
$button2 = $_POST['butto2'];
if(isset($button1)){
$rs = mysql_query("SELECT * FROM `users` WHERE `username`='$az'");
$row = mysql_fetch_assoc($rs);
if($row['password']!=$old_password){
echo "Старата парола е грешна!";
}
elseif(strlen($new_password)< 3){
echo "Новата парола е твърде кратка!";
}else{
mysql_query("UPDATE `users` SET password='$new_password' WHERE username='$az'");
echo "Успешно променихте паролата.";
}
}
if(isset($button2)){
if(!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$", $email)){
echo "Невалиден email адрес!";
}else{
mysql_query("UPDATE `users` SET email='$email', skype='$skype' WHERE username='$az'");
echo "Успешно променихте профила си.";
}
}