change.php

一个PHP的购物系统源代码

<?
  include "usershow.php"
  session_start();
  //如果用户没有登录
  if(!isset($userid))
  {
      echo"对不起！你还没有登录！请先登录！";
      $message=Usershow();
      $i=1;
      while(isset($message[$i]))
      {
          echo"<br>",$message[$i];
          $i++;
      }
  }
  //如果不是修改，则输入相应的信息
  else if($act!="change")
  {
      $connect=mysql_connect("127.0.0.1","","");
      mysql_select_db('ebusiness');
      $query="select * from User where UserID=$userid";
      $result=mysql_query($query);
      $res=mysql_fetch_object($result);
      echo'<form method="post" action="change.php">
           <table width="100%" border="1" cellspacing="0" cellpadding="0">'
           <tr bgcolor="#99ccff">
             <td>请输入你的新密码！
                <input type="password" name="newpass" size="12">
             </td>
           <tr bgcolor="#99ccff">
             <td>请确认你的新密码
               <input type="password" name="renewpass" size="12">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>密码提示问题
               <input type="text" name="passwq" size="30" value="'.$res->UserPWdQ.'">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>密码提示问题答案
             <input type="text" name="passwa" size="30" value="'.$res->UserPWdA.'">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>你的E-Mail
             <input type="text" name="email" size="30" value="'.$res->UserEmail.'">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>你的电话
               <input type="text" name="tel" size="16" value="'.$res->UserTel.'">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>你的住址
               <input type="text" name="addr" size="30" value="'.$res->UserAddr.'">
               <input type="hidden" name="act" value="change">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
               <input type="submit" name="Submit" value="修改">
               <input type="reset" name="Submit2" value="重来">
               &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
             </td>
           </tr>
         </table>
      </form>';
      mysql_close($connect);
  }
  elseif($act="change")
  {
      //检查是否有输入错误
      if($newpass!=$renewpass)
      {
          header("Location:change.php?act=fail");
          exit;
      }
      $connect=mysql_connect("127.0.0.1","","");
      $password=md5($newpass);
      mysql_select_db("ebusiness");
      $query="update User set UserPassWd='".$password;
      $query=$query."',UserPWdQ='".$passwq;
      $query=$query."',UserPWdA='".$passwa;
      $query=$query."',UserEmail='".$email;
      $query=$query."',UserTel='".$tel;
      $query=$query."',UserAddr='".$addr."'";
      if(mysql_query($query))
        echo"数据更新成功！";
  }
?>