[ Th3_Err0r Bypassed ]

<?php
ob_start();
session_start();
$pageTitle = ' تعديل بيانات الحساب ';
include 'init.php';
?>
<?php 
if(isset($_SESSION['user_liwwan_admin_2023930']) AND ($_SESSION['type'] == "manager_session_alliwan") ){
?>

<?php 
    if (($_SERVER['REQUEST_METHOD'] == 'POST') && isset($_POST['do_edit_mypass'])) {
        // [DO_3] DO EDIT CHARITY PASS

    $adminid           = $_SESSION['uid'];
    $oldpassword       = $_POST['oldpass'];
    $msg='';


    $stb = $conn->prepare("SELECT password FROM royaladmin WHERE active = 1 AND adminid= $adminid ");
    $stb->execute();
    $admin = $stb->Fetch();

    $hashpass       = $admin['password'];

    $veryfi= password_verify($oldpassword, $hashpass);
    if ($veryfi){
        
    $fname = $_POST['adfullname'];
    $nname = $_POST['adusername'];
    $npaas = $_POST['newpass'];
    $chahashpass     = password_hash($npaas, PASSWORD_ARGON2I);

    $stmt = $conn->prepare("UPDATE 
                                 royaladmin 
                                 SET
                                 fullname      = ?,
                                 username      = ?,
                                 password      = ?
                                 WHERE
                                 adminid  = $adminid");
    $stmt->execute(array($fname,$nname,$chahashpass));  
    $_SESSION['user_liwwan_admin_2023930'] = $_POST['adfullname'];
        header('location:index.php');
        exit();
    }else{$msg = " خطأ : كلمة المرور السابقة غير صحيحة";}

}?>
<?php
 $adminid     = $_SESSION['uid'];
$stb = $conn->prepare("SELECT username,fullname FROM royaladmin WHERE active = 1 AND adminid= $adminid ");
$stb->execute();
$admininfo = $stb->Fetch();
?>
<section class="add_my">
        <form action="<?php echo $_SERVER['PHP_SELF'] ?>" method="POST" class="form mt-5">
            <p class="text-center h3 fw-bold text-center form_tittle"> تعديل إسم المستخدم و كلمة المرور للحساب </p>
            <div class="ermsg">
            <?php if(!empty($msg)) { 
                echo '<hr>' . '<div class="bg-danger text-white py-3 px-1 rounded-2 text-center fw-bold">';
                echo $msg . '<br>';
                echo '</div>' . '<hr>'; }?>
            </div>
            <hr class="my-1">
            <div class="row">
                <div class="col-lg-12 col-sm-12 my-2 text-center ">
                    <div class="w-50 m-auto">
                    <label for="ordertitle" class="text-primary fw-bold text-center"> لدواعي الأمان أدخل كلمة المرور السابقة لحسابك <i class="fa-solid fa-asterisk px-2 text-danger"></i></label>
                    <input type="password" class="w-100 text-muted text-end fw-bold py-3" name="oldpass" required="required" id="ordertitle"/>
                    </div>
                </div>
            </div>
            <hr>
            <div class="row">
                <div class="col-lg-12 col-sm-12 my-2 text-center">
                    <div class="upload_img_benfs w-50 m-auto">
                        <label for="ordertitle" class="text-primary fw-bold text-center"> إسم المستخدم  <i class="fa-solid fa-asterisk px-2 text-danger"></i></label>
                        <input type="text" class="w-100 text-muted text-end fw-bold py-3" name="adusername" value="<?php echo $admininfo['username']  ?>" required="required" id="ordertitle"/> 
                    </div>
                </div>
                <hr>
                <div class="col-lg-12 col-sm-12 my-2 text-center">
                    <div class="upload_img_benfs w-50 m-auto">
                        <label for="ordertitle" class="text-primary fw-bold text-center"> الإسم الكامل  <i class="fa-solid fa-asterisk px-2 text-danger"></i></label>
                        <input type="text" class="w-100 text-muted text-end fw-bold py-3" name="adfullname" value="<?php echo $admininfo['fullname']  ?>" required="required" id="ordertitle"/> 
                    </div>
                </div>
                <hr>
                <div class="col-lg-12 col-sm-12 my-2 text-center">
                    <div class="upload_img_benfs w-50 m-auto">
                        <label for="ordertitle" class="text-primary fw-bold text-center"> إختر كلمة مرور جديدة  <i class="fa-solid fa-asterisk px-2 text-danger"></i></label>
                        <input type="password" class="w-100 text-muted text-end fw-bold py-3" name="newpass" required="required" id="ordertitle"/> 
                    </div>
                </div>
            </div>
            <div class="row">
                <hr class="my-4">
                <div class="col-12">
                <button class="btn btn-primary conf_btn px-4" name="do_edit_mypass" type="submit" onclick="return confirm('متأكد من الرغبة بتعديل إسم المستخدم و كلمة المرور لحسابك ؟');"> تأكيد </button>
                </div>
            </div>  
        </form>
</section>

<?php 
}else{
header('Location:index.php');
exit;
}
?>
<?php
include 'assets/includes/template/footer.php';
ob_end_flush();