<?
  include "usershow.php"
  session_start();
  //如果用戶沒有登錄
  if(!isset($userid))
  {
      echo"對不起！你還沒有登錄！請先登錄！";
      $message=Usershow();
      $i=1;
      while(isset($message[$i]))
      {
          echo"<br>",$message[$i];
          $i++;
      }
  }
  //如果不是修改，則輸入相應的信息
  else if($act!="change")
  {
      $connect=mysql_connect("127.0.0.1","","");
      mysql_select_db('ebusiness');
      $query="select * from User where UserID=$userid";
      $result=mysql_query($query);
      $res=mysql_fetch_object($result);
      echo'<form method="post" action="change.php">
           <table width="100%" border="1" cellspacing="0" cellpadding="0">'
           <tr bgcolor="#99ccff">
             <td>請輸入你的新密碼！
                <input type="password" name="newpass" size="12">
             </td>
           <tr bgcolor="#99ccff">
             <td>請確認你的新密碼
               <input type="password" name="renewpass" size="12">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>密碼提示問題
               <input type="text" name="passwq" size="30" value="'.$res->UserPWdQ.'">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>密碼提示問題答案
             <input type="text" name="passwa" size="30" value="'.$res->UserPWdA.'">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>你的E-Mail
             <input type="text" name="email" size="30" value="'.$res->UserEmail.'">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>你的電話
               <input type="text" name="tel" size="16" value="'.$res->UserTel.'">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>你的住址
               <input type="text" name="addr" size="30" value="'.$res->UserAddr.'">
               <input type="hidden" name="act" value="change">
             </td>
           </tr>
           <tr bgcolor="#99ccff">
             <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
               <input type="submit" name="Submit" value="修改">
               <input type="reset" name="Submit2" value="重來">
               &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
             </td>
           </tr>
         </table>
      </form>';
      mysql_close($connect);
  }
  elseif($act="change")
  {
      //檢查是否有輸入錯誤
      if($newpass!=$renewpass)
      {
          header("Location:change.php?act=fail");
          exit;
      }
      $connect=mysql_connect("127.0.0.1","","");
      $password=md5($newpass);
      mysql_select_db("ebusiness");
      $query="update User set UserPassWd='".$password;
      $query=$query."',UserPWdQ='".$passwq;
      $query=$query."',UserPWdA='".$passwa;
      $query=$query."',UserEmail='".$email;
      $query=$query."',UserTel='".$tel;
      $query=$query."',UserAddr='".$addr."'";
      if(mysql_query($query))
        echo"數據更新成功！";
  }
?>