From 067348835299febed3080ab61ffca365cd07743f Mon Sep 17 00:00:00 2001
From: ilotterytea <iltsu@alright.party>
Date: Sun, 27 Apr 2025 22:24:05 +0500
Subject: feat: change username and pfp

---
 public/account/index.php | 65 +++++++++++++++++++++++++++++++++++++++++++++---
 src/config.php           |  7 +++++-
 src/images.php           | 12 ++++++---
 3 files changed, 76 insertions(+), 8 deletions(-)

diff --git a/public/account/index.php b/public/account/index.php
index 8f40ec9..2edb39a 100644
--- a/public/account/index.php
+++ b/public/account/index.php
@@ -1,5 +1,11 @@
 <?php
+include_once "../../src/alert.php";
 include "../../src/accounts.php";
+include "../../src/partials.php";
+include_once "../../src/config.php";
+include_once "../../src/utils.php";
+include_once "../../src/images.php";
+
 authorize_user();
 
 if (!isset($_SESSION["user_id"], $_SESSION["user_name"])) {
@@ -7,7 +13,44 @@ if (!isset($_SESSION["user_id"], $_SESSION["user_name"])) {
     exit;
 }
 
-include "../../src/partials.php";
+if ($_SERVER['REQUEST_METHOD'] == "POST") {
+    $db = new PDO(DB_URL, DB_USER, DB_PASS);
+
+    $username = str_safe($_POST["username"], ACCOUNT_USERNAME_MAX_LENGTH);
+
+    if (!empty($username) && $username != $_SESSION["user_name"]) {
+        if (!preg_match(ACCOUNT_USERNAME_REGEX, $username)) {
+            generate_alert("/account", "Bad username");
+            exit;
+        }
+
+        $stmt = $db->prepare("SELECT id FROM users WHERE username = ?");
+        $stmt->execute([$username]);
+
+        if ($stmt->rowCount() == 0) {
+            $stmt = $db->prepare("UPDATE users SET username = ? WHERE id = ?");
+            $stmt->execute([$username, $_SESSION["user_id"]]);
+        } else {
+            generate_alert("/account", "The username has already taken");
+            exit;
+        }
+    }
+
+    if (isset($_FILES["pfp"])) {
+        $pfp = $_FILES["pfp"];
+        resize_image(
+            $pfp["tmp_name"],
+            "../static/userdata/avatars/" . $_SESSION["user_id"],
+            ACCOUNT_PFP_MAX_SIZE[0],
+            ACCOUNT_PFP_MAX_SIZE[1],
+            false
+        );
+    }
+
+    $db = null;
+    generate_alert("/account", "Your changes have been applied!", 200);
+    exit;
+}
 
 ?>
 
@@ -24,10 +67,11 @@ include "../../src/partials.php";
             <?php html_navigation_bar() ?>
 
             <section class="content">
+                <?php display_alert() ?>
                 <section class="box accman">
                     <h1>Account management</h1>
 
-                    <form action="/account.php" method="POST" enctype="multipart/form-data">
+                    <form action="/account" method="POST" enctype="multipart/form-data">
                         <h2>Profile</h2>
                         <h3>Profile picture</h3>
                         <img src="/static/userdata/avatars/<?php echo $_SESSION["user_id"] ?>" id="pfp" width="64"
@@ -35,7 +79,7 @@ include "../../src/partials.php";
                         <input type="file" name="pfp" id="pfp">
 
                         <h3>Username</h3>
-                        <input type="text" name="username" value="<?php echo $_SESSION["user_name"] ?>">
+                        <input type="text" name="username" id="username" value="<?php echo $_SESSION["user_name"] ?>">
 
                         <button type="submit">Save</button>
                     </form>
@@ -56,4 +100,19 @@ include "../../src/partials.php";
     </div>
 </body>
 
+<script>
+    const username = document.getElementById("username");
+    let validUsername = "";
+
+    username.addEventListener("input", (e) => {
+        const regex = <?php echo ACCOUNT_USERNAME_REGEX ?>;
+
+        if (regex.test(e.target.value) && e.target.value.length <= <?php echo ACCOUNT_USERNAME_MAX_LENGTH ?>) {
+            validUsername = e.target.value;
+        } else {
+            e.target.value = validUsername;
+        }
+    });
+</script>
+
 </html>
\ No newline at end of file
diff --git a/src/config.php b/src/config.php
index 3f4c52d..9191bb9 100644
--- a/src/config.php
+++ b/src/config.php
@@ -12,4 +12,9 @@ define("RATING_NAMES", [
 
 // UPLOADS
 define("ANONYMOUS_UPLOAD", false);
-define("ANONYMOUS_DEFAULT_NAME", "chud");
\ No newline at end of file
+define("ANONYMOUS_DEFAULT_NAME", "chud");
+
+// ACCOUNTS
+define("ACCOUNT_USERNAME_REGEX", "/^[A-Za-z0-9_]+$/");
+define("ACCOUNT_USERNAME_MAX_LENGTH", 20);
+define("ACCOUNT_PFP_MAX_SIZE", [128, 128]);
\ No newline at end of file
diff --git a/src/images.php b/src/images.php
index fea1825..970fa99 100644
--- a/src/images.php
+++ b/src/images.php
@@ -1,5 +1,5 @@
 <?php
-function resize_image(string $src_path, string $dst_path, int $max_width, int $max_height): string|null
+function resize_image(string $src_path, string $dst_path, int $max_width, int $max_height, bool $set_format = true): string|null
 {
     if ($src_path == "" || !getimagesize($src_path)) {
         return json_encode([
@@ -12,7 +12,11 @@ function resize_image(string $src_path, string $dst_path, int $max_width, int $m
     $imagick = new Imagick();
 
     $imagick->readImage($src_path);
-    $format = strtolower($imagick->getImageFormat());
+    $format = "." . strtolower($imagick->getImageFormat());
+
+    if (!$set_format) {
+        $format = "";
+    }
 
     if ($imagick->getNumberImages() > 1) {
         $imagick = $imagick->coalesceImages();
@@ -29,7 +33,7 @@ function resize_image(string $src_path, string $dst_path, int $max_width, int $m
         }
 
         $imagick = $imagick->deconstructImages();
-        $imagick->writeImages("$dst_path.$format", true);
+        $imagick->writeImages("$dst_path$format", true);
     } else {
         $width = $imagick->getImageWidth();
         $height = $imagick->getImageHeight();
@@ -38,7 +42,7 @@ function resize_image(string $src_path, string $dst_path, int $max_width, int $m
         $new_height = (int) ($height * $ratio);
 
         $imagick->resizeImage($new_width, $new_height, Imagick::FILTER_TRIANGLE, 1);
-        $imagick->writeImage("$dst_path.$format");
+        $imagick->writeImage("$dst_path$format");
     }
 
     $imagick->clear();
-- 
cgit v1.2.3