prepare("SELECT * FROM pengguna WHERE id_pengguna = ?");
$stmt->execute([$_SESSION['id_pengguna']]);
$user_data = $stmt->fetch();
if ($_POST && isset($_POST['update_profile'])) {
$name = sanitize($_POST['name']);
$email = sanitize($_POST['email']);
// Semak sama ada emel sudah digunakan oleh pengguna lain
$stmt = $pdo->prepare("SELECT id_pengguna FROM pengguna WHERE emel = ? AND id_pengguna != ?");
$stmt->execute([$email, $_SESSION['id_pengguna']]);
if ($stmt->fetch()) {
$error = 'Emel sudah wujud!';
} else {
$stmt = $pdo->prepare("UPDATE pengguna SET nama = ?, emel = ? WHERE id_pengguna = ?");
if ($stmt->execute([$name, $email, $_SESSION['id_pengguna']])) {
$_SESSION['nama'] = $name;
$success = 'Profil berjaya dikemaskini!';
$user_data['nama'] = $name;
$user_data['emel'] = $email;
}
}
}
if ($_POST && isset($_POST['change_password'])) {
$current_password = $_POST['current_password'];
$new_password = $_POST['new_password'];
$confirm_password = $_POST['confirm_password'];
if (!password_verify($current_password, $user_data['kata_laluan'])) {
$password_error = 'Kata laluan semasa tidak betul!';
} elseif ($new_password !== $confirm_password) {
$password_error = 'Kata laluan baru tidak sepadan!';
} elseif (strlen($new_password) < 6) {
$password_error = 'Kata laluan mestilah sekurang-kurangnya 6 aksara!';
} else {
$hashed_password = password_hash($new_password, PASSWORD_DEFAULT);
$stmt = $pdo->prepare("UPDATE pengguna SET kata_laluan = ? WHERE id_pengguna = ?");
if ($stmt->execute([$hashed_password, $_SESSION['id_pengguna']])) {
$password_success = 'Kata laluan berjaya ditukar!';
}
}
}
// Dapatkan sejarah pengundian pengguna
$stmt = $pdo->prepare("SELECT c.nama_calon, u.masa_undi FROM undi u JOIN calon c ON u.id_calon = c.id_calon WHERE u.id_pengguna = ? ORDER BY u.masa_undi DESC");
$stmt->execute([$_SESSION['id_pengguna']]);
$voting_history = $stmt->fetchAll();
?>
Sistem Pengundian Jawatankuasa Kelab Badminton
prepare("SELECT COUNT(*) FROM undi WHERE id_pengguna = ?");
$stmt->execute([$_SESSION['id_pengguna']]);
echo $stmt->fetchColumn();
?>Undi Dibuang