<?php
include('header.php');
?>

<?php

if(isset($_GET) && !empty($_GET['email'])) {
    $allowed_fields = array('lastname', 'firstname', 'tva_intra', 'address', 'zipcode', 'city', 'country', 'email', 'phone', 'website');

    $link = connect_db();

    $sql_set = "";
    foreach($allowed_fields as $field){
        if(isset($_GET[$field])){
            $val = mysqli_real_escape_string($link, $_GET[$field]);
            $sql_set .= "`".$field."`='".$val."', ";
        }
    }
    close_db($link);

    if(!empty($sql_set)){
        $sql_set = substr($sql_set, 0, -2);
        $sql = "UPDATE `users` SET ".$sql_set." WHERE `usid`=".intval($userid);
        do_query($sql);
    }

    $_SESSION['email'] = $_GET['email'];
    $_SESSION['lastname'] = $_GET['lastname'] ?? $_SESSION['lastname'];
    $_SESSION['firstname'] = $_GET['firstname'] ?? $_SESSION['firstname'];
}

?>
<div class="container"><div id="profile_root"></div></div>
<script type="module" src="./js-build/profile_root.js?v=<?php echo urlencode((string)(@filemtime(__DIR__ . '/js-build/profile_root.js') ?: time())); ?>"></script>

<?php include('footer.php');?>