- All
-
-
-
-
-
@@ -54,12 +66,15 @@ $popular_tags = $pdo->query("SELECT name FROM tags LIMIT 10")->fetchAll(PDO::FET
+ 1): ?>
+
+
+
diff --git a/install.php b/install.php
index 3c3445c..f6f3618 100644
--- a/install.php
+++ b/install.php
@@ -33,6 +33,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
password VARCHAR(255) NOT NULL,
email VARCHAR(100) NOT NULL UNIQUE,
role ENUM('admin', 'moderator', 'editor', 'user') DEFAULT 'user',
+ avatar_url TEXT,
+ theme_preference ENUM('dark', 'light') DEFAULT 'dark',
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);
CREATE TABLE IF NOT EXISTS videos (
@@ -78,6 +80,24 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
FOREIGN KEY (video_id) REFERENCES videos(id) ON DELETE CASCADE,
FOREIGN KEY (tag_id) REFERENCES tags(id) ON DELETE CASCADE
);
+ CREATE TABLE IF NOT EXISTS bookmarks (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ user_id INT NOT NULL,
+ video_id INT NOT NULL,
+ video_timestamp FLOAT DEFAULT 0,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+ FOREIGN KEY (video_id) REFERENCES videos(id) ON DELETE CASCADE
+ );
+ CREATE TABLE IF NOT EXISTS logs (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ user_id INT NULL,
+ type VARCHAR(50),
+ message TEXT,
+ ip_address VARCHAR(45),
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE SET NULL
+ );
CREATE TABLE IF NOT EXISTS settings (
setting_key VARCHAR(50) PRIMARY KEY,
setting_value TEXT
diff --git a/login.php b/login.php
index 31514bf..b94586f 100644
--- a/login.php
+++ b/login.php
@@ -21,9 +21,11 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$_SESSION['user_id'] = $user['id'];
$_SESSION['username'] = $user['username'];
$_SESSION['user_role'] = $user['role'];
+ logEvent('auth', "User logged in: $username");
header('Location: index.php');
exit;
} else {
+ logEvent('auth', "FAILED login attempt for username: $username");
$error = "Invalid username or password.";
}
}
diff --git a/profile.php b/profile.php
new file mode 100644
index 0000000..b25a8e3
--- /dev/null
+++ b/profile.php
@@ -0,0 +1,218 @@
+prepare("SELECT password FROM users WHERE id = ?");
+ $stmt->execute([$user_id]);
+ $user = $stmt->fetch();
+
+ if (password_verify($old_pass, $user['password'])) {
+ if ($new_pass === $confirm_pass) {
+ if (strlen($new_pass) >= 6) {
+ $hashed = password_hash($new_pass, PASSWORD_DEFAULT);
+ $pdo->prepare("UPDATE users SET password = ? WHERE id = ?")->execute([$hashed, $user_id]);
+ $success = "Password changed successfully!";
+ } else {
+ $error = "New password must be at least 6 characters.";
+ }
+ } else {
+ $error = "New passwords do not match.";
+ }
+ } else {
+ $error = "Incorrect current password.";
+ }
+ }
+
+ if (isset($_POST['update_avatar'])) {
+ if (isset($_FILES['avatar']) && $_FILES['avatar']['error'] === 0) {
+ $ext = strtolower(pathinfo($_FILES['avatar']['name'], PATHINFO_EXTENSION));
+ $allowed = ['jpg', 'jpeg', 'png', 'webp'];
+ if (in_array($ext, $allowed)) {
+ $filename = 'avatar_' . $user_id . '_' . time() . '.' . $ext;
+ if (move_uploaded_file($_FILES['avatar']['tmp_name'], 'uploads/' . $filename)) {
+ // Delete old avatar if exists
+ $stmt = $pdo->prepare("SELECT avatar_url FROM users WHERE id = ?");
+ $stmt->execute([$user_id]);
+ $old = $stmt->fetchColumn();
+ if ($old && strpos($old, 'uploads/') === 0) @unlink($old);
+
+ $avatar_url = 'uploads/' . $filename;
+ $pdo->prepare("UPDATE users SET avatar_url = ? WHERE id = ?")->execute([$avatar_url, $user_id]);
+ $success = "Avatar updated!";
+ }
+ } else {
+ $error = "Invalid image format.";
+ }
+ }
+ }
+}
+
+// Get user data
+$stmt = $pdo->prepare("SELECT * FROM users WHERE id = ?");
+$stmt->execute([$user_id]);
+$user_data = $stmt->fetch();
+$avatar = $user_data['avatar_url'] ?: '';
+
+// Get bookmarks
+$stmt = $pdo->prepare("SELECT v.* FROM videos v JOIN bookmarks b ON v.id = b.video_id WHERE b.user_id = ? ORDER BY b.created_at DESC");
+$stmt->execute([$user_id]);
+$bookmarks = $stmt->fetchAll();
+
+require_once 'includes/header.php';
+?>
+
+
-
+
@@ -68,4 +83,20 @@ $popular_tags = $pdo->query("SELECT name FROM tags LIMIT 10")->fetchAll(PDO::FET
+
+
+
+
diff --git a/watch.php b/watch.php
index 360abb4..ed04132 100644
--- a/watch.php
+++ b/watch.php
@@ -63,36 +63,24 @@ require_once 'includes/header.php';
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Member since
+
+
+
+
+
+
+
+
+
+
+
+My Bookmarks
+ prepare("SELECT v.*, b.video_timestamp FROM videos v JOIN bookmarks b ON v.id = b.video_id WHERE b.user_id = ? ORDER BY b.created_at DESC"); + $stmt->execute([$user_id]); + $bookmarks = $stmt->fetchAll(); + + function formatTime($seconds) { + if ($seconds <= 0) return ""; + $mins = floor($seconds / 60); + $secs = floor($seconds % 60); + return sprintf("%d:%02d", $mins, $secs); + } + ?> + +
+
+
+
+ You haven't bookmarked any sermons yet.
+
+
+
+
+
+
+ Security
+
+
+ Change Password
+Keep your account secure by using a strong password.
+ + +
+
+
+
+
+
+
+
+
+
+
+
+
-
+
-
+
@@ -155,8 +147,12 @@ require_once 'includes/header.php';
+
+
-
-
+
+
-
@@ -108,36 +96,40 @@ require_once 'includes/header.php';
views •
-
-
-
-
+
+ prepare("SELECT 1 FROM bookmarks WHERE user_id = ? AND video_id = ?");
+ $stmt->execute([$_SESSION['user_id'], $video_id]);
+ $is_bookmarked = $stmt->fetch();
+ ?>
+
+
-
-
+ prepare("SELECT avatar_url FROM users WHERE id = ?");
+ $u_stmt->execute([$video['uploader_id']]);
+ $uploader_avatar = $u_stmt->fetchColumn();
+ ?>
+
-
+
-
-
+
@@ -175,7 +171,7 @@ require_once 'includes/header.php';
REPORT
-
+
@@ -208,6 +204,8 @@ require_once 'includes/header.php';