<?php

/**
 * @Author				Tarchini Maurizio
 * @Version				1.0
 * @AuthorEmail			hide@address.com or hide@address.com
 * @AuthorSite			http://www.mtxweb.ch
 * @DocumentDate		28-2-2008
 * @DocumentLicense		PUBLIC -FREE
 * @LicenseDetail		GNU General Public License
 * @LicenseSite			http://www.gnu.org/licenses/gpl.txt
 * @PHPCompatibility	4.2 or later
 * @DevelopmentStatus	DIST - beta
 */


include_once "./lib/function_db.php";
include_once "./lib/function_page.php";
Grant();
$user = UserX();

if ($_POST['password'] != $_POST['password2'])
{
	header("Location: profilo.php?alert=1");
	exit;
}


$sql = "UPDATE users SET password='$_POST[password]' WHERE username='$user'";
$sql1 = "UPDATE users SET nome='$_POST[nome]' WHERE username='$user'";
$sql3 = "UPDATE users SET cognome='$_POST[cognome]' WHERE username='$user'";

QueryExec($sql);
QueryExec($sql1);
QueryExec($sql3);



header("Location: profilo.php?alert=2");


?>