From cb5df9341906b607647757355c5fe473bf7d7515 Mon Sep 17 00:00:00 2001
From: Thies Mueller <git@td00.de>
Date: Sat, 9 Jan 2021 23:55:24 +0100
Subject: [PATCH] introducing update.php & a new session variable

---
 login.php  |  1 +
 update.php | 18 ++++++++++++++++++
 2 files changed, 19 insertions(+)
 create mode 100644 update.php

diff --git a/login.php b/login.php
index f620101..7b73e9e 100644
--- a/login.php
+++ b/login.php
@@ -18,6 +18,7 @@ if(isset($_GET['login'])) {
         $_SESSION['givenName'] = $user['givenName'];
         $_SESSION['lastName'] = $user['lastName'];
         $_SESSION['activated'] = $user['activated'];
+        $_SESSION['updated_at'] = $user['updated_at'];
         die('<div class="alert alert-success" role="alert"> successfull. go to: <a href="secure.php">secure page</a></div> <meta http-equiv="refresh" content="0; URL=secure.php">');
     } else {
         $errorMessage = '<div class="alert alert-danger" role="alert">somethings wrong (maybe wrong password or wrong user)</div><br>';
diff --git a/update.php b/update.php
new file mode 100644
index 0000000..939ffef
--- /dev/null
+++ b/update.php
@@ -0,0 +1,18 @@
+<?php
+session_start();
+$pdo = new PDO('mysql:host=localhost;dbname=usertable', 'usertable', 'password');
+$username = $_SESSION['username'];
+
+$statement = $pdo->prepare("SELECT * FROM users WHERE username = :username");
+$result = $statement->execute(array('username' => $username));
+$user = $statement->fetch();
+$_SESSION['userid'] = $user['id'];
+$_SESSION['email'] = $user['email'];
+$_SESSION['username'] = $user['username'];
+$_SESSION['givenName'] = $user['givenName'];
+$_SESSION['lastName'] = $user['lastName'];
+$_SESSION['activated'] = $user['activated'];
+$_SESSION['updated_at'] = $user['updated_at'];
+
+echo '<Session newly validated. Going back to secure land! <meta http-equiv="refresh" content="1; URL=secure.php">';
+?>
\ No newline at end of file