Files
omsorg/mitarbeiter-app/actions/upload-avatar.php
T
2026-06-13 20:03:22 +02:00

59 lines
1.6 KiB
PHP

<?php
require_once __DIR__ . '/../lib/auth.php';
require_once __DIR__ . '/../lib/upload.php';
require_login();
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
header('Location: ../pages/settings.php');
exit;
}
$back = '../pages/settings.php';
$username = current_username();
$user = current_user();
$dir = dirname(__DIR__) . '/assets/avatars/';
// Remove avatar
if (!empty($_POST['remove_avatar'])) {
if (!empty($user['avatar'])) {
$old = $dir . basename($user['avatar']);
if (is_file($old)) {
unlink($old);
}
}
db()->prepare('UPDATE users SET avatar = NULL WHERE username = ?')->execute([$username]);
redirect_ok($back, 'avatar_saved');
}
$up = handle_upload($_FILES['avatar'] ?? [], [
'allowed' => UPLOAD_TYPES_IMAGES,
'dir' => $dir,
'naming' => 'plain',
'max_bytes' => 3 * 1024 * 1024,
'messages' => [
'missing' => 'Bitte ein Bild auswählen.',
'upload' => 'Fehler beim Hochladen des Bildes.',
'ext' => 'Nur Bilder erlaubt (JPG, PNG, GIF, WebP).',
'mime' => 'Nur Bilder erlaubt (JPG, PNG, GIF, WebP).',
'size' => 'Bild ist zu groß (max. 3 MB).',
'move' => 'Fehler beim Speichern des Bildes.',
],
]);
if (!$up['ok']) {
redirect_error($back, $up['error']);
}
$safe_name = $up['filename'];
// Delete old avatar after successful upload
if (!empty($user['avatar'])) {
$old = $dir . basename($user['avatar']);
if (is_file($old)) {
unlink($old);
}
}
db()->prepare('UPDATE users SET avatar = ? WHERE username = ?')->execute([$safe_name, $username]);
redirect_ok($back, 'avatar_saved');