Removed error reporting settings, updated AJAX URL, and added error handling with logging in edit-profile.php; added prepare statement error check in profile_functions.php

Author: baqx

dashboard/edit-profile.php

@@ -1,7 +1,4 @@
 <?php
-ini_set('display_errors', 1);
-ini_set('display_startup_errors', 1);
-error_reporting(E_ALL);
 session_start();
 
 $page_title = "Edit Profile";
@@ -196,7 +193,7 @@
                 const formData = new FormData(this);
 
                 $.ajax({
-                    url: './edit-profile',
+                    url: '../includes/user/profile-edit',
                     type: 'POST',
                     data: formData,
                     processData: false,
@@ -218,12 +215,13 @@
                             });
                         }
                     },
-                    error: function() {
+                    error: function(xhr, status, error) {
                         Swal.fire({
                             title: 'Error!',
-                            text: 'An error occurred while updating your profile.',
+                            text: 'An error occurred while updating your profile: ' + error,
                             icon: 'error'
                         });
+                        console.error(xhr.responseText); // Log server response for debugging
                     }
                 });
             }

includes/user/profile-edit.php

@@ -0,0 +1,49 @@
+<?php
+session_start();
+include '../../config/config.php';
+include '../get_universities.php';
+include './profile_functions.php';
+
+
+$user_id = $_SESSION['user_id'];
+$bank_list = getBanks();
+$levels = range(100, 900, 100);
+
+// Get user's current data
+$user_data = getUserData($user_id);
+
+// Handle form submission via AJAX
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    header('Content-Type: application/json');
+    $response = array('success' => false, 'message' => '');
+
+    // Validate unique fields
+    if (!isFieldUnique('username', $_POST['username'], $user_id)) {
+        $response['message'] = 'Username already exists!';
+        echo json_encode($response);
+        exit;
+    }
+    if (!isFieldUnique('email', $_POST['email'], $user_id)) {
+        $response['message'] = 'Email already exists!';
+        echo json_encode($response);
+        exit;
+    }
+    if (!isFieldUnique('phone', $_POST['phone'], $user_id)) {
+        $response['message'] = 'Phone number already exists!';
+        echo json_encode($response);
+        exit;
+    }
+
+    // Update profile
+    $result = updateUserProfile($user_id, $_POST);
+
+    if ($result) {
+        $response['success'] = true;
+        $response['message'] = 'Profile updated successfully!';
+    } else {
+        $response['message'] = 'Error updating profile!';
+    }
+
+    echo json_encode($response);
+    exit;
+}

includes/user/profile_functions.php

@@ -157,6 +157,12 @@ function updateUserProfile($user_id, $data) {
                   WHERE id = ?";
 
         $stmt = $conn->prepare($query);
+        
+        // Check if prepare failed
+        if (!$stmt) {
+            throw new Exception("Preparation failed: " . $conn->error);
+        }
+        
         $stmt->bind_param("ssssssssisssi",
             $data['fullname'],
             $data['username'],