prepare("SELECT * FROM users WHERE id = ?"); $stmt->execute([$_SESSION['user_id']]); $user = $stmt->fetch(); $profile_errors = []; $success = false; if ($_SERVER['REQUEST_METHOD'] === 'POST') { $nickname = trim($_POST['nickname'] ?? ''); $phone = trim($_POST['phone'] ?? ''); $province = trim($_POST['province'] ?? ''); $city = trim($_POST['city'] ?? ''); $address = trim($_POST['address'] ?? ''); // 昵称完整校验：长度 + 敏感词 + 唯一性（排除自身） $nick_err = validateNickname($nickname, $pdo, $_SESSION['user_id']); if ($nick_err !== '') { $profile_errors[] = $nick_err; } if (empty($profile_errors)) { $stmt = $pdo->prepare("UPDATE users SET nickname=?, phone=?, province=?, city=?, address=? WHERE id=?"); $stmt->execute([$nickname, $phone, $province, $city, $address, $_SESSION['user_id']]); // 同步更新 session 中的昵称 $_SESSION['user_nickname'] = $nickname; $success = true; $user['nickname'] = $nickname; $user['phone'] = $phone; $user['province'] = $province; $user['city'] = $city; $user['address'] = $address; } } $provinces = ['北京','天津','上海','重庆','河北','山西','辽宁','吉林','黑龙江','江苏','浙江','安徽','福建','江西','山东','河南','湖北','湖南','广东','海南','四川','贵州','云南','陕西','甘肃','青海','内蒙古','广西','西藏','宁夏','新疆','香港','澳门','台湾']; require_once dirname(__DIR__) . '/includes/header.php'; ?>
个人资料
资料更新成功！
邮箱地址不可修改