feat: re-enable nickname editing in user profile

- Restore nickname field in modify.php SQL update query
- Remove disabled attribute from nickname input in modifypage.php template
- Allow users to update their nickname through profile modification
- Maintain existing HTML entity encoding for security
This commit is contained in:
2026-03-15 13:15:09 +08:00
parent 055223bfdf
commit 489f11ce35
2 changed files with 3 additions and 3 deletions

View File

@@ -89,14 +89,14 @@ $school = (htmlentities($school, ENT_QUOTES, "UTF-8"));
$email = (htmlentities($email, ENT_QUOTES, "UTF-8")); $email = (htmlentities($email, ENT_QUOTES, "UTF-8"));
$sql = "UPDATE `users` SET" $sql = "UPDATE `users` SET"
. "`password`=?," . "`password`=?,"
// . "`nick`=?," //删除此行和81行含的,$nick禁用昵称修改 . "`nick`=?,"
. "`school`=?," . "`school`=?,"
. "`email`=?" . "`email`=?"
. "WHERE `user_id`=?" . "WHERE `user_id`=?"
; ;
//echo $sql; //echo $sql;
//exit(0); //exit(0);
pdo_query($sql, $password, /*$nick,*/ $school, $email, $user_id); pdo_query($sql, $password, $nick, $school, $email, $user_id);
// if ($nick != "") { // if ($nick != "") {
// $sql = "update solution set nick=? where user_id=?"; // $sql = "update solution set nick=? where user_id=?";
// pdo_query($sql, $nick, $user_id); // pdo_query($sql, $nick, $user_id);

View File

@@ -12,7 +12,7 @@
<?php require_once('./include/set_post_key.php');?> <?php require_once('./include/set_post_key.php');?>
<div class="field"> <div class="field">
<label for="username"><?php echo $MSG_NICK?>*</label> <label for="username"><?php echo $MSG_NICK?>*</label>
<input disabled="disabled" name="nick" placeholder="<?php echo $MSG_Input.$MSG_NICK?>" type="text" value="<?php echo htmlentities($row['nick'],ENT_QUOTES,"UTF-8")?>"> <input name="nick" placeholder="<?php echo $MSG_Input.$MSG_NICK?>" type="text" value="<?php echo htmlentities($row['nick'],ENT_QUOTES,"UTF-8")?>">
</div> </div>
<div class="field"> <div class="field">
<label class="ui header"><?php echo $MSG_PASSWORD?>*</label> <label class="ui header"><?php echo $MSG_PASSWORD?>*</label>