session_start(); //connecting to the db require "conn.php"; $user = $_SESSION["user"]; $stmt = $conn->prepare("SELECT * FROM users WHERE username = :usr"); $stmt->bindParam(":usr", $user); $stmt->execute(); $userInfo = $stmt->fetch(PDO::FETCH_OBJ); function del(){ $stmt = $conn->prepare("DELETE FROM users WHERE username=:usr"); $stmt->bindParam(":usr", $user); $stmt->execute(); if($stmt){ header('Location: '); }else{ header('Location: ?act=error'); } } function res(){ $stmt = $conn->prepare("UPDATE users SET level = 1 WHERE username = :usr"); $stmt->bindParam(":usr", $user); $stmt->execute(); if($stmt){ header('Location: ?act=done'); }else{ header('Location: ?act=error'); } } if(isset($_GET["act"])){ $act = $_GET["act"]; switch($act){ case "del": del(); break; case "res": res(); break; case "error": echo "
This is your profile page. There will never be clues here.
You are on level?>>level =$userInfo->level?>.