sistema_funcionando_lastwar/profile.php

<?php
require_once __DIR__ . '/includes/session_check.php';
require_once __DIR__ . '/includes/db.php';
require_once __DIR__ . '/includes/activity_logger.php';

$user_id = $_SESSION['user_id'];

// Handle form submissions
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Action: Change Password
    if (isset($_POST['change_own_password'])) {
        $current_password = $_POST['current_password'];
        $new_password = $_POST['new_password'];
        $confirm_password = $_POST['confirm_password'];

        if (empty($current_password) || empty($new_password) || empty($confirm_password)) {
            $error = "Todos los campos de contraseña son obligatorios.";
        } elseif ($new_password !== $confirm_password) {
            $error = "Las contraseñas nuevas no coinciden.";
        } else {
            try {
                $stmt = $pdo->prepare("SELECT password FROM users WHERE id = ?");
                $stmt->execute([$user_id]);
                $user = $stmt->fetch();

                if ($user && password_verify($current_password, $user['password'])) {
                    $hashedPassword = password_hash($new_password, PASSWORD_DEFAULT);
                    $updateStmt = $pdo->prepare("UPDATE users SET password = ? WHERE id = ?");
                    $updateStmt->execute([$hashedPassword, $user_id]);
                    log_activity($user_id, 'Password Changed', 'User ' . $_SESSION['username'] . ' changed their own password.');
                    $success = "Tu contraseña ha sido actualizada con éxito.";
                } else {
                    $error = "La contraseña actual es incorrecta.";
                }
            } catch (PDOException $e) {
                $error = "Error al actualizar la contraseña.";
                error_log($e->getMessage());
            }
        }
    }

    // Action: Link Telegram Account
    if (isset($_POST['link_telegram'])) {
        $telegram_chat_id = trim($_POST['telegram_chat_id']);

        if (empty($telegram_chat_id)) {
            // Si el campo está vacío, desvincular la cuenta
            $stmt = $pdo->prepare("UPDATE users SET telegram_chat_id = NULL WHERE id = ?");
            $stmt->execute([$user_id]);
            log_activity($user_id, 'Telegram Unlinked', 'User ' . $_SESSION['username'] . ' unlinked their Telegram account.');
            $success = "Cuenta de Telegram desvinculada con éxito.";
        } elseif (!is_numeric($telegram_chat_id)) {
            $error = "El ID de Chat de Telegram debe ser un número.";
        } else {
            try {
                $stmt = $pdo->prepare("UPDATE users SET telegram_chat_id = ? WHERE id = ?");
                $stmt->execute([$telegram_chat_id, $user_id]);
                log_activity($user_id, 'Telegram Linked', 'User ' . $_SESSION['username'] . ' linked Telegram chat ID: ' . $telegram_chat_id);
                $success = "ID de Chat de Telegram guardado con éxito.";
            } catch (PDOException $e) {
                $error = "Error al guardar el ID de Chat de Telegram.";
                error_log($e->getMessage());
            }
        }
    }
}

// Fetch current user data
$stmt = $pdo->prepare("SELECT telegram_chat_id FROM users WHERE id = ?");
$stmt->execute([$user_id]);
$currentUser = $stmt->fetch(PDO::FETCH_ASSOC);

require_once __DIR__ . '/templates/header.php';
?>

<div class="container-fluid">
    <h1 class="mt-4">Mi Perfil</h1>

    <?php if (isset($error)): ?><div class="alert alert-danger"><?php echo $error; ?></div><?php endif; ?>
    <?php if (isset($success)): ?><div class="alert alert-success"><?php echo $success; ?></div><?php endif; ?>

    <div class="row">
        <!-- Change Password Card -->
        <div class="col-lg-6 mb-4">
            <div class="card shadow-sm h-100">
                <div class="card-header">
                    <h5 class="mb-0">Cambiar mi Contraseña</h5>
                </div>
                <div class="card-body">
                    <form action="" method="POST">
                        <div class="mb-3">
                            <label for="current_password" class="form-label">Contraseña Actual</label>
                            <input type="password" class="form-control" id="current_password" name="current_password" required>
                        </div>
                        <div class="mb-3">
                            <label for="new_password" class="form-label">Nueva Contraseña</label>
                            <input type="password" class="form-control" id="new_password" name="new_password" required>
                        </div>
                        <div class="mb-3">
                            <label for="confirm_password" class="form-label">Confirmar Nueva Contraseña</label>
                            <input type="password" class="form-control" id="confirm_password" name="confirm_password" required>
                        </div>
                        <button type="submit" name="change_own_password" class="btn btn-primary">Cambiar Contraseña</button>
                    </form>
                </div>
            </div>
        </div>

        <!-- Link Telegram Account Card -->
        <div class="col-lg-6 mb-4">
            <div class="card shadow-sm h-100">
                <div class="card-header">
                    <h5 class="mb-0">Vincular Cuenta de Telegram</h5>
                </div>
                <div class="card-body d-flex flex-column">
                    <p class="text-muted">Vincula tu cuenta para poder enviar comandos al bot desde tu chat privado de Telegram.</p>
                    <form action="" method="POST" class="mt-auto">
                        <div class="mb-3">
                            <label for="telegram_chat_id" class="form-label">Tu ID de Chat de Telegram</label>
                            <input type="text" class="form-control" id="telegram_chat_id" name="telegram_chat_id" 
                                   value="<?= htmlspecialchars($currentUser['telegram_chat_id'] ?? '') ?>" 
                                   placeholder="Ej: 123456789">
                            <div class="form-text mt-2">
                                <strong>¿Cómo obtener tu ID?</strong>
                                <ol class="mb-0 ps-3">
                                    <li>Abre Telegram y busca el bot <a href="https://t.me/userinfobot" target="_blank">@userinfobot</a>.</li>
                                    <li>Inicia una conversación con él.</li>
                                    <li>El bot te responderá inmediatamente con tu ID.</li>
                                </ol>
                            </div>
                        </div>
                        <button type="submit" name="link_telegram" class="btn btn-info text-white">Guardar ID de Telegram</button>
                    </form>
                </div>
            </div>
        </div>
    </div>
</div>

<?php require_once __DIR__ . '/templates/footer.php'; ?>