| 
<?phprequire_once '../../session.php';
 
 if ($_SERVER['REQUEST_METHOD'] == "POST") {
 $msg_code = "";
 
 if (!$auth->checkToken($_POST['csrf'], $_SESSION['csrf'])) {
 $utils->redirect($utils->siteUrl(
 "/admin/users/view.php?&msg=csrf"
 ));
 }
 
 unset($_POST['csrf']);
 $id = (int) $_POST['id'];
 
 if (!$_POST['password'] || $_POST['password'] == "") {
 unset($_POST['password']);
 } else {
 $password = $utils->sanitize($_POST['password']);
 $_POST['password'] = password_hash($password, PASSWORD_BCRYPT);
 }
 
 $msg_code = $user->update($id, $utils->esc($_POST)) ? "user_updated" : "error";
 
 $utils->redirect($utils->siteUrl(
 "/admin/users/view.php?&msg={$msg_code}"
 ));
 }
 
 |