edit-profile.php

<?php
$any_bad_inputs = false;
$changes_saved = false;
$_SESSION['collected_data'] = null;
if($_POST['collected_data'] != null) {
  foreach((array)$_POST['collected_data'] as $value_id => $value) {
    $form_sql = "SELECT * FROM `".WPSC_TABLE_CHECKOUT_FORMS."` WHERE `id` = '$value_id' LIMIT 1";
    $form_data = $wpdb->get_results($form_sql,ARRAY_A);
    $form_data = $form_data[0];
    $bad_input = false;
    if($form_data['mandatory'] == 1) {
      switch($form_data['type']) {
        case "email":
        if(!preg_match("/^[a-zA-Z0-9._-]+@[a-zA-Z0-9-.]+\.[a-zA-Z]{2,5}$/",$value)) {
          $any_bad_inputs = true;
          $bad_input = true;
				}
        break;
        
        case "delivery_country":
        if(($value != null)) {
          $_SESSION['delivery_country'] == $value;
				}
        break;
        
        default:
        break;
        }
      if($bad_input === true) {
        switch($form_data['name']) {
          case __('First Name', 'wpsc'):
          $bad_input_message .= __('Please enter a valid name', 'wpsc') . "";
          break;
  
          case __('Last Name', 'wpsc'):
          $bad_input_message .= __('Please enter a valid surname', 'wpsc') . "";
          break;
  
          case __('Email', 'wpsc'):
          $bad_input_message .= __('Please enter a valid email address', 'wpsc') . "";
          break;
  
          case __('Address 1', 'wpsc'):
          case __('Address 2', 'wpsc'):
          $bad_input_message .= __('Please enter a valid address', 'wpsc') . "";
          break;
  
          case __('City', 'wpsc'):
          $bad_input_message .= __('Please enter your town or city.', 'wpsc') . "";
          break;
  
          case __('Phone', 'wpsc'):
          $bad_input_message .= __('Please enter a valid phone number', 'wpsc') . "";
          break;
  
          case __('Country', 'wpsc'):
          $bad_input_message .= __('Please select your country from the list.', 'wpsc') . "";
          break;
  
          default:
          $bad_input_message .= __('Please enter a valid', 'wpsc') . " " . strtolower($form_data['name']) . ".";
          break;
				}
        $bad_input_message .= "<br />";
			} else {
				$meta_data[$value_id] = $value;
			}
		} else {
			$meta_data[$value_id] = $value;
		}
	}

  $new_meta_data = serialize($meta_data);
  update_usermeta($user_ID, 'wpshpcrt_usr_profile', $meta_data);
} 
?>
<div class="wrap" style=''>
<?php
echo " <div class='user-profile-links'><a href='".get_option('user_account_url')."'>Purchase History</a> | <a href='".get_option('user_account_url').$seperator."edit_profile=true'>Your Details</a> | <a href='".get_option('user_account_url').$seperator."downloads=true'>Your Downloads</a></div><br />";
?>
<form method='post' action=''>
<?php
if($changes_saved == true) {
  echo __('Thanks, your changes have been saved.', 'wpsc');
} else {
  echo $bad_input_message;
}
?>
<table>
<?php
// arr, this here be where the data will be saved
$meta_data = null;
$saved_data_sql = "SELECT * FROM `".$wpdb->usermeta."` WHERE `user_id` = '".$user_ID."' AND `meta_key` = 'wpshpcrt_usr_profile';";
$saved_data = $wpdb->get_row($saved_data_sql,ARRAY_A);

$meta_data = get_usermeta($user_ID, 'wpshpcrt_usr_profile');

$form_sql = "SELECT * FROM `".WPSC_TABLE_CHECKOUT_FORMS."` WHERE `active` = '1' ORDER BY `order`;";
$form_data = $wpdb->get_results($form_sql,ARRAY_A);

foreach($form_data as $form_field)
  {
  $meta_data[$form_field['id']] = htmlentities(stripslashes($meta_data[$form_field['id']]), ENT_QUOTES);
  if($form_field['type'] == 'heading')
    {
    echo "
    <tr>
      <td colspan='2'>\n\r";
    echo "<strong>".$form_field['name']."</strong>";        
    echo "
      </td>
    </tr>\n\r";
    }
    else
      {
      if($form_field['type'] == "country")
        {
        continue;
        }
      
      echo "
      <tr>
        <td align='left'>\n\r";
      echo $form_field['name'];
      if($form_field['mandatory'] == 1)
        {
        if(!(($form_field['type'] == 'country') || ($form_field['type'] == 'delivery_country')))
          {
          echo "*";
          }
        }
      echo "
        </td>\n\r
        <td  align='left'>\n\r";
      switch($form_field['type'])
        {
        case "text":
        case "city":
        case "delivery_city":
        echo "<input type='text' value='".$meta_data[$form_field['id']]."' name='collected_data[".$form_field['id']."]' />";
        break;
        
        case "address":
        case "delivery_address":
        case "textarea":
        echo "<textarea name='collected_data[".$form_field['id']."]'>".$meta_data[$form_field['id']]."</textarea>";
        break;
        
        
        case "region":
        case "delivery_region":
        echo "<select name='collected_data[".$form_field['id']."]'>".nzshpcrt_region_list($_SESSION['collected_data'][$form_field['id']])."</select>";
        break;
        
        
        case "country":   
        break;
        
        case "delivery_country":
        echo "<select name='collected_data[".$form_field['id']."]' >".nzshpcrt_country_list($meta_data[$form_field['id']])."</select>";
        break;
        
        case "email":
        echo "<input type='text' value='".$meta_data[$form_field['id']]."' name='collected_data[".$form_field['id']."]' />";
        break;
        
        default:
        echo "<input type='text' value='".$meta_data[$form_field['id']]."' name='collected_data[".$form_field['id']."]' />";
        break;
        }
      echo "
        </td>
      </tr>\n\r";
      }
  }
  ?>
    <?php
    if(isset($gateway_checkout_form_fields))
      {
      echo $gateway_checkout_form_fields;
      }
    ?>
    <tr>
      <td>
      </td>
      <td>
      <input type='hidden' value='true' name='submitwpcheckout_profile' />
      <input type='submit' value='<?php echo __('Save Profile', 'wpsc');?>' name='submit' />
      </td>
    </tr>
</table>
</form>
</div>