Uncompleted backport code and more

database/backported/1.3-beta1/changeAccountUsername.php

@@ -0,0 +1,52 @@
+<?php
+$conn = newConnection();
+
+$userID = isset($_POST['userID']) ? $_POST['userID'] : '';
+$current_password = isset($_POST['currentPassword']) ? $_POST['currentPassword'] : '';
+$new_username = isset($_POST['newUsername']) ? $_POST['newUsername'] : '';
+
+if (empty($userID) || empty($new_username) || empty($current_password)) {
+    die("-2");
+}
+
+if (!preg_match('/^[a-zA-Z0-9]{3,16}$/', $new_username)) {
+    die("-3");
+}
+
+$stmt = $conn->prepare("SELECT * FROM users WHERE id = ?");
+$stmt->bind_param("s", $userID);
+
+$stmt->execute();
+
+$result = $stmt->get_result();
+
+if ($result->num_rows > 0) {
+    $user = $result->fetch_assoc();
+    if (!password_verify($current_password, $user['password'])) {
+        die("-4");
+    }
+} else {
+    die("-5");
+}
+
+$stmt = $conn->prepare("SELECT * FROM users WHERE username = ?");
+$stmt->bind_param("s", $new_username);
+
+$stmt->execute();
+
+$result = $stmt->get_result();
+
+if ($result->num_rows > 0) {
+    die("-6");
+}
+
+$stmt = $conn->prepare("UPDATE users SET username = ? WHERE id = ?");
+$stmt->bind_param("ss", $new_username, $userID);
+
+$stmt->execute();
+$stmt->close();
+$conn->close();
+
+echo '1';
+
+?>