edit.php

<?php
require 'auth.php';

$id = $_GET['id'] ?? null;
$contact = R::load('contact', $id);

if (!$contact->id || $contact->user_id !== $_SESSION['user_id']) {
    exit("Unauthorized");
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $contact->name = $_POST['name'];
    $contact->email = $_POST['email'];
    $contact->phone = $_POST['phone'];
    R::store($contact);
    header("Location: index.php");
    exit;
}
?>

<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<h2>Edit Contact</h2>
<form method="post">
    <input name="name" value="<?= htmlspecialchars($contact->name) ?>" required><br>
    <input name="email" value="<?= htmlspecialchars($contact->email) ?>" required><br>
    <input name="phone" value="<?= htmlspecialchars($contact->phone) ?>" required><br>
    <button>Update</button>
    <a href="index.php">Cancel</a>
</form>