File: /home/awaldron/public_html/archive/demo/admin/employee_edit.php
<?php
session_start();
include("../_functions.php");
dbconnect();
if (!is_logged()) auto_login();
echo "<html>\n";
echo "<head>\n";
echo "<title>".COMPANY_NAME." : Edit Employee</title>\n";
echo "<script language=\"JavaScript\" type=\"text/javascript\">\n";
echo "<!--\n";
echo "function openWindow(theURL,winName,features) { //v2.0\n";
echo " window.open(theURL,winName,features);\n";
echo "}\n";
echo "function submitNewDR() {\n";
echo " var dr2add = document.edit_emp.add_dr.value;\n";
echo " window.location.href = 'employee_edit.php?u=".$_GET["u"]."&adddr='+dr2add;\n";
echo "}\n";
echo "-->\n";
echo "</script>\n";
echo "</head>\n";
echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../default.css\">\n";
echo "<body style=\"margin:15px;\">\n";
if (!(admin_panel($_SESSION["auth_user"]) || in_array($_SESSION["auth_user"],build_pgroup(4)))) {
echo "<br><br><br><br>".error("You must be logged in to access the administration panel!");
} else {
$success = FALSE;
$ldap = FALSE;
if (LOGIN_METHOD == "ldap") $ldap = TRUE;
if ($_GET["id"] == "x") $cat = "Inactive Employees";
else $emp = get_user($_GET["u"],"fullname");
echo "<P><img src=\"/gui/icons/cog.gif\" align=\"left\">\n";
echo "<div class=\"headline\">Edit Employee : ".$emp."</div>\n";
if (isset($_GET["mesg"])) echo "<P>".notice("Employee has been successfully added to the database.");
if (isset($_POST["update_emp"])) {
// CHECK IF USERNAMES ARE THE SAME, IF NOT, RUN UPDATE_USERNAME()
if (trim($_POST["new_username"]) !== trim($_POST["username"])) {
@ username_change(trim($_POST["username"]),strtolower(trim($_POST["new_username"])));
}
$query = "UPDATE tbl_employees SET ";
//$query .= "username='".$_POST["new_username"]."', ";
$query .= "fname='".$_POST["fname"]."', ";
$query .= "lname='".$_POST["lname"]."', ";
$query .= "title='".$_POST["title"]."', ";
if ($ldap) $query .= "ldap_login='".$_POST["ldap_login"]."', ";
$query .= "start_date='".$_POST["sdyear"].$_POST["sdmon"].$_POST["sdday"]."000000"."', ";
$query .= "ph_direct='".$_POST["ph_direct"]."', ";
$query .= "ph_remote_office='".$_POST["ph_remote_office"]."', ";
$query .= "ph_remote_fax='".$_POST["ph_remote_fax"]."', ";
$query .= "ph_cell='".$_POST["ph_cell"]."', ";
$query .= "ph_home='".$_POST["ph_home"]."', ";
$query .= "birthday='".$_POST["bmon"].$_POST["bday"]."', ";
$query .= "email='".$_POST["email"]."', ";
$query .= "manager='".$_POST["manager"]."', ";
$query .= "location='".$_POST["location"]."', ";
$query .= "room_num='".$_POST["room_num"]."', ";
$query .= "my_job='".$_POST["my_job"]."', ";
$query .= "my_career='".$_POST["my_career"]."', ";
$query .= "my_family='".$_POST["my_family"]."', ";
$query .= "emp_type_id=".$_POST["emp_type_id"].", ";
$query .= "my_interests='".$_POST["my_interests"]."', ";
$query .= "dir_display=".$_POST["dir_display"].", ";
$query .= "ext_display=".$_POST["ext_display"].", ";
$query .= "last_updated=".time()." ";
$query .= "WHERE eid=".$_POST["eid"];
$result = mysql_query($query);
if ($result > 0) {
$qud = quickUPDATE("UPDATE tbl_group_user SET group_id=".($_POST["group_id"]==""?"0":$_POST["group_id"])." WHERE username='".$_POST["new_username"]."' AND group_id=".$_POST["group_id_old"]." LIMIT 1");
echo "<P>".notice("Employee has been updated successfully.");
} else {
echo "<P>".$query;
echo error("There was an error while confirming your changes.");
echo error(mysql_error());
}
}
$sql = "SELECT * FROM tbl_employees, tbl_group_user, tbl_groups ";
$sql .= "WHERE tbl_employees.username='".$_GET["u"]."' ";
$sql .= "AND tbl_group_user.username='".$_GET["u"]."' AND tbl_group_user.group_id=tbl_groups.group_id";
$result = mysql_query($sql);
$u = mysql_fetch_array($result);
if (isset($_GET[adddr])) quickUPDATE("UPDATE tbl_employees SET manager='".$_GET["u"]."' WHERE username='".$_GET[adddr]."'");
if (isset($_GET[deldr])) quickUPDATE("UPDATE tbl_employees SET manager='' WHERE username='".$_GET[deldr]."'");
echo "<br><br><br>\n";
echo "<form action=\"employee_edit.php?u=".$_GET["u"]."\" method=\"post\" name=\"edit_emp\">\n";
echo "<input type=\"hidden\" name=\"eid\" value=\"".$u["eid"]."\">\n";
echo "<input type=\"hidden\" name=\"username\" value=\"".$u["username"]."\">\n";
echo "<input type=\"hidden\" name=\"group_id_old\" value=\"".$u["group_id"]."\">\n";
$photo = "../gui/photos/".$u["username"].".jpg";
if (!file_exists($photo)) $photo = "/gui/photos/nophoto.jpg";
else $photo = "/gui/photos/".$u["username"].".jpg";
echo "<P><table class=\"textdn\" border=0 cellspacing=15>\n";
echo "<tr><td align=\"right\" valign=\"top\"><img src=\"".$photo."\" border=1>";
if (is_admin()) echo "<br><center><a href=\"#\" onClick=\"openWindow('../upload/index.php?a=photo&fn=".$u["username"]."','','resizable=yes,width=500,height=300')\">Upload New Photo</a></center>\n";
echo "</td>\n";
echo "<td valign=\"top\">\n";
echo "<table class=\"textdn\" border=0 cellspacing=5>\n";
echo "<tr><td><b style=\"color:#003466;\">Username:</b></td><td><input type=\"text\" maxlength=32 size=35 name=\"new_username\" value=\"".$u["username"]."\"></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">First Name:</b></td><td><input type=\"text\" maxlength=32 size=35 name=\"fname\" value=\"".$u["fname"]."\"></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Last Name:</b></td><td><input type=\"text\" maxlength=32 size=35 name=\"lname\" value=\"".$u["lname"]."\"></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Job Title:</b></td><td><input type=\"text\" maxlength=255 size=35 name=\"title\" value=\"".($u["title"]=="0"?"":$u["title"])."\"></td></tr>\n";
if ($ldap) echo "<tr><td><b style=\"color:#003466;\">LDAP Login:</b></td><td><input type=\"text\" maxlength=255 size=35 name=\"ldap_login\" value=\"".($u["ldap_login"]=="0"?"":$u["ldap_login"])."\"></td></tr>\n";
echo "<tr><td colspan=2> </td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Employee Type:</b></td><td>\n";
echo "<SELECT name=\"emp_type_id\">\n";
$res2 = mysql_query("SELECT * FROM tbl_emp_types");
echo "<option></option>\n";
for ($i=0; $i < mysql_num_rows($res2); $i++) {
$et = mysql_fetch_array($res2);
echo "<option value=\"".$et["emp_type_id"]."\"".($u["emp_type_id"]==$et["emp_type_id"]?" SELECTED":"").">".$et["emp_type"]."</option>\n";
}
echo "</SELECT></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Manager's Name:</b></td><td>\n";
echo "<SELECT name=\"manager\">\n";
employee_select($u["manager"]);
echo "</SELECT></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Group:</b></td><td>\n";
echo "<SELECT name=\"group_id\">\n";
group_select(0,0,$u["group_id"]);
echo "</SELECT></td></tr>\n";
echo "<tr><td colspan=2> </td></tr>\n";
$month = array("","January","February","March","April","May","June","July","August","September","October","November","December");
echo "<tr><td>Your Birthday:</td><td>\n";
echo "<SELECT name=\"bmon\">\n";
echo "<option></option>\n";
for ($i=1; $i <= 12; $i++) echo "<option value=\"".($i<10?"0".$i:$i)."\"".(substr($u["birthday"],0,2)==($i<10?"0".$i:$i)?" SELECTED":"").">".$month[$i]."</option>\n";
echo "</select>\n";
echo "<SELECT name=\"bday\">\n";
echo "<option></option>\n";
for ($j=1; $j <= 31; $j++) echo "<option value=\"".($j<10?"0".$j:$j)."\"".(substr($u["birthday"],2,2)==($j<10?"0".$j:$j)?" SELECTED":"").">".($j<10?"0".$j:$j)."</option>\n";
echo "</select>\n";
echo " (age is not calculated)\n";
echo "</td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Employee Since:</b></td><td>\n";
echo "<SELECT name=\"sdmon\">\n";
echo "<option></option>\n";
for ($i=1; $i <= 12; $i++) echo "<option value=\"".($i<10?"0".$i:$i)."\"".(substr($u["start_date"],4,2)==($i<10?"0".$i:$i)?" SELECTED":"").">".$month[$i]."</option>\n";
echo "</select>\n";
echo "<SELECT name=\"sdday\">\n";
echo "<option></option>\n";
for ($j=1; $j <= 31; $j++) echo "<option value=\"".($j<10?"0".$j:$j)."\"".(substr($u["start_date"],6,2)==($j<10?"0".$j:$j)?" SELECTED":"").">".($j<10?"0".$j:$j)."</option>\n";
echo "</select>\n";
echo "<SELECT name=\"sdyear\">\n";
echo "<option></option>\n";
for ($k=1987; $k <= date("Y"); $k++) echo "<option value=\"".$k."\"".(substr($u["start_date"],0,4)==$k?" SELECTED":"").">".$k."</option>\n";
echo "</select>\n";
echo "</td></tr>\n";
echo "<tr><td colspan=2> </td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Email Address:</b></td><td><input type=\"text\" maxlength=128 size=35 name=\"email\" value=\"".($u["email"]==""?"":$u["email"])."\"></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Direct Phone:</b></td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_direct\" value=\"".($u["ph_direct"]=="0"?"":$u["ph_direct"])."\"></td></tr>\n";
echo "<tr><td>Remote Office:</td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_remote_office\" value=\"".($u["ph_remote_office"]=="0"?"":$u["ph_remote_office"])."\"></td></tr>\n";
echo "<tr><td>Remote Fax:</td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_remote_fax\" value=\"".($u["ph_remote_fax"]=="0"?"":$u["ph_remote_fax"])."\"></td></tr>\n";
echo "<tr><td>Mobile Phone:</td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_cell\" value=\"".($u["ph_cell"]=="0"?"":$u["ph_cell"])."\"></td></tr>\n";
echo "<tr><td>Home Phone:</td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_home\" value=\"".($u["ph_home"]=="0"?"":$u["ph_home"])."\"></td></tr>\n";
echo "<tr><td colspan=2> </td></tr>\n";
echo "<tr><td style=\"color:#003466;\"><b style=\"color:#003466;\">Office Location:</b></td><td><input type=\"text\" maxlength=255 size=35 name=\"location\" value=\"".($u["location"]=="0"?"Pittsburgh, PA":$u["location"])."\"></td></tr>\n";
echo "<tr><td style=\"color:#003466;\"><b style=\"color:#003466;\">Room/Cubicle #:</b></td><td><input type=\"text\" maxlength=20 size=10 name=\"room_num\" value=\"".($u["room_num"]=="0"?"":$u["room_num"])."\"></td></tr>\n";
echo "<tr><td colspan=2>Display this user in Employee Directory? <SELECT name=\"dir_display\"><option value=\"1\"".($u["dir_display"]==1?" SELECTED":"").">Yes</option><option value=\"0\"".($u["dir_display"]==0?" SELECTED":"").">No</option></SELECT></td></tr>\n";
echo "<tr><td colspan=2>Display this user in Phone Extension List? <SELECT name=\"ext_display\"><option value=\"1\"".($u["ext_display"]==1?" SELECTED":"").">Yes</option><option value=\"0\"".($u["ext_display"]==0?" SELECTED":"").">No</option></SELECT></td></tr>\n";
echo "</table>\n";
echo "</td><td valign=\"top\">\n";
$mgr = quickROW("SELECT fname, lname FROM tbl_employees WHERE username='".$u[manager]."'");
echo "<P><u><b>Manager:</b></u>\n";
if ($mgr === FALSE) echo "<ul><li> None Specified</ul>\n";
else echo "<ul><li> <a href=\"employee_edit.php?u=".$u[manager]."\">".$mgr[lname].", ".$mgr[fname]."</a></ul>";
echo "<P><u><b>Direct Reports:</b></u>\n";
echo "<ul>";
$dr = quickRSET("SELECT fname, lname, username FROM tbl_employees WHERE manager='".$_GET["u"]."' ORDER BY lname ASC, fname ASC");
for ($i=0; $i < count($dr); $i++) {
echo "<li> <a href=\"employee_edit.php?u=".$dr[$i][username]."\">".$dr[$i][lname].", ".$dr[$i][fname]."</a> ";
echo "( <a href=\"employee_edit.php?u=".$_GET["u"]."&deldr=".$dr[$i][username]."\">x</a> )\n";
// ^^ Commented out because it'd be best to not allow DR Delete from this page
}
if (count($dr) == 0) {
echo "<li> No direct reports.";
}
echo "</ul>";
echo "<P><b>Add a Direct Report:</b><br>\n";
echo "<SELECT name=\"add_dr\" onChange=\"submitNewDR();\">\n";
//employee_select();
$sql = "SELECT username, fname, lname FROM tbl_employees WHERE is_employee=1 AND ".($emp_only==1?"emp_type_id <= 3":"emp_type_id <> 7")." AND manager='' ORDER BY lname ASC";
$res = mysql_query($sql);
echo "<option></option>\n";
for ($j=0; $j < mysql_num_rows($res); $j++) {
$u = mysql_fetch_array($res);
echo "<option value=\"".$u["username"]."\"".($u["username"]==$selected?" SELECTED":"").">".$u[lname].", ".$u[fname]."</option>\n";
}
echo "</SELECT>\n";
echo "</td></tr></table>\n";
echo "<P>What I do at Vocollect:<br><textarea name=\"my_job\" rows=8 cols=125>".stripslashes($u["my_job"])."</textarea>\n";
echo "<P>Career Highlights:<br><textarea name=\"my_career\" rows=8 cols=125>".stripslashes($u["my_career"])."</textarea>\n";
echo "<P>A little about my family:<br><textarea name=\"my_family\" rows=8 cols=125>".stripslashes($u["my_family"])."</textarea>\n";
echo "<P>My Interests:<br><textarea name=\"my_interests\" rows=8 cols=125>".stripslashes($u["my_interests"])."</textarea>\n";
echo "<br><br>\n";
echo "<input type=\"submit\" name=\"update_emp\" value=\"Update Info\">\n";
echo "</form>\n";
echo "<br><br><br><br>\n";
echo "<center>Powered by <a href=\"http://www.intrabreeze.com\">IntraBreeze</a> © 2005 IntraBreeze, LLC</center>\n";
}
echo "</body>\n</html>\n";
?>