File: /home/awaldron/public_html/archive/demo/profile_edit.php
<?php
session_start();
include("_functions.php");
echo dbconnect();
$page_title = "Edit Employee Profile";
$GLOBALS["ext_page"] = $page_title; // SET FAUX PAGE NAME
$_GET["p"] = 3; // SET FAUX PARENT ID
$lnav_mods = get_layout($_GET["p"],1);
$rnav_mods = get_layout($_GET["p"],3);
$sql = "SELECT * FROM tbl_employees, tbl_group_user, tbl_groups ";
$sql .= "WHERE tbl_employees.username='".$_GET["u"]."' ";
$sql .= "AND tbl_group_user.username='".$_GET["u"]."' AND tbl_group_user.group_id=tbl_groups.group_id";
$result = mysql_query($sql);
$u = mysql_fetch_array($result);
$bbjava = true;
include("_pagestart.php");
echo "<P><div class=\"headline\">".$page_title."</div><br>\n";
if (!(authorize($u["username"]) || ( in_array($_SESSION["auth_user"],build_pgroup(4)) )) ) { // CHECK IF USER ATTEMPTING THE EDIT IS THE USER WHO POSTED IT
echo "<br><br><br>".error("You do not have the proper privileges to edit this profile.")."<br><br><br>";
echo "<center><a href=\"/profile.php?u=".$_GET["u"]."\">Back To The Profile</a></center><br><br><br>";
} else {
if ($stage == "submit") {
$query = "UPDATE tbl_employees SET ";
$query .= "username='".$_POST["username"]."', ";
$query .= "fname='".$_POST["fname"]."', ";
$query .= "lname='".$_POST["lname"]."', ";
$query .= "title='".$_POST["title"]."', ";
//$query .= "group_id=".($_POST["group_id"]==""?"0":$_POST["group_id"]).", ";
$query .= "start_date='".$_POST["sdyear"].$_POST["sdmon"].$_POST["sdday"]."000000"."', ";
$query .= "ph_direct='".$_POST["ph_direct"]."', ";
$query .= "ph_remote_office='".$_POST["ph_remote_office"]."', ";
$query .= "ph_remote_fax='".$_POST["ph_remote_fax"]."', ";
$query .= "ph_cell='".$_POST["ph_cell"]."', ";
$query .= "ph_home='".$_POST["ph_home"]."', ";
$query .= "blackberry='".$_POST["blackberry"]."', ";
$query .= "birthday='".$_POST["bmon"].$_POST["bday"]."', ";
$query .= "email='".$_POST["email"]."', ";
$query .= "manager='".$_POST["manager"]."', ";
$query .= "location='".$_POST["location"]."', ";
$query .= "room_num='".$_POST["room_num"]."', ";
$query .= "my_job='".$_POST["my_job"]."', ";
$query .= "my_career='".$_POST["my_career"]."', ";
$query .= "my_family='".$_POST["my_family"]."', ";
$query .= "my_interests='".$_POST["my_interests"]."', ";
$query .= "last_updated=".time()." ";
$query .= "WHERE eid=".$_POST["eid"];
echo "<br><br><br><br>";
$result = mysql_query($query);
if ($result > 0) {
$qud = quickUPDATE("UPDATE tbl_group_user SET group_id=".($_POST["group_id"]==""?"0":$_POST["group_id"])." WHERE username='".$_POST["username"]."' AND group_id=".$_POST["group_id_old"]." LIMIT 1");
echo "<b>Your changes have been submitted successfully.</b>\n";
echo "<P><a href=\"".$_POST["update_url"]."\">Back to Your Profile</a><br><br><br><br>\n";
} else {
echo "<P>".$query;
echo error("There was an error while confirming your changes.");
echo error(mysql_error());
echo "<br><br><br><br>";
}
} else {
$sql3 = "SELECT * FROM tbl_groups ORDER BY group_name ASC";
$result3 = mysql_query($sql3);
//echo "<P><center><div style=\"width:90%;text-align:left;\"><b>Please Note that after submitting this form, an email will be sent to you that contains a link which you must click on to confirm the changes you make to your profile. This prevents others from making changes to your profile.</div></center>\n";
echo "<P>".notice("All fields in this form are optional, though fields marked in <span style=\"color:#003466;\">BLUE</span> are recommended.");
echo "<form action=\"profile_edit.php?u=".$_GET["u"]."\" method=\"post\">\n";
echo "<input type=\"hidden\" name=\"eid\" value=\"".$u["eid"]."\">\n";
echo "<input type=\"hidden\" name=\"stage\" value=\"submit\">\n";
echo "<input type=\"hidden\" name=\"username\" value=\"".$u["username"]."\">\n";
echo "<input type=\"hidden\" name=\"group_id_old\" value=\"".$u["group_id"]."\">\n";
echo "<input type=\"hidden\" name=\"update_url\" value=\"/profile.php?u=".$u["username"]."\">\n";
$photo = "gui/photos/".$u["username"].".jpg";
if (!file_exists($photo)) $photo = "gui/photos/nophoto.jpg";
echo "<P><table border=0 cellspacing=15>\n";
echo "<tr><td align=\"center\" valign=\"top\"><img src=\"/".$photo."\" border=1><br>";
if (PHOTO_UPLOAD == "1") echo "<br><center><a href=\"#\" onClick=\"openWindow('/upload/index.php?a=photo','','resizable=yes,width=500,height=300')\">Have a Better Photo?</a></center>\n";
else echo "<br><center><a href=\"mailto:".ADMIN_EMAIL."?subject=New Photo for ".get_user($u["username"],"fullname")."\">Have a Better Photo?</a></center>\n";
echo "</td>\n";
echo "<td valign=\"top\">\n";
echo "<table border=0 cellspacing=5>\n";
echo "<tr><td><b style=\"color:#003466;\">Username:</b></td><td><input type=\"text\" maxlength=32 size=35 name=\"dummy_username\" value=\"".$u["username"]."\" DISABLED></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">First Name:</b></td><td><input type=\"text\" maxlength=32 size=35 name=\"fname\" value=\"".$u["fname"]."\"></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Last Name:</b></td><td><input type=\"text\" maxlength=32 size=35 name=\"lname\" value=\"".$u["lname"]."\"></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Job Title:</b></td><td><input type=\"text\" maxlength=255 size=35 name=\"title\" value=\"".($u["title"]=="0"?"":$u["title"])."\"></td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Group:</b></td><td>\n";
echo "<SELECT name=\"group_id\">\n";
group_select(0,0,$u["group_id"]);
echo "</SELECT></td></tr>\n";
echo "<tr><td colspan=2> </td></tr>\n";
$month = array("","January","February","March","April","May","June","July","August","September","October","November","December");
echo "<tr><td>Your Birthday:</td><td>\n";
echo "<SELECT name=\"bmon\">\n";
echo "<option></option>\n";
for ($i=1; $i <= 12; $i++) echo "<option value=\"".($i<10?"0".$i:$i)."\"".(substr($u["birthday"],0,2)==($i<10?"0".$i:$i)?" SELECTED":"").">".$month[$i]."</option>\n";
echo "</select>\n";
echo "<SELECT name=\"bday\">\n";
echo "<option></option>\n";
for ($j=1; $j <= 31; $j++) echo "<option value=\"".($j<10?"0".$j:$j)."\"".(substr($u["birthday"],2,2)==($j<10?"0".$j:$j)?" SELECTED":"").">".($j<10?"0".$j:$j)."</option>\n";
echo "</select>\n";
echo " (age is not calculated)\n";
echo "</td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Employee Since:</b></td><td>\n";
echo "<SELECT name=\"sdmon\">\n";
echo "<option></option>\n";
for ($i=1; $i <= 12; $i++) echo "<option value=\"".($i<10?"0".$i:$i)."\"".(substr($u["start_date"],4,2)==($i<10?"0".$i:$i)?" SELECTED":"").">".$month[$i]."</option>\n";
echo "</select>\n";
echo "<SELECT name=\"sdday\">\n";
echo "<option></option>\n";
for ($j=1; $j <= 31; $j++) echo "<option value=\"".($j<10?"0".$j:$j)."\"".(substr($u["start_date"],6,2)==($j<10?"0".$j:$j)?" SELECTED":"").">".($j<10?"0".$j:$j)."</option>\n";
echo "</select>\n";
echo "<SELECT name=\"sdyear\">\n";
echo "<option></option>\n";
for ($k=1987; $k <= date("Y"); $k++) echo "<option value=\"".$k."\"".(substr($u["start_date"],0,4)==$k?" SELECTED":"").">".$k."</option>\n";
echo "</select>\n";
echo "</td></tr>\n";
echo "<tr><td colspan=2> </td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Email Address:</b></td><td><input type=\"text\" maxlength=128 size=35 name=\"email\" value=\"".($u["email"]==""?"":$u["email"])."\"></td></tr>\n";
echo "<tr><td>Direct Phone:</td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_direct\" value=\"".($u["ph_direct"]=="0"?"":$u["ph_direct"])."\"><br><span class=\"small\"><i>(example: 123.456.7890)</i></span></td></tr>\n";
echo "<tr><td>Remote Office:</td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_remote_office\" value=\"".($u["ph_remote_office"]=="0"?"":$u["ph_remote_office"])."\"></td></tr>\n";
echo "<tr><td>Remote Fax:</td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_remote_fax\" value=\"".($u["ph_remote_fax"]=="0"?"":$u["ph_remote_fax"])."\"></td></tr>\n";
echo "<tr><td>Mobile Phone:</td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_cell\" value=\"".($u["ph_cell"]=="0"?"":$u["ph_cell"])."\"></td></tr>\n";
echo "<tr><td>Home Phone:</td><td><input type=\"text\" maxlength=20 size=35 name=\"ph_home\" value=\"".($u["ph_home"]=="0"?"":$u["ph_home"])."\"></td></tr>\n";
echo "<tr><td>Blackberry PIN:</td><td><input type=\"text\" maxlength=20 size=35 name=\"blackberry\" value=\"".($u["blackberry"]=="0"?"":$u["blackberry"])."\"></td></tr>\n";
echo "<tr><td colspan=2> </td></tr>\n";
echo "<tr><td><b style=\"color:#003466;\">Manager's Name:</b></td><td>\n";
echo "<SELECT name=\"manager\">\n";
employee_select($u["manager"]);
echo "</SELECT></td></tr>\n";
echo "<tr><td style=\"color:#003466;\"><b style=\"color:#003466;\">Office Location:</b></td><td><input type=\"text\" maxlength=20 size=35 name=\"location\" value=\"".($u["location"]=="0"?"Pittsburgh, PA":$u["location"])."\"></td></tr>\n";
echo "<tr><td style=\"color:#003466;\"><b style=\"color:#003466;\">Room/Cubicle #:</b></td><td><input type=\"text\" maxlength=20 size=10 name=\"room_num\" value=\"".($u["room_num"]=="0"?"":$u["room_num"])."\"></td></tr>\n";
echo "</table>\n";
echo "</td></tr></table>\n";
echo "<P><table border=0 cellspacing=5>\n";
echo "<tr><td><b style=\"color:#003466;\">What I do at ".CMP_NAME_INF.":</b></td><td><textarea name=\"my_job\" rows=8 cols=60>".stripslashes($u["my_job"])."</textarea></td></tr>\n";
echo "<tr><td>Career Highlights:</td><td><textarea name=\"my_career\" rows=8 cols=60>".stripslashes($u["my_career"])."</textarea></td></tr>\n";
echo "<tr><td>A little about my family:</td><td><textarea name=\"my_family\" rows=8 cols=60>".stripslashes($u["my_family"])."</textarea></td></tr>\n";
echo "<tr><td>My Interests:</td><td><textarea name=\"my_interests\" rows=8 cols=60>".stripslashes($u["my_interests"])."</textarea></td></tr>\n";
echo "</table>\n";
echo "<br><br>\n";
echo "<input type=\"submit\" value=\"Update Info\">\n";
echo "</form>\n";
}
}
include("_pageend.php");
?>