HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/_accomods/admin.accomods.com/users_edit.php
<?php
include '_helpers.php';

$update_result = 0;
$insert_result = 0;
$update_password = 0;

// CREATE NEW USER ********************************************************************************************/
if (isset($_POST['newuser'])) {
    $insert_result = create_user( $_POST );
    if ($insert_result == 1) {
        $uid = get_last_uid();
        header('Location: /users_edit.php?uid='.$uid);
    }
}

// UPDATING THE USER ********************************************************************************************/
if (isset($_POST['updateuser'])) {
    $update_result = update_user( $_POST );
}

// UPDATING USER PASSWORD ********************************************************************************************/
if (isset($_POST['updatepw'])) {
    $update_password = update_password( $_POST );
}

// GET THE USER DATA ********************************************************************************************/
if ($_GET['uid'] !== 'new') {
    $u = get_user($_GET['uid']);
} else {
    $u = [ 'id' => 'new', 'email' => '', 'fname' => '', 'lname' => '', 'phone' => '', 'school_code' => '', 'school_name' => '', 'expires' => '', 'access' => 1 ];
}
if ($update_result === -1 || $insert_result == -1) {
    $u = $_POST;
}

// GET SCHOOLS DATA ********************************************************************************************/
// GET SCHOOL CODES
$db = connectDB();
$sql = "SELECT * FROM school_codes ORDER BY code_active DESC, school_name ASC";
$schools = $db->query($sql);

$opts = '';
$json = '';

$isActive = true;
$opts = '<optgroup label="Active">';
while ($s = $schools->fetch_assoc()) {
    if ($isActive==true && $s['code_active']==0) {
		$opts .= '</optgroup>';
	    $opts .= '<optgroup label="Inactive">';
	    $isActive=false;
    }
    $opts .= '<option value="' . $s['school_code'] . '" ' . ($s['school_code'] == $u["school_code"] ? 'selected="selected"' : '') . '>' . $s['school_name'] . '</option>';
    $json .= '{"code":"'.$s['school_code'].'", "name":"'.$s['school_name'].'", "expires":"'.$s['code_expires'].'"},'."\n";
}
$opts .= '</optgroup>';
include '_header.php';

?>


<div class="container">
    <div class="row">
        <div class="col-sm-12">

            <h1><?=($_GET['uid'] === 'new' ? 'Create New ' : 'Update ')?>User</h1>
            <p><a href="/">Admin Panel</a> &nbsp;/&nbsp; <a href="/users.php">Manage Users</a> </p>
            <hr/>

            <?php
            if ($update_result === 1) { echo '<div class="alert alert-success"><b>Update Successful</b></div>'; }
            if ($update_result === -1) { echo '<div class="alert alert-danger"><b>Update Failed - Please Try Again</b></div>'; }

            if ($insert_result === -1) { echo '<div class="alert alert-danger"><b>User Create Failed - Please Try Again</b></div>'; }

            if ($update_password === 1) { echo '<div class="alert alert-success"><b>Password Update Successful</b></div>'; }
            if ($update_password === -1) { echo '<div class="alert alert-danger"><b>Password Update Failed - Please Try Again</b></div>'; }
            ?>

            <form action="users_edit.php?uid=<?=$u['id']?>" method="post">
                <input type="hidden" name="id" value="<?=$u['id']?>" />
                <table class="table table-borderless" style="font-size:14px;">
                    <tbody>
                    <tr>
                        <td width="150">First Name</td>
                        <td><input type="text" name="fname" value="<?=$u['fname']?>" class="form-control" /></td>
                    </tr>
                    <tr>
                        <td>Last Name</td>
                        <td><input type="text" name="lname" value="<?=$u['lname']?>" class="form-control" /></td>
                    </tr>
                    <tr>
                        <td>Email</td>
                        <td><input type="text" name="email" value="<?=$u['email']?>" class="form-control" /></td>
                    </tr>
                    <tr>
                        <td>Phone</td>
                        <td><input type="text" name="phone" value="<?=$u['phone']?>" class="form-control" /></td>
                    </tr>
                    <tr>
                        <td>School (License)</td>
                        <td>
                            <select name="school" id="licenseSelect" class="form-control" id="">
                                <option value="1">--- No License ---</option>
                                <?=$opts?>
                            </select>
                        </td>
                    </tr>
                    <tr>
                        <td>School Name</td>
                        <td><input type="text" name="school_name" value="<?=$u['school_name']?>" class="form-control" id="schoolNameField" /></td>
                    </tr>
                    <tr>
                        <td>Account Expires</td>
                        <td><input type="text" name="expires" value="<?=$u['expires']?>" class="form-control" placeholder="YYYY-MM-DD" id="accountExpires" /></td>
                    </tr>
                    <?php if ($_GET['uid'] === 'new'): ?>
                        <tr id="password">
                            <td>Set Password</td>
                            <td><input type="text" name="pass" value="" class="form-control" /></td>
                        </tr>
                    <?php endif; ?>
                    <tr>
                        <td>&nbsp;</td>
                        <td><input type="submit" name="<?=($_GET['uid']=='new' ? 'newuser' : 'updateuser')?>" value="Submit <?=($_GET['uid']=='new' ? 'New User' : 'Edits')?>" class="btn btn-success" /></td>
                    </tr>
                    </tbody>
                </table>
            </form>

            <?php if ($_GET['uid'] !== 'new'): ?>
            <br/><br/><br/><br/>
            <h3>Set new Password</h3>
            <hr/>
            <form action="users_edit.php?uid=<?=$u['id']?>" method="post">
                <input type="hidden" name="id" value="<?=$u['id']?>" />
                <table class="table table-borderless" style="font-size:14px;">
                    <tbody>
                    <tr id="password">
                        <td width="150">New Password</td>
                        <td><input type="text" name="pass" value="" class="form-control" /></td>
                    </tr>
                    <tr>
                        <td>&nbsp;</td>
                        <td><input type="submit" name="updatepw" value="Set New Password" class="btn btn-success" /></td>
                    </tr>
                    </tbody>
                </table>
            </form>
            <?php endif; ?>
        </div>
    </div>
</div>

<script type="text/javascript">
    $(document).ready(function () {

        let schools = [ <?=$json?> ];

        $('#licenseSelect').each(function () {
            let val = $(this).val();
            if (val == 1) { $('#schoolNameField, #accountExpires').prop("readonly", false); }
            else { $('#schoolNameField, #accountExpires').prop("readonly", true); }
        }).change(function () {
            let val = $(this).val();
            if (val == 1) {
                $('#schoolNameField, #accountExpires').prop("readonly", false).val('');
            }
            else {
                let school = schools.filter( s => s.code === val ).pop();
                $('#schoolNameField').val(school.name);
                $('#accountExpires').val(school.expires);
                $('#schoolNameField, #accountExpires').prop("readonly", true);
            }
        });
    });
</script>


<?php
$db->close();

include '_footer.php';
?>