0byt3m1n1
Path:
C:
/
wamp64
/
www
/
cpms_new
/
ADMIN
/
[
Home
]
File: edit_user_ctrl.php
<?php require_once "../lib/config.php"; require_once BASE_DIR."/lib/db/connection.php"; require_once"../model/employee_mdl.php"; if(is_numeric(@$_GET['id'])) { $userdb_id = @$_GET['id']; $sql="select * from user where user_id='$userdb_id' AND is_admin=0"; $sql1=mysql_query($sql); if(mysql_num_rows($sql1) >0){ while($row=mysql_fetch_array($sql1)){ $username=$row['user_name']; $email=$row['email']; $v_date=$row['verify_date']; $name = $row['name']; $salutation = $row['salutation']; $designation = $row['designation']; $photo = $row['photo']; } }else{ redirectToView($server_ip,"error","No details found"); } } if(isset($_POST['Update'])) { //2 $error_flag=0; $editsalutation=@$_POST['salutation']; $editusername=@$_POST['txtuser']; $editname=@$_POST['txtname'] ; $editemail=@$_POST['txtemail']; $edituserid=@$_POST['txtuserid']; $editpassword=@$_POST['txtpassword']; $editdesignation=@$_POST['txtdesignation']; $receipt_mm_restore=@$_POST['cmbreceiptmm']; $receipt_dd_restore=@$_POST['cmbreceiptdd']; $receipt_yy_restore=@$_POST['txtreceiptyy']; $receipt_date_restore= $receipt_yy_restore."-".$receipt_mm_restore."-".$receipt_dd_restore; if($editusername=="") { $error['username_null']="Please Enter UserName"; $error_flag=1; } //if($editpasswd=="") // { // $error['password_null']="Please Enter password"; // $error_flag=1; // } if($editemail=="") { $error['email_null']="Please Enter email"; $error_flag=1; } if($editname=="") { $error['name_null']="Please Enter name"; $error_flag=1; } if($editdesignation=="") { $error['designation_null']="Please Enter designation"; $error_flag=1; } $sql="select `user_name` from user where user_name='$editusername' and user_id<>$edituserid"; mysql_query($sql); if (mysql_affected_rows()>0) { $error['username']="Username already exists."; $error_flag=1; } if($error_flag==1) { redirectToView($server_ip,"error","Username already exists."); } else { $isNoImage = FALSE; if(isset($_FILES["photo"]["tmp_name"]) && $_FILES["photo"]["tmp_name"] !=null) { $uploadOk= FALSE; $check = getimagesize($_FILES["photo"]["tmp_name"]); if($check !== false) { $uploadOk = TRUE; } }else{ $uploadOk = TRUE; $isNoImage = TRUE; } if ($uploadOk) { $target_file =""; if(!$isNoImage){ $type = $_FILES['photo']['type']; $ph_name = $_FILES['photo']['name']; $ph_name = rand(10000, 99999999) . $ph_name; $target_dir = "../photo/"; $target_file = $target_dir . basename($ph_name); if (!move_uploaded_file($_FILES['photo']['tmp_name'], $target_file)) { $message = "Photo not uploaded. Registration Failed."; $url = $server_ip . "/ADMIN/createuser.php?message=$message"; echo "<script>window.location='$url'</script>"; exit(); } } $result=Employee::updateuser($edituserid,$editsalutation,$editname,$editusername,$editpassword,$editemail,$editdesignation,$target_file); if ($result=="True"){ $message="Updation Completed successfully.."; $url=$server_ip."/ADMIN/search_user.php?message=$message"; echo "<script>window.location='$url'</script>"; } else{ $message="Updation Failed.."; $url=$server_ip."/ADMIN/search_user.php?message=$message"; echo "<script>window.location='$url'</script>"; } } } } function redirectToView($server_ip,$key,$message){ $url=$server_ip."user/search_user.php?id=&$key=$message"; echo "<script>window.location='$url'</script>"; } ?>