|
|
- <?php
-
- if($admin)
- {
- $errors = array();
-
- if(isset($_POST['edit_user']))
- {
- $i_username = mysqli_real_escape_string($dbc, trim($_POST['edit_user_username']));
-
- $i_first = mysqli_real_escape_string($dbc, trim($_POST['edit_user_first']));
-
- $i_last = mysqli_real_escape_string($dbc, trim($_POST['edit_user_last']));
-
- $i_password = mysqli_real_escape_string($dbc, trim($_POST['edit_user_pass']));
-
- $i_admin = mysqli_real_escape_string($dbc, trim($_POST['edit_user_admin']));
-
- $passcom = $i_password . $i_first;
-
- $passcom = SHA1($passcom);
-
- if($i_admin)
- {
- $admin_temp = "true";
- }
- else
- {
- $admin_temp = "false";
- }
-
- $q = "select user_id from users where user_name ='$i_username'";
- $r = mysqli_query($dbc, $q);
-
- while($row = mysqli_fetch_array($r))
- {
- $q = "update users set first_name ='$i_first' where user_id='" . $row['user_id'] . "'";
- $r2 = mysqli_query($dbc, $q);
-
- $q = "update users set last_name ='$i_last' where user_id='" . $row['user_id'] . "'";
- $r2 = mysqli_query($dbc, $q);
-
- $q = "update users set pass ='$passcom' where user_id='" . $row['user_id'] . "'";
- $r2 = mysqli_query($dbc, $q);
- //echo $q;
-
- $q = "update users set admin =$admin_temp where user_id='" . $row['user_id'] . "'";
- $r2 = mysqli_query($dbc, $q);
- //echo $q;
-
- }
-
- header("Location: admin.php");
- }
-
- echo '<h1 class="w3-text-teal"><center>Edit User</center></h1>';
-
- echo '<form action="admin.php" method ="post" class="w3-container w3-card-4">';
-
- $q = "select user_name from users";
- $r = mysqli_query($dbc, $q);
- echo '<select class="w3-select" name ="edit_user_username">';
-
- while($row = mysqli_fetch_array($r))
- {
- echo '<option value="' . $row['user_name'] . '">';
-
- echo $row['user_name'] . '</option>';
- }
-
- echo '</select>';
-
- echo '<div class="w3-group">
- <input class="w3-input" type="text" name="edit_user_first" required>
- <label class="w3-label w3-validate">First Name</label>
- </div>
- <div class="w3-group">
- <input class="w3-input" type="text" name="edit_user_last" required>
- <label class="w3-label w3-validate">Last Name</label>
- </div>
- <div class="w3-group">
- <input class="w3-input" type="password" name="edit_user_pass" maxlength="20" required>
- <label class="w3-label w3-validate">Password</label>
- </div>
-
- <input class="w3-check" type="checkbox" name="edit_user_admin">
- <label class="w3-validate">Admin<label>
-
-
- <p><input type="submit" name="Submit" value="Edit User" class="w3-padding-16 w3-hover-dark-grey w3-btn-block w3-center-align" /></p>
- <input type="hidden" name="edit_user" value="TRUE" />
-
-
- </form>';
-
- foreach($errors as $msg)
- {
- echo " - $msg<br />";
- }
- }
-
- ?>
|