LAB-IMS/edit_user.php at main · Muhib68442/LAB-IMS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
<?php
  $page_title = 'Edit User';
  require_once('includes/load.php');
  // Checkin What level user has permission to view this page
   page_require_level(3);
?>
<?php
  $e_user = find_by_id('users',(int)$_GET['id']);
  $groups  = find_all('user_groups');
  if(!$e_user){
    $session->msg("d","Missing user id.");
    redirect('users.php');
  }
?>

<?php
//Update User basic info
  if(isset($_POST['update'])) {
    $req_fields = array('name','username','level');
    validate_fields($req_fields);
    if(empty($errors)){
             $id = (int)$e_user['id'];
           $name = remove_junk($db->escape($_POST['name']));
       $username = remove_junk($db->escape($_POST['username']));
          $level = (int)$db->escape($_POST['level']);
       $status   = remove_junk($db->escape($_POST['status']));
            $sql = "UPDATE users SET name ='{$name}', username ='{$username}',user_level='{$level}',status='{$status}' WHERE id='{$db->escape($id)}'";
         $result = $db->query($sql);
          if($result && $db->affected_rows() === 1){
            $session->msg('s',"Acount Updated ");
        redirect('group.php', false);
          } else {
            $session->msg('d',' Sorry failed to updated!');
            redirect('edit_user.php?id='.(int)$e_user['id'], false);
          }
    } else {
      $session->msg("d", $errors);
      redirect('edit_user.php?id='.(int)$e_user['id'],false);
    }
  }
?>
<?php
// Update user password
if(isset($_POST['update-pass'])) {
  $req_fields = array('password');
  validate_fields($req_fields);
  if(empty($errors)){
           $id = (int)$e_user['id'];
     $password = remove_junk($db->escape($_POST['password']));
     $h_pass   = sha1($password);
          $sql = "UPDATE users SET password='{$h_pass}' WHERE id='{$db->escape($id)}'";
       $result = $db->query($sql);
        if($result && $db->affected_rows() === 1){
          $session->msg('s',"User password has been updated ");
          redirect('edit_user.php?id='.(int)$e_user['id'], false);
        } else {
          $session->msg('d',' Sorry failed to updated user password!');
          redirect('edit_user.php?id='.(int)$e_user['id'], false);
        }
  } else {
    $session->msg("d", $errors);
    redirect('edit_user.php?id='.(int)$e_user['id'],false);
  }
}

?>

<link rel="stylesheet" href="libs/css/main.css">
<link rel="stylesheet" href="libs/css/popup.css">


<!-- // Popup Start -->
 <div class="addNewgGroupPopUpWap">

  <div class="newgroupPopHeadWrap">

    <div class="iconHeadGroup">
      <img src="libs/logos/table-logo/user.png" alt="logo">
      <div class="addPopGroupTitle">Edit User </div>
    </div>

    <div class="addNewGroupContent">

          <div class="addNewForm">
            <form method="post" action="edit_user.php?id=<?php echo (int)$e_user['id'];?>">

              <div class="inputGrup">
                  <label for="name">Full Name</label>
                  <input type="name" class="form-control" name="name" value="<?php echo remove_junk(ucwords($e_user['name'])); ?>">
              </div>

              <div class="inputGrup">
                  <label for="username">Username</label>
                  <input type="text" class="form-control" name="username" value="<?php echo remove_junk(ucwords($e_user['username'])); ?>">
              </div>

              <div class="inputGrup">
                    <label for="level">User Role</label>
                    <select class="form-control" name="level">
                      <?php foreach ($groups as $group ):?>
                      <option <?php if($group['group_level'] === $e_user['user_level']) echo 'selected="selected"';?> value="<?php echo $group['group_level'];?>"><?php echo ucwords($group['group_name']);?></option>
                    <?php endforeach;?>
                    </select>
              </div>

              <div class="inputGrup">
                  <label for="status">Status</label>
                    <select class="form-control" name="status">
                      <option <?php if($e_user['status'] === '1') echo 'selected="selected"';?>value="1">Active</option>
                      <option <?php if($e_user['status'] === '0') echo 'selected="selected"';?> value="0">Deactive</option>
                    </select>
              </div>

              <div class="buttonGroup">

                  <div>
                    <div class="cancelBtn">
                      <button type="button" id="cancelBtn">Cancel</button>
                    </div>
                    <div class="submitbtn">
                      <button type="submit" name="update" class="btn btn-primary">Update User</button>
                    </div>
                  </div>

              </div>

            </form>
          </div>
    </div>

  </div>

</div>
<!-- // Popup Close -->


<script>
    document.getElementById('cancelBtn').addEventListener('click', function() {
        window.history.back();
    });
</script>


<?php include_once('layouts/footer.php'); ?>