FM / Inc

/home/techb158/workloadmatch.com/workloadmatch.com/Teacher/Inc/

/home/techb158/workloadmatch.com/workloadmatch.com/Teacher/Inc

Name	Size	Mode	Actions
AddClient.php	4171	0644	edit dl rm
AddCoursePreference.php	18995	0644	edit dl rm
updateclient.php	2728	0644	edit dl rm
UpdateClient1.php	2726	0644	edit dl rm
Update_Course_Preference.php	11468	0644	edit dl rm
Update_Course_Preference_Secretarial.php	4129	0644	edit dl rm
Update_Profile.php	4514	0644	edit dl rm
Update_Reference.php	9131	0644	edit dl rm
Update_Reference_Follow_Up.php	7435	0644	edit dl rm

Edit: /home/techb158/workloadmatch.com/workloadmatch.com/Teacher/Inc/UpdateClient1.php (2726B)

<?php

include_once '../includes/db_connect.php';
include_once '../includes/psl-config.php';
sec_session_start();
$error_msg = "";

if(isset($_POST["submit"]) && $_POST["submit"]!="") {

if (isset ($_POST['Update_ID'],$_POST['Fullname'],$_POST['Fullname'],$_POST['Familyname'],$_POST['Email'],$_POST['Personnaladdressd'],$_POST['homephone'],$_POST['cellphone'])) {

$Client_ID = $_POST['Update_ID']; 
$Titel = $_POST['TITRE']; 
$First_Name = $_POST['Fullname']; 
$Last_Name = $_POST['Familyname']; 
$Email = $_POST['Email']; 
$Address = $_POST['Personnaladdressd']; 	
$Home_Phone = $_POST['homephone']; 	
$Cell_Phone = $_POST['cellphone']; 	
$Client_Name = $First_Name .''. $Last_Name;
	
		$user_n=$_SESSION['user_id'];	
$stmt = $mysqli->prepare('SELECT * FROM Broker_Profile WHERE Broker_ID = ?');  
		$stmt->bind_param('s', $user_n);  
		$stmt->execute();  
		$result = $stmt->get_result(); 
		//$row = $result->fetch_assoc();
		$count =$result->num_rows;		
		if($count > 0)
		{		
		$query = "SELECT * FROM Broker_Profile Where Broker_ID ='".$user_n."'";	
		$result = $mysqli->query($query);	
		$row = $result->fetch_assoc();
		$Category_ID = $row['Category_ID'];
		$Admin_ID = $row['Admin_ID'];
		$Master_ID = $row['Master_ID'];
		$Manager_ID = $row['Manager_ID'];
		$Broker_ID = $row['Broker_ID'];
		$User_Type_ID = $row['User_Type_ID'];

$datetime =date("Y/m/d") . ' ' . date('H:i:s') ;
    $prep_stmt = "SELECT Client_ID FROM Client_Profile WHERE Client_ID = ? LIMIT 1";    
    $stmt = $mysqli->prepare($prep_stmt);    
    if ($stmt) {
        $stmt->bind_param('s', $Client_ID);
        $stmt->execute();
        $stmt->store_result();
        
        if ($stmt->num_rows == 1) {
            // A user with this email address already exists
            //$error_msg .= '<p class="error">A user with this user name already exists.</p>';
			if (!$mysqli->query("UPDATE Client_Profile SET Titel='".$Titel."',First_Name='".$First_Name."', Last_Name='".$Last_Name."', User_Name='".$Client_Name."', Email='".$Email."', Home_Phone='".$Home_Phone."', Cell_Phone='".$Cell_Phone."', Address='".$Address."' WHERE Client_ID='".$Client_ID."' and Category_ID='".$Category_ID."' and Admin_ID ='".$Admin_ID."' and Manager_ID='".$Manager_ID."' and Broker_ID='".$Broker_ID."' and User_Type_ID='".$User_Type_ID."'")) {
			header('Location: updateclient.php?error=Client update failure!');
			exit(); 
			}else{
			header('Location: updateclient.php?error=Client update successfully. Thanks!');
			exit(); 
	}		
     
        }
    } else {
        //$error_msg .= '<p class="error">Database error</p>';
    }
   
	
	
}
   
}else
{
header('Location: updateclient.php?error=all information are required!');
  exit();
    
}

}

prepare('SELECT * FROM Broker_Profile WHERE Broker_ID = ?'); $stmt->bind_param('s', $user_n); $stmt->execute(); $result = $stmt->get_result(); //$row = $result->fetch_assoc(); $count =$result->num_rows; if($count > 0) { $query = "SELECT * FROM Broker_Profile Where Broker_ID ='".$user_n."'"; $result = $mysqli->query($query); $row = $result->fetch_assoc(); $Category_ID = $row['Category_ID']; $Admin_ID = $row['Admin_ID']; $Master_ID = $row['Master_ID']; $Manager_ID = $row['Manager_ID']; $Broker_ID = $row['Broker_ID']; $User_Type_ID = $row['User_Type_ID']; $datetime =date("Y/m/d") . ' ' . date('H:i:s') ; $prep_stmt = "SELECT Client_ID FROM Client_Profile WHERE Client_ID = ? LIMIT 1"; $stmt = $mysqli->prepare($prep_stmt); if ($stmt) { $stmt->bind_param('s', $Client_ID); $stmt->execute(); $stmt->store_result(); if ($stmt->num_rows == 1) { // A user with this email address already exists //$error_msg .= '

A user with this user name already exists.

'; if (!$mysqli->query("UPDATE Client_Profile SET Titel='".$Titel."',First_Name='".$First_Name."', Last_Name='".$Last_Name."', User_Name='".$Client_Name."', Email='".$Email."', Home_Phone='".$Home_Phone."', Cell_Phone='".$Cell_Phone."', Address='".$Address."' WHERE Client_ID='".$Client_ID."' and Category_ID='".$Category_ID."' and Admin_ID ='".$Admin_ID."' and Manager_ID='".$Manager_ID."' and Broker_ID='".$Broker_ID."' and User_Type_ID='".$User_Type_ID."'")) { header('Location: updateclient.php?error=Client update failure!'); exit(); }else{ header('Location: updateclient.php?error=Client update successfully. Thanks!'); exit(); } } } else { //$error_msg .= '

Database error

'; } } }else { header('Location: updateclient.php?error=all information are required!'); exit(); } }