FM / Inc

/home/techb158/workloadmatch.com/workloadmatch.com/Teacher/Inc/

/home/techb158/workloadmatch.com/workloadmatch.com/Teacher/Inc

Name	Size	Mode	Actions
AddClient.php	4171	0644	edit dl rm
AddCoursePreference.php	18995	0644	edit dl rm
updateclient.php	2728	0644	edit dl rm
UpdateClient1.php	2726	0644	edit dl rm
Update_Course_Preference.php	11468	0644	edit dl rm
Update_Course_Preference_Secretarial.php	4129	0644	edit dl rm
Update_Profile.php	4514	0644	edit dl rm
Update_Reference.php	9131	0644	edit dl rm
Update_Reference_Follow_Up.php	7435	0644	edit dl rm

Edit: /home/techb158/workloadmatch.com/workloadmatch.com/Teacher/Inc/Update_Profile.php (4514B)

<?php

include_once '../includes/db_connect.php';
include_once '../includes/psl-config.php';
sec_session_start();
$error_msg = "";

if(isset($_POST["submit"]) && $_POST["submit"]!="") {
if (isset ($_POST['username'], $_POST['email'], $_POST['FUserName'], $_POST['LUserName'])) {
   
 //  $Access_Carrier = $_POST['Access_Carrier']; 
//$weburl = $_POST['weburl'];

$Time_Slot = isset($_POST['Time_Slot']) ? $_POST['Time_Slot'] : [];
// Combine time slots into a single string
$time_slot_combined = implode(",", $Time_Slot);
   
   $FUserNames = $_POST['FUserName'];   
   $LUserNames = $_POST['LUserName'];   
    
$Phones =$_POST['Phone'];   
	
	$rx = "/
    (1)?\D*     # optional country code
    (\d{3})?\D* # optional area code
    (\d{3})\D*  # first three
    (\d{4})     # last four
    (?:\D+|$)   # extension delimiter or EOL
    (\d*)       # optional extension
/x";
preg_match($rx, $Phones, $matches);
if(!isset($matches[0])) return false;

$country = $matches[1];
$area = $matches[2];
$three = $matches[3];
$four = $matches[4];
$ext = $matches[5];

$Phones= $area.''.$three.''.$four;
 $Access_Carrier=  $_POST['Access_Carrier'];
 
 if( $Access_Carrier == "")
 {
	 $Access_Carrier=0;
 }
 $Note=  $_POST['Note'];
     $Admin_ID=  $_POST['username'];
     
     $prof_lang=  $_POST['prof_lang'];
     
         
    $email = filter_input(INPUT_POST, 'email', FILTER_SANITIZE_EMAIL);
    $email = filter_var($email, FILTER_VALIDATE_EMAIL);
    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        // Not a valid email
        $error_msg .= '<p class="error">The email address you entered is not valid</p>';
    }
    
   
//$error_msg .= $FUserNames .' '. $Admin_ID .' '. $LUserNames;
 // $error_msg .= $FUserNames .' '. $random_salt .' '. $LUserNames .' '. $Address .' '. $Phones .' '. $CompanyNames .' '. $Admin_ID  .' '. $email  .' '. $password ;
 $user_n=$_SESSION['user_id'];
 $stmt = $mysqli->prepare('SELECT * FROM Teacher_Profile WHERE Teacher_ID = ?');  
		$stmt->bind_param('s', $user_n);  
		$stmt->execute();  
		$result = $stmt->get_result(); 
		//$row = $result->fetch_assoc();
		$count =$result->num_rows;		
		if($count > 0)
		{
     if (empty($error_msg)) {
	if (!$mysqli->query("UPDATE Teacher_Profile SET First_Name='$FUserNames', Last_name='$LUserNames', Email='$email', Phone ='$Phones', Time_Slot='$time_slot_combined', prof_lang='$prof_lang', Note='$Note', SMS_Carrier='$Access_Carrier' WHERE User_Name ='$Admin_ID' AND Teacher_ID ='$user_n'")) {
		 header('Location: profile.php?error='.$mysqli->error);
		 
		 
		 
		 
		// header('Location: profile.php?error=Client failure to update!');
	exit(); 
	}else{
 header('Location: profile.php?error=User is Updated successfully. Thanks!');
    exit();

}		
     }
      
}
}else
{
header('Location: profile.php?error=all information are required!');
  exit();
    
}
}else if(isset($_POST["submits"]) && $_POST["submits"]!="") {
if (isset ($_POST['p'])) {
    
    $password = filter_input(INPUT_POST, 'p', FILTER_SANITIZE_STRING);
    if (strlen($password) != 128) {
        // The hashed pwd should be 128 characters long.
        // If it's not, something really odd has happened
        $error_msg .= '<p class="error">Invalid password configuration.</p>';
    }
     $random_salt = hash('sha512', uniqid(openssl_random_pseudo_bytes(16), TRUE));
        // Create salted password 
        $password = hash('sha512', $password . $random_salt);
//$error_msg .= $FUserNames .' '. $Admin_ID .' '. $LUserNames;
 // $error_msg .= $FUserNames .' '. $random_salt .' '. $LUserNames .' '. $Address .' '. $Phones .' '. $CompanyNames .' '. $Admin_ID  .' '. $email  .' '. $password ;
 $user_n=$_SESSION['user_id'];
 $stmt = $mysqli->prepare('SELECT * FROM Teacher_Profile WHERE Teacher_ID = ?');  
		$stmt->bind_param('s', $user_n);  
		$stmt->execute();  
		$result = $stmt->get_result(); 
		$row = $result->fetch_assoc();
		$count =$result->num_rows;		
		if($count > 0)
		{
     if (empty($error_msg)) {
	if (!$mysqli->query("UPDATE Teacher_Profile SET Password ='$password', salt='$random_salt' WHERE User_Name ='".$row['User_Name']."' AND Teacher_ID ='".$user_n."'")) {
		// header('Location: profile.php?error='.$mysqli->error);
		 header('Location: profile.php?error=Client password failure to update!');
	exit(); 
	}   
     }
       header('Location: profile.php?error=User password is updated successfully. Thanks!');
    exit();

}
}else
{
header('Location: profile.php?error=all information are required!');
  exit();
    
}
}

The email address you entered is not valid

'; } //$error_msg .= $FUserNames .' '. $Admin_ID .' '. $LUserNames; // $error_msg .= $FUserNames .' '. $random_salt .' '. $LUserNames .' '. $Address .' '. $Phones .' '. $CompanyNames .' '. $Admin_ID .' '. $email .' '. $password ; $user_n=$_SESSION['user_id']; $stmt = $mysqli->prepare('SELECT * FROM Teacher_Profile WHERE Teacher_ID = ?'); $stmt->bind_param('s', $user_n); $stmt->execute(); $result = $stmt->get_result(); //$row = $result->fetch_assoc(); $count =$result->num_rows; if($count > 0) { if (empty($error_msg)) { if (!$mysqli->query("UPDATE Teacher_Profile SET First_Name='$FUserNames', Last_name='$LUserNames', Email='$email', Phone ='$Phones', Time_Slot='$time_slot_combined', prof_lang='$prof_lang', Note='$Note', SMS_Carrier='$Access_Carrier' WHERE User_Name ='$Admin_ID' AND Teacher_ID ='$user_n'")) { header('Location: profile.php?error='.$mysqli->error); // header('Location: profile.php?error=Client failure to update!'); exit(); }else{ header('Location: profile.php?error=User is Updated successfully. Thanks!'); exit(); } } } }else { header('Location: profile.php?error=all information are required!'); exit(); } }else if(isset($_POST["submits"]) && $_POST["submits"]!="") { if (isset ($_POST['p'])) { $password = filter_input(INPUT_POST, 'p', FILTER_SANITIZE_STRING); if (strlen($password) != 128) { // The hashed pwd should be 128 characters long. // If it's not, something really odd has happened $error_msg .= '

Invalid password configuration.

'; } $random_salt = hash('sha512', uniqid(openssl_random_pseudo_bytes(16), TRUE)); // Create salted password $password = hash('sha512', $password . $random_salt); //$error_msg .= $FUserNames .' '. $Admin_ID .' '. $LUserNames; // $error_msg .= $FUserNames .' '. $random_salt .' '. $LUserNames .' '. $Address .' '. $Phones .' '. $CompanyNames .' '. $Admin_ID .' '. $email .' '. $password ; $user_n=$_SESSION['user_id']; $stmt = $mysqli->prepare('SELECT * FROM Teacher_Profile WHERE Teacher_ID = ?'); $stmt->bind_param('s', $user_n); $stmt->execute(); $result = $stmt->get_result(); $row = $result->fetch_assoc(); $count =$result->num_rows; if($count > 0) { if (empty($error_msg)) { if (!$mysqli->query("UPDATE Teacher_Profile SET Password ='$password', salt='$random_salt' WHERE User_Name ='".$row['User_Name']."' AND Teacher_ID ='".$user_n."'")) { // header('Location: profile.php?error='.$mysqli->error); header('Location: profile.php?error=Client password failure to update!'); exit(); } } header('Location: profile.php?error=User password is updated successfully. Thanks!'); exit(); } }else { header('Location: profile.php?error=all information are required!'); exit(); } }