FM / Master

/home/techb158/immovalet.ca/report/Master/

/home/techb158/immovalet.ca/report/Master

Name	Size	Mode	Actions
img/	-	0777	rm
Inc/	-	0777	rm
local/	-	0777	rm
acceptprofile.php	5652	0666	edit dl rm
alertes_cv.php	13181	0666	edit dl rm
archives_cv.php	5559	0666	edit dl rm
authorizedpage.php	1216	0666	edit dl rm
bootstrap-cerulean.min.css	121997	0666	edit dl rm
charisma-app.css	41790	0666	edit dl rm
dashboard.php	9901	0666	edit dl rm
delete_offer_employee.php	519	0666	edit dl rm
emplois_offerts.php	17556	0666	edit dl rm
emplois_offert_Ex.php	14292	0666	edit dl rm
footer.php	2440	0666	edit dl rm
head.php	3451	0666	edit dl rm
header.php	2267	0666	edit dl rm
mes_annonces.php	6401	0666	edit dl rm
mes_applications.php	7969	0666	edit dl rm
mes_factures.php	7709	0666	edit dl rm
mes_produits.php	6550	0666	edit dl rm
mes_rapports.php	6238	0666	edit dl rm
modifier_profil.php	12751	0666	edit dl rm
plan_valeurs.php	7342	0666	edit dl rm
search.php	761	0666	edit dl rm
searchs.php	562	0666	edit dl rm
submit_offer_employee.php	12394	0666	edit dl rm
UpdatePostStatus.php	910	0666	edit dl rm
update_offer_employee.php	15209	0666	edit dl rm
Update_Profile.php	3558	0666	edit dl rm
Update_Publish_Post.php	5022	0666	edit dl rm
upload.php	2479	0666	edit dl rm
vori_talent_profil.php	9503	0666	edit dl rm

Edit: /home/techb158/immovalet.ca/report/Master/Update_Publish_Post.php (5022B)

<?php

include_once '../includes/db_connect.php';
include_once '../includes/psl-config.php';
sec_session_start();
$error_msg = "";

mysqli_real_escape_string($mysqli, "utf8");
if(isset($_POST["submit"])) {
		 	
if (isset ($_POST['Job_Post_ID'],$_POST['Post_Title'], $_POST['Mission_of_your_company'], $_POST['Your_3_essential_values'], $_POST['Who_are_we'], $_POST['Mission_of_this_post'], $_POST['Future_achievements'], $_POST['Are_you_the_wanted_person'], $_POST['Select_what_you_offer'])) {	
	
	$Register_Time = date("Y/m/d") . ' ' . date('H:i:s');
	$Register_ID = $_SESSION['user_id'];
	$Job_Post_ID = $_POST['Job_Post_ID'];
	$Post_Title = $_POST['Post_Title'];
	$Mission_of_your_company = mysqli_real_escape_string($mysqli,htmlentities($_POST['Mission_of_your_company']));
	$Your_3_essential_values = $_POST['Your_3_essential_values'];
	$Who_are_we = mysqli_real_escape_string($mysqli,htmlentities($_POST['Who_are_we']));	
	$Mission_of_this_post = mysqli_real_escape_string($mysqli,htmlentities($_POST['Mission_of_this_post']));			
	$Future_achievements = mysqli_real_escape_string($mysqli,htmlentities($_POST['Future_achievements']));			
	$Are_you_the_wanted_person = mysqli_real_escape_string($mysqli,htmlentities($_POST['Are_you_the_wanted_person']));
	$Select_what_you_offer = $_POST['Select_what_you_offer'];
	
	
	if (!$mysqli->query("UPDATE Job_Post SET Post_Title='$Post_Title', Mission_of_your_company='$Mission_of_your_company', Your_3_essential_values ='$Your_3_essential_values', Who_are_we ='$Who_are_we', Mission_of_this_post='$Mission_of_this_post', Future_achievements ='$Future_achievements', Are_you_the_wanted_person ='$Are_you_the_wanted_person', Update_Date ='$Register_Time' WHERE Job_Post_ID ='$Job_Post_ID' AND Master_ID ='$Register_ID'")) {
	//	echo $mysqli->error;
//header('Location: update_offer_employee.php?error=4,1,'.$mysqli->error); 
	header('Location: update_offer_employee.php?var='.$Job_Post_ID.','.$Register_ID.',Votre mise à jour a échoué!');		 
	exit(); 
	}else{
	//	  header('Location: update_offer_employee.php?error=4,1,Votre mise à jour est un succès!');
    //exit(); 
	}	
	
$stmt = $mysqli->prepare("DELETE FROM Post_Select_Category_Offering WHERE Job_Post_ID = ? and Master_ID = ?");
	$stmt->bind_param('ii', $Job_Post_ID, $Register_ID);
	$stmt->execute(); 
	$stmt->close();
	
	
	
	//$Job_Post_ID = mysqli_insert_id($mysqli);
	
	$nSelection = count($Select_what_you_offer);
    for($i=0; $i < $nSelection; $i++)
    {
    $numberVal = $Select_what_you_offer[$i];
    $query = "SELECT * FROM category_offering Where category_offering_ID ='".$numberVal."'";		
	$result = $mysqli->query($query);	
	$Managers = $result->fetch_assoc();
	$category_offering_Name = $Managers['category_offering_Name'];        
	
	if ($insert_stmt = $mysqli->prepare("INSERT INTO Post_Select_Category_Offering (Job_Post_ID, Master_ID, Category_offering_ID, Category_offering_Name, Update_Date) VALUES (?, ?, ?, ?, ?)")) {
		$insert_stmt->bind_param('sssss',$Job_Post_ID,$Register_ID,$numberVal,$category_offering_Name,$Register_Time);		
		// Execute the prepared query.
		if (! $insert_stmt->execute()) {
			$textq="d'inscription";
	header('Location: update_offer_employee.php?var='.$Job_Post_ID.','.$Register_ID.',Échec '.$textq.' pour ajouter des informations pour existe post!');
		 
	exit(); 
	
			
		}else
		{
			//header('Location: submit_offer_employee.php?error=register success!');
			//exit();			
		}		
	}	
    }
	
	$stmt = $mysqli->prepare("DELETE FROM Post_Select_Essential_Values WHERE Job_Post_ID = ? and Master_ID = ?");
	$stmt->bind_param('ii', $Job_Post_ID, $Register_ID);
	$stmt->execute(); 
	$stmt->close();
	
	$nSelections = count($Your_3_essential_values);
    for($r=0; $r < $nSelections; $r++)
    {
    $numberVals = $Your_3_essential_values[$r];
    $query = "SELECT * FROM essential_values Where essential_values_ID ='".$numberVals."'";		
	$result = $mysqli->query($query);	
	$Managers = $result->fetch_assoc();
	$essential_values_Name = $Managers['essential_values_Name'];        
	
	if ($insert_stmt = $mysqli->prepare("INSERT INTO Post_Select_Essential_Values (Job_Post_ID, Master_ID, Essential_values_ID, Essential_values_Name, Update_Date) VALUES (?, ?, ?, ?, ?)")) {
		$insert_stmt->bind_param('sssss',$Job_Post_ID,$Register_ID,$numberVals,$essential_values_Name,$Register_Time);		
		// Execute the prepared query.
		if (! $insert_stmt->execute()) {
			$textq="d'inscription";
			header('Location: submit_offer_employee.php?var='.$Job_Post_ID.','$Register_ID.',Échec '.$textq.' pour ajouter des informations pour existe post!');
			//header('Location: addassist.php?error='.$Managers_ID.'');
			exit();
		}else
		{
			//header('Location: submit_offer_employee.php?error=register success!');
			//exit();			
		}		
	}	
    }

header('Location: update_offer_employee.php?var='.$Job_Post_ID.','$Register_ID.',Succès post-inscription!');
		 
	exit();

}
}

cmd: