One Hat Cyber Team

Edit File: insert_profile_new.php

<?php
include_once("auth.inc.php");

include_once("config.php");
$query = "SELECT *

FROM nsemem

WHERE id = '$id'

LIMIT 1";

$result = mysql_query($query);

$num = mysql_num_rows($result);

$row = mysql_fetch_array($result);

$dob= "$year-$month-$day";
if ($num == 0) {

if ($image) {

require ("function_randomletter.php");

$myrand = randomString(12);

$picture = "$myrand";
require ("uploader.php");

}
$lastname = addslashes($lastname);

$firstname = addslashes($firstname);

$middlename = addslashes($middlename);

$nationality = addslashes($nationality);

$curr_employer = addslashes($curr_employer);

$comp_address = addslashes($comp_address);

$perm_address = addslashes($perm_address);
	
$date_of_birth = doubleval($date_of_birth);

$perm_address = addslashes($perm_address);

$email = addslashes($email);

$designation = addslashes($designation);

$prof_grade = addslashes($prof_grade);

$birthdate = "$date_year-$date_month-$date_day";

$attaindate = "$attain_year";

$std_fullname = trim("$lastname $firstname $middlename");
//confirm that the nseregno is new
$query_regno = mysql_query("SELECT * FROM nsemem WHERE nseregno = '$nseregno'");
$num_reg = mysql_num_rows($query_regno);
if($num_reg > 0 ){
    //a member is already using the regno
   header("Refresh: 0; URL=add_profile_tab.php?w_update=Member not added!!!! A member with Registration number $nseregno already exist.Please verify the registration number.");
   exit();
}
$insert = "insert into nsemem(nseregno)values('$nseregno')";

$results = mysql_query($insert)	or die(mysql_error());

$thisid= mysql_insert_id();

$update= "Update nsemem set  sex='$sex',nseregno='$nseregno' , title='$title' ,lastname='$lastname' , firstname='$firstname' , middlename='$middlename' , dob='$dob' , grade='$grade', dateelected='$dateelected' , specialization='$specialization' , division='$division' , branch='$branch' , town='$town' , state='$state' , nationalty='$nationality' , contactaddr='$contactaddr' , residentialaddr='$residentialaddr' , postaladdr='$postaladdr' , homephone='$homephone' , mobilephone='$mobilephone' , email='$email' , compname='$compname' , compdept='$compdept' , compposition='$compposition' , yearspostion='$yearspostion', businessaddr='$businessaddr', businessname1='$businessname1', busestablishment1='$busestablishment1' , buscertification1='$buscertification1' , buscost1='$buscost1' , busphone1='$busphone1' , busphone2='$busphone2' , busfax='$busfax' , busemail='$busemail', compwebsite='$compwebsite', businessaddr2='$businessaddr2', businessname2='$businessname2', busestablishment2='$busestablishment2' , buscertification2='$buscertification2' , buscost2='$buscost2' , busphone11='$busphone11' , busphone22='$busphone22' , busfax2='$busfax2' , busemail2='$busemail2' , compwebsite2='$compwebsite2' , firstdegcourse='$firstdegcourse' , firstdegtitle='$firstdegtitle' , firstdeguniver='$firstdeguniver' , firstdegdate='$firstdegdate' , seconddegcourse='$seconddegcourse' , seconddegtitle='$seconddegtitle' , seconddeguniver='$seconddeguniver' , seconddegdate='$seconddegdate' , doctdegcourse='$doctdegcourse' , doctdegtitle='$doctdegtitle' , doctdeguniver='$doctdeguniver' , doctdegdate='$doctdegdate' , profcourse='$profcourse' , profaward='$profaward' , profbody='$profbody' , profdate='$profdate' , dateelectstd='$dateelectstd' , dateelectgrd='$dateelectgrd' , dateelectass='$dateelectass' , dateelectcor='$dateelectcor' , dateelectmem='$dateelectmem' , dateelectfell='$dateelectfell' , dateelectliffellow='$dateelectliffellow' , corenregno='$corenregno' , corendate='$corendate' , nokname='$nokname' , nokcontact='$nokcontact' , nokpostal='$nokpostal' , nokphone='$nokphone' , nokmobile='$nokmobile' , nokfax='$nokfax' , nokemail='$nokemail' , LifeMember='$LifeMember' , Extension='$Extension' , NationalIDNo='$NationalIDNo'  where id='$thisid'";
 
$results = mysql_query($update) or die(mysql_error());

$upd_affected = mysql_affected_rows();

$std_fullname = trim("$lastname $firstname $middlename");

if ($results) {
//insert dues
insertNewMemberDues($nseregno);
header("Refresh: 0; URL=edit_profile_tab.php?id=$thisid&w_update=$std_fullname has been added");
exit;

}

else {

header("Refresh: 0; URL=edit_profile_tab.php?id=$thisid&w_update=$std_fullname was not successfully been added");

}
}

else {

if ($image) {

require ("function_randomletter.php");

$myrand = randomString(12);

$picture = "$myrand";

require ("uploader.php");
}

$lastname = addslashes($lastname);

$firstname = addslashes($firstname);

$middlename = addslashes($middlename);

$nationality = addslashes($nationality);

$curr_employer = addslashes($curr_employer);

$comp_address = addslashes($comp_address);

$perm_address = addslashes($perm_address);
	
$date_of_birth = doubleval($date_of_birth);

$perm_address = addslashes($perm_address);

$email = addslashes($email);

$designation = addslashes($designation);

$prof_grade = addslashes($prof_grade);

$birthdate = "$date_year-$date_month-$date_day";

$attaindate = "$attain_year";
$update= "Update nsemem set  sex='$sex',nseregno='$nseregno' , title='$title' ,lastname='$lastname' , firstname='$firstname' , middlename='$middlename' , dob='$dob' , dateelected='$dateelected' , specialization='$specialization' , division='$division' , branch='$branch' , town='$town' , state='$state' , nationalty='$nationality' , contactaddr='$contactaddr' , residentialaddr='$residentialaddr' , postaladdr='$postaladdr' , homephone='$homephone' , mobilephone='$mobilephone' , email='$email' , compname='$compname' , compdept='$compdept' , compposition='$compposition' , yearspostion='$yearspostion', businessaddr='$businessaddr', businessname1='$businessname1', busestablishment1='$busestablishment1' , buscertification1='$buscertification1' , buscost1='$buscost1' , busphone1='$busphone1' , busphone2='$busphone2' , busfax='$busfax' , busemail='$busemail', compwebsite='$compwebsite', businessaddr2='$businessaddr2', businessname2='$businessname2', busestablishment2='$busestablishment2' , buscertification2='$buscertification2' , buscost2='$buscost2' , busphone11='$busphone11' , busphone22='$busphone22' , busfax2='$busfax2' , busemail2='$busemail2' , compwebsite2='$compwebsite2' , firstdegcourse='$firstdegcourse' , firstdegtitle='$firstdegtitle' , firstdeguniver='$firstdeguniver' , firstdegdate='$firstdegdate' , seconddegcourse='$seconddegcourse' , seconddegtitle='$seconddegtitle' , seconddeguniver='$seconddeguniver' , seconddegdate='$seconddegdate' , doctdegcourse='$doctdegcourse' , doctdegtitle='$doctdegtitle' , doctdeguniver='$doctdeguniver' , doctdegdate='$doctdegdate' , profcourse='$profcourse' , profaward='$profaward' , profbody='$profbody' , profdate='$profdate' , dateelectstd='$dateelectstd' , dateelectgrd='$dateelectgrd' , dateelectass='$dateelectass' , dateelectcor='$dateelectcor' , dateelectmem='$dateelectmem' , dateelectfell='$dateelectfell' , dateelectliffellow='$dateelectliffellow' , corenregno='$corenregno' , corendate='$corendate' , nokname='$nokname' , nokcontact='$nokcontact' , nokpostal='$nokpostal' , nokphone='$nokphone' , nokmobile='$nokmobile' , nokfax='$nokfax' , nokemail='$nokemail' , LifeMember='$LifeMember' , Extension='$Extension' , NationalIDNo='$NationalIDNo'  where id='$id'";
$results = mysql_query($update) or die(mysql_error());
$upd_affected = mysql_affected_rows();
//update grade
$upd_grade = "UPDATE nsemem SET grade = '$grade' WHERE id = '$id'";
//echo $upd_grade;
$res_upd = mysql_query($upd_grade) or die(mysql_error());
$grade_affected = mysql_affected_rows();

if ($image){
$picture1 = $picture.".jpg";
$update1="UPDATE nsemem SET picture1 = '$picture1'
          WHERE id='$id'";
$results1 = mysql_query($update1);
$upd_affected2 = mysql_affected_rows();
}
$std_fullname = trim("$lastname $firstname $middlename");

if (($upd_affected) OR ($upd_affected2) OR ($image) OR ($grade_affected)) {

// update members payment
// check if grade is changed and perform payment update.
if($grade_affected){
    echo "Yess it is";
    UpdateMembersPayment($nseregno);
 }
header("Refresh: 0; URL=edit_profile_tab.php?id=$id&w_update=$std_fullname was updated");
exit;
}
else {
header("Refresh: 0; URL= edit_profile_tab.php?id=$id&w_update=Sorry, $std_fullname was not successfully updated.");
exit;
}
}
?>