Log-Module/editcourse.php at master · pavleenkaur/Log-Module · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
<html>
    <head>
        <title>Edit Profile</title>
    </head>
    <style>
        body
        {
            margin:0px;
            background-color:#848484;
        }
        h2
        {
            background-color:white;
            padding:30px;
        }
        p{
          padding-left: 30px;
        }
    </style>
   <?php
   session_start(); //starts the session
   if($_SESSION['user']){ // checks if the user is logged in
   }
   else{
      header("location: index.php"); // redirects if user is not logged in
   }
   $user = $_SESSION['user']; //assigns user value
   $id_exists = false;
   ?>
    <body>
        <h2>Edit Course </h2>
        <p>Hello <?php Print "$user"?>!</p> <!--Display's user name-->
        <a href="logout.php">Click here to go logout</a><br/><br/>
        <a href="home.php">Return to home page</a>
        <h3 align="center">Current Details</h3>
        <table border = "1px" width = "100%">
           <tr>
              <th>ID</th>
              <th>Name</th>
              <th>Email ID</th>
              <th>Password</th>
              <th>Course</th>
              <th>Year</th>
              <th>Mobile Number</th>
           </tr>
          <?php
              if (!empty($_GET['id']))
              {
                 $id=$_GET['id'];
                 $_SESSION['id'] = $id;
                 $id_exists = true;
                 mysql_connect("localhost","root","") or die (mysql_error());
                 mysql_select_db("StudentDB") or die("Cannot connect to database");
                 $query = mysql_query("Select * from StudentDetails where id='$id'");
                 $count = mysql_num_rows($query);
                 if($count > 0 )
                 {
                  while ( $row=mysql_fetch_array($query))
                  {
                     Print "<tr>";
                        Print '<td align="center">'. $row['id'] . "</td>";
                        Print '<td align="center">'. $row['username']. "</td>";
                        Print '<td align="center">'. $row['email']. "</td>";
                        Print '<td align="center">'. $row['password']. "</td>";
                        Print '<td align="center">'. $row['course']. "</td>";
                        Print '<td align="center">'. $row['year']. "</td>";
                        Print '<td align="center">'. $row['mobile']. "</td>";
                     Print "</tr>";
                  }
                 }
                 else
                 {
                  $id_exists=false;
                 }
              }
              ?>
            </table>
            <br/>
            <?php
            if($id_exists)
            {
              Print ' <br>
              <form action = "editcourse.php" method="POST">
                 Change Course : <input type="text" name="course" placeholder="New Course"/><br/><br/>
                 <input type="submit" value="Update Profile"/>
              </form>
              ';
            }
            else
            {
              Print '<h2 align="center">There is nothing to be edited.</h2>';
            }
            ?>
      </body>
    </html>

  <?php

  function rec_update( $id, $course )
  {
      $query = mysql_query("SELECT * from StudentDetails WHERE id='$id'"); //Query the users table if there are matching rows equal to $email
      $row = mysql_fetch_assoc($query); //display all rows from query
      $username= $row['username'];
      $email = $row['email'];
      $c = $row['course'];
      $update_file = "updateFile.txt";
      $log = fopen($update_file,"a") or die ("Cannot open file");
      $date = (new DateTime())->setTimeZone(new DateTimeZone('Asia/Kolkata'))->format('d/m/y - H:i:s a');
      $str = " ".$date. " - " . $username . " - " . $email . " - Course - " . $c . "  -  " . $course . "\n";
      fwrite ( $log, $str);
      fclose($log);
  }

  if($_SERVER['REQUEST_METHOD'] == "POST")
  {
    mysql_connect("localhost", "root","") or die(mysql_error()); //Connect to server
    mysql_select_db("StudentDB") or die("Cannot connect to database"); //Connect to database

    $id = $_SESSION['id'];
    $course = mysql_real_escape_string($_POST["course"]);

    rec_update( $id, $course ); // Function call to record Update Activity - parameter needed - id ( or any column name being used for updating ) and new entry ( course )

    mysql_query("UPDATE StudentDetails SET course='$course' WHERE id='$id'") ;
    header("location: home.php");
  }
?>