egroupware_official/preferences/changeprofile.php

98 lines
3.8 KiB
PHP

<?php
/**************************************************************************\
* phpGroupWare - preferences *
* http://www.phpgroupware.org *
* Written by Joseph Engo <jengo@phpgroupware.org> *
* -------------------------------------------- *
* This program is free software; you can redistribute it and/or modify it *
* under the terms of the GNU General Public License as published by the *
* Free Software Foundation; either version 2 of the License, or (at your *
* option) any later version. *
\**************************************************************************/
/* $Id$ */
Header("Cache-Control: no-cache");
Header("Pragma: no-cache");
//Header("Expires: Sat, Jan 01 2000 01:01:01 GMT");
$phpgw_info["flags"]["currentapp"] = "preferences";
include("../header.inc.php");
if ($phpgw_info["user"]["permissions"]["anonymous"]) {
Header("Location: " . $phpgw->link($phpgw_info["server"]["webserver_url"] . "/"));
$phpgw->common->phpgw_exit();
}
if ($submit) {
if ($picture_size) {
$fh = fopen($picture,"r");
$picture_raw = fread($fh,$picture_size);
fclose($fh);
$phone_number = addslashes($phone_number);
$comments = addslashes($comments);
$title = addslashes($title);
if ($phpgw_info["server"]["db_type"] == "mysql") {
$picture_raw = addslashes($picture_raw);
} else {
$picture_raw = base64_encode($picture_raw);
}
$phpgw->db->query("delete from profiles where owner='" . $phpgw_info["user"]["userid"] . "'");
$phpgw->db->query("insert into profiles (owner,title,phone_number,comments,"
. "picture_format,picture) values ('" . $phpgw_info["user"]["userid"] . "','"
. "$title','$phone_number','$comments','$picture_type','$picture_raw')");
} else {
$phone_number = addslashes($phone_number);
$picture_raw = addslashes($picture_raw);
$comments = addslashes($comments);
$title = addslashes($title);
$phpgw->db->query("update profiles set title='$title',phone_number='$phone_number',"
. "comments='$comments' where owner='" . $phpgw_info["user"]["userid"] . "'");
}
echo "<center>Your profile has been updated</center>";
}
$phpgw->db->query("select * from profiles where owner='" . $phpgw_info["user"]["userid"] . "'");
$phpgw->db->next_record();
?>
<form method="POST" ENCTYPE="multipart/form-data" action="<?php echo $phpgw->link("changeprofile.php"); ?>">
<table border="0">
<tr>
<td colspan="2"><?php echo $phpgw->common->display_fullname($phpgw_info["user"]["userid"],$phpgw_info["user"]["firstname"],$phpgw_info["user"]["lastname"]); ?></td>
<td>&nbsp;</td>
</tr>
<tr>
<td>Title:</td>
<td><input name="title" value="<?php echo $phpgw->db->f("title"); ?>"></td>
<td rowspan="2">
<img src="<?php echo $phpgw->link($phpgw_info["server"]["webserver_url"] . "/hr/view_image.php","con=" . $phpgw_info["user"]["con"]); ?> width="100" height="120">
</td>
</tr>
<tr>
<td>Phone number:</td>
<td><input name="phone_number" value="<?php echo $phpgw->db->f("phone_number"); ?>"></td>
</tr>
<tr>
<td>Comments:</td>
<td><textarea cols="60" name="comments" rows="4" wrap="virtual"><?php echo $phpgw->db->f("comments"); ?></textarea></td>
</tr>
<tr>
<td>Picture:</td>
<td><input type="file" name="picture"><br>Note: Pictures will be resized to 100x120.</td>
</tr>
<tr>
<td colspan="3" align="center"><input type="submit" name="submit" value="Submit">
</tr>
</table>
</form>