<?php
require_once('Connections/YBDB.php');
require_once('Connections/database_functions.php');
if($_GET['shop_id']>0){
$shop_id = $_GET['shop_id'];
} else {
$shop_id = current_shop_by_ip();
}
switch ($_GET['error']) {
case 'new_error_message': //this is a sample error message. insert error case here
$error_message = '';
break;
default:
$error_message = 'Enter or Update Contact Information - < / span > < span class = "yb_standard" > Yellow Bike uses this information soely to support the project and it is kept entirely private. When we apply for grants it helps us to know a little bit about our shop users. < p > Thanks for supporting The Yellow Bike Project. < / p > < / span > < span class = "yb_heading3red" > ';
break;
}
$page_shop_log = PAGE_SHOP_LOG . "?shop_id=$shop_id";
if($_GET['contact_id'] == 'new_contact'){
//adds contact is new_contact is selected
$insertSQL = sprintf("INSERT INTO contacts (date_created) VALUES (%s)",
GetSQLValueString('current_time', "date"));
mysql_select_db($database_YBDB, $YBDB);
$Result1 = mysql_query($insertSQL, $YBDB) or die(mysql_error());
mysql_select_db($database_YBDB, $YBDB);
$query_Recordset2 = "SELECT MAX(contact_id) as new_contact_id FROM contacts;";
$Recordset2 = mysql_query($query_Recordset2, $YBDB) or die(mysql_error());
$row_Recordset2 = mysql_fetch_assoc($Recordset2);
$totalRows_Recordset2 = mysql_num_rows($Recordset2);
$contact_id = $row_Recordset2['new_contact_id'];
$contact_id_entry = 'new_contact';
mysql_free_result($Recordset2);
} elseif(isset($_GET['contact_id'])) {
//else contact_id is assigned from passed value
$contact_id = $_GET['contact_id'];
$contact_id_entry = $_GET['contact_id'];
} else {
$contact_id = -1;
$contact_id_entry = -1;
}
$editFormAction = $_SERVER['PHP_SELF'] . "?contact_id={$contact_id}&shop_id={$shop_id}";
if ((isset($_POST["MM_insert"])) & & ($_POST["MM_insert"] == "form1")) {
$updateSQL = sprintf("UPDATE contacts SET first_name=%s, middle_initial=%s, last_name=%s, email=%s, DOB=%s, receive_newsletter=%s, phone=%s, address1=%s, address2=%s, city=%s, `state`=%s, zip=%s, pass=ENCODE(%s,'yblcatx') WHERE contact_id=%s",
GetSQLValueString($_POST['first_name'], "text"),
GetSQLValueString($_POST['middle_initial'], "text"),
GetSQLValueString($_POST['last_name'], "text"),
GetSQLValueString($_POST['email'], "text"),
GetSQLValueString($_POST['DOB'], "date"),
GetSQLValueString($_POST['list_yes_no'], "int"),
GetSQLValueString($_POST['phone'], "text"),
GetSQLValueString($_POST['address1'], "text"),
GetSQLValueString($_POST['address2'], "text"),
GetSQLValueString($_POST['city'], "text"),
GetSQLValueString($_POST['state'], "text"),
GetSQLValueString($_POST['zip'], "text"),
GetSQLValueString($_POST['password'], "text"),
GetSQLValueString($_POST['contact_id'], "int"));
mysql_select_db($database_YBDB, $YBDB);
$Result1 = mysql_query($updateSQL, $YBDB) or die(mysql_error());
if ($_POST['contact_id_entry'] == 'new_contact'){
//navigate back to shop that it came from
//if there is an email address submitted pass this to google groups signup. Otherwise redirect to shop log.
if ((strpos($_POST['email'], '@') > 0) & & ($_POST['list_yes_no'] == 1)) {
$email = $_POST['email'];
$pagegoto = "contact_add_edit_confirmation_iframe.php" . "?shop_id={$shop_id}&new_user_id={$contact_id}&email=$email";
} else {
$pagegoto = PAGE_SHOP_LOG . "?shop_id={$shop_id}&new_user_id={$contact_id}";
}
header(sprintf("Location: %s", $pagegoto));
}
}
mysql_select_db($database_YBDB, $YBDB);
$query_Recordset1 = "SELECT *, DECODE(pass,'yblcatx') AS passdecode FROM contacts WHERE contact_id = $contact_id";
$Recordset1 = mysql_query($query_Recordset1, $YBDB) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
?>
<?php include ( "include_header.html" ); ?>
< table >
< tr valign = "top" >
< td align = "left" >< span class = "yb_heading3red" > <?php echo $error_message ; ?> </ span ></ td >
< / tr >
< tr >
< td align = "center" >
< form method = "post" name = "form1" action = " <?php echo $editFormAction ; ?> " >
< table width = "500" border = "1" cellpadding = "1" cellspacing = "0" bordercolor = "#CCCCCC" >
< tr valign = "baseline" >
< td width = "200" align = "right" nowrap > Contact_id:< / td >
< td > <?php echo $row_Recordset1 [ 'contact_id' ]; ?> </ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > First_name:< / td >
< td >< input type = "text" name = "first_name" value = " <?php echo $row_Recordset1 [ 'first_name' ]; ?> " size = "32" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > Middle_initial:< / td >
< td >< input name = "middle_initial" type = "text" value = " <?php echo $row_Recordset1 [ 'middle_initial' ]; ?> " size = "1" maxlength = "1" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > Last_name:< / td >
< td >< input type = "text" name = "last_name" value = " <?php echo $row_Recordset1 [ 'last_name' ]; ?> " size = "32" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > Email:< / td >
< td >< input type = "text" name = "email" value = " <?php echo $row_Recordset1 [ 'email' ]; ?> " size = "32" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > Date of Birth: < / td >
< td >< input type = "text" name = "DOB" value = " <?php echo $row_Recordset1 [ 'DOB' ]; ?> " size = "10" />
(YYYY-MM-DD) < / td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > Receive YBP Newsletter?:< / td >
< td > <?php list_yes_no ( list_yes_no , $row_Recordset1 [ 'receive_newsletter' ]); ?> </ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > Phone:< / td >
< td >< input type = "text" name = "phone" value = " <?php echo $row_Recordset1 [ 'phone' ]; ?> " size = "32" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > Address1:< / td >
< td >< input type = "text" name = "address1" value = " <?php echo $row_Recordset1 [ 'address1' ]; ?> " size = "32" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > Address2:< / td >
< td >< input type = "text" name = "address2" value = " <?php echo $row_Recordset1 [ 'address2' ]; ?> " size = "32" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > City:< / td >
< td >< input type = "text" name = "city" value = " <?php echo $row_Recordset1 [ 'city' ]; ?> " size = "32" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > State:< / td >
< td >< input name = "state" type = "text" value = " <?php echo $row_Recordset1 [ 'state' ]; ?> " size = "2" maxlength = "2" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > ZIP:< / td >
< td >< input type = "text" name = "zip" value = " <?php echo $row_Recordset1 [ 'zip' ]; ?> " size = "5" ></ td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > New Password:< / td >
< td >< input name = "password" type = "password" id = "password" value = " <?php echo $row_Recordset1 [ 'passdecode' ]; ?> " size = "32" >
< br / >
Your password keeps others from viewing your personal information. < / td >
< / tr >
< tr valign = "baseline" >
< td nowrap align = "right" > < / td >
< td > < input type = "submit" value = "Update Contact Info" > < / td >
< / tr >
< / table >
< input type = "hidden" name = "MM_insert" value = "form1" >
< input type = "hidden" name = "contact_id" value = " <?php echo $row_Recordset1 [ 'contact_id' ]; ?> " >
< input type = "hidden" name = "contact_id_entry" value = " <?php echo $contact_id_entry ; ?> " >
< / form > < / td >
< / tr >
< / table >
< p > < / p >
<?php include ( "include_footer.html" ); ?>
<?php
mysql_free_result($Recordset1);
?>
