0){
$contact_id = $_GET['contact_id'];
} else {
$contact_id =-1;}
switch ($_GET['error']) {
case 'incorrect_password':
$error_message = 'ERROR: Password for user was incorrect. Talk to a coordinator if you cannot remember it.';
break;
case 'new_error_message': //this is a sample error message. insert error case here
$error_message = '';
break;
default:
$error_message = 'Select a Contact to edit and enter password';
break;
}
mysql_select_db($database_YBDB, $YBDB);
$query_Recordset1 = "SELECT * , CONCAT(contacts.last_name, ', ', contacts.first_name, ' ',contacts.middle_initial) AS full_name FROM contacts;";
$Recordset1 = mysql_query($query_Recordset1, $YBDB) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
if (isset($_SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form1")) {
if($_POST['contact_id'] == 'new_contact'){
//if contact is new do not check password and pass to contact form
$insertGoTo = "{$page_edit_contact}?contact_id=new_contact";
header(sprintf("Location: %s", $insertGoTo));
} else {
//if contact is existing check password before passing to contact form
mysql_select_db($database_YBDB, $YBDB);
$query_Recordset2 = "SELECT DECODE(pass,'yblcatx') AS pass FROM contacts WHERE contact_id = {$_POST['contact_id']};";
$Recordset2 = mysql_query($query_Recordset2, $YBDB) or die(mysql_error());
$row_Recordset2 = mysql_fetch_assoc($Recordset2);
$totalRows_Recordset2 = mysql_num_rows($Recordset2);
if( $_POST['password'] === $row_Recordset2['pass'] ) {
//fetch contact data
$insertGoTo = "{$page_edit_contact}?contact_id=" . $_POST['contact_id'];
header(sprintf("Location: %s", $insertGoTo));
} else {
//$error_message = 'Password for user was incorrect. Talk to a coordinator if you cannot remember it.
';
$gotopage = PAGE_SELECT_CONTACT . "?error=incorrect_password&contact_id={$_POST['contact_id']}";
header(sprintf("Location: %s",$gotopage ));
}
//check password for existing users
} //end else
}
?>