first commit
This commit is contained in:
Your Name
@@ -0,0 +1,212 @@
|
||||
<?php
|
||||
|
||||
// +----------------------------------------------------------------------+
|
||||
// | OpenConf |
|
||||
// +----------------------------------------------------------------------+
|
||||
// | Copyright (c) 2002-2020 Zakon Group LLC. All Rights Reserved. |
|
||||
// +----------------------------------------------------------------------+
|
||||
// | This source file is subject to the OpenConf License, available on |
|
||||
// | the OpenConf web site: www.OpenConf.com |
|
||||
// +----------------------------------------------------------------------+
|
||||
|
||||
$OC_cmtEdit = true; // flag for designating profile editing
|
||||
|
||||
require_once "../include.php";
|
||||
|
||||
oc_sendNoCacheHeaders();
|
||||
|
||||
if (OCC_CHAIR_PWD_TRUMPS && isset($_POST['c']) && ($_POST['c'] == 1)) {
|
||||
$hdrfn = 1;
|
||||
beginChairSession();
|
||||
$chair = true;
|
||||
$rid = $_POST['rid'];
|
||||
} else {
|
||||
beginSession();
|
||||
$hdrfn = 2;
|
||||
$rid = $_SESSION[OCC_SESSION_VAR_NAME]['acreviewerid'];
|
||||
$chair = false;
|
||||
}
|
||||
|
||||
if (oc_hookSet('committee-update-pre')) {
|
||||
foreach ($GLOBALS['OC_hooksAR']['committee-update-pre'] as $hook) {
|
||||
require_once $hook;
|
||||
}
|
||||
}
|
||||
|
||||
printHeader(oc_('Update Profile'), $hdrfn);
|
||||
|
||||
if (!preg_match("/^\d+$/", $rid)) {
|
||||
warn('Invalid ID');
|
||||
exit;
|
||||
}
|
||||
|
||||
$hdr = ''; // set these so req OCC_COMMITTEE_INC_FILE below skips printHeader
|
||||
$hdrfn = 0;
|
||||
|
||||
require_once OCC_FORM_INC_FILE;
|
||||
require_once OCC_COMMITTEE_INC_FILE;
|
||||
|
||||
$postFields = array();
|
||||
|
||||
// Update fields for editing profile
|
||||
unset($OC_reviewerFieldAR['username']);
|
||||
if (isset($OC_reviewerFieldSetAR['fs_passwords'])) {
|
||||
$OC_reviewerFieldSetAR['fs_passwords']['fieldset'] = oc_('Change Password');
|
||||
$OC_reviewerFieldSetAR['fs_passwords']['note'] = oc_('Leave these fields blank if you do not want to change the password');
|
||||
$OC_reviewerFieldSetAR['fs_passwords']['fields'] = array('password1', 'password2');
|
||||
}
|
||||
if (isset($OC_reviewerFieldAR['password1']) && isset($OC_reviewerFieldAR['password2'])) {
|
||||
$OC_reviewerFieldAR['password1']['name'] = oc_('New Password');
|
||||
$OC_reviewerFieldAR['password1']['required'] = false;
|
||||
$OC_reviewerFieldAR['password2']['required'] = false;
|
||||
}
|
||||
if (isset($OC_reviewerFieldAR['consent'])) { // remove consent field if already given
|
||||
$cr = ocsql_query("SELECT `consent` FROM `" . OCC_TABLE_REVIEWER . "` WHERE `reviewerid`='" . safeSQLstr($rid) . "'") or err('Unable to query consent status');
|
||||
$cl = ocsql_fetch_assoc($cr);
|
||||
if (!empty($cl['consent'])) {
|
||||
unset($OC_reviewerFieldAR['consent']);
|
||||
foreach ($OC_reviewerFieldSetAR as $fsid => $fsar) { // remove from fieldset
|
||||
if (in_array('consent', $fsar['fields'])) {
|
||||
$OC_reviewerFieldSetAR[$fsid]['fields'] = array_diff($OC_reviewerFieldSetAR[$fsid]['fields'], array('consent'));
|
||||
continue; // field should only be in one fieldset
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Process submission
|
||||
if (isset($_POST['ocaction']) && ($_POST['ocaction'] == "Update Profile")) {
|
||||
// Check for valid submission
|
||||
if ( $chair ) {
|
||||
if ( !validToken('chair') ) {
|
||||
warn(oc_('Invalid submission'));
|
||||
}
|
||||
} elseif ( ! validToken('ac') ) {
|
||||
warn(oc_('Invalid submission'));
|
||||
}
|
||||
|
||||
$err = '';
|
||||
$qfields = array();
|
||||
$tfields = array();
|
||||
|
||||
require_once 'committee-validate.inc';
|
||||
|
||||
if (!empty($err)) {
|
||||
print '<div class="warn">' . oc_('Please check the following:') . '<ul>' . $err . '</ul></div><hr />';
|
||||
} else {
|
||||
// check password
|
||||
$q = "SELECT `password` FROM `" . OCC_TABLE_REVIEWER . "` WHERE `reviewerid`='" . safeSQLstr($rid) . "'";
|
||||
$r = ocsql_query($q) or err('Unable to retrieve reviewer information');
|
||||
$rinfo = ocsql_fetch_array($r);
|
||||
if ($chair || oc_password_verify($_POST['oldpwd'], $rinfo['password'])) {
|
||||
// Update fields
|
||||
$q = "UPDATE `" . OCC_TABLE_REVIEWER . "` SET `lastupdate`='" . safeSQLstr(date('Y-m-d')) . "', ";
|
||||
foreach ($qfields as $qid => $qval) {
|
||||
$q .= "`" . $qid . "`=" . $qval . ", ";
|
||||
}
|
||||
$q = rtrim($q, ', ');
|
||||
$q .= " WHERE `reviewerid`='" . safeSQLstr($rid) . "' LIMIT 1";
|
||||
ocsql_query($q) or err('Unable to update database');
|
||||
|
||||
// Update topics
|
||||
issueSQL("DELETE FROM `" . OCC_TABLE_REVIEWERTOPIC . "` WHERE `reviewerid`='" . safeSQLstr($rid) . "'");
|
||||
if (!empty($tfields)) {
|
||||
$q = "INSERT INTO `" . OCC_TABLE_REVIEWERTOPIC . "` (`reviewerid`,`topicid`) VALUES";
|
||||
foreach ($tfields as $t) {
|
||||
$q .= " (" . safeSQLstr($rid) . ",$t),";
|
||||
}
|
||||
$r = ocsql_query(rtrim($q, ',')) or err("unable to add reviewer topic, but account created ");
|
||||
}
|
||||
|
||||
if ($chair) { // display back links
|
||||
print '<div style="text-align: center"><p class="note">profile updated</p><p><a href="../chair/show_reviewer.php?rid=' . urlencode($rid) . '">View This Committee Member</a> | <a href="../chair/list_reviewers.php">View All Committee Members</a></p></div>';
|
||||
} else {
|
||||
print '<p>' . sprintf(oc_('Your profile has been successfully updated. <a href="%s">Return to the main Committee page</a>.'), 'reviewer.php') . '</p>';
|
||||
|
||||
// ocIgnore included so poEdit picks up (DB) template translation
|
||||
$ocIgnoreSubject = oc_('Committee Member Profile Updated');
|
||||
$ocIgnoreBody = oc_('Your profile has been updated. The submitted information follows below:
|
||||
|
||||
[:fields:]');
|
||||
|
||||
list($mailsubject, $mailbody) = oc_getTemplate('committee-update');
|
||||
$fields = oc_genFieldMessage($OC_reviewerFieldSetAR, $OC_reviewerFieldAR, $_POST);
|
||||
$templateExtraAR = array(
|
||||
'fields' => oc_('Username') . ": " . $_SESSION[OCC_SESSION_VAR_NAME]['acusername'] . "\n\n" . $fields
|
||||
);
|
||||
$mailsubject = oc_replaceVariables($mailsubject, $templateExtraAR);
|
||||
$mailbody = oc_replaceVariables($mailbody, $templateExtraAR);
|
||||
|
||||
if (oc_hookSet('committee-signup-update')) {
|
||||
foreach ($GLOBALS['OC_hooksAR']['committee-signup-update'] as $hook) {
|
||||
require_once $hook;
|
||||
}
|
||||
}
|
||||
|
||||
sendEmail($_POST['email'], $mailsubject, $mailbody, $OC_configAR['OC_notifyReviewerProfileUpdate']);
|
||||
}
|
||||
|
||||
printFooter();
|
||||
|
||||
// log
|
||||
oc_logit('committee', 'Member ID ' . $rid . ' profile edited' . ($chair ? ' by Chair' : ''));
|
||||
|
||||
exit;
|
||||
} else {
|
||||
print '<p class="warn">' . oc_('Current password is not correct') . '</p><hr />';
|
||||
}
|
||||
}
|
||||
$postFields = $_POST;
|
||||
} else { // not submitting
|
||||
// get stored values
|
||||
$q = "SELECT * FROM `" . OCC_TABLE_REVIEWER . "` WHERE `reviewerid`='" . safeSQLstr($rid) . "'";
|
||||
$r = ocsql_query($q) or err("Unable to retrieve reviewer information");
|
||||
$postFields = array_merge((array)$_POST, ocsql_fetch_assoc($r));
|
||||
// Get list of reviewer topics
|
||||
$tq = "SELECT * FROM `" . OCC_TABLE_REVIEWERTOPIC . "` WHERE `reviewerid`='" . safeSQLstr($rid) . "'";
|
||||
$tr = ocsql_query($tq) or err("Unable to retrieve topics");
|
||||
$postFields['topics'] = array();
|
||||
while ($tl = ocsql_fetch_assoc($tr)) {
|
||||
$postFields['topics'][] = $tl['topicid'];
|
||||
}
|
||||
if ( isset($OC_reviewerFieldAR['topics']['type']) && ($OC_reviewerFieldAR['topics']['type'] == 'radio') && isset($postFields['topics'][0]) ) {
|
||||
$postFields['topics'] = $postFields['topics'][0];
|
||||
}
|
||||
}
|
||||
|
||||
print '
|
||||
<form method="post" action="' . $_SERVER['PHP_SELF'] . '" class="ocform">
|
||||
<input type="hidden" name="ocaction" value="Update Profile" />
|
||||
';
|
||||
|
||||
if ( $chair ) {
|
||||
print '
|
||||
<input type="hidden" name="rid" value="' . safeHTMLstr($rid) . '" />
|
||||
<input type="hidden" name="c" value="1">
|
||||
<input type="hidden" name="token" value="' . $_SESSION[OCC_SESSION_VAR_NAME]['chairtoken'] . '" />
|
||||
';
|
||||
} else {
|
||||
print '
|
||||
<p class="note">' . oc_('Make the changes you want below, then enter your password for verification and click the <em>Update Profile</em> button at the bottom.') . '</p>
|
||||
<input type="hidden" name="token" value="' . $_SESSION[OCC_SESSION_VAR_NAME]['actoken'] . '" />
|
||||
';
|
||||
}
|
||||
|
||||
oc_displayFieldSet($OC_reviewerFieldSetAR, $OC_reviewerFieldAR, $postFields);
|
||||
|
||||
if (! $chair ) {
|
||||
print '
|
||||
<span class="note2">' . oc_('Enter your current password and click the <em>Update Profile</em> button') . '</span><p>
|
||||
' . oc_('Current Password') . ': <input size="20" name="oldpwd" type="password" style="background-color: #f6f6f6" />
|
||||
|
||||
';
|
||||
}
|
||||
|
||||
print '
|
||||
<input type="submit" name="submit" value="' . oc_('Update Profile') . '" class="submit" />
|
||||
</form>
|
||||
';
|
||||
|
||||
printFooter();
|
||||
|
||||
?>
|
||||
Reference in New Issue
Block a user