38 lines
1.2 KiB
PHP
38 lines
1.2 KiB
PHP
|
<?php
|
||
|
|
require "config/database.php";
|
||
|
|
|
||
|
|
if(!isset($_SESSION['user_is_admin'])){
|
||
|
|
header("location: " . ROOT_URL . "logout.php");
|
||
|
|
//destroy all sessions and redirect user to login page
|
||
|
|
session_destroy();
|
||
|
|
}
|
||
|
|
if(isset($_POST['submit'])){
|
||
|
|
//get updated form data
|
||
|
|
$id = filter_var($_POST['id'], FILTER_SANITIZE_NUMBER_INT);
|
||
|
|
$firstname = filter_var($_POST['firstname'], FILTER_SANITIZE_FULL_SPECIAL_CHARS);
|
||
|
|
$lastname = filter_var($_POST['lastname'], FILTER_SANITIZE_FULL_SPECIAL_CHARS);
|
||
|
|
$is_admin = filter_var($_POST['userrole'], FILTER_SANITIZE_NUMBER_INT);
|
||
|
|
|
||
|
|
//check for valid input
|
||
|
|
if(!$firstname || !$lastname ){
|
||
|
|
$_SESSION['edit-user'] = "Invalid form input on edit page";
|
||
|
|
|
||
|
|
}else{
|
||
|
|
//update user
|
||
|
|
$query = "UPDATE users SET firstname='$firstname', lastname='$lastname',is_admin=$is_admin WHERE id= $id LIMIT 1";
|
||
|
|
$result = mysqli_query($connection, $query);
|
||
|
|
|
||
|
|
if(mysqli_errno($connection)){
|
||
|
|
$_SESSION['edit-user'] = 'Failed to update user';
|
||
|
|
|
||
|
|
}else{
|
||
|
|
$_SESSION['edit-user-success'] = "User $firstname $lastname updated successfully";
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
header("location: " . ROOT_URL . "admin/manage-users.php");
|
||
|
|
die();
|
||
|
|
?>
|