edit_member.php

<?php
/*******************************************************************************

    Copyright 2007 Alberta Cooperative Grocery, Portland, Oregon.

    This file is part of Fannie.

    IS4C is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.

    IS4C is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    in the file license.txt along with IS4C; if not, write to the Free Software
    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

*********************************************************************************/

// A page to view and edit a member's details.

$page_title = 'Edit a Member';
include ('./includes/header.html');

// Check for a valid user ID, through GET or POST.
if ( (isset($_GET['id'])) && (is_numeric($_GET['id'])) )
{
    // Accessed through view_users.php.
    $id = $_GET['id'];
}
elseif ( (isset($_POST['id'])) && (is_numeric($_POST['id'])) )
{
    // Accessed through form submission.
    $id = $_POST['id'];
}
else
{
    // No valid ID, kill the script.
    echo '<h1 id="mainhead">Page Error</h1>
    <p class="error">This page has been accessed in error.</p>
    <p class="error">You have to <b><a href="auto_mem_find.php">find a member</a></b> before you can edit them.</p><p><br /><br /></p>'; 
    include ('./includes/footer.html');
    exit();
}

require_once($_SERVER["DOCUMENT_ROOT"] . '/src/mysql_connect.php'); // Connect to the database.

if (isset($_POST['submitted']))
{
    // If the form has been submitted, check the new data and update the record.    
    // Initialize the errors array.
    $errors = array();
    
    // Validate the form data.
    if (empty($_POST['first_name']))
    {        
        $errors[] = 'You left their first name blank.';    
    }
    else
    {
        $fn = escape_data($_POST['first_name']); // Store the first name.
    }

    if (empty($_POST['last_name']))
    {
        $errors[] = 'You left their last name blank.';    
    }
    else
    {
        $ln = escape_data($_POST['last_name']); // Store the last name.
    }
    $email = escape_data($_POST['email']);
    $phoneNo = escape_data($_POST['phone_number']);
    $street1 = escape_data($_POST['street1']);
    $street2 = escape_data($_POST['street2']);
    $city = escape_data($_POST['city']);
    $state = escape_data($_POST['state']);
    $zip = escape_data($_POST['zip']);
    $available_sunday = (isset($_POST['available_sunday']) && $_POST['available_sunday'] == 'on'?1:0);
    $available_monday = (isset($_POST['available_monday']) && $_POST['available_monday'] == 'on'?1:0);
    $available_tuesday = (isset($_POST['available_tuesday']) && $_POST['available_tuesday'] == 'on'?1:0);
    $available_wednesday = (isset($_POST['available_wednesday']) && $_POST['available_wednesday'] == 'on'?1:0);
    $available_thursday = (isset($_POST['available_thursday']) && $_POST['available_thursday'] == 'on'?1:0);
    $available_friday = (isset($_POST['available_friday']) && $_POST['available_friday'] == 'on'?1:0);
    $available_saturday = (isset($_POST['available_saturday']) && $_POST['available_saturday'] == 'on'?1:0);
    $experience_org = (isset($_POST['experience_org']) && $_POST['experience_org'] == 'on'?1:0);
    $experience_clean = (isset($_POST['experience_clean']) && $_POST['experience_clean'] == 'on'?1:0);
    $experience_cashier = (isset($_POST['experience_cashier']) && $_POST['experience_cashier'] == 'on'?1:0);
    $experience_phone = (isset($_POST['experience_phone']) && $_POST['experience_phone'] == 'on'?1:0);
    $experience_customer = (isset($_POST['experience_customer']) && $_POST['experience_customer'] == 'on'?1:0);
    $experience_grocery = (isset($_POST['experience_grocery']) && $_POST['experience_grocery'] == 'on'?1:0);
    $experience_paper = (isset($_POST['experience_paper']) && $_POST['experience_paper'] == 'on'?1:0);
    $skills_computer = (isset($_POST['skills_computer']) && $_POST['skills_computer'] == 'on'?1:0);
    $skills_computer_list = escape_data($_POST['skills_computer_list']);
    $skills_database = (isset($_POST['skills_database']) && $_POST['skills_database'] == 'on'?1:0);
    $skills_database_list = escape_data($_POST['skills_database_list']);
    $skills_construction = (isset($_POST['skills_construction']) && $_POST['skills_construction'] == 'on'?1:0);
    $skills_construction_list = escape_data($_POST['skills_construction_list']);
    $skills_truckvan = (isset($_POST['skills_truckvan']) && $_POST['skills_truckvan'] == 'on'?1:0);
    $skills_truckvan_list = escape_data($_POST['skills_truckvan_list']);
    $languages = escape_data($_POST['languages']);

    if ((isset($_POST['charge_ok'])) && ($_POST['charge_ok'] = 'on'))
    {
        $ChargeOk = 1;
    }
    elseif ((isset($_POST['charge_ok'])) && ($_POST['charge_ok'] = 'off'))
    {
        $ChargeOk = 0;
    }
    else
    {
        $ChargeOk = 0;
    }

    if (!isset($_POST['checks_ok']))
    {
        $_POST['checks_ok'] = 'off';
    }

    if ($_POST['discount'] > 20)
    {    
        $errors[] = 'You entered a discount greater than the maximum.';
    }
    else
    {
        $d = escape_data($_POST['discount']); // Store the discount.
    }
    
    if (empty($errors))
    {
        if (isset($_POST['staff']) && $_POST['staff'] == 6)
        {
            $Type = 'reg';
        }
        else
        {
            $Type = 'pc';
        }    
        $staff = $_POST['staff'];
        $memtype = $_POST['memtype'];
        if ($_POST['checks_ok'] == 'on')
        {
            $WriteCheck=1;
        }
        else
        {
            $WriteCheck=0;
        }
        $query =
        "    UPDATE custdata
                SET FirstName = '$fn',
                LastName = '$ln',
                email = '$email',
                phoneNo = '$phoneNo',
                WriteChecks = $WriteCheck,
                discount = $d,
                memType = $memtype,
                Type = '$Type',
                staff = '$staff',
                ChargeOk = $ChargeOk,
                addressStreet = '$street1',
                addressStreet2 = '$street2',
                addressCity = '$city',
                addressState = '$state',
                addressZip = '$zip',
                applicationDate = NULL,
                availableSunday = $available_sunday,
                availableMonday = $available_monday,
                availableTuesday = $available_tuesday,
                availableWednesday = $available_wednesday,
                availableThursday = $available_thursday,
                availableFriday = $available_friday,
                availableSaturday = $available_saturday,
                experienceOrganization = $experience_org,
                experienceCleaning = $experience_clean,
                experienceCashier = $experience_cashier,
                experiencePhone = $experience_phone,
                experienceCustomerService = $experience_customer,
                experienceGrocery = $experience_grocery,
                experiencePaperwork = $experience_paper,
                skillsComputers = $skills_computer,
                skillsComputersList = '$skills_computer_list',
                skillsDatabase = $skills_database,
                skillsDatabaseList = '$skills_database_list',
                skillsConstruction = $skills_construction,
                skillsConstructionList = '$skills_construction_list',
                skillsTruckVan = $skills_truckvan,
                skillsTruckVanList = '$skills_truckvan_list',
                languages = '$languages'
                WHERE id = $id;
        ";
        $result = @mysql_query($query);
            
        if (mysql_affected_rows() == 1)
        { // If the query was successful.                
            echo '<h1 id="mainhead">Edit a Member</h1>
            <p>The member has been edited.</p><p><br /><br /></p>';
        }
        else
        { // The query was unsuccessful.                
            echo '<h1 id="mainhead">System Error</h1>
            <p class="error">There are two possibilities:<br />
            <b>1.)</b> The member could not be edited due to a system error.<br />
            <b>2.)</b> Nothing was changed.</p>';
            echo '<p>' . mysql_error() . '<br /><br />Query: ' . $query . '</p>';
            print_r($_POST);
        }
    }
    else
    { // Report the errors.        
        echo '<h1 id="mainhead">Error!!</h1>
        <p class="error">The following error(s) occurred:<br />';
        foreach ($errors as $msg)
        {
            // Print each error.
            echo " - $msg<br />\n";
        }
        echo '</p><p>Please try again.</p><p><br /></p>';            
    } // End of if (empty($errors)) IF.

} // End of submit conditional.

// Always show the form.

// Retrieve the user's information.
$query = "SELECT * FROM custdata WHERE id = " . $id;
$query2 = "SELECT staff_no, staff_desc FROM staff ORDER BY staff_no ASC";
$query3 = "SELECT memtype, memDesc FROM memtype ORDER BY memtype ASC";
$result = @mysql_query($query);
$result2 = @mysql_query($query2);
$result3 = @mysql_query($query3);

if (mysql_num_rows($result) == 1)
{
    // Valid id show the form.
    // Get the user's information.
    $row = mysql_fetch_array($result);
    
    // Create the form.
    if ($row["ChargeOk"] == 1)
    {
        $ChargeOk = ' CHECKED';
    }
    else
    {
        $ChargeOk = '';
    }

    if ($row["WriteChecks"] == 1)
    {
        $ChecksOk = ' CHECKED';
    }
    else
    {
        $ChecksOk = '';
    }
    ?>
    <h2>Edit a Member.</h2>
    <form action="auto_mem_edit.php" method="post">
        <p>
            Card Number:
            <?php $CardNo = $row["CardNo"] ?>
            <?=$row["CardNo"]?>
        </p>
            <div style="border: 1px; border-color: #000000; border-style: solid">
                <h3>Contact Information:</h3>
                <p>
                    First Name:<br />
                    <input type="text" id="first_name" name="first_name" size="15" maxlength="15" value="<?=$row["FirstName"]?>" required />
                </p>
                <p>
                    Last Name:<br />
                    <input type="text" id="last_name" name="last_name" size="15" maxlength="30" value="<?=$row["LastName"]?>" required />
                </p>
                <p>
                    E-Mail Address:<br />
                    <input type="email" id="email" name="email" size = "20" maxlength="100" value="<?=$row["email"]?>" />
                </p>
                <p>
                    Phone Number:<br />
                    <input type="text" id="phone_number" name="phone_number" size = "15" maxlength="30" value="<?=$row["phoneNo"]?>" />
                </p>
                <p>
                    <div style="border: 1px; border-color: #000000; border-style: dashed;">
                        Address:<br/>
                        <input type="text" name="street1" size = "20" maxlength="50" placeholder="Street Line 1" value="<?=$row["addressStreet"]?>" required /><br />
                        <input type="text" name="street2" size = "20" maxlength="50" placeholder="Street Line 2" value="<?=$row["addressStreet2"]?>" /><br />
                        <input type="text" name="city" size = "20" maxlength="20" placeholder="City" value="<?=$row["addressCity"]?>" required />
                        <input type="text" name="state" size = "2" maxlength="2" placeholder="State" value="<?=$row["addressState"]?>" required />
                        <input type="text" name="zip" size = "10" maxlength="10" placeholder="Zipcode" value="<?=$row["addressZip"]?>" /><br />
                    </div>
                </p>
            </div>
            <div style="border: 1px; border-color: #000000; border-style: solid">
                <h3>Availability:</h3>
                <input type="checkbox" id="available_sunday" name="available_sunday" <?=$row["availableSunday"]?'checked':''?>/><label for="available_sunday">Sundays</label><br /><input type="text" name"available_sunday_hours" size="20" maxlength="20" placeholder="Available Hours" value="<?=$row["availableSundayHours"]?>" /?><br />
                <input type="checkbox" id="available_monday" name="available_monday" <?=$row["availableMonday"]?'checked':''?>/><label for="available_monday">Mondays</label><br /><input type="text" name"available_monday_hours" size="20" maxlength="20" placeholder="Available Hours" value="<?=$row["availableMondayHours"]?>" /?><br />
                <input type="checkbox" id="available_tuesday" name="available_tuesday" <?=$row["availableTuesday"]?'checked':''?>/><label for="available_tuesday">Tuesdays</label><br /><input type="text" name"available_tuesday_hours" size="20" maxlength="20" placeholder="Available Hours" value="<?=$row["availableTuesdayHours"]?>" /?><br />
                <input type="checkbox" id="available_wednesday" name="available_wednesday" <?=$row["availableWednesday"]?'checked':''?>/><label for="available_wednesday">Wednesdays</label><br /><input type="text" name"available_wednesday_hours" size="20" maxlength="20" placeholder="Available Hours" value="<?=$row["availableWednesdayHours"]?>" /?><br />
                <input type="checkbox" id="available_thursday" name="available_thursday" <?=$row["availableThursday"]?'checked':''?>/><label for="available_thursday">Thursdays</label><br /><input type="text" name"available_thursday_hours" size="20" maxlength="20" placeholder="Available Hours" value="<?=$row["availableThursdayHours"]?>" /?><br />
                <input type="checkbox" id="available_friday" name="available_friday" <?=$row["availableFriday"]?'checked':''?>/><label for="available_friday">Fridays</label><br /><input type="text" name"available_friday_hours" size="20" maxlength="20" placeholder="Available Hours" value="<?=$row["availableFridayHours"]?>" /?><br />
                <input type="checkbox" id="available_saturday" name="available_saturday" <?=$row["availableSaturday"]?'checked':''?>/><label for="available_saturday">Saturdays</label><br /><input type="text" name"available_saturday_hours" size="20" maxlength="20" placeholder="Available Hours" value="<?=$row["availableSaturdayHours"]?>" /?><br />
            </div>
            <div style="border: 1px; border-color: #000000; border-style: solid;">
                <h3>Experience:</h3>
                <input type="checkbox" id="experience_org" name="experience_org" <?=$row["experienceOrganization"]?'checked':''?> /><label for="">Co-op Organization / Team Management Experience</label><br />
                <input type="checkbox" id="experience_clean" name="experience_clean" <?=$row["experienceCleaning"]?'checked':''?> /><label for="">Cleaning / Maintenance</label><br />
                <input type="checkbox" id="experience_cashier" name="experience_cashier" <?=$row["experienceCashier"]?'checked':''?> /><label for="">Cashier Experience</label><br />
                <input type="checkbox" id="experience_phone" name="experience_phone" <?=$row["experiencePhone"]?'checked':''?> /><label for="">Enjoy Phone Work</label><br />
                <input type="checkbox" id="experience_customer" name="experience_customer" <?=$row["experienceCustomerService"]?'checked':''?> /><label for="">Customer Service Experience</label><br />
                <input type="checkbox" id="experience_grocery" name="experience_grocery" <?=$row["experienceGrocery"]?'checked':''?> /><label for="">Grocery Experience</label><br />
                <input type="checkbox" id="experience_paper" name="experience_paper" <?=$row["experiencePaperwork"]?'checked':''?> /><label for="">Paper Work / Data Entry</label><br />
            </div>
            <div style="border: 1px; border-color: #000000; border-style: solid;">
                <h3>Skills:</h3>
                <input type="checkbox" id="skills_computer" name="skills_computer" <?=$row["skillsComputers"]?'checked':''?> /><label for="skills_computer">Computers</label><br /><input type="text" name="skills_computer_list" size="30" maxlength="30" placeholder="Skills" value="<?=$row["skillsComputersList"]?>" /><br />
                <input type="checkbox" id="skills_database" name="skills_database" <?=$row["skillsDatabase"]?'checked':''?> /><label for="skills_database">Database Programming / Operation</label><br /><input type="text" name="skills_database_list" size="30" maxlength="30" placeholder="Skills" value="<?=$row["skillsDatabaseList"]?>" /><br />
                <input type="checkbox" id="skills_construction" name="skills_construction" <?=$row["skillsConstruction"]?'checked':''?> /><label for="skills_construction">Construction / Electrical / Plumbing</label><br /><input type="text" name="skills_construction_list" size="30" maxlength="30" placeholder="Skills" value="<?=$row["skillsConstructionList"]?>" /><br />
                <input type="checkbox" id="skills_truckvan" name="skills_truckvan" <?=$row["skillsTruckVan"]?'checked':''?> /><label for="skills_truckvan">Own a truck or van</label><br /><input type="text" name="skills_truckvan_list" size="30" maxlength="30" placeholder="Skills" value="<?=$row["skillsTruckVanList"]?>" /><br />
                Languages: <input type="text" name="languages" size="30" maxlength="30" value="<?=$row["languages"]?>" /><br />
            </div>
            <label for="application_date">Application Date:</label><br />
            <input type="date" id="application_date" name="application_date" value="<?=$row["applicationDate"]?$row["applicationDate"]:date('Y-m-d')?>" autocomplete="on" required /><br />
            <label for="orientation_date">Orientation Date:</label><br />
            <input type="date" id="orientation_date" name="orientation_date" value="<?=$row["orientationDate"]?>" /><br />

<?php
if ($row["staff"] == 1 || $row["staff"] == 2 || $row["staff"] == 5)
{?>
            <p>House Charge? <input type="checkbox" name="charge_ok" <?=$ChargeOk?> /></p>
<?php
}?>
            <p>
                Write Checks?
                <input type="checkbox" name="checks_ok" <?=$ChecksOk?> />
            </p>
            <p>
                Discount:
                <input type="text" name="discount" size="3" maxlength="2" value="<?=$row["Discount"]?>" />%
            </p>
            <p>
                Member Type:
                <select name="staff">
                    <option value='0'>None</option>
<?php
while ($row2 = mysql_fetch_array($result2, MYSQL_ASSOC))
{?>
                        <option value="<?=$row2['staff_no']?>" <?=$row2['staff_no']==$row['staff']?'selected="selected"':''?>><?=$row2['staff_desc']?></option>
<?php
}?>
                </select>
              </p>
              <p>
                  Member Status:
                  <select name="memtype">
<?php
while ($row3 = mysql_fetch_array($result3, MYSQL_ASSOC))
{?>
                      <option value="<?=$row3['memtype']?>" <?=$row3['memtype']==$row['memType']?'selected="selected"':''?>><?=$row3='memDesc']?></option>
<?php
}?>
                  </select>
              </p>
              <p>
                  <input type="submit" name="submit" value="Submit" />
              </p>
        <input type="hidden" name="submitted" value="TRUE" />
        <input type="hidden" name="id" value="<?=$id?>" />
    </form>

    <!-- This section shows the last six shifts assigned to this member -->
    <table border='1'>
        <tr>
            <th>Start</th>
            <th>End</th>
            <th>Worked</th>
        </tr>
    <?php
        $query =
        '
            SELECT time.shifts.start,
                time.shifts.end,
                time.volunteer_hours.id vol_id
                FROM is4c_op.custdata
                    JOIN time.employee_shifts
                        ON (CardNo = emp_no)
                    JOIN time.shifts
                        USING (shift_id)
                    LEFT JOIN time.volunteer_hours
                        USING (shift_id, emp_no)
                WHERE emp_no = ' . $CardNo . '
                ORDER BY time.shifts.start DESC
                LIMIT 6;
        ';

        $result = @mysql_query($query);
        while ($row = mysql_fetch_array($result, MYSQL_ASSOC))
        {?>
        <tr>
            <td><?=$row['start']?></td>
            <td><?=$row['end']?></td>
            <td><?=!is_null($row['vol_id'])?'Worked':'Not Worked'?></td>
        </tr>
        <?php
        }
    ?>
    </table>
    <?php
}
else
// Not a valid Member ID
{?>
    <h1 id="mainhead">Page Error</h1>
    <p class="error">This page has been accessed in error.</p>
    <p><br /><br /></p>
<?php
}
mysql_close(); // Close the DB connection.