-
Notifications
You must be signed in to change notification settings - Fork 0
/
teacherprofile.php
160 lines (130 loc) · 5.83 KB
/
teacherprofile.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
<!DOCTYPE html>
<?php
include 'db.php';
include 'navi.php';
session_start();
$user = $_SESSION['user'];
if (!isset($_SESSION['user'])) {
echo "<script>window.location.href = 'index.php';</script>";
}
include 'submission.php';
$sqlstore = "SELECT * FROM user WHERE username = '$user'";
$resultstore = $conn->query($sqlstore);
$ln = '';
$fn = '';
$pass = '';
$userimage = '';
while ($rowstore = $resultstore->fetch_assoc()) {
$userimage = $rowstore['image'];
$ln = $rowstore['lastname'];
$fn = $rowstore['firstname'];
$pass = $rowstore['password'];
}
if (isset($_POST['uploadimage'])) {
$image = addslashes(file_get_contents($_FILES['image']['tmp_name']));
$sql = "UPDATE user SET image = '{$image}' WHERE username = '$user'";
$result = $conn->query($sql) or trigger_error("Query Failed! SQL: $sql - Error: " .mysqli_error(), E_USER_ERROR);
echo "<script>window.location.href = 'teacherprofile.php';</script>";
}
if (isset($_POST['update'])) {
$last = mysqli_real_escape_string($conn, $_POST['ln']);
$first = mysqli_real_escape_string($conn, $_POST['fn']);
$sql = "UPDATE user SET lastname = '$last', firstname = '$first' WHERE username = '$user'";
$result = $conn->query($sql) or trigger_error("Query Failed! SQL: $sql - Error: " .mysqli_error(), E_USER_ERROR);
echo "<script>
alert('Name Updated Successfully!');
window.location.href = 'teacherprofile.php';
</script>";
}
if (isset($_POST['change'])) {
$op = mysqli_real_escape_string($conn, $_POST['op']);
$np = mysqli_real_escape_string($conn, $_POST['np']);
$cp = mysqli_real_escape_string($conn, $_POST['cp']);
if ($_POST['op'] == $pass and ($np == $cp) and ($np != '')) {
$sql = "UPDATE user SET password = '$np' WHERE username = '$user'";
$result = $conn->query($sql) or trigger_error("Query Failed! SQL: $sql - Error: " .mysqli_error(), E_USER_ERROR);
echo "<script>
alert('Password Updated Successfully!');
window.location.href = 'teacherprofile.php';
</script>";
} else {
echo "<script>
alert('Incorrect Old Password or New and Confirm Password do not match!');
window.location.href = 'teacherprofile.php';
</script>";
}
}
?>
<html>
<head>
<title>Essay Checker</title>
<link rel="stylesheet" type="text/css" href="css/maindesign.css">
<link class="jsbin" href="http://ajax.googleapis.com/ajax/libs/jqueryui/1/themes/base/jquery-ui.css" rel="stylesheet" type="text/css" />
<script class="jsbin" src="http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js"></script>
<script class="jsbin" src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.0/jquery-ui.min.js"></script>
<meta charset=utf-8 />
</head>
<body>
<div id="container">
<div id="header">
<label style="top: 5px; left: 15px; font-size: 30px; position: absolute;">Vanguard Essay Checker</label>
</div>
<fieldset id="teachprofile">
<form method="POST" action="#" enctype="multipart/form-data">
<img src="<?= 'data:image/jpeg;base64,' .base64_encode($userimage) ?>" alt="No image" class="profimage" id="blah" />
<input type="file" name="image" id="image" onchange="readURL(this);" style="position: absolute; margin-left: -120px;" required />
<br /><br />
<input type="submit" value="Upload Image" name="uploadimage" class="success" style="width: 235px; margin-top: 10px;" />
</form>
</fieldset>
<fieldset id="inform">
<form method="POST" action="#">
<br />
<label>First Name: </label>
<br /><br />
<input type="text" name="fn" maxlength="50" value="<?= $fn; ?>" required />
<br /><br />
<label>Last Name: </label>
<br /><br />
<input type="text" name="ln" maxlength="50" value="<?= $ln; ?>" required />
<br /><br />
<input type="submit" value="Save" name="update" class="success" style="margin-top: 12px;" />
</form>
</fieldset>
<fieldset id="note">
<label>NOTE: The Administrator has the right to suspend dummy accounts!</label>
</fieldset>
<fieldset id="pass">
<form method="POST" action="#">
<br />
<label>Update Password</label>
<br /><br />
<label>Old Password:</label>
<input type="password" name="op" maxlength="50" style="width: 300px; margin-left: 31px;" required />
<br /><br />
<label>New Password:</label>
<input type="password" name="np" maxlength="50" style="width: 300px; margin-left: 23px;" required />
<br /><br />
<label>Confirm Password:</label>
<input type="password" name="cp" maxlength="50" style="width: 300px;" />
<br /><br />
<input type="submit" value="Change Password" name="change" class="success" required />
</form>
</fieldset>
<fieldset id="footer">
<label>Essay Checker (Virtual Classroom) © 2017</label>
</fieldset>
</div>
</body>
</html>
<script type="text/javascript">
function readURL(input) {
if (input.files && input.files[0]) {
var reader = new FileReader();
reader.onload = function(e) {
$('#blah').attr('src', e.target.result).width(235).height(200);
};
reader.readAsDataURL(input.files[0]);
}
}
</script>