<?php
    require_once("includes/session.php");
    confirm_admin();
    require_once("includes/header.php");
    require_once("includes/ContentSanitize.class.php");
    $san = new Sanitize();
?>
<?php
    if(isset($_GET['ac']) && $_GET['ac']) {
        $ac = $san->cleanString($_GET['ac']);
        $ac = '%'.$ac.'%';
        ?>
        <table align="center">
            <tr>
                <td>Username</td>
                <td>Name</td>
                <td>Designation</td>
                <td>Office</td>
                <td>Residence</td>
                <td>Mobile No</td>
                <td>E-Mail</td>
                <td>Options</td>
            </tr>
        <?php
            $query = "SELECT * FROM `user_data` WHERE `username` LIKE :ac";
            $stmt = $dbh->prepare($query);
            $stmt->bindParam(':ac', $ac, PDO::PARAM_STR);
            $stmt->execute();
            
            while($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
        ?>
            <tr>
                <td><?php echo $row['username']; ?></td>
                <td><?php echo $row['name']; ?></td>
                <td><?php echo $row['designation']; ?></td>
                <td><?php echo $row['office']; ?></td>
                <td><?php echo $row['residence']; ?></td>
                <td><?php echo $row['mobile']; ?></td>
                <td><?php echo $row['email']; ?></td>
                <td><a href="edit.php?uid=<?php echo $row['username']; ?>" target="_blank">EDIT</a></td>
            </tr>
        <?php } ?>
        </table>
        <?php
    } else {
        echo "<tr><td colspan=2>Enter something to search.</td></tr>";
    }
?>