Your IP : 216.73.216.40
<?php
$loginID = $_REQUEST['loginID'];
if (!$loginID) $loginID = $user;
$tbl = 'webprofiles';
$titles = array('Mr.','Sri.','Ms.','Mrs.','Miss.','Dr.','Prof.');
$bloodgroups = array('A+','A-','B+','B-','O+','O-','AB+','AB-');
$webmasters = array('yes','no');
if ($submit == 'SAVE') {
$passwd = $_POST['passwd'];
$title = htmlsafe($_POST['title']);
$fullname = htmlsafe($_POST['full_name']);
$parents = htmlsafe($_POST['parents']);
$designation = htmlsafe($_POST['designation']);
$email = htmlsafe($_POST['email']);
$webpage = htmlsafe($_POST['webpage']);
$datebirth = $_POST['datebirth'];
$datejoining = $_POST['datejoining'];
$address = htmlsafe($_POST['address']);
$phoneno = htmlsafe($_POST['phoneno']);
$hobbies = htmlsafe($_POST['hobbies']);
$bloodgroup = htmlsafe($_POST['bloodgroup']);
$languageknow = htmlsafe($_POST['languageknow']);
$expertise = htmlsafe($_POST['expertise']);
$achievements = htmlsafe($_POST['achievements']);
$webmaster = htmlsafe($_POST['webmaster']);
if (mysql_num_rows(mysql_query("select * from $tbl where login='$loginID'"))) {
if ($passwd) mysql_query("update $tbl set passwd=password('$passwd') where login='$loginID'");
mysql_query("update $tbl set title='$title',fullname='$fullname',parents='$parents',
designation='$designation',email='$email',webpage='$webpage',datebirth='$datebirth',datejoining='$datejoining',
address='$address',phoneno='$phoneno',hobbies='$hobbies',bloodgroup='$bloodgroup',
languageknow='$languageknow',expertise='$expertise',achievements='$achievements',webmaster='$webmaster'
where login='$loginID'");
} else {
mysql_query("insert into $tbl(login,passwd,title,fullname,parents,
designation,email,webpage,datebirth,datejoining,address,phoneno,hobbies,
bloodgroup,languageknow,expertise,achievements,webmaster)
values('$loginID',password('$passwd'),'$title','$fullname','$parents',
'$designation','$email','$webpage','$datebirth','$datejoining','$address',
'$phoneno','$hobbies','$bloodgroup','$languageknow','$expertise',
'$achievements','$webmaster')");
}
} else if ($submit == 'DELETE') {
mysql_query("delete from $tbl where login='$loginID'");
}
if ($role == 'admin') {
echo "Select Login
<select name='logID' onchange=\"document.location.href='$PHP_SELF?conf=$conf&loginID='+this.value\">
<option value='new'>Add new profile</option>";
$rs = mysql_query("SELECT * FROM $tbl order by fullname");
while ($o = mysql_fetch_object($rs)) {
echo "<option value='$o->login'";
if ($loginID == $o->login) echo " selected";
echo ">$o->login</option>";
}
echo "</select> [ <a href='inner.php?conf=uploads'>Upload Photo</a> ]";
}
if ($role || loginID == 'new') {
if ($role == 'admin') {
$rs = mysql_query("select * from $tbl where login='$loginID'");
} else {
$rs = mysql_query("select * from profiles where login='$user'");
}
$o = mysql_fetch_object($rs);
echo "<p>
Please furnish these information in order to host your profile on website. Thanks.
<table width='100%' border='0' cellpadding='2' cellspacing='1'>
<tr><td>Login ID *</td>
<td><input type='text' name='loginID' value='$loginID' size='60'></td></tr>
<tr><td>Password *</td>
<td><input type='password' name='passwd' value='' size='60'></td></tr>
<tr><td>Full Name *</td>
<td><select name='title'>";
foreach ($titles as $tt){
echo "<option value='$tt'";
if($tt == $o->title) echo " selected";
echo ">$tt</option>";
}
echo "</select> <input type='text' name='fullname' value='$o->fullname' size='51'></td></tr>
<tr><td nowrap>Parents Name</td>
<td><input type='text' name='parents' value='$o->parents' size='60'></td></tr>
<tr><td nowrap>Designation</td>
<td><input type='text' name='designation' value='$o->designation' size='60'></td></tr>
<tr><td>Email *</td>
<td><input type='text' name='email' value='$o->email' size='60'></td></tr>
<tr><td nowrap>Webpage</td>
<td><input type='text' name='webpage' value='$o->webpage' size='60'></td></tr>
<tr><td class=normal nowrap>Date of Birth</td>
<td><input type='text' name='datebirth' value='$o->dob' size='60'></td></tr>
<tr><td nowrap>Blood Group</td>
<td><select name='bloodgroup' style='width:50'>
";
foreach ($bloodgroups as $bg){
echo "<option value='$bg'";
if($bg == $o->blood_group) echo " selected";
echo ">$bg</option>";
}
echo "</select></td></tr>
<tr><td nowrap>Date of Joining</td>
<td><input type='text' name='datejoining' value='$o->datejoining' size='60'></td></tr>
<tr><td nowrap>Address</td>
<td><input type='text' name='address' value='$o->address' size='60'></td></tr>
<tr><td nowrap>Contact No.</td>
<td><input type='text' name='phoneno' value='$o->phoneno' size='60'></td></tr>
<tr><td>Hobbies</td>
<td><textarea name='hobbies' cols='60' rows='4'>$o->hobbies</textarea></td></tr>
<tr><td nowrap>Languages</td>
<td><textarea name='languageknow' cols='60' rows='3'>$o->languageknow</textarea></td></tr>
<tr><td>Expertise</td>
<td><textarea name='expertise' cols='60' rows='3'>$o->expertise</textarea></td></tr>
<tr><td>Achievements</td>
<td><textarea name='achievements' cols='60' rows='6'>$o->achievements</textarea></td></tr>
";
if ($role == 'admin') {
echo "<tr><td>Webmaster</td>
<td><select name='webmaster' style='width:60'>";
foreach ($webmasters as $wm){
echo "<option value='$wm'";
if ($wm == $o->webmaster) echo " selected";
echo ">$wm</option>";
}
echo "</select></td></tr>";
}
echo "<tr><td></td><td>
<input type='submit' name='submit' value='SAVE' style='width:80px'>
<input type='submit' name='submit' value='DELETE' style='width:80px'>
</td></tr></table>";
}
if (!$user) {
echo "Click on the name, sorted alphabetically, for detailed profile of the person.<br><ol>";
$rs = mysql_query("SELECT * FROM $tbl order by fullname");
while ($o = mysql_fetch_object($rs)) {
if ($loginID == $o->login) {
echo "<li><h3>$o->title $o->fullname, $o->designation</h3>
<table class='normal' width='90%' cellspacing='5'>
<tr valign='top'><td align='right' width='20%'>
<b>Name: </b></td><td width='80%'>$o->title $o->fullname</td>
<td rowspan='9' id='box'><img src='images/{$o->login}.jpg' width='150' height'200' border='0'></td></tr>
<tr><td><b>Designation: </b></td><td>$o->designation</td></tr>
<tr><td><b>Parents Name: </b></td><td>$o->parents</td></tr>
<tr><td><b>Email: </b></td><td>$o->email</td></tr>
<tr><td><b>Phone No.: </b></td><td>$o->phoneno</td></tr>
<tr><td><b>Date of Birth: </b></td><td>$o->datebirth</td></tr>
<tr><td><b>Date of Joining: </b></td><td>$o->datejoining</td></tr>
<tr><td><b>Blood Group: </b></td><td>$o->bloodgroup</td></tr>
<tr><td><b>Address: </b></td><td>$o->address</td></tr>
<tr><td><b>Hobbies: </b></td><td>$o->hobbies</td></tr>
<tr><td><b>Language Known: </b></td><td>$o->languageknow</td></tr>
<tr><td><b>Expertise: </b></td><td>$o->expertise</td></tr>
<tr><td><b>Achievements: </b></td><td>$o->achievements</td></tr>
</table></li>";
} else {
echo "<li><a href='$PHP_SELF?conf=profiles&loginID=$o->login'>
$o->title $o->parents, $o->designation</a></li>";
}
}
echo "</ol>";
}
?>