<?php
require("../init.inc.php");

//exit on session expiry
if (!$user) header("Location: /");

if ($role == 'user') {
        header("Location: /user/");
} else if ($role == 'guest') {
	header("Location: /guest/");
}

echo $header;
?>

<h2>Record Editing</h2>
Enter Roll No. to locate student record.

<?php
$tbl = 'students';
$rno = $_POST["rno"];

if ($user) {
	echo "
	<input type='text' name='rno' value='$rno' size='20'>
	<input type='submit' name='submit' value='QUERY'>
	";
}

if ($_POST["submit"] == 'SAVE') {
	$rs = mysql_query("select * from $tbl where r_number='$rno'");
	if ($rs) {
        	$o = mysql_fetch_array($rs);
        	$colHeads = mysql_num_fields($rs);

		for ($i=0; $i < $colHeads; $i++) { //field list
                	$fld = mysql_field_name($rs, $i);
                	if ($i > 0) {
				$updatefld .= ",$fld='". $_POST["$fld"] ."'";
                		$insertfld .= ",". $fld;
				$insertvlu .= ",'". $_POST["$fld"] ."'";
			} else {
				$updatefld .= "$fld='". $_POST["$fld"] ."'";
                		$insertfld .= $fld;
				$insertvlu .= "'". $_POST["$fld"] ."'";
			}
		}

		$updatesql = "update $tbl set $updatefld where r_number='$rno'";
		$insertsql = "insert into $tbl($insertfld) values($insertvlu)";
	
		if (mysql_num_rows(mysql_query("select * from $tbl where r_number='$rno'"))) {
			mysql_query($updatesql);
		} else {
			mysql_query($insertsql);
		}
	}
}
?>
<br>
<?php
if ($rno) {
	$query = "select * from $tbl where r_number='$rno'";
	$rs = mysql_query($query);
	if ($rs) {
		$o = mysql_fetch_array($rs);
		$colHeads = mysql_num_fields($rs);

		echo "<center><table width='70%' border='1' style='border-collapse: collapse'>\n";

		for ($i=0; $i < $colHeads; $i++) { // Header
			$lvl = ucwords(str_replace("_"," ",mysql_field_name($rs, $i)));
			$fld = mysql_field_name($rs, $i);
			$vlu = $o[$i];
			echo "<tr><th>$lvl</th><td><input type='text' name='$fld' value='$vlu' size='60'></td></tr>\n"; 
		}

		echo "</table>
		<input type='submit' name='submit' value='SAVE'>\n
		</center>";
	} else {
		echo "Sorry";
	}
}

echo $footer;
?>