rendered paste body<?php
if (!defined("SECURITY_ADMIN")) { exit; }
if ((!$_SESSION["LOGIN"]) or ($_SESSION["USERLVL"] != "admin"))
{
echo '<div class="fatal_error">You are not admin !</div><meta http-equiv="refresh" content="2;url=?sec=login"/>';
return;
}
$id_user = strip_tags(trim($_GET["id"]));
if ($id_user == "")
{ echo '<div class="fatal_error">User ID Error</div>'; return; }
$sql = "SELECT `users`.* FROM `users` WHERE (`users`.`id_user` = '" . $id_user . "');";
$result = mysql_query($sql);
$user = mysql_fetch_array($result);
mysql_free_result($result);
if (mysql_affected_rows() == 1)
{
if ($_POST)
{
echo "<pre>";
var_dump($_POST);
echo "</pre>";
if (strip_tags(trim($_POST["auth"])))
{
$auth = "1";
$checked_auth = ' checked="checked"';
} else {
$auth = "0";
}
$first_name = strip_tags(trim($_POST["first_name"]));
$last_name = strip_tags(trim($_POST["last_name"]));
$email = strip_tags(trim($_POST["email"]));
$phone = strip_tags(trim($_POST["phone"]));
$country = strip_tags(trim($_POST["country"]));
$city = strip_tags(trim($_POST["city"]));
if (strip_tags(trim($_POST["move_country"])))
{
$move_country = "1";
$checked_move_country = ' checked="checked"';
} else {
$move_country = "0";
}
$profession = strip_tags(trim($_POST["profession"]));
$sub_profession = strip_tags(trim($_POST["sub_profession"]));
$skill_level = strip_tags(trim($_POST["skill_level"]));
$experience = strip_tags(trim($_POST["experience"]));
$competences = strip_tags(trim($_POST["competences"]));
$references = strip_tags(trim($_POST["references"]));
$additional_information = strip_tags(trim($_POST["additional_information"]));
$public_info = $_POST["public_info"];
if ($public_info === null)
{ $public_info = array(); }
foreach ($public_info as $key => $value)
{
if ($public_info[$key])
{
$public_info[$key] = "1";
$checked_public_info[$key] = ' checked="checked"';
} else {
$public_info[$key] = "0";
}
}
$action = strip_tags(trim($_POST["action"]));
if ($action != "false")
{
$sql = "SELECT `cvs`.* FROM `cvs` WHERE (`cvs`.`id_user` = '" . $id_user . "');";
$exist_cv = mysql_query($sql);
if (mysql_affected_rows() == 1)
{
$sql = "UPDATE `edata`.`cvs` SET `auth` = '" . $auth . "', `last_update` = NOW(), `first_name` = '" . $first_name . "', `last_name` = '" . $last_name . "', `email` = '" . $email . "', `phone` = '" . $phone . "', `country` = '" . $country . "', `city` = '" . $city . "', `profession` = '" . $profession . "', `sub_profession` = '" . $sub_profession . "', `skill_level` = '" . $skill_level . "', `experience` = '" . $experience . "', `competences` = '" . $competences . "', `references` = '" . $references . "', `additional_information` = '" . $additional_information . "', `public_info_1` = '" . $public_info[1] . "', `public_info_2` = '" . $public_info[2] . "', `public_info_3` = '" . $public_info[3] . "', `public_info_4` = '" . $public_info[4] . "', `public_info_5` = '" . $public_info[5] . "', `public_info_6` = '" . $public_info[6] . "', `public_info_7` = '" . $public_info[7] . "', `public_info_8` = '" . $public_info[8] . "', `public_info_9` = '" . $public_info[9] . "', `public_info_10` = '" . $public_info[10] . "', `public_info_11` = '" . $public_info[11] . "', `public_info_12` = '" . $public_info[12] . "' WHERE (`cvs`.`id_user` = '" . $id_user . "') LIMIT 1;";
} else if (mysql_affected_rows() == 0) {
$sql = "INSERT INTO `cvs` (`id_user`, `auth`, `last_update`, `first_name`, `last_name`, `email`, `phone`, `country`, `city`, `profession`, `sub_profession`, `skill_level`, `experience`, `competences`, `references`, `additional_information`, `public_info_1`, `public_info_2`, `public_info_3`, `public_info_4`, `public_info_5`, `public_info_6`, `public_info_7`, `public_info_8`, `public_info_9`, `public_info_10`, `public_info_11`, `public_info_12`) VALUES ('" . $id_user . "', '" . $auth . "', NOW(), '" . $first_name . "', '" . $last_name . "', '" . $email . "', '" . $phone . "', '" . $country . "', '" . $city . "', '" . $profession . "', '" . $sub_profession . "', '" . $skill_level . "', '" . $experience . "', '" . $competences . "', '" . $references . "', '" . $additional_information . "', '" . $public_info[1] . "', '" . $public_info[2] . "', '" . $public_info[3] . "', '" . $public_info[4] . "', '" . $public_info[5] . "', '" . $public_info[6] . "', '" . $public_info[7] . "', '" . $public_info[8] . "', '" . $public_info[9] . "', '" . $public_info[10] . "', '" . $public_info[11] . "', '" . $public_info[12] . "');";
}
$result = mysql_query($sql) or die (mysql_error());
}
}
$sql = "SELECT `cvs`.* FROM `cvs` WHERE (`cvs`.`id_user` = '" . $id_user . "');";
$result = mysql_query($sql);
$row = mysql_fetch_array($result);
mysql_free_result($result);
if (empty($row["last_update"]))
{
echo '<div class="information_error">This user no update his CV yet</div>';
} else {
echo '<div class="information_ok">Last update: ' . $row["last_update"] . '</div>';
}
echo '
<form method="post" action="?sec=view_cv&id=' . $id_user . '" name="edit_cv">
<div class="auth_box">
<span class="text_edit_bold">Authenticate / not authenticate:</span>
<input type="checkbox" name="auth" value="1"' . $checked_auth . '>
</div>
<div class="box_cv">
<div class="sections_cv">
<div class="section_1">Personal data</div>
<div class="section_2">Public info</div>
</div>
<div class="cv_field">
<div class="cv_field_text">Username:</div>
<div class="cv_field_input">' . $user["username"] . '</div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">First name:</div>
<div class="cv_field_input"><input type="text" name="first_name" class="inputbox_view" value="' . $row["first_name"] . '"></div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[1]" value="1"' . $checked_public_info[1] . '></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">Last name:</div>
<div class="cv_field_input"><input type="text" name="last_name" class="inputbox_view" value="' . $row["last_name"] . '"></div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[2]" value="1"' . $checked_public_info[2] . '></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">E-Mail:</div>
<div class="cv_field_input"><input type="text" name="email" class="inputbox_view" value="' . $row["email"] . '"></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">Phone (landline OR mobile):</div>
<div class="cv_field_input"><input type="text" name="phone" class="inputbox_view" value="' . $row["phone"] . '"></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">Country:</div>
<div class="cv_field_input"><input type="text" name="country" class="inputbox_view" value="' . $row["country"] . '"></div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[3]" value="1"' . $checked_public_info[3] . '></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">City:</div>
<div class="cv_field_input"><input type="text" name="city" class="inputbox_view" value="' . $row["city"] . '"></div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[4]" value="1"' . $checked_public_info[4] . '></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">Moving to another country:</div>
<div class="cv_field_input"><input type="checkbox" name="move_country" value="1"' . $checked_move_country . '></div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[5]" value="1"' . $checked_public_info[5] . '></div>
<div class="separator"></div>
</div>
<div class="sections_cv">
<div class="section_1">Professional data</div>
</div>
<div class="cv_field">
<div class="cv_field_text">Profession:</div>
<div class="cv_field_input">';
$sql = "SELECT `selects_cv`.* FROM `selects_cv` WHERE (`selects_cv`.`id_select` = '1') ORDER BY `selects_cv`.`value` ASC;";
$result = mysql_query($sql);
if ($action == "false")
{
$profession_selected = $profession;
} else {
$profession_selected = $row["profession"];
}
echo '
<select name="profession" class="inputbox_view_select">
<option>- - -</option>';
while ($selects_cv = mysql_fetch_array($result))
{
if ($selects_cv["id_option"] == $profession_selected)
{
echo '<option value="' . $selects_cv["id_option"] . '" selected="selected" onClick="document.edit_cv.action.value=\'false\'; document.edit_cv.submit();">' . $selects_cv["value"] . '</option>';
} else {
echo '<option value="' . $selects_cv["id_option"] . '" onClick="document.edit_cv.action.value=\'false\'; document.edit_cv.submit();">' . $selects_cv["value"] . '</option>';
}
}
mysql_free_result($result);
echo '
</select>
<input type="hidden" name="action" value="">';
echo '
</div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[6]" value="1"' . $checked_public_info[6] . '></div>
<div class="separator"></div>
</div>';
if (($profession != "") or ($row["profession"] != ""))
{
if ($profession != "")
{ $id_principal = $profession; } else { $id_principal = $row["profession"]; }
echo '
<div class="cv_field">
<div class="cv_field_text" style="width:265px;">Sub-profession:</div>
<div class="cv_field_input" style="width:200px;">';
$sql = "SELECT `selects_cv`.* FROM `selects_cv` WHERE ((`selects_cv`.`id_select` = '2') AND (`selects_cv`.`id_principal` = '" . $id_principal . "')) ORDER BY `selects_cv`.`value` ASC;";
$result = mysql_query($sql);
echo '
<select name="sub_profession" class="inputbox_view_select" style="width:198px;">
<option>- - -</option>';
while ($selects_cv = mysql_fetch_array($result))
{
if ($selects_cv["id_option"] == $row["sub_profession"])
{
echo '<option value="' . $selects_cv["id_option"] . '" selected="selected">' . $selects_cv["value"] . '</option>';
} else {
echo '<option value="' . $selects_cv["id_option"] . '">' . $selects_cv["value"] . '</option>';
}
}
mysql_free_result($result);
echo '</select>';
if ($action == "false")
{
echo '<script>document.edit_cv.sub_profession.focus();</script>';
}
echo '
</div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[7]" value="1"' . $checked_public_info[7] . '></div>
<div class="separator"></div>
</div>';
}
echo '
<div class="cv_field">
<div class="cv_field_text">Professional skill level:</div>
<div class="cv_field_input">';
$sql = "SELECT `selects_cv`.* FROM `selects_cv` WHERE (`selects_cv`.`id_select` = '3') ORDER BY `selects_cv`.`id_option` ASC;";
$result = mysql_query($sql);
if ($action == "false")
{
$skill_level_selected = $skill_level;
} else {
$skill_level_selected = $row["skill_level"];
}
echo '
<select name="skill_level" class="inputbox_view_select">
<option>- - -</option>';
while ($selects_cv = mysql_fetch_array($result))
{
if ($selects_cv["id_option"] == $skill_level_selected)
{
echo '<option value="' . $selects_cv["id_option"] . '" selected="selected">' . $selects_cv["value"] . '</option>';
} else {
echo '<option value="' . $selects_cv["id_option"] . '">' . $selects_cv["value"] . '</option>';
}
}
mysql_free_result($result);
echo '</select>';
echo '
</div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[8]" value="1"' . $checked_public_info[8] . '></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">Work experience:</div>
<div class="cv_field_input">';
$sql = "SELECT `selects_cv`.* FROM `selects_cv` WHERE (`selects_cv`.`id_select` = '4') ORDER BY `selects_cv`.`id_option` ASC;";
$result = mysql_query($sql);
if ($action == "false")
{
$experience_selected = $experience;
} else {
$experience_selected = $row["experience"];
}
echo '
<select name="experience" class="inputbox_view_select">
<option>- - -</option>';
while ($selects_cv = mysql_fetch_array($result))
{
if ($selects_cv["id_option"] == $experience_selected)
{
echo '<option value="' . $selects_cv["id_option"] . '" selected="selected">' . $selects_cv["value"] . '</option>';
} else {
echo '<option value="' . $selects_cv["id_option"] . '">' . $selects_cv["value"] . '</option>';
}
}
mysql_free_result($result);
echo '</select>';
echo '
</div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[9]" value="1"' . $checked_public_info[9] . '></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">Competences:</div>
<div class="cv_field_input" style="height:100px;"><textarea name="competences" class="inputbox_view_textarea">' . $row["competences"] . '</textarea></div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[10]" value="1"' . $checked_public_info[10] . '></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">Major references:</div>
<div class="cv_field_input"><input type="text" name="references" class="inputbox_view" value="' . $row["references"] . '"></div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[11]" value="1"' . $checked_public_info[11] . '></div>
<div class="separator"></div>
</div>
<div class="cv_field">
<div class="cv_field_text">Additional information:</div>
<div class="cv_field_input" style="height:100px;"><textarea name="additional_information" class="inputbox_view_textarea">' . $row["additional_information"] . '</textarea></div>
<div class="cv_field_public_info"><input type="checkbox"name="public_info[12]" value="1"' . $checked_public_info[12] . '></div>
<div class="separator"></div>
</div>
<div class="cv_submit"><input type="reset" value="Reset" class="inputbox_submit"> <input type="submit" value="Edit" class="inputbox_submit"></div>
</div>
</form>';
} else { echo '<div class="fatal_error">User ID Error</div>'; return; }
?>