PHP - Edit Profile Page?

Hi all,

I am currently facing a problem, if you look at 'viewprofile.jpg' attachment, you can see that there is an uploaded profile picture.

However when I click to edit the profile, the picture is missing (editprofile.jpg), I am just wondering what went wrong? Can someone guide me in troubleshooting this problem?


Code: [Select]
<?php
if (isset($_POST['submit'])) {
  
    // Validate and move the uploaded picture file, if necessary
if (!empty($new_picture)) {
      if ((($new_picture_type == 'image/gif') || ($new_picture_type == 'image/jpeg') || ($new_picture_type == 'image/pjpeg') ||
        ($new_picture_type == 'image/png')) && ($new_picture_size > 0) && ($new_picture_size <= CT_MAXFILESIZE)) {
        //0 indicates a success, other values indicate failure
if ($_FILES['file']['error'] == 0) {
          // Move the file to the target upload folder
          $target = CT_UPLOADPATH . basename($new_picture);
          if (move_uploaded_file($_FILES['new_picture']['tmp_name'], $target)) {
            // The new picture file move was successful, now make sure any old picture is deleted
            if (!empty($old_picture) && ($old_picture != $new_picture)) {
              @unlink(CT_UPLOADPATH . $old_picture);
            }
          }
          else {
            // The new picture file move failed, so delete the temporary file and set the error flag
            @unlink($_FILES['new_picture']['tmp_name']);
            $error = true;
            echo '<p class="error">Sorry, there was a problem uploading your picture.</p>';
          }
        }
      }
      else {
        // The new picture file is not valid, so delete the temporary file and set the error flag
        @unlink($_FILES['new_picture']['tmp_name']);
        $error = true;
        echo '<p class="error">Your picture must be a GIF, JPEG, or PNG image file no greater than ' . (CT_MAXFILESIZE / 1024). '</p>';
      }
    }


// Grab the profile data from the POST
    $name = mysqli_real_escape_string($dbc, trim($_POST['name']));
    $nric = mysqli_real_escape_string($dbc, trim($_POST['nric']));
    $gender = mysqli_real_escape_string($dbc, trim($_POST['gender']));
    

    $old_picture = mysqli_real_escape_string($dbc, trim($_POST['old_picture']));
    $new_picture = mysqli_real_escape_string($dbc, trim($_FILES['new_picture']['name']));
    $new_picture_type = $_FILES['new_picture']['type'];
    $new_picture_size = $_FILES['new_picture']['size']; 
    list($new_picture_width, $new_picture_height) = getimagesize($_FILES['new_picture']['tmp_name']);


    $error = false;

    

    // Update the profile data in the database
    if (!$error) {
      if (!empty($name) && !empty($nric) && !empty($gender)) {
        
$query = "UPDATE tutor_profile SET name = '$name', nric = '$nric', gender = '$gender' WHERE tutor_id = '" . $_GET['tutor_id'] . "'";

mysqli_query($dbc, $query)
or die(mysqli_error($dbc));

        // Confirm success with the user
        echo '<p>Your profile has been successfully updated. Would you like to <a href="viewprofile.php?tutor_id=' . $_GET['tutor_id'] . '">view your profile</a>?</p>';

        mysqli_close($dbc);
        exit();
      }
      else {
        echo '<p class="error">You must enter all of the profile data (the picture is optional).</p>';
      }
    }
  } // End of check for form submission
  else {
    // Grab the profile data from the database
    $query = "SELECT name, nric, gender FROM tutor_profile WHERE tutor_id = '" . $_GET['tutor_id'] . "'";
    
$data = mysqli_query($dbc, $query)
or die(mysqli_error($dbc));

// The user row was found so display the user data
if (mysqli_num_rows($data) == 1) {
$row = mysqli_fetch_array($data);

    if ($row != NULL) {
      $name = $row['name'];
      $nric = $row['nric'];
      $gender = $row['gender'];
    }
    else {
      echo '<p class="error">There was a problem accessing your profile.</p>';
    }
  }
  }

  mysqli_close($dbc);
?>

  <form enctype="multipart/form-data" method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">
    <input type="hidden" name="MAX_FILE_SIZE" value="<?php echo CT_MAXFILESIZE; ?>" />

<ul id="tabSet_ep">
<li><a href="#panel1">Personal Profile</a></li>
<li><a href="#panel2">Qualifications</a></li>
<li><a href="#panel3">Tutor\'s Comments/Commitment</a></li>
<li><a href="#panel4">Tutoring Levels/Subjects</a></li>
</ul>

<!--Personal Profile-->
<div id="panel1">
      <label for="new_picture">Pictu </label>
      <input type="file" id="new_picture" name="new_picture" />
      <?php if (!empty($old_picture)) {
        echo '<img class="profile" src="' . CT_UPLOADPATH . $old_picture . '" alt="Profile Picture" />';
      } ?><br />
  <label for="firstname">First name:</label>
      <input type="text" id="firstname" name="firstname" value="<?php if (!empty($name)) echo $name; ?>" /><br />
      <label for="lastname">Last name:</label>
      <input type="text" id="lastname" name="lastname" value="<?php if (!empty($nric)) echo $nric; ?>" /><br />
      <label for="gender">Gender:</label>
      <select id="gender" name="gender">
        <option value="M" <?php if (!empty($gender) && $gender == 'M') echo 'selected = "selected"'; ?>>Male</option>
        <option value="F" <?php if (!empty($gender) && $gender == 'F') echo 'selected = "selected"'; ?>>Female</option>
      </select><br />
    </div>

    <input type="submit" value="Save Profile" name="submit" />
  </form>

Hi. I am working on a website that has restriction level. An admin, a staff, and ordinary user. In my admin page when I click the button "View Users" it shows all the listed users in a table, from admin to ordinary users. And on each entry is an option to either "Delete" or "Edit" the users account.

Now I have a problem with editing user profile because it appears blank fields. Not like in the admin side wherein if I click "Edit" the fields are filled with the users info.

How do I do this in the staff's page.

Here is the view users code from the admin's page:
Code: [Select]
if (@$_GET['action'] == "View Users")
{
     print "<font size=6 color=yellow><center>View User's Records</center><br></font>";
     
$result = mysql_query ("SELECT * FROM users order by user_lvl, lname asc");
     
$rows = mysql_num_rows($result);
     
if ($rows!=0)
{
        print "<table border=1 align=center cellspacing=10>";

        print " <tr bgcolor=yellow align=center>

                <td>First Name</td>
 
                <td>Last Name</td>
   
                <td>Email</td>

        <td>Username</td>

                <td>Password</td>
 
                <td>Phone Number</td>

<td>User Privilege</td>

<td>Options</td>


       </tr>";


        for ($i=0; $i< $rows; $i++)
 
         {
           $row = mysql_fetch_row ($result);

           print "<tr bgcolor= white align=center>";

           print "<td>$row[0]</td>";

             print "<td>$row[1]</td>";            
 
   print "<td>$row[2]</td>";

           print "<td>$row[3]</td>";

   print "<td>$row[4]</td>";

   print "<td>$row[5]</td>";

   print "<td>$row[6]</td>";

   print "<td>[ <a href=admin_main.php?action=Delete&username=$row[3]>Delete</a> ]";

           print "[ <a href=admin_main.php?action=Edit&username=$row[3]>Edit</a> ]";

           print "</td>";

           print "</tr>";

  }
       
print "</table>";

        print "<font size=1 color=yellow>Number of entries found: $rows";
     }

     else {
           print "No records found!";
          }

     mysql_free_result ($result);
 
}
Now here is the code when I click "Edit" from the "View Users" table:
Code: [Select]
if (@$_GET['action'] == "Edit") {

$result = mysql_query ("Select * from users where username='$_GET[username]'");
 $row = mysql_fetch_row ($result);

 print "<font size=6 color=yellow><center>Edit Records </center></font>";
 print "<form method = get>
 <table border = 1  align=center>
 <tr> <td><font color=yellow>First Name:</font></td>
  <td><input type=text name=fname value=$row[0] ></td></tr>
 <tr> <td><font color=yellow>Last Name:</font></td>
<td><input type=text name=lname value=$row[1]></td></tr>
 <tr> <td><font color=yellow>Email Address: </font></td>
  <td><input type=text name=email value=$row[2] </td></tr>
 <tr> <td><font color=yellow>Username: </font></td>
  <td><input type = text name = username value=$row[3] ></td></tr>
 <tr> <td><font color=yellow>Password:</font></td>
  <td><input type=text name=password value=$row[4]></td></tr>
 <tr> <td><font color=yellow>Contact Number:</font></td>
      <td><input type = text name = phone_number value=$row[5]></td></tr>
 <tr> <td><font color=yellow>User Privilege:</font></td>
<td><input type = txt name = user_lvl value=$row[6]></td></tr>

 <tr><td><input type=submit value='Update Users' Submit name=action></td></tr>
 </table>  
</form> ";
}

  if (@$_GET['action']=="Update Users") {
     $result = mysql_query ("UPDATE users
             SET
             fname='$_GET[fname]',
             lname='$_GET[lname]',
             email='$_GET[email]',
             username='$_GET[username]',
             password='$_GET[password]',
             phone_number='$_GET[phone_number]',
     user_lvl='$_GET[user_lvl]'
     where username= '$_GET[username]'");
     print "<font size=6 color=yellow><center><blink>Record of User successfully updated!</blink></center></font>";
  }

Hi

I am trying to develop an editprofile.php page to allow users to change their details.

So far i have written

Code: [Select]
<?php

$result = mysql_query("SELECT username FROM users WHERE username = {$_SESSION['MM_Username']}");
 
$num_rows = mysql_num_rows($result);
  
if($num_rows > 0)
{
while ($row = mysql_fetch_array($result))
{
$username = $row['username'];
}
 

}
?>
and then tried to test it by using

Code: [Select]
<div><?php echo $username ?></div>
but nothing is being echo'ed out. What am i doing wrong?

Hello,

I'm a new member and i want to say a compliment to the php coders.

Well, in the profile page i want to insert to box.
The first can be modified by the user and by the staff
And the second can be inserted comments only by the staff..
We don't have a profile page to modify the date but, is possible insert only that?
How can i do that?
Naturally the staff comments can be modifed by the staff area.
Thanks