require_once("../../common.inc.php");
// page variable name
$page_field = "member";
//
include("config.php");
//check login session
if (empty($_SESSION["smartinfo_sysid"])) {
header("Location: ../error.php");
exit;
}
getpost();
if ($id == "")
{
//check
if ($temp_id == "") {
header("Location: ".$page_address_list);
exit;
}
//insert
$sql = "INSERT INTO `".$page_tbname."` ( `id` )
VALUES (
NULL
);";
$db->query($sql);
$id = $db->insert_id();
//echo $sql."
";
$sql = "UPDATE `attachment` SET
`table_id` = '".$id."', `temp_id` = ''
WHERE `table_name` = '".$page_tbname."' AND `temp_id` = '".$temp_id."'";
$db->query($sql);
}
//update
$sql ="UPDATE `".$page_tbname."` SET
`username` = '".escapeit($username)."',
`password` = '".escapeit($password)."',
`title` = '".escapeit($title)."',
`name` = '".escapeit($name)."',
`education` = '".escapeit($education)."',
`age` = '".escapeit($age)."',
`tel_nation` = '".escapeit($tel_nation)."',
`tel_area` = '".escapeit($tel_area)."',
`tel_num` = '".escapeit($tel_num)."',
`tel_internal` = '".escapeit($tel_internal)."',
`fax` = '".escapeit($fax)."',
`email` = '".escapeit($email)."',
`company` = '".escapeit($company)."',
`industry` = '".escapeit($industry)."',
`position` = '".escapeit($position)."',
`occupation` = '".escapeit($occupation)."',
`country` = '".escapeit($country)."',
`state` = '".escapeit($state)."',
`site` = '".escapeit($site)."',
`isemail` = '".escapeit($isemail)."',
`status` = '".escapeit($status)."'
WHERE `id` = '".$id."'";
//echo $sql."
";
$db->query($sql);
//delete file
if (!empty($delfiles)) {
foreach ($delfiles as $key => $value) {
del_attachment($value, "../../");
}
}
header("Location: ".$page_address_list."?keepSession=1&page=$page");
exit;
?>