OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	12/02/2020 03:45:31 PM	rwxrwxr-x
📄 chk.login.php	822 bytes	12/02/2020 03:45:32 PM	rw-rw-r--
📄 get.section.nomination.php	15.65 KB	12/02/2020 03:45:32 PM	rw-rw-r--
📄 get.section.nominator.php	15.31 KB	12/02/2020 03:45:32 PM	rw-rw-r--
📄 get.section.user.php	10.36 KB	12/02/2020 03:45:32 PM	rw-rw-r--
📄 logout.php	96 bytes	12/02/2020 03:45:32 PM	rw-rw-r--

Editing: get.section.nominator.php

<?
//	Nominator

include '../inc/validate.logged.php';
include '../../inc/utils.php';

$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Update
if ($act == 'edit') {
 $editId = isset($_POST['editId']) ? $_POST['editId'] : '';
 $registerSalutation = trim(isset($_POST["registerSalutation"]) ? $_POST["registerSalutation"] : '');
 $registerFirstName = trim(isset($_POST["registerFirstName"]) ? $_POST["registerFirstName"] : '');
 $registerLastName = trim(isset($_POST["registerLastName"]) ? $_POST["registerLastName"] : '');
 $registerAffiliation = trim(isset($_POST["registerAffiliation"]) ? $_POST["registerAffiliation"] : '');
 $registerPhone = trim(isset($_POST["registerPhone"]) ? $_POST["registerPhone"] : '');
 $registerAddress = trim(isset($_POST["registerAddress"]) ? $_POST["registerAddress"] : '');
 $registerCity = trim(isset($_POST["registerCity"]) ? $_POST["registerCity"] : '');
 $registerCountry = trim(isset($_POST["registerCountry"]) ? $_POST["registerCountry"] : '');
 $registerPincode = trim(isset($_POST["registerPincode"]) ? $_POST["registerPincode"] : '');
 $registerEmail = trim(isset($_POST["registerEmail"]) ? $_POST["registerEmail"] : '');
 $isValidated = trim(isset($_POST["isValidated"]) ? $_POST["isValidated"] : '');
 if ($registerFirstName <> '' && $registerLastName <> '' && $registerAffiliation <> '' && $registerPhone <> '' && $registerEmail <> '') {
  $sql = "UPDATE nominator SET salutation='$registerSalutation',fname='$registerFirstName',sname='$registerLastName',affiliation='$registerAffiliation',email='$registerEmail',addr='$registerAddress',city='$registerCity',country='$registerCountry',phone='$registerPhone',isValidated=$isValidated WHERE id=$editId";
  mysqli_query($con, $sql);
  echo "OK";
 }
}

// Show Edit
if ($act == 'editForm') {
 $isValid = 0;
 $nominatorId = isset($_POST['id']) ? $_POST['id'] : '';
 $sql = "SELECT * FROM nominator WHERE id=$nominatorId";
 $result = mysqli_query($con, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $registerSalutation = $row['salutation'];
  $registerFirstName = $row['fname'];
  $registerLastName = $row['sname'];
  $registerAffiliation = $row['affiliation'];
  $registerPhone = $row['phone'];
  $registerAddress = $row['addr'];
  $registerCity = $row['city'];
  $registerCountry = $row['country'];
  $registerPincode = $row['pin'];
  $registerEmail = $row['email'];
  $isValidated = $row['isValidated'];
  $isValid = 1;
 }
?>
<div class="popup" style="width:550px">
<div class="widget">
<form id="frmEdit" name="frmEdit">
 <div class="card">
  <div class="card-header">Edit Nominator</div>
 </div>
 <div id="widgetEdit_B" style="padding:15px 25px">
<? if($isValid == 1) { ?>
  <div class="mb-4">All fields marked with <sup style="color:#cc0000">*</sup> are mandatory.</div>
   <div class="form-row mt-3">
   <div class="form-group col-12 col-md-2 text-left">
    <label for="registerSalutation">Salutation <sup style="color:#cc0000">*</sup></label>
    <select class="form-control" id="registerSalutation" name="registerSalutation">
     <option value="Ms."<? if ($registerSalutation == 'Ms.') { ?> SELECTED<? }?>>Ms.</option>
     <option value="Dr."<? if ($registerSalutation == 'Dr.') { ?> SELECTED<? }?>>Dr.</option>
     <option value="Prof."<? if ($registerSalutation == 'Prof.') { ?> SELECTED<? }?>>Prof.</option>
    </select>
   </div>
   <div class="form-group col-12 col-md-5 text-left">
    <label for="registerFirstName">First Name <sup style="color:#cc0000">*</sup></label>
    <input type="text" class="form-control" id="registerFirstName" name="registerFirstName" maxlength="100" value="<?=$registerFirstName?>" />
   </div>
   <div class="form-group col-12 col-md-5 text-left">
    <label for="registerLastName">Last Name <sup style="color:#cc0000">*</sup></label>
    <input type="text" class="form-control" id="registerLastName" name="registerLastName" maxlength="100" value="<?=$registerLastName?>" />
   </div>
  </div>
  <div class="form-row">
   <div class="form-group col-md-6 text-left">
    <label for="registerAffiliation">Affiliation <sup style="color:#cc0000">*</sup></label>
    <input type="text" class="form-control" id="registerAffiliation" name="registerAffiliation" maxlength="100" value="<?=$registerAffiliation?>" />
   </div>
   <div class="form-group col-md-6 text-left">
    <label for="registerPhone">Phone <sup style="color:#cc0000">*</sup></label>
    <input type="text" class="form-control" id="registerPhone" name="registerPhone" maxlength="15" value="<?=$registerPhone?>" />
   </div>
  </div>
  <div class="form-row">
   <div class="form-group col text-left">
    <label for="registerAddress">Address <sup style="color:#cc0000">*</sup></label>
    <input type="text" class="form-control" id="registerAddress" name="registerAddress" maxlength="100" value="<?=$registerAddress?>" />
   </div>
  </div>
  <div class="form-row">
   <div class="form-group col-md-4 text-left">
    <label for="registerCity">City <sup style="color:#cc0000">*</sup></label>
    <input type="text" class="form-control" id="registerCity" name="registerCity" maxlength="100" value="<?=$registerCity?>" />
   </div>
   <div class="form-group col-md-4 text-left">
    <label for="registerCountry">Country <sup style="color:#cc0000">*</sup></label>
    <input type="text" class="form-control" id="registerCountry" name="registerCountry" maxlength="100" value="<?=$registerCountry?>" />
   </div>
   <div class="form-group col-md-4 text-left">
    <label for="registerPincode">Pin Code <sup style="color:#cc0000">*</sup></label>
    <input type="text" class="form-control" id="registerPincode" name="registerPincode" maxlength="6" value="<?=$registerPincode?>" />
   </div>
  </div>
  <div class="form-row mb-2">
   <div class="form-group col-md-6 text-left">
    <label for="registerEmail">Email <sup style="color:#cc0000">*</sup></label>
    <input type="text" class="form-control" id="registerEmail" name="registerEmail" maxlength="100" value="<?=$registerEmail?>" />
   </div>
   <div class="form-group col-md-6 text-left">
    <label for="registerValidated">Validated <sup style="color:#cc0000">*</sup></label>
    <select class="form-control" id="isValidated" name="isValidated">
     <option value="0"<? if ($isValidated == '0') { ?> SELECTED<? }?>> Pending
     <option value="1"<? if ($isValidated == '1') { ?> SELECTED<? }?>>Validated
    </select>
   </div>
  </div>
<? } ?>
 </div>
 <div id="widgetEdit_F" style="border-top:1px solid #ebedf2;padding:20px 25px;">
  <div class="row no-gutters">
   <button type="submit" class="btn btn-primary" onclick="return chkEditNominator()">Update</button>
   <button type="submit" class="btn btn-light ml-1" onclick="return clearForm('frmEdit')">Reset</button>
   <div id="panelStatus" class="float-right text-sm text-danger" style="margin-top:5px" align="right"></div>
  </div>
 </div>
 <input type="hidden" id="editId" name="editId" value="<?=$nominatorId?>" />
 <input type="hidden" id="act" name="act" value="edit" />
</form>
</div>
</div>
<?
}

// View
if ($act == 'view') {
 $isValid = 0;
 $nominatorId = isset($_POST['id']) ? $_POST['id'] : '';
 $sql = "SELECT * FROM nominator WHERE id=$nominatorId";
 $result = mysqli_query($con, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $registerSalutation = $row['salutation'];
  $registerFirstName = $row['fname'];
  $registerLastName = $row['sname'];
  $registerAffiliation = $row['affiliation'];
  $registerPhone = $row['phone'];
  $registerAddress = $row['addr'];
  $registerCity = $row['city'];
  $registerCountry = $row['country'];
  $registerPincode = $row['pin'];
  $registerEmail = $row['email'];
  $isValidated = $row['isValidated'];
  $isValid = 1;
 }
?>
<div class="popup" style="width:550px">
<div class="widget">
 <div class="card">
  <div class="card-header">View Nominator</div>
 </div>
 <div id="widgetEdit_B" style="padding:15px 25px">
<? if($isValid == 1) { ?>
  <div class="form-row mt-3">
   <div class="form-group col-12 col-md-2 text-left">
    <label for="registerSalutation">Salutation</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerSalutation?></div>
   </div>
   <div class="form-group col-12 col-md-5 text-left">
    <label for="registerFirstName">First Name</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerFirstName?></div>
   </div>
   <div class="form-group col-12 col-md-5 text-left">
    <label for="registerLastName">Last Name</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerLastName?></div>
   </div>
  </div>
  <div class="form-row">
   <div class="form-group col-md-6 text-left">
    <label for="registerAffiliation">Affiliation</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerAffiliation?></div>
   </div>
   <div class="form-group col-md-6 text-left">
    <label for="registerPhone">Phone</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerPhone?></div>
   </div>
  </div>
  <div class="form-row">
   <div class="form-group col text-left">
    <label for="registerAddress">Address</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerAddress?></div>
   </div>
  </div>
  <div class="form-row">
   <div class="form-group col-md-4 text-left">
    <label for="registerCity">City</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerCity?></div>
   </div>
   <div class="form-group col-md-4 text-left">
    <label for="registerCountry">Country</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerCountry?></div>
   </div>
   <div class="form-group col-md-4 text-left">
    <label for="registerPincode">Pin Code</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerPincode?></div>
   </div>
  </div>
  <div class="form-row mb-2">
   <div class="form-group col-md-6 text-left">
    <label for="registerEmail">Email</label>
    <div class="py-2 px-2 alert alert-primary"><?=$registerEmail?></div>
   </div>
   <div class="form-group col-md-6 text-left">
    <label for="registerValidated">Validated</label>
    <div class="py-2 px-2 alert alert-primary"><? if ($isValidated == '1') { ?>Validated<? } else { ?><span class="text-danger">Pending</span><? } ?></div>
   </div>
  </div>
<? } ?>
 </div>
</div>
</div>
<?
}

// Search Form
if ($act == 'search') {
?>
<ol class="breadcrumb mt-4 mb-3">
 <li class="breadcrumb-item"><a href="dashboard.php">Dashboard</a></li>
 <li class="breadcrumb-item active">Nominator</li>
</ol>
<form id="frmSearch" name="frmSearch">
<div class="card">
 <div class="card-header">Search Nominators</div>
 <div class="card-body">
  <div class="form-inline">
   <div class="form-group mr-2">
    <label for="srcNominatorName" class="col-form-label-sm">Name</label>
    <input type="txt" class="form-control ml-0 ml-sm-2" id="srcNominatorName" name="srcNominatorName" />
   </div>
   <div class="form-group ml-0 ml-sm-4">
    <label for="srcIsValidated" class="col-form-label-sm">Status</label>
    <div class="form-check form-check-inline ml-0 ml-sm-4">
     <label class="form-control radio-inline border-0 pl-1"><input type="radio" id="srcIsValidated" name="srcIsValidated" value="1"> Validated</label>
     <label class="form-control radio-inline border-0 pl-1"><input type="radio" id="srcIsValidated" name="srcIsValidated" value="0"> Pending</label>
     <label class="form-control radio-inline border-0 pl-1"><input type="radio" id="srcIsValidated" name="srcIsValidated" value="" CHECKED> All</label>
    </div>
   </div>
   <div class="col text-right">
    <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return searchNominator()">Show</button>
   </div>
  </div>
 </div>
</div>
<div id="panelSearch"></div>
<input type="hidden" id="act" name="act" value="searchResults" />
</form>
<?
}

// Search Result
if ($act == 'searchResults') {
 $pageNum = isset($_POST["pageNum"]) ? $_POST["pageNum"] : 0;
 $srcNominatorName= isset($_POST["srcNominatorName"]) ? $_POST["srcNominatorName"] : '';
 $srcIsValidated = isset($_POST["srcIsValidated"]) ? $_POST["srcIsValidated"] : '';
 $numRecords = 20;
 $startOrder = ($pageNum * $numRecords);
 $sql = "SELECT SQL_CALC_FOUND_ROWS * FROM nominator WHERE id>0";
 if ($srcNominatorName != '') $sql .= " AND (fname LIKE '%$srcNominatorName%' OR sname LIKE '%$srcNominatorName%')";
 if ($srcIsValidated == '0') $sql .= " AND isValidated=0";
 if ($srcIsValidated == '1') $sql .= " AND isValidated=1";
 $sql .= " ORDER BY fname,sname LIMIT " . $startOrder . "," . ($numRecords+1);
 $result = mysqli_query($con, $sql);
 $numRows = mysqli_num_rows($result);
 $sql = "SELECT FOUND_ROWS()";
 $resultCount = mysqli_query($con, $sql);
 $rowCount = mysqli_fetch_array($resultCount);
 $totalCount = $rowCount[0];
 if ($numRows == 0) {
  echo '<div class="m-2">No results found!</div>';
 } else {
?>
<div class="table-responsive">
<table class="table table-sm mt-3">
<thead class="thead-light">
 <tr>
  <th width="20"></th>
  <th>Nominator</th>
  <th>Email</th>
  <th>Status</th>
  <th width="30"></th>
  <th width="30"></th>
 </tr>
</thead>
<?
  $j = 0;
  for ($i=0;$i<$numRows;$i++) {
   if ($i < $numRecords) {
    $row = mysqli_fetch_array($result);
    $nominatorId = $row['id'];
    $nominatorName = $row['fname'] . ' ' . $row['sname'];
    $nominatorEmail = $row['email'];
    $isValidated = $row['isValidated'];
    $txtStatus = ($isValidated) ? 'Validated' : '<span class="text-danger">Pending</span>';
    $j += 1;
?>
<tr>
 <th><?=$startOrder+$i+1?>.</th>
 <td><?=$nominatorName?></td>
 <td><?=$nominatorEmail?></td>
 <td><?=$txtStatus?></td>
 <td align="center" title="View Nominator"><i data-id="<?=$nominatorId?>" class="viewRow cursorHand far fa-eye fa-lg"></i></td>
 <td align="center" title="Edit Nominator"><i data-id="<?=$nominatorId?>" class="editRow cursorHand far fa-edit fa-lg"></i></td>
</tr>
<?
   }
  }
?>
</table>
</div>
<div id="listingPageNum" class="float-left text-success" data-pagenum="<?=$pageNum?>">Showing <?=$startOrder+1?> to <?=$startOrder+$j?> of <?=$totalCount?> entries</div>
<div class="float-right" align="right">
<? if ($pageNum > 0) { ?><button class="btn btn-warning" onclick="return searchNominator(<?=$pageNum-1?>)"><</button><? } ?>
<? if ($numRows > $numRecords) { ?><button class="btn btn-warning" style="margin-left:5px" onclick="return searchNominator(<?=$pageNum+1?>)">></button><? } ?>
</div>
<div class="cleaner"></div>
<br>
<br>
<?
 }
?>
<script type="text/javascript">
$(function () {
 $('.viewRow').magnificPopup({
  type: 'ajax',
  closeBtnInside: true,
  ajax: {
   settings: {
    method: 'POST',
    url: 'process/get.section.nominator.php'
   }
  },
  callbacks: {
   elementParse: function(item){
    postData = {
     act: 'view',
     id: $(item.el[0]).data('id')
    }
    this.st.ajax.settings.data = postData;
   }
  }
 });
 $('.editRow').magnificPopup({
  type: 'ajax',
  closeBtnInside: true,
  ajax: {
   settings: {
    method: 'POST',
    url: 'process/get.section.nominator.php'
   }
  },
  callbacks: {
   elementParse: function(item){
    postData = {
     act: 'editForm',
     id: $(item.el[0]).data('id')
    }
    this.st.ajax.settings.data = postData;
   }
  }
 });
});
</script>
<?
}