HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux ip-172-31-18-78 6.17.0-1017-aws #17~24.04.1-Ubuntu SMP Tue May 26 21:09:53 UTC 2026 aarch64
User: ubuntu (1000)
PHP: 8.2.31
Disabled: NONE
Upload Files
File: /var/www/content-sp/work-sp/nqb_user_edit.php
<?php

// ini_set('display_errors',1);
// ini_set('display_startup_errors',1);
// error_reporting(E_ALL);

include_once('nqb_user_section.php');

$curDateTime = date('Y-m-d H:i:s'); // add 5 hrs 30 min in 

//check edit permissions
$fileName = str_replace('.php', '', basename($_SERVER['REQUEST_URI'], '?' . $_SERVER['QUERY_STRING']));
if (in_array($fileName, $pageArray)) {
$SP_EDITORS = 'csp_editors';
$SP_MASTER_CATEGORY = 'csp_sp_master_category';

$ed_id = $_REQUEST['ed_id'];

$allMaster = $conn->query("select mc.master_id, mc.master_name from $SP_MASTER_CATEGORY as mc order by mc.master_id asc");

//create user
if (isset($_REQUEST['update_user'])) {

    $ed_id = $_REQUEST['ed_id'];
    $dis_name = $_REQUEST['dis_name'];
    $dis_email = $_REQUEST['dis_email'];
    $dis_mobile = $_REQUEST['dis_mobile'];
    $ed_username = $_REQUEST['ed_username'];
    $ed_userRole = $_REQUEST['ed_userRole'];
    $ed_fileaccess = $_REQUEST['ed_fileaccess'];
    $ed_prfaccess = $_REQUEST['ed_prfaccess'];
    $ed_masters = $_REQUEST['ed_masters'];
    $user_status = $_REQUEST['user_status'];
    $pwd_exist = $_REQUEST['pwd_exist'];
    $ed_view_access = $_REQUEST['ed_view_access'];
    if (!empty($ed_masters)) {
        $assignMaster = implode(',', $ed_masters);
    } else {
        $assignMaster = '';
    }

    if($_REQUEST['ed_pwd'] != '') {
        $ed_pwd = $_REQUEST['ed_pwd'];
        $pwd = md5($ed_pwd);
        $pwdQuery = ",editor_password='$pwd'";
    } else {
        $pwdQuery = '';
    }


    if ($ed_username != '') {

        
        
        $updateQUERY = "UPDATE $SP_EDITORS set editor_login='$ed_username',editor_status='$user_status',display_name='$dis_name',editor_role='$ed_userRole',contact_name='$dis_name',official_email='$dis_email',contact_no='$dis_mobile',team_id='3',q_masters='$assignMaster',download_access='$ed_fileaccess',view_page_access='$ed_view_access',primary_edit_access='$ed_prfaccess' $pwdQuery WHERE editor_id='$ed_id'";
        if ($conn->query($updateQUERY)) {
            $msg = '<div class="alert alert-success alert-dismissible" role="alert">User updated successfully<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span></button></div>';
        } else {
            $msg = '<div class="alert alert-danger alert-dismissible" role="alert">' . $conn->error . '<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span></button></div>';
        }
    } else {
        $msg = '<div class="alert alert-danger alert-dismissible" role="alert">All Fields required.<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span></button></div>';
    }
}

$edData = $conn->query("select e.editor_id,e.editor_login,e.editor_password,e.editor_status,e.display_name,e.editor_role,e.official_email,e.contact_no,e.q_masters,e.download_access,view_page_access,primary_edit_access from $SP_EDITORS as e where e.editor_id='$ed_id'");
$ed = $edData->fetch_assoc();

$assignedMasters = explode(',', $ed['q_masters']);

?>
<div class="row">
    <div class="col-md-12">
        <div class="panel panel-primary">
            <div class="panel-heading clearfix">
                <h4 class="panel-title">Update User
                </h4>

            </div>
            <div class="spacer"></div>
            <div class="panel-body">
                <span id="alert1" style="display: block;"><?php if (isset($msg)) {
                                                                echo $msg;
                                                            } ?></span>
                <form id="frmaddQues" method="post" action="" onsubmit="return validateForm();">
                    <input type="hidden" value="<?php echo $ed['editor_password']; ?>" name="pwd_exist">
                    <div class="form-group" style="float:left; width:100%;">
                    <input type="hidden" name="ed_id" value="<?php echo $ed['editor_id']; ?>">
                        <label for="input-Default" class="col-sm-3 control-label">Name:</label>
                        <div class="col-sm-5">
                            <input type="text" name="dis_name" id="dis_name" class="form-control" placeholder="Enter display name" value="<?php echo $ed['display_name']; ?>" required>
                        </div>
                    </div>

                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Email Id:</label>
                        <div class="col-sm-5">
                            <input type="text" name="dis_email" id="dis_email" class="form-control" placeholder="Enter email id" value="<?php echo $ed['official_email']; ?>" required>
                        </div>
                    </div>

                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Mobile Number:</label>
                        <div class="col-sm-5">
                            <input type="text" name="dis_mobile" id="dis_mobile" class="form-control" placeholder="Enter mobile number" value="<?php echo $ed['contact_no']; ?>" required>
                        </div>
                    </div>

                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Username:</label>
                        <div class="col-sm-5">
                            <input type="text" name="ed_username" id="ed_username" class="form-control" placeholder="Enter username.." value="<?php echo $ed['editor_login']; ?>" required>
                        </div>
                    </div>
                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Password:</label>
                        <div class="col-sm-5">
                            <input type="password" name="ed_pwd" id="ed_pwd" class="form-control" placeholder="Enter password.." value="">
                        </div>
                    </div>

                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Starting Role:</label>
                        <div class="col-sm-8">
                            <input type="radio" name="ed_userRole" class="form-control" value="2" <?php echo $ed['editor_role'] == '2' ? 'checked' : ''; ?>>Add Question
                            <input type="radio" name="ed_userRole" class="form-control" value="3" <?php echo $ed['editor_role'] == '3' ? 'checked' : ''; ?>>Proof Read Question
                            <input type="radio" name="ed_userRole" class="form-control" value="4" <?php echo $ed['editor_role'] == '4' ? 'checked' : ''; ?>>Both
                            <input type="radio" name="ed_userRole" class="form-control" value="5" <?php echo $ed['editor_role'] == '5' ? 'checked' : ''; ?>>Whitelabel User
                        </div>
                    </div>

                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Download Access <font style="font-size:10px;">(User can download questions in word file)</font>:</label>
                        <div class="col-sm-5">
                            <input type="radio" name="ed_fileaccess" class="form-control" value="Y" <?php echo $ed['download_access'] == 'Y' ? 'checked' : ''; ?>>Yes
                            <input type="radio" name="ed_fileaccess" class="form-control" value="N" <?php echo $ed['download_access'] == 'N' ? 'checked' : ''; ?>>No
                        </div>
                    </div>
                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Primary Proofread Access <font style="font-size:10px;">(For olympiad proofreaders)</font>:</label>
                        <div class="col-sm-5">
                            <input type="radio" name="ed_prfaccess" class="form-control" value="1" <?php echo $ed['primary_edit_access'] == '1' ? 'checked' : ''; ?>>Yes
							<input type="radio" name="ed_prfaccess" class="form-control" value="0" <?php echo $ed['primary_edit_access'] == '0' ? 'checked' : ''; ?>>No
                        </div>
                    </div>
                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Proof Read Instanly <font style="font-size:10px;">(master structure change and proof read instanly button will be shown in question view page, if active)</font>:</label>
                        <div class="col-sm-5">
                            <select name="ed_view_access" id="ed_view_access" class="form-control">
                                <option value="0">Select Access</option>
                                <option value="0"  <?php echo $ed['view_page_access'] == '0' ? 'selected' : ''; ?>>Not Show</option>
                                <option value="1"  <?php echo $ed['view_page_access'] == '1' ? 'selected' : ''; ?>>Show</option>
                            </select>
                        </div>
                    </div>

                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Assign Specific Master <font style="font-size:10px;">(If user can upload questions in specific master only)</font>:</label>
                        <div class="col-sm-5">
                            <!-- <select name="ed_masters[]" class="form-control" id="ed_masters" multiple> -->
                                <?php while ($ms = $allMaster->fetch_assoc()) { ?>

                                    <label>
                                        <input type="checkbox" name="ed_masters[]" value="<?php echo $ms['master_id']; ?>"  <?php if (in_array($ms['master_id'], $assignedMasters)) { echo 'checked'; } ?>>&nbsp;<?php echo $ms['master_name']; ?>
                                    </label>
                                <?php } ?>
                            <!-- </select> -->
                        </div>
                    </div>

                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">Status:</label>
                        <div class="col-sm-5">
                            <select name="user_status" class="form-control">
                                <option value="1" <?php echo $ed['editor_status'] == '1' ? 'selected' : ''; ?>>Active</option>
                                <option value="0" <?php echo $ed['editor_status'] == '0' ? 'selected' : ''; ?>>De-Active</option>
                            </select>
                        </div>
                    </div>
                    <div class="form-group" style="float:left; width:100%;">
                        <label for="input-Default" class="col-sm-3 control-label">&nbsp;</label>
                        <div class="col-sm-5">
                            <button type="submit" name="update_user" class="btn btn-primary btn-rounded">Update</button>
                        </div>
                    </div>
                </form>
            </div>
        </div>
    </div>
</div>
</div><!-- Main Wrapper -->

<div class="page-footer">
    <p class="no-s">sarkaripariksha.com</p>
</div>
</div><!-- Page Inner -->

<?php
} else {
    echo "<script type='text/javascript'>alert('You dont have access');</script>";
    echo "<script type='text/javascript'>location.href='/work-sp';</script>";
}
include_once('footer.php');
?>