V1rus Private

Viewing: edit_store.php

<?php
  $page_title = 'Edit Store';
  require_once('includes/load.php');
  // Checkin What level user has permission to view this page
  page_require_level(1);
?>
<?php
  //Display all stores.
  $store = find_by_id('stores',(int)$_GET['id']);
  if(!$store){
    $session->msg("d","Missing store id.");
    redirect('stores.php');
  }
?>

<?php
if(isset($_POST['edit_store'])){
  $req_fields = array('store-name','store-address','store-license');
  validate_fields($req_fields);
  
  $store_name = remove_junk($db->escape($_POST['store-name']));
  $store_address = remove_junk($db->escape($_POST['store-address']));
  $store_license = remove_junk($db->escape($_POST['store-license']));
  
  if(empty($errors)){
    $sql = "UPDATE stores SET";
    $sql .= " store_name='{$store_name}', store_address='{$store_address}', store_license_number='{$store_license}'";
    $sql .= " WHERE id='{$store['id']}'";
    
    $result = $db->query($sql);
    if($result && $db->affected_rows() === 1) {
      $session->msg("s", "Successfully updated Store");
      redirect('stores.php',false);
    } else {
      $session->msg("d", "Sorry! Failed to Update");
      redirect('stores.php',false);
    }
  } else {
    $session->msg("d", $errors);
    redirect('stores.php',false);
  }
}
?>
<?php include_once('layouts/header.php'); ?>

<div class="row">
  <div class="col-md-12">
    <?php echo display_msg($msg); ?>
  </div>
</div>

<div class="row">
  <div class="col-md-8">
    <div class="panel panel-default">
      <div class="panel-heading">
        <strong>
          <span class="glyphicon glyphicon-th"></span>
          <span>Editing <?php echo remove_junk(ucfirst($store['store_name']));?></span>
        </strong>
      </div>
      <div class="panel-body">
        <form method="post" action="edit_store.php?id=<?php echo (int)$store['id'];?>">
          <div class="form-group">
            <label for="store-name">Store Name</label>
            <input type="text" class="form-control" name="store-name" value="<?php echo remove_junk($store['store_name']);?>" required>
          </div>
          <div class="form-group">
            <label for="store-address">Store Address</label>
            <textarea class="form-control" name="store-address" required><?php echo remove_junk($store['store_address']);?></textarea>
          </div>
          <div class="form-group">
            <label for="store-license">License Number</label>
            <input type="text" class="form-control" name="store-license" value="<?php echo remove_junk($store['store_license_number']);?>" required>
          </div>
          <button type="submit" name="edit_store" class="btn btn-primary">Update Store</button>
          <a href="stores.php" class="btn btn-default">Cancel</a>
        </form>
      </div>
    </div>
  </div>
</div>

<?php include_once('layouts/footer.php'); ?>
User / IP	: 216.73.217.108
Host / Server	: 190.92.174.125 / aerosofthealthcare.com
System	: Linux s3739.bom1.stableserver.net 4.18.0-513.24.1.lve.2.el8.x86_64 #1 SMP Fri May 24 12:42:50 UTC 2024 x86_64