<?php
	///////////////////////////////////////////////////////////////////////////////
	// Copyright © 2003 Michael Bird. All Rights Reserved                        //
	//                                                                           //
	// This file is part of Help Center Live.                                    //
	//                                                                           //
	// Help Center Live is free software; you can redistribute it and/or modify  //
	// it under the terms of the GNU General Public License as published by      //
	// the Free Software Foundation; either version 2 of the License, or         //
	// (at your option) any later version.                                       //
	//                                                                           //
	// Help Center Live is distributed in the hope that it will be useful,       //
	// but WITHOUT ANY WARRANTY; without even the implied warranty of            //
	// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the             //
	// GNU General Public License for more details.                              //
	//                                                                           //
	// You should have received a copy of the GNU General Public License         //
	// along with Help Center Live; if not, write to the Free Software           //
	// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA //
	///////////////////////////////////////////////////////////////////////////////




	include_once("../../inc/header_details.php");

		if(isset($_POST["submit"])){

			// update operator

			$result_op = DATABASE_query("SELECT * FROM ".$DB_prefix."operators WHERE operator='$ADMIN_operator'");
			if($fetch = DATABASE_fetch($result_op)){
				$OPERATOR_id = $fetch["id"];
			}else{
				$EDIT_error = "Error, operator does not seem to exist";
			}

			$OPERATOR_firstname = $_POST["firstname"];
			$OPERATOR_lastname = $_POST["lastname"];
			$OPERATOR_email = $_POST["email"];
			$OPERATOR_autosave = $_POST["autosave"];
			$OPERATOR_usepic = $_POST["usepic"];


			if(!isset($EDIT_error)){

				if(isset($_FILES["pic"]) && $_FILES["pic"] !== "" && $_FILES["pic"]["size"] !== 0){
					// Upload new icon
					// Make sure the image is not corrupted by magic quotes
					set_magic_quotes_runtime(0);
					$imagefile = $_FILES["pic"]["tmp_name"];
					$imagesize = $_FILES["pic"]["size"];
					$imagename = $_FILES["pic"]["name"];
					$imagetype = $_FILES["pic"]["type"];
					$image = fopen($imagefile, "rb");
					$imageblob = base64_encode(fread($image, filesize($imagefile)));
					$fileopened = 1;
				}

				if(isset($imageblob) && $imageblob !== ""){
					if($_POST["password"] !== "" && $_POST["password"] == $_POST["passworda"]){
						$OPERATOR_password = md5($_POST["password"]);
						DATABASE_query("UPDATE ".$DB_prefix."operators SET password='$OPERATOR_password', firstname='$OPERATOR_firstname', lastname='$OPERATOR_lastname', email='$OPERATOR_email', imageblob='$imageblob', imagetype='$imagetype', autosave='$OPERATOR_autosave', usepic='$OPERATOR_usepic' WHERE id='$OPERATOR_id'");
					}else{
						DATABASE_query("UPDATE ".$DB_prefix."operators SET firstname='$OPERATOR_firstname', lastname='$OPERATOR_lastname', email='$OPERATOR_email', imageblob='$imageblob', imagetype='$imagetype', autosave='$OPERATOR_autosave', usepic='$OPERATOR_usepic' WHERE id='$OPERATOR_id'");
					}
 				}else{
					if($_POST["password"] !== "" && $_POST["password"] == $_POST["passworda"]){
						$OPERATOR_password = md5($_POST["password"]);
						DATABASE_query("UPDATE ".$DB_prefix."operators SET password='$OPERATOR_password', firstname='$OPERATOR_firstname', lastname='$OPERATOR_lastname', email='$OPERATOR_email', autosave='$OPERATOR_autosave', usepic='$OPERATOR_usepic' WHERE id='$OPERATOR_id'");
					}else{
						DATABASE_query("UPDATE ".$DB_prefix."operators SET firstname='$OPERATOR_firstname', lastname='$OPERATOR_lastname', email='$OPERATOR_email', autosave='$OPERATOR_autosave', usepic='$OPERATOR_usepic' WHERE id='$OPERATOR_id'");
					}
				}

				if(isset($fileopened)){
					fclose($image);
					// Put magic quotes back as they were
					set_magic_quotes_runtime(get_magic_quotes_gpc());
				}

				echo("<div align=\"center\">Your details have been updated</div>");

			}else{
				echo($EDIT_error);
			}



		}else{
			// show edit form
			$result_op = DATABASE_query("SELECT * FROM ".$DB_prefix."operators WHERE operator='$ADMIN_operator'");
			if($get = DATABASE_fetch($result_op)){
				$OPERATOR_found = 1;
				$OPERATOR_username = $get["operator"];
				$OPERATOR_firstname = $get["firstname"];
				$OPERATOR_lastname = $get["lastname"];
				$OPERATOR_email = $get["email"];
				$OPERATOR_autosave = $get["autosave"];
				$OPERATOR_usepic = $get["usepic"];
			}

			if($OPERATOR_found == 1){

?>
<form name="edit" method="post" enctype="multipart/form-data" action="<?php echo($URL_maindir); ?>/cp/details/edit.php">
<table border="0" align="center" cellspacing="0" cellpadding="2">
  <tr>
    <td>Username</td>
    <td><?php echo($OPERATOR_username); ?></td>
  </tr>
  <tr>
    <td>New Password</td>
    <td><input name="password" type="password" size="30" maxlength="255"></td>
  </tr>
  <tr>
    <td>New Password Again</td>
    <td><input name="passworda" type="password" size="30" maxlength="255"></td>
  </tr>
  <tr>
    <td>First Name</td>
    <td><input name="firstname" type="text" size="30" maxlength="255" value="<?php echo($OPERATOR_firstname); ?>"></td>
  </tr>
  <tr>
    <td>Last Name</td>
    <td><input name="lastname" type="text" size="30" maxlength="255" value="<?php echo($OPERATOR_lastname); ?>"></td>
  </tr>
  <tr>
    <td>E-Mail</td>
    <td><input name="email" type="text" size="30" maxlength="255" value="<?php echo($OPERATOR_email); ?>"></td>
  </tr>
  <tr>
    <td>Picture (50 x 50px)</td>
    <td><input type="file" name="pic"></td>
  </tr>
  <tr>
    <td>Display Your Picture</td>
    <td><input name="usepic" type="radio" value="1"<?php if($OPERATOR_usepic == 1){ ?> checked<?php } ?>> Yes&nbsp;&nbsp;&nbsp;<input name="usepic" type="radio" value="0"<?php if($OPERATOR_usepic == 0){ ?> checked<?php } ?>> No</td>
  </tr>
  <tr>
    <td>Autosave Transcripts</td>
    <td><input name="autosave" type="radio" value="1"<?php if($OPERATOR_autosave == 1){ ?> checked<?php } ?>> Yes&nbsp;&nbsp;&nbsp;<input name="autosave" type="radio" value="0"<?php if($OPERATOR_autosave == 0){ ?> checked<?php } ?>> No</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td><input type="submit" name="submit" value="Update"></td>
  </tr>
</table>
</form>
<?php
			}

		}

	include_once("../../inc/footer.php");
?>