FM / Master

/home/techb158/workloadmatch.com/Master/

/home/techb158/workloadmatch.com/Master

Name	Size	Mode	Actions
addgroup.php	6908	0644	edit dl rm
addmanager.php	14495	0644	edit dl rm
adduser.php	11148	0644	edit dl rm
assign_teacher_manual.php	3879	0644	edit dl rm
chat.php	16850	0644	edit dl rm
dashboard.php	13677	0644	edit dl rm
fetch_teacher_prefrence_courses.php	1887	0644	edit dl rm
inc.php	551	0644	edit dl rm
Lockup_to_Assign.php	3662	0644	edit dl rm
main-header-inc.php	1276	0644	edit dl rm
main-header.php	15374	0644	edit dl rm
preference_accounting.php	9416	0644	edit dl rm
preference_secretarial.php	9416	0644	edit dl rm
profile.php	17094	0644	edit dl rm
profile_bak.php.disabled	3195	0644	edit dl rm
save_teacher_preference.php	2107	0644	edit dl rm
set_manager.php	1305	0644	edit dl rm
teacher_absence.php	305	0644	edit dl rm
teacher_preference.php	3798	0644	edit dl rm
teacher_preference_by_course.php	3833	0644	edit dl rm

Edit: /home/techb158/workloadmatch.com/Master/set_manager.php (1305B)

<?php
include_once '../includes/db_connect.php';
include_once '../includes/functions.php';
sec_session_start();

if (isset($_POST['manager_id']) && isset($_SESSION['user_id'])) {
    $manager_id = $_POST['manager_id'];
    $master_id = $_SESSION['user_id'];
    
    // If empty, clear the managed context
    if ($manager_id === '') {
        unset($_SESSION['manage_as']);
    } else {
        // Verify this manager belongs to this Master's Admin
        $q = $mysqli->prepare("SELECT Admin_ID FROM master_profile WHERE Master_ID = ?");
        $q->bind_param("s", $master_id);
        $q->execute();
        $q->bind_result($admin_id);
        $q->fetch();
        $q->close();
        
        if ($admin_id) {
            $ck = $mysqli->prepare("SELECT Manager_ID FROM manager_profile WHERE Manager_ID = ? AND Admin_ID = ?");
            $ck->bind_param("ss", $manager_id, $admin_id);
            $ck->execute();
            $ck->store_result();
            if ($ck->num_rows > 0) {
                $_SESSION['manage_as'] = $manager_id;
            } else {
                unset($_SESSION['manage_as']);
            }
            $ck->close();
        }
    }
}

$redirect = $_POST['redirect'] ?? BASE_URL . '/dashboard';
header("Location: $redirect");
exit;

prepare("SELECT Admin_ID FROM master_profile WHERE Master_ID = ?"); $q->bind_param("s", $master_id); $q->execute(); $q->bind_result($admin_id); $q->fetch(); $q->close(); if ($admin_id) { $ck = $mysqli->prepare("SELECT Manager_ID FROM manager_profile WHERE Manager_ID = ? AND Admin_ID = ?"); $ck->bind_param("ss", $manager_id, $admin_id); $ck->execute(); $ck->store_result(); if ($ck->num_rows > 0) { $_SESSION['manage_as'] = $manager_id; } else { unset($_SESSION['manage_as']); } $ck->close(); } } } $redirect = $_POST['redirect'] ?? BASE_URL . '/dashboard'; header("Location: $redirect"); exit;