FM / Inc

/home/techb158/immovalet.ca/report/Client/Inc/

/home/techb158/immovalet.ca/report/Client/Inc

Name	Size	Mode	Actions
Publish_Post.php	5483	0666	edit dl rm
Update_Profile.php	10497	0666	edit dl rm
Update_Publish_Post.php	5923	0666	edit dl rm
upload.php	2206	0666	edit dl rm

Edit: /home/techb158/immovalet.ca/report/Client/Inc/Update_Profile.php (10497B)

<?php

include_once '../includes/db_connect.php';
include_once '../includes/psl-config.php';

sec_session_start();
$error_msg = "";

if(isset($_POST["submit"])) {

if (isset ($_POST['emails'],$_POST['FirstName'], $_POST['LastName'], $_POST['Location_Address'], $_POST['Contact_Phone'], $_POST['Location_City'], $_POST['Location'],$_POST['Location_State'],$_POST['Location_ZipCode'],$_POST['Select_what_you_offer'],$_POST['Your_3_essential_values'],$_POST['Post_Title'],$_POST['List_of_industries'],$_POST['Post_Regions'])) {
 
 
		
 $Post_Regions = $_POST['Post_Regions']; 
 $List_of_industries = $_POST['List_of_industries']; 
 $FirstName = $_POST['FirstName']; 
 $LastName = $_POST['LastName']; 
 // $Address = $_POST['Location_Address'];
 $Contact_Phone = $_POST['Contact_Phone']; 
 $Type_of_employment = $_POST['Type_of_employment']; 
 //$Company = $_POST['Company'];
 $Company = "";
	$username=$_SESSION['username'];
 $Admin_ID= $_SESSION['user_id'];
 $Location_Address= $_POST['Location_Address'];
 $Location_City= $_POST['Location_City'];
 $Location= $_POST['Location'];
 $Location_State= $_POST['Location_State'];
 $Location_ZipCode= $_POST['Location_ZipCode'];
	 $Register_Time = date("Y/m/d") . ' ' . date('H:i:s');
 $Post_Title = mysqli_real_escape_string($mysqli,htmlentities($_POST['Post_Title']));
 
 $email = filter_input(INPUT_POST, 'emails', FILTER_SANITIZE_EMAIL);
 $email = filter_var($email, FILTER_VALIDATE_EMAIL);
 if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
 // Not a valid email
 //$error_msg .= 'The email address you entered is not valid';
		$texts="n'est pas valide";
		 header('Location: modifier_profil.php?error=Courriel que vous avez entré '.$texts.'!');
 exit(); 
 }

if (!$mysqli->query("UPDATE Clients SET First_Name='$FirstName', Last_name='$LastName', Company_Name ='$Company', Email='$email', Phone ='$Contact_Phone', Address ='$Location_Address', City ='$Location_City', Location ='$Location', State ='$Location_State', ZipCode ='$Location_ZipCode', Post_Title ='$Post_Title', Post_Regions_ID ='$Post_Regions',Job_Category_ID ='$List_of_industries',Type_of_employment ='$Type_of_employment' WHERE C_ID ='$Admin_ID'")) {
		 header('Location: modifier_profil.php?error=Votre mise à jour a échoué!');
	exit(); 
	}else{
		
	////////////////////////////////////////////////////////////////////////	
	////////////////////////////////////////////////////////////////////////	
	////////////////////////////////////////////////////////////////////////	
	////////////////////////////////////////////////////////////////////////	
		$Select_what_you_offer = $_POST['Select_what_you_offer'];
	$Your_3_essential_values = $_POST['Your_3_essential_values'];
	
	
	
	
	$stmt = $mysqli->prepare("DELETE FROM Client_Essential_Values WHERE C_ID = ?");
	$stmt->bind_param('i', $Admin_ID);
	$stmt->execute(); 
	$stmt->close();
	
	$nSelections = count($Your_3_essential_values);
 for($r=0; $r <= 4; $r++)
 {
 $numberVals = $Your_3_essential_values[$r];
 $query = "SELECT * FROM essential_values Where essential_values_ID ='".$numberVals."'";		
	$result = $mysqli->query($query);	
	$Managers = $result->fetch_assoc();
	//$essential_values_Name = mysqli_real_escape_string($mysqli,htmlentities($Managers['essential_values_Name'])); 
	$essential_values_Name = $Managers['essential_values_Name']; 
	
	$querys = "select * from Client_Essential_Values where C_ID ='".$Admin_ID."' and Essential_values_ID ='".$numberVals."'";	
		$result = $mysqli->query($querys);	
		$order_Info = $result->fetch_assoc();		
		if ($results->num_rows == 0) {
	
	if ($insertstmts = $mysqli->prepare("INSERT INTO Client_Essential_Values (C_ID, Essential_values_ID, Essential_values_Name, Update_Date) VALUES (?,?,?,?)")) {
		$insertstmts->bind_param('ssss',$Admin_ID,$numberVals,$essential_values_Name,$Register_Time);		
		// Execute the prepared query.
		if (! $insertstmts->execute()) {
			//header('Location: modifier_profil.php?error='.$insertstmts->error); 
			//$textq="d'inscription";
			//header('Location: modifier_profil.php?error=Échec '.$textq.' pour ajouter des informations pour existe post!');
			//header('Location: addassist.php?error='.$Managers_ID.'');
			//exit();
		}else
		{
			//header('Location: submit_offer_employee.php?error=register success!');
			//exit();			
		}		
	}
	}
	
 }
	
	
	$stmt = $mysqli->prepare("DELETE FROM Client_Benefits WHERE C_ID = ?");
	$stmt->bind_param('i', $Admin_ID);
	$stmt->execute(); 
	$stmt->close();
	
	$nSelection = count($Select_what_you_offer);
 for($i=0; $i <= 4; $i++)
 {
 $numberVal = $Select_what_you_offer[$i];
 $query = "SELECT * FROM category_offering Where category_offering_ID ='".$numberVal."'";		
	$result = $mysqli->query($query);	
	$Managers = $result->fetch_assoc();
	$category_offering_Name = $Managers['category_offering_Name']; 
	
	
	$querys = "select * from Client_Benefits where C_ID ='".$Admin_ID."' and Category_offering_ID ='".$numberVal."'";	
		$result = $mysqli->query($querys);	
		$order_Info = $result->fetch_assoc();		
		if ($results->num_rows == 0) {
			
	if ($insert_stmt = $mysqli->prepare("INSERT INTO Client_Benefits (C_ID, Category_offering_ID, Category_offering_Name, Update_Date) VALUES (?, ?, ?, ?)")) {
		$insert_stmt->bind_param('ssss',$Admin_ID,$numberVal,$category_offering_Name,$Register_Time);		
		// Execute the prepared query.
		if (! $insert_stmt->execute()) {
			$textq="d'inscription";
			//header('Location: modifier_profil.php?error=Échec '.$textq.' pour ajouter des informations pour existe post!');
			//header('Location: addassist.php?error='.$Managers_ID.'');
			//exit();
		}else
		{
			//header('Location: submit_offer_employee.php?error=register success!');
			//exit();			
		}		
	}	
		}
	
	
 }	
	
	$Email_Type="Update_Profile";
	$queryse = "select * from Send_Email_Client where C_ID ='".$Admin_ID."' and User_Name ='".$username."' and Email_Type ='".$Email_Type."'";	
		$resulte = $mysqli->query($queryse);	
		$ordere= $resulte->fetch_assoc();		
	if ($resulte->num_rows == 0) {			
	if ($insert_stmt = $mysqli->prepare("INSERT INTO Send_Email_Client (C_ID, User_Name, Email, Email_Type, Date_Time) VALUES (?, ?, ?, ?, ?)")) {
		$insert_stmt->bind_param('sssss',$Admin_ID,$username,$email,$Email_Type,$Register_Time);		
		// Execute the prepared query.
		if (! $insert_stmt->execute()) {
			
		}else
		{
			//header('Location: submit_offer_employee.php?error=register success!');
			//exit();			
		}		
	}	
	
	 $respons=sendemail($FirstName,$LastName,$email);	
	
		
	}
	////////////////////////////////////////////////////////////////////////	
	////////////////////////////////////////////////////////////////////////	
	////////////////////////////////////////////////////////////////////////	
	////////////////////////////////////////////////////////////////////////
		
		 header('Location: modifier_profil.php?error=Votre mise à jour est un succès!');
 exit(); 
	}		
 
 
}else{
header('Location: modifier_profil.php?error=Toutes les informations sont obligatoires!');
 exit();
 
}

}else if(isset($_POST["submitr"])) {

if($_POST['p'] != "")
	{		
		$Admin_username= $_SESSION['username'];
		
		$password = filter_input(INPUT_POST, 'p', FILTER_SANITIZE_STRING);
		if (strlen($password) != 128) {
			// The hashed pwd should be 128 characters long.
			// If it's not, something really odd has happened
			//$error_msg .= 'Invalid password configuration.';
			header('Location: modifier_profil.php?error=Configuration du mot de passe invalide.');
			exit();
		
		}
 $random_salt = hash('sha512', uniqid(openssl_random_pseudo_bytes(16), TRUE));
 // Create salted password 
 $password = hash('sha512', $password . $random_salt);
	
	
 $Admin_ID= $_SESSION['user_id']; 
	if (!$mysqli->query("UPDATE Clients SET Password ='$password', salt='$random_salt' WHERE C_ID ='$Admin_ID'")) {
		 header('Location: modifier_profil.php?error=Votre mise à jour a échoué!');
	exit(); 
	}else{ header('Location: modifier_profil.php?error=Votre mise à jour est un succès!');
 exit(); 
	}	
 
	
}

}

function sendemail($First_Name,$Last_name,$Email)
{
	$to=$Email;
	//$to="abdalla.bala@gmail.com";
		$subject = "BonBoss.Ca Félicitations ".$First_Name . ' ' . $Last_name."";
		$uri = 'http://'. $_SERVER['HTTP_HOST'] ;
		$message = '
		<html>
		<head>
		<title>Félicitations</title>
		</head>
		<body>
		Votre profil a été complété sur BonBoss.ca. 
		Dès maintenant, vous pouvez postuler sur les emplois des Bons Boss et être informé dès qu’un recruteur consulte votre candidature. 
		Grâce à la nouveauté Alerte jumelage, les entreprises qui partagent vos valeurs recevront votre fiche professionnelle et vous serez informé des jumelages potentiels. Si elles recrutent, vous pourrez discuter avec les recruteurs et présenter votre candidature. 
	Bonne recherche d’emplois! 
	#qui se ressemble s’assemble
	
	
		<footer>
		Équipe de soutien
		Bon Boss.ca
		Phone: (514) 898-4939
		Email: info@bonboss.ca
		<a><img src="'.$uri.'/img/logo.png" class="stone-logo"></a>
		</footer>
		</body>
		</html>
		';
				$headers[] = 'MIME-Version: 1.0';
$headers[] = 'Content-type: text/html; charset=iso-8859-1';

// Additional headers
$info="info@bonboss.ca";
$headers[] = 'To: '.$to.'>';
$headers[] = 'From: Équipe de soutien <'.$info.'>';
$headers[] = 'Cc: abdalla.bala@gmail.com';
$headers[] = 'Bcc: abdalla.bala@gmail.com';

//$headers = "MIME-Version: 1.0" . "\r\n";
		//$headers .= "Content-type:text/html;charset=iso-8859-1" . "\r\n";
		//$headers .= 'From: BonBoss.Ca<abdalla.bala@gmail.com>' . "\r\n";		
		//$headers .= 'Bcc: BonBoss.Ca<abdalla.bala@gmail.com>' . "\r\n";
$mail =mail($to, $subject, $message, implode("\r\n", $headers));
		if($mail){
		$error_msg .= 'La vérification Courriel vous a été envoyée.';
		
		}else
		{
			$error_msg .= "S'il vous plaît contacter avec notre équipe de support.";
		}
		return $error_msg;
		
}

cmd: