<?php
	require_once('inc/ses_check.php');
	require_once('inc/mysql_connection.php');
	require_once('inc/my_functions.php');

	if (isset($_POST['pr_action'])){
		$action = $_POST['pr_action'];
		switch($action){
			case 1:
				$username = $_POST['usr_name'];
				$fullname = $_POST['usr_fullname'];
				$retries=0;
				$usertype = $_POST['usr_usertype'];
				$password = $_POST['usr_pwd'];

				if(!isUsernameExists($username)){
					$sql="INSERT INTO tbl_users(username,fullname,pwd,retries,usertype) VALUES ('$username','$fullname','$password','$retries','$usertype');";
					$result = mysql_query($sql);

					if($result){
						echo infoMsg(1);
					}else{
						die("error");
					}
				}else{
					echo errMsg(1);
				}
			case 2:
				//retrieve values from the previous page
				$username = $_POST['usr_name'];
				$fullname = $_POST['usr_fullname'];
				$retries=0;
				$usertype = $_POST['usr_usertype'];
				$password = $_POST['usr_pwd'];
				$temp_id = $_POST['temp_id'];

				if(!checkIfUpdateDuplicatesUser($username,$temp_id)){
				$sql = "UPDATE tbl_users SET username='$username', fullname='$fullname',pwd='$password',retries=$retries,usertype=$usertype WHERE id = $temp_id;";

				$result = mysql_query($sql);
					if($result){
						$_SESSION['errMsg']=infoMsg(2);
						header('location:user_mgmt.php');
					}else{
						die("Error in updating record!".mysql_error());
					}

				}else{
					$_SESSION['errMsg']=errMsg(1);
					header('location:usr_mgmt.php');
				}
			case 3:
				$temp_id = $_POST['selected_Id'];
				$sql = "DELETE FROM tbl_users WHERE id=$temp_id;";
				$result = mysql_query($sql);

				if($result){
					$_SESSION['errMsg']=infoMsg(3);//return message for successful delete
					header('location:user_mgmt.php');
				}else{
					die("Error in deleting record!".mysql_error());
				}
		}
		}else{
			die('Invalid Action');
		}
?>