<?php
include ("../scripts/connect_to_mysql.php");

$error_msg = '<font color="#FF0000">*Test</font>';

$member = $_GET['pid'] ;
$setupquery = "SELECT * FROM members WHERE member_id='$member'";
$userlist = mysqli_query($myconnection, $setupquery) or die (mysqli_error());
$row = mysqli_fetch_array($userlist);
$startalias = $row["alias"];
$startusername = $row["username"];
$startpermissions = $row["permission_level"];

if ($_SERVER['REQUEST_METHOD'] == 'POST')
{

    //grab data from fields
    $alias = $_POST['alias'];
    $username = $_POST['username'];
    $password = $_POST['password'];
    $permissions = $_POST['permissions'];
    $date = date('F j, Y, g:i a');
    $success = false;
    if ($alias && $username && $password && $permissions)
    {
        if(strlen($alias)>25 || strlen($username)>25)
        {
            $error_msg = '<font color="#FF0000">*Alias and username cannot contain more than 25 characters.</font>';

        }
        else
        {
            if(strlen($password)>25 || strlen($password)<6)
            {
                $error_msg = '<font color="#FF0000">*A password must contain between 6 and 25 characters.</font>';
            }
            else
            {
                if($permissions == "High" || $permissions == "Medium" || $permissions == "Low")
                {
                    $encrypted_password = md5($password);
                    $query = "UPDATE members SET alias='$alias', username='$username', password='$encrypted_password', permission_level='$permissions', date_updated='$date' WHERE member_id='$member'";
                    $register = mysqli_query($myconnection, $query);
                    if ($register) { header("LOCATION: indexnew.php"); exit; }

                }
                else
                {
                    $error_msg = '<font color="#FF0000">*Permission level must be of one of the preset values.</font>';
                }

            }
        }

    }
    else if($alias && $username && $permissions && empty($password))
    {
        if(strlen($alias)>25 || strlen($username)>25)
        {
            $error_msg = '<font color="#FF0000">*Alias and username cannot contain more than 25 characters.</font>';

        }
        else
        {
            if($permissions == "High" || $permissions == "Medium" || $permissions == "Low")
                {
                    $encrypted_password = md5($password);
                    $query = "UPDATE members SET alias=". $alias . " WHERE member_id=".$member."";
                    $register = mysqli_query($myconnection, $query);
                    if ($register) { header("LOCATION: indexnew.php"); exit; }

                }
                else
                {
                    $error_msg = '<font color="#FF0000">*Permission level must be of one of the preset values.</font>';
                }


        }
    }
    else
    {
        $error_msg = '<font color="#FF0000">*Please fill in all required fields.</font>';
    }
}
include ("adminheader.php");
?>