if (!preg_match('/^[^@\\s]+@([-a-z0-9]+\\.)+[a-z]{2,}$/i', $_POST['tbEmail'])) {
$errors[] = "You must enter a valid email address";
}
if (strlen(strval(intval($_POST['tbPhone1A'] . $_POST['tbPhone1B'] . $_POST['tbPhone1C']))) < 10) {
$errors[] = "Please enter a valid primary phone number";
}
if (strlen($_POST['tbPhone2A'] . $_POST['tbPhone2B'] . $_POST['tbPhone2C'])) {
if (strlen(strval(intval($_POST['tbPhone2A'] . $_POST['tbPhone2B'] . $_POST['tbPhone2C']))) < 10) {
$errors[] = "Please enter a valid secondary phone number";
}
}
//if ($_POST['tbPay'] != strval(floatval($_POST['tbPay']))) {
// $errors[] = "You must enter a valid hourly rate"; }
if (!$errors) {
// our input is clean, go ahead and submit
$sInsertError = updateCurrentUser($_POST, $_SESSION['USERID'], $_SESSION['USERTYPE'], $_SESSION['USERNAME']);
}
} else {
// get current details for user
$aUserVals = getUserVals($_SESSION['USERID']);
$aPhone1 = formatPhoneNum($aUserVals->user_phone1);
$aPhone2 = formatPhoneNum($aUserVals->user_phone2);
$defaults['tbPass'] = $aUserVals->user_pass;
$defaults['tbFirst'] = $aUserVals->user_first;
$defaults['tbLast'] = $aUserVals->user_last;
$defaults['tbEmail'] = $aUserVals->user_email;
$defaults['tbPhone1A'] = $aPhone1[0];
$defaults['tbPhone1B'] = $aPhone1[1];
$defaults['tbPhone1C'] = $aPhone1[2];
$defaults['tbPhone2A'] = $aPhone2[0];
$defaults['tbPhone2B'] = $aPhone2[1];
} catch (Exception $ex) {
if ($ex->getMessage() !== null) {
$desc = $ex->getMessage();
} else {
$desc = "Something went wrong while saving the users details.";
}
$message .= seriousError($desc);
returnToPageError($message, $userid);
}
} else {
//Not enough info to proceed
$message .= "You have not entered all of the required fields.";
returnToPageError($message, $userid);
}
$message = "User '{$fname} {$sname}' successfully updated.";
updateCurrentUser();
returnToPageSuccess($message, $userid);
} else {
$desc = "Something went wrong while saving the users details.";
$message .= seriousError($desc);
returnToPageError($message, $userid);
}
function returnToPageError($message, $userid)
{
$type = 'ERROR';
if (!isset($message)) {
$message = 'Something has gone wrong';
}
infoLog($message);
$_SESSION['message'] = new Message($type, $message);
header("Location: ../editUser.php?userid={$userid}");
