#* Checking for post vars. Go back to form if none found.
#****************************************************************************
if (count($_POST) == 0) {
header("Location: ../admin/staff_list.php");
exit;
}
#****************************************************************************
#* Validate data
#****************************************************************************
$staff = new Staff();
$staff->setUserid($_POST["userid"]);
$staff->setPwd($_POST["pwd"]);
$_POST["pwd"] = $staff->getPwd();
$staff->setPwd2($_POST["pwd2"]);
$_POST["pwd2"] = $staff->getPwd2();
if (!$staff->validatePwd()) {
$pageErrors["pwd"] = $staff->getPwdError();
$_SESSION["postVars"] = $_POST;
$_SESSION["pageErrors"] = $pageErrors;
header("Location: ../admin/staff_pwd_reset_form.php");
exit;
}
#**************************************************************************
#* Update staff member
#**************************************************************************
$staffQ = new StaffQuery();
$staffQ->connect();
if ($staffQ->errorOccurred()) {
$staffQ->close();
displayErrorPage($staffQ);
}
$_POST["last_name"] = $staff->getLastName();
$staff->setFirstName($_POST["first_name"]);
$_POST["first_name"] = $staff->getFirstName();
$staff->setUsername($_POST["username"]);
$_POST["username"] = $staff->getUsername();
$staff->setPwd($_POST["pwd"]);
$_POST["pwd"] = $staff->getPwd();
$staff->setPwd2($_POST["pwd2"]);
$_POST["pwd2"] = $staff->getPwd2();
$staff->setCircAuth(isset($_POST["circ_flg"]));
$staff->setCircMbrAuth(isset($_POST["circ_mbr_flg"]));
$staff->setCatalogAuth(isset($_POST["catalog_flg"]));
$staff->setAdminAuth(isset($_POST["admin_flg"]));
$staff->setReportsAuth(isset($_POST["reports_flg"]));
$validData = $staff->validateData();
$validPwd = $staff->validatePwd();
if (!($validData && $validPwd)) {
$pageErrors["last_name"] = $staff->getLastNameError();
$pageErrors["username"] = $staff->getUsernameError();
$pageErrors["pwd"] = $staff->getPwdError();
$_SESSION["postVars"] = $_POST;
$_SESSION["pageErrors"] = $pageErrors;
header("Location: ../admin/staff_new_form.php");
exit;
}
#**************************************************************************
#* Insert new staff member
#**************************************************************************
$staffQ = new StaffQuery();
$staffQ->connect();
if ($staffQ->errorOccurred()) {
