public function Find() { if (!parent::Find()) { return false; } if ($this->UserClass != "Patient") { return false; } $conn = parent::GetConnection(); $query = $this->SetupQuery(Query::FIND_PATIENT); $result = odbc_exec($conn, $query); if (!$result) { return $this->HandleError($conn); } $row = array(); if (!odbc_fetch_into($result, $row)) { return $this->HandleError($conn); } //Copy the values from the single record returned. $this->Height = $row[0]; $this->Weight = $row[1]; $this->DOB = $row[2]; $this->Gender = $row[3]; $this->SSN = $row[4]; $this->MedicalConditions = $row[5]; $this->ClinicianId = $row[6]; return true; }
<?php require_once "../daos/db_include.php"; $username = $_POST["username"]; $password = $_POST["password"]; $u = new UserDAO(); $u->Username = $username; $u->Find(); if ($u->Password == $password && $u->UserClass == "Admin") { session_start(); $_SESSION["username"] = $username; $_SESSION["loggedin"] = TRUE; $_SESSION["inactive_time"] = 600; //Timeout Time in Seconds header("Location: homepage.php"); } else { ob_end_clean(); header("Location: index.php?error=101"); }
require_once "../daos/db_include.php"; //UserDAO DB fields $Username = $_POST["username"]; $Password = $_POST["password"]; $FirstName = $_POST["firstname"]; $MiddleName = $_POST["middlename"]; $LastName = $_POST["lastname"]; $Address = $_POST["address"]; $PhoneNumber = $_POST["phone"]; $UserClass = "Clinician"; if ($Username == "" || $Password == "" || $FirstName == "" || $MiddleName == "" || $LastName == "" || $Address == "" || $PhoneNumber == "") { header("Location: add_clinician.php?error=102"); } $u = new UserDAO(); $u->Username = $Username; if ($u->Find()) { header("Location: add_clinician.php?error=103"); } $u->Password = $Password; $u->FirstName = $FirstName; $u->MiddleName = $MiddleName; $u->LastName = $LastName; $u->Address = $Address; $u->PhoneNumber = $PhoneNumber; $u->UserClass = $UserClass; $u->Insert(); header("Location: clinicians.php"); /* $worked = $p->Insert(); if ($worked) {