$AdminCname = Company::getCompanyByID($_SESSION['admin']['CID'])->getCname(); if (isset($_GET['Email']) || isset($_GET['id'])) { /** @var User $User */ if (isset($_GET['Email'])) { $Email = urldecode($_GET['Email']); $User = User::getUserByEmail($Email); } else { $User = User::getUserByEmpInfo($_GET['id'], $_SESSION['admin']['CID']); } if (!$User) { echo "<h3>User does not exist</h3>"; } else { /** @var Company $Company */ $Company = Company::getCompanyByID($User->getCID()); if ($User->getCID() == 1) { $Employee = BossFlexEmployee::getEmployeeByBFID($User->getEID()); } else { $Employee = Employee::getEmployeeByUID($User->getUID()); } $_SESSION['EditUser'] = serialize($User); $_SESSION['EditEmployee'] = serialize($Employee); $newUser = false; } } // If no user is specified, reuse as Add User Form if ($newUser) { $User = new User(); $Company = new Company(); $Employee = new Employee(); } $_SESSION['ver'] = substr(md5(rand()), 0, 15);
<?php session_start(); include "../../bossflex/Helpers/Reject.php"; Reject::permission($_SESSION['bfUser']); include "../../bossflex/DB/Models/BossFlexEmployee.php"; include "../../bossflex/DB/Models/Employee.php"; include "../../bossflex/DB/Models/User.php"; include "../../bossflex/DB/Models/Company.php"; include "../../bossflex/DB/Models/Ticket.php"; include "../../bossflex/Helpers/BFPage.php"; include "../../bossflex/Helpers/Material.php"; $bfEmp = BossFlexEmployee::getEmployeeByBFID($_SESSION['bfUser']['EID']); $User = User::getUserByUID($_SESSION['bfUser']['UID']); $tickets = Ticket::assignedTicketList($bfEmp); $ticketData = Ticket::numTicketsPerDayLastMonth(); $error = false; $success = false; if (isset($_GET['s'])) { $success = urldecode($_GET['s']); } //Handle Profile Changes $first = $_POST['first']; $last = $_POST['last']; $email = $_POST['email']; if (isset($first) && isset($last) && isset($email)) { $User->setEmail($email); $User->saveToDB(); $bfEmp->setFname($first); $bfEmp->setLname($last); $bfEmp->saveToDB();
session_start(); $u = $_SESSION['u']; $v = $_SESSION['v']; $Fname = $_POST['Fname']; $Lname = $_POST['Lname']; $PhoneNum = $_POST['PhoneNum']; $EID = $_POST['EID']; $CID = $_POST['CID']; if (!isset($Fname) || !isset($Lname) || !isset($PhoneNum) || !isset($EID)) { header('Location:https://' . $_SESSION['redir'] . "?result=1&u=" . $u . "&v=" . $v); } if ($CID == 1) { include "DB/Models/BossFlexEmployee.php"; /** @var BossFlexEmployee $emp */ $emp = BossFlexEmployee::getEmployeeByBFID($EID); if ($emp->getBFID() == $EID && $emp->getFname() == $Fname && $emp->getLname() == $Lname && $emp->getPhoneNum() == $PhoneNum) { $_SESSION['NewUser'] = serialize($emp); $_SESSION['BossFlex'] = true; header('Location:Register.php'); } else { header('Location:https://' . $_SESSION['redir'] . "?result=2&u=" . $u . "&v=" . $v); } } else { include "DB/Models/Employee.php"; /** @var Employee $emp */ $emp = Employee::getEmployee($EID, $CID); if ($emp->getEID() == $EID && $emp->getFname() == $Fname && $emp->getLname() == $Lname && $emp->getPhoneNum() == $PhoneNum) { $_SESSION['NewUser'] = serialize($emp); header('Location:Register.php'); } else {