/home/techb158/workloadmatch.com/Master/

/home/techb158/workloadmatch.com/Master

Name	Size	Mode	Actions
addgroup.php	6908	0644	edit dl rm
addmanager.php	14495	0644	edit dl rm
adduser.php	11148	0644	edit dl rm
assign_teacher_manual.php	3879	0644	edit dl rm
chat.php	16850	0644	edit dl rm
dashboard.php	13677	0644	edit dl rm
fetch_teacher_prefrence_courses.php	1887	0644	edit dl rm
inc.php	551	0644	edit dl rm
Lockup_to_Assign.php	3662	0644	edit dl rm
main-header-inc.php	1276	0644	edit dl rm
main-header.php	15374	0644	edit dl rm
preference_accounting.php	9416	0644	edit dl rm
preference_secretarial.php	9416	0644	edit dl rm
profile.php	17094	0644	edit dl rm
profile_bak.php.disabled	3195	0644	edit dl rm
save_teacher_preference.php	2107	0644	edit dl rm
set_manager.php	1305	0644	edit dl rm
teacher_absence.php	305	0644	edit dl rm
teacher_preference.php	3798	0644	edit dl rm
teacher_preference_by_course.php	3833	0644	edit dl rm

Edit: /home/techb158/workloadmatch.com/Master/adduser.php (11148B)

<?php
include_once '../includes/db_connect.php';
include_once '../includes/functions.php';
include_once '../includes/psl-config.php';
sec_session_start();

$page = 'Master | Add Teacher';
addinfo($page, $mysqli);
require_role($mysqli, 'master_profile');

$Master_ID = $_SESSION['user_id'];
$q = $mysqli->prepare("SELECT Admin_ID FROM master_profile WHERE Master_ID = ?");
$q->bind_param("s", $Master_ID);
$q->execute();
$q->bind_result($Admin_ID);
$q->fetch();
$q->close();

// Process form inline
if (isset($_POST['submit']) && isset($_POST['p'], $_POST['username'], $_POST['First_Name'], $_POST['Last_Name'], $_POST['email'])) {
    $prof_lang = $_POST['prof_lang'] ?? 'en';
    $User_Name = $_POST['username'];
    $Seniority_level = $_POST['Seniority_level'] ?? 1;
    $First_Name = $_POST['First_Name'];
    $Last_Name = $_POST['Last_Name'];
    $Email = filter_input(INPUT_POST, 'email', FILTER_SANITIZE_EMAIL);
    $Email = filter_var($Email, FILTER_VALIDATE_EMAIL);
    if (!$Email) { set_flash_msg('Invalid email.', 'warning'); header('Location: adduser.php'); exit(); }
    $Phone = $_POST['Phone'] ?? '';
    $Load_Hours = $_POST['Load_Hours'] ?? 0;
    $Manager_ID = $_POST['Manager_ID'] ?? '';
    $Note = $_POST['Note'] ?? '';
    $User_Access = $_POST['User_Access'] ?? 1;

$Password = $_POST['p'];
    if (strlen($Password) != 128) { set_flash_msg('Invalid password hash.', 'warning'); header('Location: adduser.php'); exit(); }
    $Password = password_hash($Password, PASSWORD_BCRYPT);

// Unique ID
    do { $nid = mt_rand(10000, 999999); $chk = $mysqli->prepare("SELECT Teacher_ID FROM teacher_profile WHERE Teacher_ID = ?"); $chk->bind_param("i", $nid); $chk->execute(); $chk->store_result(); $cnt = $chk->num_rows; $chk->close(); } while ($cnt > 0);

// Check unique username across all tables
    foreach (['admin_profile' => 'Admin_ID', 'master_profile' => 'Master_ID', 'manager_profile' => 'Manager_ID', 'teacher_profile' => 'Teacher_ID'] as $tbl => $col) {
        $chk = $mysqli->prepare("SELECT $col FROM $tbl WHERE User_Name = ? LIMIT 1");
        $chk->bind_param("s", $User_Name); $chk->execute(); $chk->store_result();
        if ($chk->num_rows > 0) { set_flash_msg('Username already exists.', 'warning'); header('Location: adduser.php'); exit(); }
        $chk->close();
    }

$dt = date('Y-m-d H:i:s');
    $sql = "INSERT INTO teacher_profile (Teacher_ID, Admin_ID, Master_ID, Manager_ID, User_Type_ID, Seniority_ID, First_Name, Last_Name, User_Name, Email, Phone, Password, User_Access, Reg_Date, Login_Date, Logout_Date, prof_lang, Note, Load_Hours) VALUES (?, ?, ?, ?, 3, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)";
    $ins = $mysqli->prepare($sql);
    if ($ins) {
        $ins->bind_param("sssssssssssssssssss", $nid, $Admin_ID, $Master_ID, $Manager_ID, $Seniority_level, $First_Name, $Last_Name, $User_Name, $Email, $Phone, $Password, $User_Access, $dt, $dt, $dt, $prof_lang, $Note, $Load_Hours);
        if ($ins->execute()) {
            $Teacher_ID = $nid;
            if (isset($_POST['Restricted_Groups']) && is_array($_POST['Restricted_Groups'])) {
                foreach ($_POST['Restricted_Groups'] as $gid) {
                    $rg = $mysqli->prepare("INSERT INTO teacher_restricted_groups (Teacher_ID, Group_ID) VALUES (?, ?)");
                    $rg->bind_param("ss", $Teacher_ID, $gid);
                    $rg->execute(); $rg->close();
                }
            }
            set_flash_msg("Teacher '$First_Name $Last_Name' created!", 'success');
        } else {
            set_flash_msg('Error: '.$ins->error, 'warning');
        }
        $ins->close();
    } else {
        set_flash_msg('Database error.', 'warning');
    }
    header('Location: adduser.php'); exit();
}

include 'main-header-inc.php';
?>
<!DOCTYPE html>
<html>
<head>
  <meta charset="utf-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <title>Add Teacher</title>
  <meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport">
  <link rel="icon" href="dist/img/avatar.png" sizes="32x32" />
  <link rel="stylesheet" href="bower_components/bootstrap/dist/css/bootstrap.min.css">
  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css">
  <link rel="stylesheet" href="plugins/iCheck/all.css">
  <link rel="stylesheet" href="plugins/select2/select2.min.css">
  <link rel="stylesheet" href="dist/css/AdminLTE.min.css">
  <link rel="stylesheet" href="dist/css/skins/skin-black-light.min.css">
  <style>.form-control{font-size:13px}</style>
</head>
<body class="hold-transition skin-black-light sidebar-mini">
<?php if (login_check($mysqli) == true) : ?>
<div class="wrapper">
<?php include 'main-header.php'; ?>
<div class="content-wrapper">
  <section class="content-header">
    <h1><i class="fa fa-user-plus"></i> Add Teacher</h1>
    <ol class="breadcrumb"><li><a href="dashboard.php"><i class="fa fa-dashboard"></i> Dashboard</a></li><li class="active">Add Teacher</li></ol>
  </section>
  <section class="content">
    <div class="row"><div class="col-md-12">
      <?php display_flash_msg(); ?>
      <div class="nav-tabs-custom">
        <ul class="nav nav-tabs"><li class="active"><a href="#add" data-toggle="tab">Add Teacher</a></li><li><a href="#list" data-toggle="tab">Teacher List</a></li></ul>
        <div class="tab-content">
          <div class="active tab-pane" id="add">
            <div class="box box-primary">
              <div class="box-header"><h3 class="box-title">Teacher Information</h3></div>
              <form class="form-horizontal" method="post">
                <div class="box-body">
                  <div class="form-group"><label class="col-sm-3 control-label">First Name *</label><div class="col-sm-8"><input type="text" class="form-control" name="First_Name" required></div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Last Name *</label><div class="col-sm-8"><input type="text" class="form-control" name="Last_Name" required></div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Username *</label><div class="col-sm-8"><input type="text" class="form-control" name="username" required></div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Email *</label><div class="col-sm-8"><input type="email" class="form-control" name="email" required></div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Phone</label><div class="col-sm-8"><input type="text" class="form-control" name="Phone"></div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Manager</label><div class="col-sm-8">
                    <select class="form-control select2" name="Manager_ID" style="width:100%">
                      <option value="">None</option>
<?php
$ml = $mysqli->prepare("SELECT Manager_ID, First_Name, Last_Name FROM manager_profile WHERE Admin_ID = ? ORDER BY First_Name");
$ml->bind_param("s", $Admin_ID);
$ml->execute();
$mr = $ml->get_result();
while ($m = $mr->fetch_assoc()) echo "<option value='{$m['Manager_ID']}'>{$m['First_Name']} {$m['Last_Name']}</option>";
?>
                    </select>
                  </div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Seniority</label><div class="col-sm-8">
                    <select class="form-control select2" name="Seniority_level" style="width:100%">
                      <option value="1">Level 1</option><option value="2">Level 2</option><option value="3">Level 3</option>
                    </select>
                  </div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Language</label><div class="col-sm-8">
                    <select class="form-control select2" name="prof_lang" style="width:100%"><option value="en">English</option><option value="fr">French</option></select>
                  </div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Access</label><div class="col-sm-8">
                    <select class="form-control select2" name="User_Access" style="width:100%"><option value="1">Active</option><option value="0">Inactive</option></select>
                  </div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Load Hours</label><div class="col-sm-8"><input type="number" class="form-control" name="Load_Hours" value="0"></div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Notes</label><div class="col-sm-8"><textarea class="form-control" name="Note" rows="3"></textarea></div></div>
                  <div class="form-group"><label class="col-sm-3 control-label">Password *</label><div class="col-sm-8"><input type="password" class="form-control" id="p" name="p" required></div></div>
                </div>
                <div class="box-footer text-center">
                  <button type="submit" name="submit" class="btn btn-primary"><i class="fa fa-save"></i> Add Teacher</button>
                </div>
              </form>
            </div>
          </div>
          <div class="tab-pane" id="list">
            <div class="box">
              <div class="box-body table-responsive">
                <table class="table table-bordered table-striped">
                  <thead><tr><th>Name</th><th>Email</th><th>Manager</th><th>Status</th><th>Load</th></tr></thead>
                  <tbody>
<?php
$tl = $mysqli->prepare("SELECT t.First_Name, t.Last_Name, t.Email, t.User_Access, t.Load_Hours, m.First_Name AS MF, m.Last_Name AS ML FROM teacher_profile t LEFT JOIN manager_profile m ON t.Manager_ID = m.Manager_ID WHERE t.Admin_ID = ? ORDER BY t.First_Name");
$tl->bind_param("s", $Admin_ID);
$tl->execute();
$tr = $tl->get_result();
while ($t = $tr->fetch_assoc()) {
    $st = $t['User_Access'] == 1 ? '<span class="label label-success">Active</span>' : '<span class="label label-danger">Inactive</span>';
    echo "<tr><td>".htmlspecialchars($t['First_Name'].' '.$t['Last_Name'])."</td><td>".htmlspecialchars($t['Email'])."</td><td>".htmlspecialchars(($t['MF']??'').' '.($t['ML']??''))."</td><td>$st</td><td>".($t['Load_Hours']??'0')."</td></tr>";
}
?>
                  </tbody>
                </table>
              </div>
            </div>
          </div>
        </div>
      </div>
    </div></div>
  </section>
</div>
<?php include '../footer.php'; ?>
</div>
<script src="plugins/jQuery/jQuery-2.2.0.min.js"></script>
<script src="bower_components/bootstrap/dist/js/bootstrap.min.js"></script>
<script src="plugins/select2/select2.full.min.js"></script>
<script src="dist/js/app.min.js"></script>
<script>$(function(){$(".select2").select2({width:'resolve'});});</script>
<?php else : ?>
  <?php include '../authorized.php'; ?>
<?php endif; ?>
</body>
</html>

prepare("SELECT Admin_ID FROM master_profile WHERE Master_ID = ?"); $q->bind_param("s", $Master_ID); $q->execute(); $q->bind_result($Admin_ID); $q->fetch(); $q->close(); // Process form inline if (isset($_POST['submit']) && isset($_POST['p'], $_POST['username'], $_POST['First_Name'], $_POST['Last_Name'], $_POST['email'])) { $prof_lang = $_POST['prof_lang'] ?? 'en'; $User_Name = $_POST['username']; $Seniority_level = $_POST['Seniority_level'] ?? 1; $First_Name = $_POST['First_Name']; $Last_Name = $_POST['Last_Name']; $Email = filter_input(INPUT_POST, 'email', FILTER_SANITIZE_EMAIL); $Email = filter_var($Email, FILTER_VALIDATE_EMAIL); if (!$Email) { set_flash_msg('Invalid email.', 'warning'); header('Location: adduser.php'); exit(); } $Phone = $_POST['Phone'] ?? ''; $Load_Hours = $_POST['Load_Hours'] ?? 0; $Manager_ID = $_POST['Manager_ID'] ?? ''; $Note = $_POST['Note'] ?? ''; $User_Access = $_POST['User_Access'] ?? 1; $Password = $_POST['p']; if (strlen($Password) != 128) { set_flash_msg('Invalid password hash.', 'warning'); header('Location: adduser.php'); exit(); } $Password = password_hash($Password, PASSWORD_BCRYPT); // Unique ID do { $nid = mt_rand(10000, 999999); $chk = $mysqli->prepare("SELECT Teacher_ID FROM teacher_profile WHERE Teacher_ID = ?"); $chk->bind_param("i", $nid); $chk->execute(); $chk->store_result(); $cnt = $chk->num_rows; $chk->close(); } while ($cnt > 0); // Check unique username across all tables foreach (['admin_profile' => 'Admin_ID', 'master_profile' => 'Master_ID', 'manager_profile' => 'Manager_ID', 'teacher_profile' => 'Teacher_ID'] as $tbl => $col) { $chk = $mysqli->prepare("SELECT $col FROM $tbl WHERE User_Name = ? LIMIT 1"); $chk->bind_param("s", $User_Name); $chk->execute(); $chk->store_result(); if ($chk->num_rows > 0) { set_flash_msg('Username already exists.', 'warning'); header('Location: adduser.php'); exit(); } $chk->close(); } $dt = date('Y-m-d H:i:s'); $sql = "INSERT INTO teacher_profile (Teacher_ID, Admin_ID, Master_ID, Manager_ID, User_Type_ID, Seniority_ID, First_Name, Last_Name, User_Name, Email, Phone, Password, User_Access, Reg_Date, Login_Date, Logout_Date, prof_lang, Note, Load_Hours) VALUES (?, ?, ?, ?, 3, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"; $ins = $mysqli->prepare($sql); if ($ins) { $ins->bind_param("sssssssssssssssssss", $nid, $Admin_ID, $Master_ID, $Manager_ID, $Seniority_level, $First_Name, $Last_Name, $User_Name, $Email, $Phone, $Password, $User_Access, $dt, $dt, $dt, $prof_lang, $Note, $Load_Hours); if ($ins->execute()) { $Teacher_ID = $nid; if (isset($_POST['Restricted_Groups']) && is_array($_POST['Restricted_Groups'])) { foreach ($_POST['Restricted_Groups'] as $gid) { $rg = $mysqli->prepare("INSERT INTO teacher_restricted_groups (Teacher_ID, Group_ID) VALUES (?, ?)"); $rg->bind_param("ss", $Teacher_ID, $gid); $rg->execute(); $rg->close(); } } set_flash_msg("Teacher '$First_Name $Last_Name' created!", 'success'); } else { set_flash_msg('Error: '.$ins->error, 'warning'); } $ins->close(); } else { set_flash_msg('Database error.', 'warning'); } header('Location: adduser.php'); exit(); } include 'main-header-inc.php'; ?> Add Teacher

Add Teacher

Add Teacher
Teacher List

Teacher Information

First Name *

Last Name *

Username *

Email *

Phone

Manager

Seniority

Language

Access

Load Hours

Notes

Password *

prepare("SELECT t.First_Name, t.Last_Name, t.Email, t.User_Access, t.Load_Hours, m.First_Name AS MF, m.Last_Name AS ML FROM teacher_profile t LEFT JOIN manager_profile m ON t.Manager_ID = m.Manager_ID WHERE t.Admin_ID = ? ORDER BY t.First_Name"); $tl->bind_param("s", $Admin_ID); $tl->execute(); $tr = $tl->get_result(); while ($t = $tr->fetch_assoc()) { $st = $t['User_Access'] == 1 ? 'Active' : 'Inactive'; echo ""; } ?>

Name	Email	Manager	Status	Load
".htmlspecialchars($t['First_Name'].' '.$t['Last_Name'])."	".htmlspecialchars($t['Email'])."	".htmlspecialchars(($t['MF']??'').' '.($t['ML']??''))."	$st	".($t['Load_Hours']??'0')."