ValidateLogin('none', 'login.html'); $username = GetUserName($link, $userid); $query = "SELECT id, DATE_FORMAT(created, '%d-%b-%Y, %r') AS created_date, DATE_FORMAT(modified, '%d-%b-%Y, %r') AS modified_date, firstname, lastname, email, title, company, phone, fax, address, address2, city, state, zip, country, password, access FROM fb_users WHERE id=$userid;"; $result = mysql_query($query, $link); $rows = mysql_num_rows($result); if ($userid == 0 || $rows == 0) { GoToPage("login.html?message=Please%20login%20to%20edit%20your%20profile"); exit; } if ( ! empty($thefunction)) { if ($thefunction == "update") { $errors = UpdateUser($link, $userid); if (!empty($errors["message"])) { $message = $errors["message"]; } } } // Re-get data in case it was updated: $query = "SELECT fb_users.id, DATE_FORMAT(created, '%d-%b-%Y, %r') AS created_date, DATE_FORMAT(modified, '%d-%b-%Y, %r') AS modified_date, firstname, lastname, email, title, company, phone, fax, address, address2, city, state, zip, country, password, access, user_id, opt_out, newsletter_opt_in FROM fb_users LEFT JOIN fb_user_prefs ON fb_users.id=user_id WHERE fb_users.id=$userid;"; $result = mysql_query($query, $link); $rows = mysql_num_rows($result); $created_date = mysql_result($result, 0, "created_date"); $modified_date = mysql_result($result, 0, "modified_date"); $firstname = mysql_result($result, 0, "firstname"); $lastname = mysql_result($result, 0, "lastname"); $email = mysql_result($result, 0, "email"); $posted_email = strip_tags($HTTP_POST_VARS["email"]); if (!empty($posted_email)) { $email = $posted_email; } $title = mysql_result($result, 0, "title"); $company = mysql_result($result, 0, "company"); $phone = mysql_result($result, 0, "phone"); $fax = mysql_result($result, 0, "fax"); $address = mysql_result($result, 0, "address"); $address2 = mysql_result($result, 0, "address2"); $city = mysql_result($result, 0, "city"); $state = mysql_result($result, 0, "state"); $zip = mysql_result($result, 0, "zip"); $country = mysql_result($result, 0, "country"); $passwd = mysql_result($result, 0, "password"); $access = mysql_result($result, 0, "access"); $opt_out = mysql_result($result, 0, "opt_out"); $opt_in_checked = $opt_out == 1 ? "" : "checked"; $newsletter_opt_in = mysql_result($result, 0, "newsletter_opt_in"); $newsletter_opt_in_checked = $newsletter_opt_in == 1 ? "checked" : ""; ?>