Thanks cwarcarblue11, here is the whole form:
<form name="edit<?php echo $rrows['id']; ?>" action="" method="get">
<input type="hidden" name="id<?php echo $rrows['id']; ?>" id="id<?php echo $rrows['id']; ?>" value="<?php echo $rrows['id']; ?>"><br>
First Name: <input name="first_name<?php echo $rrows['id']; ?>" id="first_name<?php echo $rrows['id']; ?>" type="text" size="10" value="<?php echo $rrows['first_name']; ?>" >
Last Name: <input name="last_name<?php echo $rrows['id']; ?>" id="last_name<?php echo $rrows['id']; ?>" type="text" size="10" value="<?php echo $rrows['last_name']; ?>" >
User Name: <input name="user_name<?php echo $rrows['id']; ?>" id="user_name<?php echo $rrows['id']; ?>" type="text" size="10" value="<?php echo $rrows['user_name']; ?>" >
<br><br>
User Email:<input id="user_email<?php echo $rrows['id']; ?>" name="user_email<?php echo $rrows['id']; ?>" type="text" size="30" value="<?php echo $rrows['user_email']; ?>" >
Level: <input id="user_level<?php echo $rrows['id']; ?>" name="user_level<?php echo $rrows['id']; ?>" type="text" size="5" value="<?php echo $rrows['user_level']; ?>" > 1->Parent,2->Teacher,5->Admin
<br><br>
New Password: <input id="pass<?php echo $rrows['id']; ?>" name="pass<?php echo $rrows['id']; ?>" type="text" size="20" value="" > (leave blank)
Teacher: <br> <textarea name="teacher<?php echo $rrows['id']; ?>" id="teacher<?php echo $rrows['id']; ?>"><?php echo $rrows['teacher']; ?></textarea>
Homework: <br> <textarea name="homework<?php echo $rrows['id']; ?>" cols="80" rows="5" id="homework<?php echo $rrows['id']; ?>"> </textarea><br><br>
Projects: <br> <textarea name="projects<?php echo $rrows['id']; ?>" cols="80" rows="5" id="projects"> <?php echo $rrows['projects']; ?> </textarea><br><br>
Schedules:<br> <textarea name="schedules<?php echo $rrows['id']; ?>" cols="80" rows="5" id="schedules"> <?php echo $rrows['schedules']; ?> </textarea><br><br>
News & Information:<br> <textarea name="news<?php echo $rrows['id']; ?>" cols="80" rows="5" id="news"> <?php echo $rrows['news']; ?> </textarea><br>
<br><br>
<input name="doSave" type="button" id="doSave" value="Save"
onclick='$.get("do.php",{ cmd: "edit", pass:$("input#pass<?php echo $rrows['id']; ?>").val(),first_name:$("input#first_name<?php echo $rrows['id']; ?>").val(),last_name:$("input#last_name<?php echo $rrows['id']; ?>").val(),user_level:$("input#user_level<?php echo $rrows['id']; ?>").val(),user_email:$("input#user_email<?php echo $rrows['id']; ?>").val(),user_name: $("input#user_name<?php echo $rrows['id']; ?>").val(),teacher:$("input#teacher<?php echo $rrows['id']; ?>").val(),id: $("input#id<?php echo $rrows['id']; ?>").val() } ,function(data){ $("#msg<?php echo $rrows['id']; ?>").html(data); });'>
<a onclick='$("#edit<?php echo $rrows['id'];?>").hide();' href="javascript:void(0);">close</a>
</form>
And here is the do.php which is referenced:
<?php
include 'dbc.php';
session_start();
if(!checkAdmin()) {
header("Location: login.php");
exit();
}
$ret = $_SERVER['HTTP_REFERER'];
foreach($_GET as $key => $value) {
$get[$key] = filter($value);
}
if($get['cmd'] == 'approve')
{
mysql_query("update users set approved='1' where id='$get[id]'") or die(mysql_error());
$rs_email = mysql_query("select user_email from users where id='$get[id]'") or die(mysql_error());
list($to_email) = mysql_fetch_row($rs_email);
$host = $_SERVER['HTTP_HOST'];
$host_upper = strtoupper($host);
$login_path = @ereg_replace('admin','',dirname($_SERVER['PHP_SELF']));
$path = rtrim($login_path, '/\\');
$message =
"Thank you for registering with the Holy Family Catholic School website. Your account has been activated...
*****LOGIN LINK*****\n
http://$host$path/login.php
Thank You
Administrator
$host_upper
______________________________________________________
THIS IS AN AUTOMATED RESPONSE.
***DO NOT RESPOND TO THIS EMAIL****
";
@mail($to_email, "User Activation", $message,
"From: \"Member Registration\" <auto-reply@$host>" );
echo "Active";
}
if($get['cmd'] == 'ban')
{
mysql_query("update users set banned='1' where id='$get[id]'");
//header("Location: $ret");
echo "yes";
exit();
}
/* Editing users*/
if($get['cmd'] == 'edit')
{
/* Duplicate user name check */
$rs_usr_duplicate = mysql_query("select count(*) as total from `users` where `user_name`='$get[user_name]' and `id` != '$get[id]'") or die(mysql_error());
list($usr_total) = mysql_fetch_row($rs_usr_duplicate);
if ($usr_total > 0)
{
echo "Sorry! user name already registered.";
exit;
}
/* Duplicate email check */
$rs_eml_duplicate = mysql_query("select count(*) as total from `users` where `user_email`='$get[user_email]' and `id` != '$get[id]'") or die(mysql_error());
list($eml_total) = mysql_fetch_row($rs_eml_duplicate);
if ($eml_total > 0)
{
echo "Sorry! user email already registered.";
exit;
}
/* Now update user data*/
mysql_query("
update users set
`first_name` = '$get[first_name]',
`last_name` = '$get[last_name]',
`user_name` = '$get[user_name]',
`user_email` = '$get[user_email]',
`user_level` = '$get[user_level]',
`teacher` = '$get[teacher]',
`homework` = '$get[homework]',
`projects` = '$get[projects]',
`schedules` = '$get[schedules]',
`news` = '$get[news]'
where `id`='$get[id]'") or die(mysql_error());
//header("Location: $ret");
if(!empty($get['pass'])) {
$hash = PwdHash($get['pass']);
mysql_query("update users set `pwd` = '$hash' where `id`='$get[id]'") or die(mysql_error());
}
echo "changes done";
exit();
}
if($get['cmd'] == 'unban')
{
mysql_query("update users set banned='0' where id='$get[id]'");
echo "no";
//header("Location: $ret");
// exit();
}
?>
Thanks again, okrobie