@@ -32,7 +46,7 @@ function draw_ad ($row) { if (is_null($row['rating'])) echo '

Employer Not Rated

'.PHP_EOL; else - echo '

'.intval($row['rating']).' Star Employer

'.PHP_EOL; + echo '

'.$row['rating'].' Star Employer

'.PHP_EOL; ?>

Pays $

diff --git a/dash/header.php b/dash/header.php index d854074..08a9bfc 100644 --- a/dash/header.php +++ b/dash/header.php @@ -15,7 +15,10 @@ $db = new bdb(); - + +

diff --git a/dash/js/profile.js b/dash/js/profile.js new file mode 100644 index 0000000..9c83aa5 --- /dev/null +++ b/dash/js/profile.js @@ -0,0 +1,14 @@ +$(function () { + $('#chpic').change(function() { + if (this.files && this.files[0]) { + var reader = new FileReader(); + reader.onload = function (e) { + $('#propic img').attr('src', e.target.result); + } + reader.readAsDataURL(this.files[0]); + } + }); + $('.private #propic').click(function () { + $('#chpic').click(); + }); +}); diff --git a/dash/profile.php b/dash/profile.php new file mode 100644 index 0000000..13fc8d7 --- /dev/null +++ b/dash/profile.php @@ -0,0 +1,123 @@ + 0; +$title = 'Profile / Bulletin'; +$extra_head = ' '.PHP_EOL; +if (!$public) $extra_head .= ' '.PHP_EOL; +require('header.php'); +$user = $b_user; +if ($public) { + $result = $db->query('SELECT users.*, SUM(ratings.stars) / COUNT(ratings.stars) AS rating FROM users LEFT JOIN ratings ON ratings.rated = users.id LEFT JOIN responses ON responses.uid = users.id WHERE users.id = '.intval($_GET['id']).' AND users.active = 1 AND responses.matched = 1 LIMIT 1') or dash_fatal($db->error); + $user = $result->fetch_assoc(); + $result->free(); + if ($user['id'] < 1) dash_fatal('A user with that ID does not exist. You must have reached this page in error.'); +?> +

+'.PHP_EOL; + else + echo '

'.PHP_EOL; +?> +

Bio

No bio included in profile.' : htmlentities($user['bio'])); ?>

+
+

Personal Information

Email:

+ +

Phone:

+
+

Address

No address specified.' : htmlentities($user['address']));?>

Zipcode:

+escape_string($_POST['bio']).'\''; + $addr = empty($_POST['address']) ? 'NULL' : '\''.$db->escape_string($_POST['address']).'\''; + $patterns = array( + 'email' => '/^.+@.+\..+$/', + 'zip' => '/^\d{5}([-\s]\d{4})?$/', + 'phone' => '/\+?\d{1,3}\s*$?\d{3}$?\s*\d{3}([-\s]*)\d{4}$/', + ); + $pkeys = array_keys($patterns); + foreach ($pkeys as $pkey) { + if (!preg_match($patterns[$pkey], $_POST[$pkey])) dash_fatal('Invalid field values have been entered.'); + } + $deactivate = ''; + $usepropic = ''; + if ($_POST['email'] != $b_user['email']) { + $deactivate = ', active = 0'; + mail($_POST['email'], 'Verify Your Bulletin Email', eml_tpl(array( + 'activation_vars' => 'uid='.$b_user['id'].'&key='.$b_user['session'], + )), "From: ".$b_config['mail_from']."\r\nContent-type: text/html") or dash_fatal('We couldn\'t send mail to your new email address, so your profile has not been updated.'); + } + if (!empty($_FILES['picture']['tmp_name'])) { + $usepropic = ', picture = id'; + $tmpfile = $_FILES['picture']['tmp_name']; + if (getimagesize($tmpfile) === false) dash_fatal('Your uploaded file is not an image.'); + @$img = imagecreatefromstring(file_get_contents($tmpfile)); + @imagepng($img, 'uimg/'.$b_user['id'].'.png'); + @imagedestroy($img); + } + $db->query('UPDATE users SET email = \''.$db->escape_string($_POST['email']).'\', zipcode = \''.$db->escape_string($_POST['zip']).'\', phone = \''.$db->escape_string($_POST['phone']).'\', address = '.$addr.', bio = '.$bio.$usepropic.$deactivate.' WHERE id = '.$b_user['id']) or dash_fatal($db->error); + dash_fatal('Your profile has been updated. If you have changed your email, you will need to verify it before returning to Bulletin.', $b_config['base_url'].'dash/profile.php'); +} else { +?> +

+ +

Profile Picture

+'.PHP_EOL; + else + echo '

'.PHP_EOL; +?> +

Upload New

+ +

Include a Bio

<?=htmlentities($user['bio']);?>

Basic Information

+ +

+ diff --git a/dash/uimg/1.png b/dash/uimg/1.png new file mode 100644 index 0000000..0bef227 Binary files /dev/null and b/dash/uimg/1.png differ diff --git a/dash/uimg/default.png b/dash/uimg/default.png old mode 100644 new mode 100755 diff --git a/inc/user.php b/inc/user.php index 789586f..cf0dde8 100644 --- a/inc/user.php +++ b/inc/user.php @@ -9,7 +9,7 @@ if (empty($_COOKIE[$b_config['c_name']]) || !preg_match('/^(\d+);([0-9a-zA-Z\.]+ } else { $db = new bdb(); - $result = $db->query('SELECT * FROM users WHERE id = '.intval($matches[1]).' AND session = \''.hash('sha512', $matches[2]).'\' AND active = 1 LIMIT 1') or fatal($db->error); + $result = $db->query('SELECT users.*, SUM(ratings.stars) / COUNT(ratings.stars) AS rating FROM users LEFT JOIN ratings ON ratings.rated = users.id WHERE users.id = '.intval($matches[1]).' AND users.session = \''.hash('sha512', $matches[2]).'\' AND users.active = 1 LIMIT 1') or fatal($db->error); if ($result->num_rows < 1) $b_user = $guest_user; else $b_user = $result->fetch_assoc(); $result->free(); diff --git a/index.php b/index.php index 4f55335..98a8fb2 100644 --- a/index.php +++ b/index.php @@ -60,7 +60,7 @@ require('inc/common.php');

Post an ad and review your student applicants. Find the worker that's right for you to help you get some work done.

$5/Ad

FREE

Save Some Money

-- cgit v1.2.3