<? require "../application_top.php";
require('protect-admin.php');
if(isset($_SESSION['token']) && isset($_POST['token']) && ($_POST['token']==$_SESSION['token'])){
	
	$id = (isset($_REQUEST['id']) && ($_REQUEST['id']))? decode($_REQUEST['id']) : 0;
	
	$fullname = ucwords($_REQUEST['fullname']);
	$emailid = $_REQUEST['emailid'];
	$mobno = $_REQUEST['mobileno'];
	$ipassword = (isset($_REQUEST['ipassword']) && ($_REQUEST['ipassword']))? md5($_REQUEST['ipassword']) :"";
	$isvendor = $_REQUEST['isvendor'];
	
	if($mobno < 7000000000){
		$_SESSION['msg'] = "Please enter valid mobile number";
		header('location:'.$_SERVER["HTTP_REFERER"]);exit;
	}
	
	if($_SESSION['admintype'] != 1){ // if not SuperAdmin
		$db->where('adminid',$_SESSION['adminid']);
	}
	$db->where('userid',$id);
	$rowu = $db->getOne('register');
	
	if($rowu){ //update user	
	for($i=1;$i<=1;$i++){
		$Files_pic_name = $_FILES['pic'.$i]['name'];
		$Files_pic_temp_name = $_FILES['pic'.$i]['tmp_name'];
		$needOriginal = 1;
		$pathOriginal = "../images/users/";
		$needThumb = 0;
		$pathThumb = "";
		require "../upload.php";
		${'pic'.$i} = $pic;
	}
	$verifycode = rand(11111,99999);
	$updatedata = array(
		'fullname'=>$fullname,
		'emailid'=>$emailid,
		'mobno'=>$mobno,
		'isvendor'=>$isvendor,
		'istatus'=>1,
		'verified'=>1,
		'postedon'=>date('Y-m-d H:i:s'),
		'verifycode'=>$verifycode
	);
	if($ipassword){
		$updatedata['ipassword'] = $ipassword;
	}
	if($pic1){
		$updatedata['pic1'] = $pic1;
	}		
	$db->where('userid',$id);
	$db->update('register',$updatedata);
		
		$_SESSION['msg']="Profile updated";
		
	}else{
		$_SESSION['msg'] = "Access denied.";
	}
}
header("Location:".$_SERVER['HTTP_REFERER']);exit;
?>