<script language="JavaScript">

function check_charname(ch){
var len, digit;
if(ch == " "){ 
return false;
len=0;
}else{
len = ch.length;
}
for(var i=0 ; i<len ; i++)
{
digit = ch.charAt(i)
if(!(digit >="0" && digit <="9")){
; 
}else{
return false; 
} 
} 
return true;
}

//***************************************
function check_number(ch){
var len, digit;
if(ch == " "){ 
return false;
len=0;
}else{
len = ch.length;
}
for(var i=0 ; i<len ; i++)
{
digit = ch.charAt(i)
if(digit >="0" && digit <="9"){
; 
}else{
return false; 
} 
} 
return true;
}

//******************************************
function checkregis() {

if(!check_charname(document.frmregis.CATEGORY.value) ){
alert('กรุณากรอก ตัวอักษร เท่านั้น');
document.frmregis.CATEGORY.select() ;
return false;
}



//********************************************
}
</script>
<div align="left">
    
	  <table cellspacing="0" cellpadding="0" width="100%" border="0" height=500>
        <tbody>
          <tr>
            <td valign="top" ><div align="center">
                    <table align="center"width="800">
                          <tr>
                            <td>
<?

 if($_GET[op] == "minepass_edit" AND $_GET[action] == "edit"){
	//////////////////////////////////////////// กรณีแก้ไขข้อมูลส่วนตัว
	if($_GET[op]){
		//ดึงค่าของผู้ดูแลระบบออกมา
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$_GET[id]."' ");		
		$arr[user] = $db->fetch($res[user]);
		//ดึงค่าของผู้ดูแลระบบออกมา	
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
//		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$_GET[id]."' ");
		$arr[user] = $db->fetch($res[user]);
		$db->closedb ();
		}		


//======================================================== BEGIN ===== UPLOAD 1 ============



//======================================================== END ======= UPLOAD 1 ============
	
			if( !$_POST[USERNAME]   ){
				$ProcessOutput .= "<BR><BR>";
				$ProcessOutput .= "<CENTER><IMG SRC=\"images/icon/notview.gif\" BORDER=\"0\"><BR><BR>";
				$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>กรอกข้อมูลไม่ครบ</B></FONT><BR><BR>";
				$ProcessOutput .= "<A HREF=\"javascript:history.go(-1);\"><B>กลับไปแก้ไข</B></A>";
				$ProcessOutput .= "</CENTER>";
				$ProcessOutput .= "<BR><BR>";
			}else{
				$User_User = $_SESSION[user_user];
				if($_POST[PASSWORD]){
					$NewPass = md5($_POST[PASSWORD]);
					$URLre = "?name=user";
					session_unset();
					session_destroy();
				}else{
					$NewPass = $_POST[oldpass];
					$URLre = "?name=user&file=main";
				}
				
				//ทำการแก้ไขข้อมูลลงดาต้าเบส
				$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
				$db->update_db(TB_user,array(
					"username"=>"$_POST[USERNAME]",
					"password"=>"$NewPass",
					"update_date"=>"".TIMESTAMP.""
				)," username='$User_User' ");
				$db->closedb ();
		}
				$ProcessOutput .= "<BR><BR>";
				$ProcessOutput .= "<CENTER><A HREF=\"".$URLre."\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
				$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการเปลี่ยนรหัสผ่านเรียบร้อยแล้ว</B></FONT><BR><BR>";
				$ProcessOutput .= "<A HREF=\"index.php\"><B>กรุณารอคลิกเข้าสู่ระบบ</B></A>";
				$ProcessOutput .= "</CENTER>";


	echo $ProcessOutput ;
}
else if($_GET[op] == "minepass_edit"){
	//////////////////////////////////////////// กรณีแก้ไขข้อมูลส่วนตัว
	if($_GET[op]){
		//ดึงค่าของผู้ดูแลระบบออกมา
		//ดึงค่าของผู้ดูแลระบบออกมา
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$_GET[id]."' ");		
		$arr[user] = $db->fetch($res[user]);
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
		$arr[user] = $db->fetch($res[user]);
		$db->closedb ();
?>
<form method="post" name="frmregis" action="?name=user&amp;file=newpass&amp;op=minepass_edit&amp;action=edit&id=<? echo $arr[user][id];?>" enctype="multipart/form-data" onSubmit="return checkregis()">
                                <table width="800" bgcolor=CCFFAC>
 
									<tr>
                                    <td width="22%">&nbsp;</td>
                                    <td align="left"width="78%">&nbsp;</td>
                                  </tr>
                                  <tr>
                                    <td width="22%"><div align="right"><b>ชื่อผู้ใช้ :</b></div></td>
                                    <td align="left"width="78%"><input type="text" name="USERNAME" size="40" value="<?=$arr[user][username];?>" readonly="readonly" style="color=#FF0000;" /></td>
                                  </tr>
                                  <tr>
                                    <td><div align="right"><b>รหัสผ่านใหม่ :</b></div></td>
                                    <td align="left"><input type="password" name="PASSWORD" size="40" value="" /><font color=red>*เป็นภาษาอังกฤษหรือตัวเลข</font></td>
                                  </tr>
   <tr>
<td><div align="right"></div></td>
  <td align="left"><input type="submit" value="บันทึกข้อมูล" />
<input type="hidden" name="oldpass" value="<?=$arr[user][password];?>" /></td>
</tr>
</table>
</form>
                              <?
	}else{
		//กรณีไม่ผ่าน
		echo $PermissionFalse ;
	}
}
?>
                              <br />
                            <br /></td>
                          </tr>
                      </table></td>
                    </tr>
                  </tbody>
                </table>
            </div></td>
          </tr>
        </tbody>
      </table>
	
</div>