<?
CheckAdmin($_SESSION['admin_user'], $_SESSION['admin_pwd']);
?>
<SCRIPT LANGUAGE='JAVASCRIPT' TYPE='TEXT/JAVASCRIPT'>
 <!--
var win=null;
function NewWindow(mypage,myname,w,h,pos,infocus){
if(pos=="random"){myleft=(screen.width)?Math.floor(Math.random()*(screen.width-w)):100;mytop=(screen.height)?Math.floor(Math.random()*((screen.height-h)-75)):100;}
if(pos=="center"){myleft=(screen.width)?(screen.width-w)/2:100;mytop=(screen.height)?(screen.height-h)/2:100;}
else if((pos!='center' && pos!="random") || pos==null){myleft=0;mytop=20}
settings="width=" + w + ",height=" + h + ",top=" + mytop + ",left=" + myleft + ",scrollbars=yes,location=no,directories=no,status=no,menubar=no,toolbar=no,resizable=no";win=window.open(mypage,myname,settings);
win.focus();}
// -->
</script>
<div align="center">
	  <table cellspacing="0" cellpadding="0" width="1000" border="0">
        <tbody>
                                <tr>
                                  <td align="left">
<?
 if($_GET[op] == "minepass_edit" AND $_GET[action] == "edit"){
	//////////////////////////////////////////// กรณีแก้ไขข้อมูลส่วนตัว
	if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
//		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$_GET[id]."' ");
		$arr[user] = $db->fetch($res[user]);
		$db->closedb ();

			if(!$_POST[LEVEL] ){
				$ProcessOutput .= "<BR><BR>";
				$ProcessOutput .= "<CENTER><IMG SRC=\"images/icon/notview.gif\" BORDER=\"0\"><BR><BR>";
				$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>กรุณากรอกข้อมูลต่างๆให้ครบถ้วน</B></FONT><BR><BR>";
				$ProcessOutput .= "<A HREF=\"javascript:history.go(-1);\"><B>กลับไปแก้ไข</B></A>";
				$ProcessOutput .= "</CENTER>";
				$ProcessOutput .= "<BR><BR>";
			}else{
				$User_User = $_GET[id];                     //$_SESSION[admin_user];
				if($_POST[PASSWORD]){
					$NewPass = md5($_POST[PASSWORD]);
					$URLre = "?name=admin&file=user_schoolout";
					//session_unset();
					//session_destroy();
				}else{
					$NewPass = $_POST[oldpass];
					$URLre = "?name=admin&file=user_schoolout";
				}
				
		
				//ทำการแก้ไขข้อมูลลงดาต้าเบส
				$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
				$db->update_db(TB_user,array(
						"password"=>"".md5($_POST[PASSWORD])."",
						"working"=>"$_POST[WORKING]",
						"level"=>"$_POST[LEVEL]",
					     "status"=>"$_POST[STATUS]",
					      "update_date"=>"".TIMESTAMP.""						

//				)," username='$Admin_User' ");
			)," id='$_GET[id]' ");				
				$db->closedb ();
				$ProcessOutput .= "<BR><BR>";
				$ProcessOutput .= "<CENTER><A HREF=\"".$URLre."\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
				$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการแก้ไขข้อมูลเรียบร้อยแล้ว</B></FONT><BR><BR>";
			$ProcessOutput .= "<meta http-equiv=\"refresh\" content=\"1 ;url=?name=admin&file=user_school\">";
				$ProcessOutput .= "</CENTER>";
				$ProcessOutput .= "<BR><BR>";
		}
	}else{
		//กรณีไม่ผ่าน
		$ProcessOutput = $PermissionFalse ;
	}
	echo $ProcessOutput ;
}
else if($_GET[op] == "minepass_edit"){
	//////////////////////////////////////////// กรณีแก้ไขข้อมูลส่วนตัว
	if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
		//ดึงค่าของสมาชิกเวปออกมา
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
//		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$_GET[id]."' ");		
		$arr[user] = $db->fetch($res[user]);
		$db->closedb ();
?>
                                      <form method="post" action="?name=admin&file=user_schoolout&op=minepass_edit&action=edit&id=<? echo $arr[user][id];?>" enctype="multipart/form-data">
                                      
                                       <TABLE width="400"  align=center cellSpacing=0 cellPadding=0 border=1>
 <TR>
 <TD width="100%"valign=top align=center><BR>
<b><FONT COLOR=blue size=3>วันนี้ <?=$arr[user][category_name];?></FONT></b><BR><BR>
<FONT COLOR=RED><B>เลิกปฎิบัตงาน</B></FONT>
 <INPUT TYPE="hidden" NAME="WORKING" VALUE="0" >
 <INPUT TYPE="hidden" NAME="LEVEL" VALUE="<?=$arr[user][level];?>" >
 <INPUT TYPE="hidden" NAME="STATUS" VALUE="2" ><BR>
<input type="hidden" name="PASSWORD" size="40" value="111111"  id="PASSWORD" />
<BR>
<input type="submit" value=" บันทึกยืนยัน " />
<BR>
</TD></TR>

</TABLE>
                                    </form>
                                    <?
	}else{
		//กรณีไม่ผ่าน
		echo $PermissionFalse ;
	}
}
?>
                                      <br />
                                    <br />
                                  </td>
                                </tr>
                              </table>
                            <br /></td>
                          </tr>
                      </table></td>
                    </tr>
                  </tbody>
                </table>
            </div></td>
            <td width="10" background="images/main/b1_r2_c5.gif" 
                  height="100%"><img id="b1_r2_c5" height="10" alt="" 
                  src="images/main/b1_r2_c5.gif" width="10" 
              border="0" /></td>
          </tr>
        </tbody>
      </table>
	  <table cellspacing="0" cellpadding="0" width="700" border="0">
        <tbody>
          <tr>
            <td width="20"><img id="b1_r4_c1" height="15" alt="" 
                  src="images/main/b1_r4_c1.gif" width="20" border="0" /></td>
            <td background="images/main/b1_foot_bg.gif"><img id="b1_r4_c3" 
                  height="15" alt="" src="images/main/b1_foot_bg.gif" width="10" 
                  border="0" /></td>
            <td width="19"><img id="b1_r4_c4" height="15" alt="" 
                  src="images/main/b1_r4_c4.gif" width="19" 
              border="0" /></td>
          </tr>
        </tbody>
      </table>
</div>