admin/include/update.php

<?php
/**********************************************************
Function Library: update.php
Original Author: Paul Bramscher <brams006@tc.umn.edu>
Last Modified: 09.30.2003 by Paul Bramscher
***********************************************************
Comments:
This library brings together all SQL update functions for
LibData general setup tables.  Those pertaining to
PageScribe and SubjectBuilder are located in
scribe_application.php and subject_builder.php
respectively.
***********************************************************
Table of Contents:

purgePassword
updateCoursesub
updateFaculty
updateFeature
updateInfotype
updateLibunit
updateLocation
updatePassword
updateResource
updateService
updateSingleField
updateStaff
updateStyle
updateSubject


**********************************************************/


/********************************************************** 
Function: purgePassword
Author: Paul Bramscher
Last Modified: 06.23.2003
***********************************************************
Purpose:
This function purges the locally encrypted mySQL stored
password for the supplied staff id (sets to NULL).  Note
that at no point does this system actually retrieve the
value of the password and bring it to an HTML form, neither
in plaintext nor in a "password" type HTML form field.
**********************************************************/
function purgePassword($con, $staff_id){

        // Draw form heading
        printf("<center><h3>Purging Password...</h3>");

        // Table
        printf("<table width = \"60%%\" border = \"1\" cellpadding =\"4\" class=\"backLight\">");
        printf("<tr><td><br>");
        printf("<strong>Messages:</strong><br>");

        // Problem flag for each step
        $problem = 0;

        if ($staff_id > 0) {
                $sql = "UPDATE staff SET password = NULL WHERE staff_id = ?";

                if (!xx_prepare_execute($sql, $staff_id)){
                        $problem = 1;
                        sql_err($sql);
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        printf("Purged password successfully for this staff account.<br><BR>\n");
                }

        }
        else printf("Staff ID not found.</b>.<br><br>\n");

        printf("</td></tr></table>\n");
        printf("</center>\n");
}


/**********************************************************
Function: updateCoursesub
Author: Paul Bramscher
Last Modified: 06.03.2003
***********************************************************
Purpose:
Update supplied course subject id.
**********************************************************/
function updateCoursesub($con, $campus_id, $cip_code, $coursesub, $coursesub_descr, $coursesub_id) {

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $coursesub_display = $coursesub;

        // Check to see if already exists
        $exists = recordCount($con, "coursesub", "coursesub", $coursesub_search, "A");
        $exists_id = lookupField($con, "coursesub", "coursesub", $coursesub_search, "coursesub_id");
        
        // If exists in the courseub table under a different coursesub_id
        if ($exists > 0 && $exists_id != $coursesub_id) {
                $err_code = 1;
                $err_msg = "Failed. '" . $coursesub_display . "' already exists in the course subject table.";
        }
        
        // Check for blank entry
        if ($coursesub == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the course subject.";
        }

        printf("<center><h3>Updating Course Subject...</h3>\n");

        // Table
        printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">\n");
        printf("<tr><td><br>\n");
        printf("<strong>Messages:</strong><br>");

        // Perform the update only if no errors encountered
        if ($err_code == 0) {

                // Build the SQL
                $sql = "UPDATE coursesub SET coursesub = ?, coursesub_descr = ?, cip_code = ?, campus_id = ? WHERE coursesub_id = ?";

                if (!xx_prepare_execute($sql, $coursesub, $coursesub_descr, $cip_code, $campus_id, $coursesub_id)){
                        sql_err($sql);
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        printf("Updated <b>%s</b> course subject.<BR><BR>\n", $coursesub_display);
                }
        }
        
        else printf("%s", $err_msg);

        printf("<br><br>\n");
        printf("</td></tr></table>\n");
        printf("</center>\n");

}


/**********************************************************
Function: updateFaculty
Author: Paul Bramscher
Last Modified: 06.24.2003
***********************************************************
Purpose:
Update supplied faculty id.
**********************************************************/
function updateFaculty($con, $faculty_email, $faculty_firstname,
        $faculty_id, $faculty_lastname, $faculty_account) {

        /*
        Faculty must have both a unique non-blank staff_account, and non-blank last name.
        */

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $faculty_name_display = $faculty_firstname . " " . $faculty_lastname;

        // Check to see if already exists
        $exists_id = existsFaculty($con, $faculty_firstname, $faculty_lastname);

        if ($exists_id > 0 && $exists_id != $faculty_id) {
                $err_code = 1;
                $err_msg = "Failed. '" . $faculty_name_display . "' already exists in the Faculty table.";
        }

        // Check for blank last name
        if ($faculty_lastname == "") {
                $err_code = 2;
                $err_msg = "Failed.  Cannot have a blank Last Name.";
        }


        printf("<center><h3>Updating Faculty...</h3>");

        // Table
        printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">");
        printf("<tr><td><br>");
        printf("<strong>Messages:</strong><br>");

        if ($err_code == 0 ) {

                // Build the SQL
                $sql = "UPDATE faculty SET faculty_lastname = ?, faculty_firstname = ?, faculty_email = ?, faculty_account = ? WHERE faculty_id = ?";

                if (!xx_query ($sql,$faculty_lastname,$faculty_firstname,$faculty_account,$faculty_email,$faculty_id)){
                        sql_err($sql);
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        printf("Successfully updated Faculty <b>%s</b><BR><BR>\n", $faculty_name_display);
                }
        }
        
        else printf("%s", $err_msg);
        printf("<br><br>\n");
        printf("</td></tr></table>\n");
        printf("</center>\n");

}


/**********************************************************
Function: updateFeature
Author: Paul Bramscher
Last Modified: 05.21.2003
***********************************************************
Purpose:
Update supplied feature id.
**********************************************************/
function updateFeature($con, $feature, $feature_id, $image_alt, $image_path) {

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $feature_display = $feature;

        // Check to see if already exists
        $exists = recordCount($con, "feature", "feature", $feature_search, "A");
        $exists_id = lookupField($con, "feature", "feature", $feature_search, "feature_id");
        
        // If exists in the feature table under a different feature_id
        if ($exists > 0 && $exists_id != $feature_id) {
                $err_code = 1;
                $err_msg = "Failed. '" . $feature_display . "' already exists in the feature table.";
        }
        
        // Check for blank entry
        if ($feature == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the feature.";
        }

        printf("<center><h3>Updating Feature...</h3>\n");

        // Table
        printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">\n");
        printf("<tr><td><br>\n");
        printf("<strong>Messages:</strong><br>");


        // Perform the update only if no errors encountered
        if ($err_code == 0) {

                // Build the SQL
                $sql = "UPDATE feature SET feature = ?, image_alt = ?, image_path = ? WHERE feature_id = ?";

                if (!xx_prepare_execute($sql, $feature, $image_alt, $image_path, $feature_id)){
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        printf("Updated <b>%s</b> feature.<BR><BR>\n", $feature_display);
                }
        }
        
        else printf("%s", $err_msg);

        printf("<br><br>\n");
        printf("</td></tr></table>\n");
        printf("</center>\n");

}


/**********************************************************
Function: updateInfotype
Author: Paul Bramscher
Last Modified: 06.05.2003
***********************************************************
Purpose:
Update supplied infotype id.
**********************************************************/
function updateInfotype($con, $infotype, $infotype_id, $masterinfotype_id, $mastersubject_id) {

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness purposes
        $infotype_display = $infotype;

        // Check to see if already exists
        $exists = recordCount($con, "infotype", "infotype", $infotype_search, "A");
        $exists_id = lookupField($con, "infotype", "infotype", $infotype_search, "infotype_id");
        
        // If exists in the infotype table under a different infotype_id (not editing the name of this infotype)
        if ($exists > 0 && $exists_id != $infotype_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $infotype_display . "</b> already exists in the Information Type table.";
        }
        
        // Check for blank entry
        if ($infotype == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the Information Type name.";
        }

        printf("<center><h3>Updating Infotype...</h3>");

        // Table
        printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">");
        printf("<tr><td><br>");
        printf("<strong>Messages:</strong><br>");
                
        // Proceed if no errors encountered
        if ($err_code == 0) {

                // First, update affected RQS relationships
                $sql = "UPDATE res_sub_infotype SET masterinfotype_id = ? WHERE infotype_id = ?";

                if (!xx_prepare_execute($sql, $masterinfotype_id, $infotype_id)){
                        $err_code = 1;
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        printf("Updated affected RQS relationships (if any)<BR>\n");
                }
        }
        
        
        if ($err_code == 0) {

                // Build the SQL
                $sql = "UPDATE infotype SET infotype = ?, masterinfotype_id = ?, mastersubject_id = ? WHERE infotype_id = ?";

                if (!xx_prepare_execute($sql, $infotype, $masterinfotype_id, $mastersubject_id, $infotype_id)){
                        $err_code = 1;
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        printf("Updated Information Type to <b>%s</b>.<BR><BR>\n", $infotype_display);
                }

        }

        else printf("%s<BR><BR>", $err_msg);

        printf("<BR>");
        printf("</td></tr></table><BR>");
        printf("</center>");

}


/**********************************************************
Function: updateLibunit
Author: Paul Bramscher
Last Modified: 05.22.2003
***********************************************************
Purpose:
Updates the supplied library unit id with new information.
**********************************************************/
function updateLibunit($con, $head_staff_id, $libunit, $libunit_abbrev, $libunit_id) {

        /*
        Library Units must have both a unique name and unique abbreviation
        e.g. "Digital Library Developement Laboratory" and "DLDL"
        Additionally, empty values are not allowed.
        */

        // Error flag
        $err_code = 0;

        // Need for display/uniqueness purposes
        $libunit_display = $libunit;
        $libunit_abbrev_display = $libunit_abbrev;

        // Check to see if libunit already exists
        $exists = recordCount($con, "libunit", "libunit", $libunit_search, "A");
        $exists_id = lookupField($con, "libunit", "libunit", $libunit_search, "libunit_id");
        if ($exists > 0 && $exists_id != $libunit_id) {
                $err_code = 1;
                $err_msg = "Failed. '" . $libunit_display . "' already exists in the Library Unit table.";
        }

        // Check to see if libunit abbreviation already exists
        $exists = recordCount($con, "libunit", "libunit_abbrev", $libunit_abbrev_search, "A");
        $exists_id = lookupField($con, "libunit", "libunit_abbrev", $libunit_abbrev_search, "libunit_id");

        if ($exists > 0 && $exists_id != $libunit_id) {
                $err_code = 2;
                $err_msg = "Failed. '" . $libunit_abbrev_display . "' abbreviation already exists in the Library Unit table.";
        }

        // Check for blank linunit entry
        if ($libunit == "") {
                $err_code = 3;
                $err_msg = "Failed.  Cannot enter a blank Library Unit.";
        }

        // Check for blank linunit abbrev entry
        if ($libunit_abbrev == "") {
                $err_code = 4;
                $err_msg = "Failed.  Cannot enter a blank Library Unit abbreviation.";
        }

        // Add only if no errors encountered
        if ($err_code == 0) {

                // Build the SQL
                $sql = "UPDATE libunit SET libunit = ?, libunit_abbrev = ?, head_staff_id = ? WHERE libunit_id = ?";

                if (!xx_prepare_execute($sql, $libunit, $libunit_abbrev, $head_staff_id, $libunit_id)){
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);

                        // Call the libunit form back
                        formLibunit($con, $libunit_id);
                }
        }
        
        else {
                printf("<center><h3>Updating Library Unit...</h3>");

                // Table
                printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">\n");
                printf("<tr><td><br>\n");
                printf("<strong>Messages:</strong><br>\n");
                printf("%s", $err_msg);
                printf("<BR><BR>\n");
                printf("</td></tr></table>\n");
                printf("</center>\n");
        }
}


/**********************************************************
Function: updateLocation
Author: Paul Bramscher
Last Modified: 04.21.2003
***********************************************************
Purpose:
Update supplied location id.
**********************************************************/
function updateLocation($con, $address1, $address2,
        $address3, $address4, $campus, $hoursURL, $location, $location_descr,
        $location_id, $mainURL, $mapURL, $referenceURL, $telephone) {
        
        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness purposes
        $location_display = $location;

        // Check to see if already exists
        $exists = recordCount($con, "location", "location", $location_search, "A");
        $exists_id = lookupField($con, "location", "location", $location_search, "location_id");
        
        // If exists in the location table under a different location_id
        if ($exists > 0 && $exists_id != $location_id) {
                $err_code = 1;
                $err_msg = "Failed. '" . $location_display . "' already exists in the location table.";
        }
        
        // Check for blank entry
        if ($location == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the location name.";
        }
        
        printf("<center><h3>Updating Location...</h3>\n");

        // Table
        printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">\n");
        printf("<tr><td><br>\n");
        printf("<strong>Messages:</strong><br>\n");

        // Perform the update only if no errors encountered
        if ($err_code == 0) {

                // Build the SQL
                $sql = "UPDATE location SET location = ?, location_descr = ?, campus = ?,
                        address1 = ?, address2 = ?, address3 = ?, address4 = ?,
                        mainURL = ?, hoursURL = ?, referenceURL = ?, mapURL = ?,
                        telephone = ? WHERE location_id = ?";

                if (!xx_prepare_execute($sql,
                        $location,$location_descr,$campus,
                        $address1,$address2,$address3,$address4,
                        $mainURL,$hoursURL,$referenceURL,$mapURL,
                        $telephone,$location_id)){
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        printf("Updated Location to <b>%s</b>.<BR><BR>\n", $location_display);
                }
        }
        else printf("%s", $err_msg);

        printf("<br><br>\n");
        printf("</td></tr></table>\n");
        printf("</center>\n");

}  


/**********************************************************
Function: updatePassword
Author: Paul Bramscher
Last Modified: 06.23.2003
***********************************************************
Purpose:
Changes the locally encrypted and mySQL stored password to
the newly supplied value.  Note that the new password and
the "confirm" must match, and it must be 6 characters
minimum.  As with purgePassword, at no time does this
system bring the password out of the database and present
it on an HTML form, neither in plaintext nor in a
"password" type HTML form field.  The password in plaintext
is never viewable to the system, nor to mySQL itself.  If
a user forgets his/her password, it must be reset by an
administrator.
**********************************************************/
function updatePassword($con, $password, $password_confirm, $staff_id) {

        // Error flag
        $err_code = 0;

        // Check for less than 6 char.
        if (strlen($password) < 6) {
                $err_code = 1;
                $err_msg = "Failed.  Password must be 6 characters minimum.";
        }
        
        // Check for mis-matched password and confirm
        if ($password != $password_confirm) {
                $err_code = 2;
                $err_msg = "Failed.  Password and confirm password didn't match.";
        }       

        // Update only if no errors encountered
        if ($err_code == 0) {

                // Build the SQL
                $sql = "UPDATE staff SET password = password(?) WHERE staff_id = ?";

                if (!xx_prepare_execute($sql, $password, $staff_id)){
                        sql_err($sql);
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);

                        // Call the staff form back
                        formStaff($con, $staff_id);
                }
        }
        
        else {
                printf("<center><h3>Updating Local Password...</h3>");

                // Table
                printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">\n");
                printf("<tr><td><br>\n");
                printf("<strong>Messages:</strong><br>\n");
                printf("%s", $err_msg);
                printf("<BR><BR>\n");
                printf("</td></tr></table>\n");
                printf("</center>\n");
        }
}


/**********************************************************
Function: updateResource
Author: Paul Bramscher
Last Modified: 05.07.2003
***********************************************************
Purpose:
Update supplied resource id, and call formResource back
again.
**********************************************************/
function updateResource($con, $annotation, $author, $call_no, $cat_num, $coverage_detail,
        $edition, $infotype_id, $key_id, $other_title, $pub_date, $publisher, $sess_staff_account,
        $sources_indexed, $title, $url) {

        // Set up SQL
        $sql = "UPDATE resource SET
                annotation = ?, author = ?, call_no = ?, cat_num = ?, coverage_detail = ?,
                date_modified = now(), edition = ?, infotype_id = ?, other_title = ?, pub_date = ?, publisher = ?,
                sources_indexed = ?, title = ?, url = ?, vendor_id = ?, account_modified = ? WHERE resource_id = ?";

        // printf("sql was: %s<br><br>\n", $sql);
                
        // Edit the record
        xx_query ("LOCK TABLE resource WRITE", $con);
        if (!xx_prepare_execute($sql,
                $annotation, $author, $call_no, $cat_num, $coverage_detail,
                $edition, $infotype_id, $other_title, $pub_date, $publisher,
                $sources_indexed, $title, $url, $vendor_id, $sess_staff_account, $key_id)) {
                xx_query ("UNLOCK TABLES", $con);
                bailout();
        }
        else {
                xx_query("UNLOCK TABLES", $con);
                formResource($con, $key_id, 0, 0, '');  
        }

}


/**********************************************************
Function: updateService
Author: Paul Bramscher
Last Modified: 05.21.2003
***********************************************************
Purpose:
Update supplied service id and call formService back again.
**********************************************************/
function updateService($con, $address1, $address2, $address3, $address4, $email,
        $fax, $nonaff, $service, $serviceDescr, $service_id, $serviceURL, $telephone) {

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $service_display = $service;
        $service_search = textSearchmySQL($service);

        // Check to see if already exists
        $exists = recordCount($con, "service", "service", $service_search, "A");
        $exists_id = lookupField($con, "service", "service", $service_search, "service_id");
        
        if ($exists > 0 && $exists_id != $service_id) {
                $err_code = 1;
                $err_msg = "Failed. '" . $service_display . "' already exists in the service table.";
        }
        
        // Check for blank entry
        if ($service == "") {
                $err_code = 2;
                $err_msg = "Failed.  Cannot enter a blank service.";
        }

        if ($err_code == 0) {

                // Build the SQL
                $sql = "UPDATE service SET service = ?, serviceDescr = ?,
                        address1 = ?, address2 = ?, address3 = ?, address4 = ?,
                        serviceURL = ?, email = ?, fax = ?, telephone = ?, nonaff = ? WHERE service_id = ?";

                if (!xx_prepare_execute($sql, $service, $serviceDescr,
                        $address1, $address2, $address3, $address4,
                        $serviceURL, $email, $fax, $telephone, $nonaff, $service_id)){
                        sql_err($sql);
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);

                        // Call the service form back
                        formService($con, $service_id);
                }
        
        }

        else {
                printf("<center><h3>Updating Service...</h3>");

                // Table
                printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">\n");
                printf("<tr><td><br>\n");
                printf("<strong>Messages:</strong><br>\n");
                printf("%s", $err_msg);
                printf("<BR><BR>\n");
                printf("</td></tr></table>\n");
                printf("</center>\n");
        }

}  


/**********************************************************
Function: updateSingleField 
Author: Paul Bramscher
Last Modified: 05.21.2003
***********************************************************
Purpose:
Updates any single field in any supplied table.  Checks
for uniqueness and blank value.
**********************************************************/
function updateSingleField($con, $display, $display_field, $key_field,
        $key_id, $newValue, $table){
        
        // Error flag
        $err_code = 0;  

        $newValue_search = textSearchmySQL($newValue);

        // Check to see if already exists
        $exists = recordCount($con, $table, $display_field, $newValue_search, "A");
        $exists_id = lookupField($con, $table, $display_field, $newValue_search, $key_field);
        
        // If exists in the infotype table under a different infotype_id (not editing the name of this infotype)
        if ($exists > 0 && $exists_id != $key_field) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $newValue . "</b> already exists in the <b>"
                        . $table
                        . "</b> table.\n";
        }
        
        // Check for blank entry
        if ($newValue == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the <b>"
                        . $display
                        . "</b>.";
        }       
        
        // Draw page heading
        printf("<center><h3>Updating %s...</h3>", $display);

        printf("<table width =\"50%%\" border = \"3\" class=\"backLight\">");
        printf("<tr><td><font face = \"Arial\">");
        printf("<b>Messages:</b><br>\n");
        
        // Continue if no errors
        if ($err_code == 0) {
        
                $newValue_display = $newValue;
        
                // Build the SQL
                $sql = "UPDATE ! SET ! = ? WHERE ! = ?";

                if (!xx_prepare_execute($sql, $table, $display_field, $newValue, $key_field, $key_id)){
                        sql_err($sql);
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        printf("%s successfully changed to <b>%s</b>.\n", $display, $newValue_display);
                }
        
        }
        
        else printf("%s", $err_msg);

        printf("<br><br></td></tr></table><br>");
        printf("</center>");
}  


/**********************************************************
Function: updateStaff
Author: Paul Bramscher
Last Modified: 06.23.2003
***********************************************************
Purpose:
Updates the supplied staff id with new information.
**********************************************************/
function updateStaff($con, $access_id, $first_name,
        $last_name, $sess_access_level, $staff_account, $staff_email, $staff_id, $stafftitle_id) {

        /*
        Staff must have, at a minimum, a last name, first name, and unique staff account
        name.  Uniqueness is enforced only on staff_account.
        */

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness purposes
        $staff_account_display = $staff_account;
        $staff_account_search = textSearchmySQL($staff_account);

        // Check to see if the staff_account already exists
        $exists = recordCount($con, "staff", "staff_account", $staff_account_search, "A");
        $exists_id = lookupField($con, "staff", "staff_account", $staff_account_search, "staff_id");
        
        if ($exists > 0 && $exists_id != $staff_id) {
                $err_code = 1;
                $err_msg = "Failed. '" . $staff_account_display . "' already exists in the Staff table.";
        }

        // Check for blank first name or last name
        if ($first_name == "" || $last_name == "") {
                $err_code = 2;
                $err_msg = "Failed.  A first and last name must be supplied for all staff.";
        }

        // Check for blank staff_account
        if ($staff_account == "") {
                $err_code = 3;
                $err_msg = "Failed.  A staff account must be supplied for all staff.";
        }

        // Check for access level higher than current access
        $this_access_level = lookupfield($con, "access", "access_id", $access_id, "access_level");
        if ($this_access_level > $sess_access_level) {
                $err_code = 4;
                $err_msg = "Failed.  You may not promote staff to higher privileges than your own.";
        }

        // Continue only if no errors.
        if ($err_code == 0) {

                // Clean up strings
                if (strlen($first_name) > 0) $first_name = textInmySQL($first_name);
                if (strlen($last_name) > 0) $last_name = textInmySQL($last_name);
                if (strlen($staff_account) > 0) $staff_account = textInmySQL($staff_account);
                if (strlen($staff_email) > 0) $staff_email = textInmySQL($staff_email);
                
                // Build the SQL
                $sql = "UPDATE staff SET access_id = ?, first_name = ?, last_name = ?, stafftitle_id = ?, staff_account = ?, staff_email = ? WHERE staff_id = ?";

                if (!xx_prepare_execute($sql, $access_id, $first_name, $last_name, $stafftitle_id, $staff_account, $staff_email, $staff_id)){
                        sql_err($sql);
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        // Success.  Call formStaff back.
                        xx_query ("UNLOCK TABLES", $con);
                        formStaff($con, $staff_id);
                }
        }
        else {
        
                printf("<center><h3>Updating Staff...</h3>\n");

                // Table
                printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">\n");
                printf("<tr><td><br>\n");
                printf("<strong>Messages:</strong><br>\n");

                printf("%s<BR><BR>\n", $err_msg);
                printf("</td></tr></table>\n");
                printf("</center>\n");
        }
}


/**********************************************************
Function: updateStyle
Author: Paul Bramscher
Last Modified: 05.22.2003
***********************************************************
Purpose:
Update the supplied style id.  As with the insert transaction,
no error checking is done to ensure that the supplied files
actually exist and have proper permissions.
**********************************************************/
function updateStyle($con, $css_file, $footer_file, $header_file, $style_id, $style_title) {

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $style_title_display = $style_title;
        $style_title_search = textSearchmySQL($style_title);

        // Check to see if already exists under a different style_id
        $exists = recordCount($con, "style", "style_title", $style_title_search, "A");
        $exists_id = lookupField($con, "style", "style_title", $style_title_search, "style_id");

        if ($exists > 0 && $exists_id != $style_id) {
                $err_code = 1;
                $err_msg = "Failed. '" . $style_title_display . "' already exists in the style table.";
        }
        
        // Check for blank entry
        if ($style_title == "") {
                $err_code = 2;
                $err_msg = "Failed.  Cannot enter a blank style.";
        }

        printf("<center><h3>Updating Style...</h3>");

        // Table
        printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">");
        printf("<tr><td><br>");
        printf("<strong>Messages:</strong><br>");

        if ($err_code == 0) {

                // Clean up strings
                if (strlen($css_file) > 0) $css_file = textInmySQL($css_file);
                if (strlen($footer_file) > 0) $footer_file = textInmySQL($footer_file);
                if (strlen($header_file) > 0) $header_file = textInmySQL($header_file);
                if (strlen($style_title) > 0) $style_title = textInmySQL($style_title);
                
                // Build the SQL
                $sql = "UPDATE style SET style_title = ?, css_file = ?, footer_file = ?, header_file = ? WHERE style_id = ?";

                if (!xx_prepare_execute($sql, $style_title, $css_file, $footer_file, $header_file, $style_id)){
                        sql_err($sql);
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        printf("Successfully updated <b>%s</b> style.", $style_title_display);
                }
        }
        else printf("%s", $err_msg);

        printf("<br><br>\n");
        printf("</td></tr></table>\n");
        printf("</center>\n");

}


/**********************************************************
Function: updateSubject
Author: Paul Bramscher
Last Modified: 06.11.2003
***********************************************************
Purpose:
Update the supplied subject id, and call formSubject back
again.
**********************************************************/
function updateSubject($con, $subject, $subject_descr, $subject_id, $sublocation_id) {

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness purposes
        $subject_display = $subject;
        $subject_search = textSearchmySQL($subject);

        // Check to see if already exists
        $exists = recordCount($con, "subject", "subject", $subject_search, "A");
        $exists_id = lookupField($con, "subject", "subject", $subject_search, "subject_id");
        
        // If exists in the subject table under a different subject_id (not editing the name of this subject)
        if ($exists > 0 && $exists_id != $subject_id) {
                $err_code = 1;
                $err_msg = "Failed. '" . $subject . "' already exists in the subject table.";
        }
        
        // Check for blank entry
        if ($subject == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the subject name.";
        }

        // Perform the update only if no errors encountered
        if ($err_code == 0) {

                // Clean up strings
                $subject = textInmySQL($subject);
                if (strlen($subject_descr) > 0) $subject_descr = textInmySQL($subject_descr);

                // Build the SQL
                $sql = "UPDATE subject SET subject = ?, subject_descr = ?, sublocation_id = ? WHERE subject_id = ?";

                if (!xx_query ($sql, $subject, $subject_descr, $sublocation_id, $subject_id)){
                        sql_err($sql);
                        xx_query ("UNLOCK TABLES", $con);
                        bailout();
                }
                else {
                        xx_query ("UNLOCK TABLES", $con);
                        formSubject($con, $subject_id);
                } // updated subject

        }

        else {
        
                printf("<center><h3>Updating subject...</h3>");

                // Table
                printf("<table width = \"60%%\" border = \"3\" cellpadding =\"4\" class=\"backLight\">");
                printf("<tr><td><br>");
                printf("<strong>Messages:</strong><br>");

                printf("%s<BR><BR>", $err_msg);
                printf("</td></tr></table>");
                printf("</center>");
        }
}
?>