Updating the profile page "nulls" the user level

I posted this problem under "Cannot access page even though logged in" six days ago. Jason created a support ticket and effectively closed the thread but since then I have had no help at all from WebAssist. Two nights in a row they told me they would call at about 10pm (I'm in Australia) and two nights in a row I have waited late in the office, but no-one has called. So I'm bringing it back to the forum.

What's happening is that when a user updates their profile, their user level goes to "null" so they can't log back in.

I am attaching a zip of my Profile page here and would appreciate any input. My client is losing patience with me and I really need to get this working.

Thanks!

to allow admins to update the userLevel, you should have a separate set of pages that are accessible to the admin only.

on this page, edit the update record server behavior, and unbind the userLevel column so that it will not be updated.

only on the admin version of the page should the userlevel be updated.

Thanks Jason, I do have a separate set of pages accessible to admin only, and on this public page I have used show region to ensure that users cannot see or update their user level.

I don't know what "unbind the userLevel column" means - can you please explain? In the meantime I'll have a go - I'll try just removing that whole table row and see if that fixes it.

OK, I removed that table row and the only reference to userLevel in the PHP at the top of the page, and it now the userLevel does not go to "NULL" when I update the profile (makes me wonder why that column is even included on the page at all?!?)

The server behaviour now says "userLevel does not get a value" so I think that means I've done it right.

BUT... I still get the following error message at the top of the page:

Warning: Cannot modify header information - headers already sent by (output started at C:\xampp\htdocs\AKTN\admin\visitors_Profile.php:14) in C:\xampp\htdocs\AKTN\admin\visitors_Profile.php on line 66

Line 66 is:

header(sprintf("Location: %s", $updateGoTo));

AND... if I change any field (first Name, Last Name or Password), it reverts to the previous value when I click "Submit".

At this stage I'd like to do away with the Profile page completely, but the client wants staff to be able to change their passwords, so that's not an option.

Not sure if this is a clue, but I uploaded the amended Profile page to the remote server and on that server I don't get the error message. But there's still the problem that the fields revert to the old value upon "Submit".

i looked at this through the incident that had been created where you gave us ftp access to troubleshoot directly:


it looks like the update SQL was not getting updated properly, it is still referencing the user Level post and using that for the user ID

this code:
$updateSQL = sprintf("UPDATE visitors SET VisitorPassword=%s, VisitorFirstName=%s, VisitorLastName=%s WHERE VisitorID=%s",
GetSQLValueString($_POST['VisitorPassword'], "text"), GetSQLValueString($_POST['VisitorFirstName'], "text"), GetSQLValueString($_POST['VisitorLastName'], "text"), GetSQLValueString($_POST['userLevel'], "int"), GetSQLValueString($_POST['VisitorID'], "int"));

should have been:
$updateSQL = sprintf("UPDATE visitors SET VisitorPassword=%s, VisitorFirstName=%s, VisitorLastName=%s WHERE VisitorID=%s",
GetSQLValueString($_POST['VisitorPassword'], "text"), GetSQLValueString($_POST['VisitorFirstName'], "text"), GetSQLValueString($_POST['VisitorLastName'], "text"), GetSQLValueString($_POST['VisitorID'], "int"));


i fixed it in the visitors_Profile.php page for you and it is now updating.

Thank you.

you're welcome.