HOME

Mini Shell 1.0
DIR:/home/dna1981/public_html/SMB/admin/school/php/
Current File : /home/dna1981/public_html/SMB/admin/school/php/edit.php
<?php require_once('../../../php/connect.php'); ?>
<?php require ("../../php/secure.php");?>
<?php 
date_default_timezone_set("America/Chicago");
$todaydate = date("Y-m-d");

 //Edit Course
if ((isset($_POST["Course"])) && ($_POST["Course"] == "Edit")) {
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $price = $_POST['price'];
  $CE = $_POST['CE'];
  $Test = $_POST['Test'];
  $Status = $_POST['status'];
  $DurationDays = $_POST['duration_days'];
  $DurationDescription = $_POST['duration_description'];
  $id = $_POST['id'];
  $CE_Credits = $_POST['CE_Credits'];
  $Instructor_1 = $_POST['Instructor_1'];
  $Instructor_2 = $_POST['Instructor_2'];
  $Instructor_3 = $_POST['Instructor_3'];
  $Sponsor_Code = $_POST['Sponsor_Code'];
  $Program_Code = $_POST['Program_Code'];
  $CE_Code = $_POST['CE_Code'];
 
      

 mysqli_query($SMB, "UPDATE SMBDU_Courses SET name='$name', description='$description', price='$price', Test='$Test', CE='$CE', status='$Status', duration_days='$DurationDays', duration_description='$DurationDescription', CE_Credits='$CE_Credits', Instructor_1='$Instructor_1', Instructor_2='$Instructor_2', Instructor_3='$Instructor_3', Sponsor_Code='$Sponsor_Code', Program_Code='$Program_Code', CE_Code='$CE_Code' WHERE id='$id'"); 
   
   $AddGoTo = "../course-edit.php?id=$id";
   header("Location: $AddGoTo");
   }
   
   //Edit Media Images
if ((isset($_POST["Image"])) && ($_POST["Image"] == "Edit")) {
  $ModuleImage = $_POST['ModuleImg'];
  $id = $_POST['id'];
 
      
 mysqli_query($SMB, "UPDATE School_Media SET ModuleImg='$ModuleImage' WHERE id='$id'"); 
   
   $AddGoTo = "../image-edit.php?image=$id";
   header("Location: $AddGoTo");
   }
   
 //Edit Media Materials
if ((isset($_POST["Material"])) && ($_POST["Material"] == "Edit")) {
  $name = $_POST['name'];
  $type = $_POST['type'];
  $video = $_POST['video'];
  $id = $_POST['id'];
$Description = mysqli_real_escape_string($SMB, $_POST['description']);
 
      
 mysqli_query($SMB, "UPDATE School_Media SET name='$name', type='$type', description='$Description', video='$video' WHERE id='$id'"); 
   
   $AddGoTo = "../materials-edit.php?file=$id";
   header("Location: $AddGoTo");
   }
 
  //Edit Course Modules
if ((isset($_POST["CourseModule"])) && ($_POST["CourseModule"] == "Edit")) {
  $sort = $_POST['sort'];
  $id = $_POST['id'];
 
      
 mysqli_query($SMB, "UPDATE SMBDU_CourseModules SET sort='$sort' WHERE id='$id'"); 
   
   $AddGoTo = "../edit-course-modules.php?id=$id";
   header("Location: $AddGoTo");
   }

// Edit Subscription
if ((isset($_POST["Subscription"])) && ($_POST["Subscription"] == "Edit")) {
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $price = $_POST['price'];
  $access = $_POST['access_months'];
  $discount_course = $_POST['discount_course'];
  $discount_claiming = $_POST['discount_claiming'];
  $id = $_POST['id'];
      
// Connects to your Database
mysqli_select_db($database_SMB, $SMB);
//Writes the information to the database
 mysqli_query($SMB, "UPDATE SMBDU_Subscription SET name='$name', description='$description', price='$price', access_months='$access', discount_course='$discount_course', discount_claiming='$discount_claiming' WHERE id='$id')"); 
   
   $AddGoTo = "../edit-subscription.php?id=$id";
   header("Location: $AddGoTo");
   }

//Edit Video File
if ((isset($_POST["Video"])) && ($_POST["Video"] == "Edit")) {
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $MID = mysqli_real_escape_string($SMB, $_POST['MID']);
  $duration = $_POST['duration'];
  $video = $_POST['video'];
  $id = $_POST['id'];
      

 mysqli_query($SMB, "UPDATE School_Media SET name='$name', description='$description', duration='$duration', video='$video', MID='$MID' WHERE id='$id'"); 
   
   $AddGoTo = "../media.php";
   header("Location: $AddGoTo");
   }
   
  //Edit Module
if ((isset($_POST["Module"])) && ($_POST["Module"] == "Edit")) {
  $title = mysqli_real_escape_string($SMB, $_POST['title']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $id = $_POST['id'];
   $price = $_POST['price'];
  $ModuleID = $_POST['ModuleID'];
  $CE = $_POST['CE'];
  $CE_Credits = $_POST['CE_Credits'];
  $CE_Template = $_POST['CE_Template'];
  $Status = $_POST['status'];
  $Test = $_POST['test'];
  $DurationDays = $_POST['duration_days'];
  $DurationDescription = $_POST['duration_description'];
      

 mysqli_query($SMB, "UPDATE School_Modules SET ModuleID='$ModuleID', title='$title', description='$description', price='$price', CE='$CE', CE_Credits='$CE_Credits', CE_Template='$CE_Template', status='$Status', test='$Test', duration_days='$DurationDays', duration_description='$DurationDescription' WHERE id='$id'"); 
   
   $AddGoTo = "../modules-edit.php?module=$id";
   header("Location: $AddGoTo");
   }
   
   //Edit Module Image
if ((isset($_POST["ModuleImg"])) && ($_POST["ModuleImg"] == "Edit")) {
  $id = $_POST['id'];
  $image = $_POST['image'];
      

 mysqli_query($SMB, "UPDATE School_Modules SET image='$image' WHERE id='$id'"); 
   
   $AddGoTo = "../modules-edit.php?module=$id";
   header("Location: $AddGoTo");
   }
   
     //Edit Module
if ((isset($_POST["CourseImg"])) && ($_POST["CourseImg"] == "Edit")) {
  $id = $_POST['id'];
  $image = $_POST['image'];
      

 mysqli_query($SMB, "UPDATE SMBDU_Courses SET image='$image' WHERE id='$id'"); 
   
   $AddGoTo = "../course-edit.php?id=$id";
   header("Location: $AddGoTo");
   }
   
//Edit Main Content
if ((isset($_POST["MainContent"])) && ($_POST["MainContent"] == "Edit")) {
  $id = $_POST['id'];
  $header = mysqli_real_escape_string($SMB, $_POST['main_header']);
  $content = mysqli_real_escape_string($SMB, $_POST['main_content']);
      

 mysqli_query($SMB, "UPDATE SMBDU_Content SET main_header='$header', main_content='$content' WHERE id='$id'"); 
   
   $AddGoTo = "../content-main-edit.php?page=$id";
   header("Location: $AddGoTo");
   }
   
  //Edit Login Content
if ((isset($_POST["LoginContent"])) && ($_POST["LoginContent"] == "Edit")) {
  $id = $_POST['id'];
  $header = mysqli_real_escape_string($SMB, $_POST['login_header']);
  $content = mysqli_real_escape_string($SMB, $_POST['login_content']);
      

 mysqli_query($SMB, "UPDATE SMBDU_Content SET login_header='$header', login_content='$content' WHERE id='$id'"); 
   
   $AddGoTo = "../content-user-edit.php?page=$id";
   header("Location: $AddGoTo");
   }
   
   //Edit Testimonial
if ((isset($_POST["Testimonial"])) && ($_POST["Testimonial"] == "Edit")) {
   $id = $_POST['id'];
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $testimonial = mysqli_real_escape_string($SMB, $_POST['testimonial']);

      

 mysqli_query($SMB, "UPDATE Testimonials SET name='$name', testimonial='$testimonial' WHERE id='$id'"); 
   
   $AddGoTo = "../testimonials.php";
   header("Location: $AddGoTo");
   }
   
     //Edit Service/ Add On Product
if ((isset($_POST["Service"])) && ($_POST["Service"] == "Edit")) {
  $title = mysqli_real_escape_string($SMB, $_POST['title']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $price = $_POST['price'];
  $disclaimer = mysqli_real_escape_string($SMB, $_POST['disclaimer']);
  $email_1 = $_POST['email_1'];
  $email_2 = $_POST['email_2'];
  $id = $_POST['id'];
  $course = $_POST['course'];
  $module = $_POST['module'];
  $book = $_POST['book'];
  $ClaimingWheels = $_POST['claiming_wheels'];
  $PhoneSupport = $_POST['phone_support'];
      

 mysqli_query($SMB, "UPDATE SMBDU_AddOns SET title='$title', description='$description', price='$price', disclaimer='$disclaimer', email_1='$email_1', email_2='$email_2', course='$course', module='$module', book='$book', claiming_wheels='$ClaimingWheels', phone_support='$PhoneSupport' WHERE id='$id'"); 
   
   $AddGoTo = "../services-edit.php?id=$id";
   header("Location: $AddGoTo");
   }

// Edit Add On Books
if ((isset($_POST["BookAddOn"])) && ($_POST["BookAddOn"] == "Edit")) {
 $BID = $_POST['BID'];
  $price = $_POST['price'];
  $email_1 = $_POST['email_1'];
  $email_2 = $_POST['email_2'];
  $id = $_POST['id'];
  $course = $_POST['course'];
  $module = $_POST['module'];
	
$query_Book = "SELECT * FROM Books WHERE id='$BID'";
$Book = mysqli_query($SMB, $query_Book);
$row_Book = mysqli_fetch_assoc($Book);
$totalRows_Book = mysqli_num_rows($Book);
$Title = $row_Book['title'];
$IMG = $row_Book['image'];

 mysqli_query($SMB, "UPDATE SMBDU_AddOns SET BID='$BID', title='$Title', image='$IMG', price='$price', email_1='$email_1', email_2='$email_2', course='$course', module='$module' WHERE id='$id'"); 
   
   $AddGoTo = "../edit-AddOn-Books.php?id=$id";
   header("Location: $AddGoTo");
   }

     //Edit Service/ Add On Product
if ((isset($_POST["ServiceImg"])) && ($_POST["ServiceImg"] == "Edit")) {
  $image = $_POST['image'];
  $id = $_POST['id'];
      

 mysqli_query($SMB, "UPDATE SMBDU_AddOns SET image='$image' WHERE id='$id'"); 
   
   $AddGoTo = "../services-edit.php?id=$id";
   header("Location: $AddGoTo");
   }
// Edit Teaser Sort
if((isset($_POST['teaser_require'])) && ($_POST['teaser_require'] != "")) {
 $Edit_Sort = $_POST['require'];
 $Edit_id = $_POST['teaser_to_adjust'];
      

mysqli_query($SMB, "UPDATE SMBDU_Teasers SET register_only='$Edit_Sort' WHERE id = '$Edit_id'"); 
	
	$insertGoTo = "../manage-teasers.php";
	header("Location: $insertGoTo");

}
// Edit Teaser Sort
if((isset($_POST['teaser_sort'])) && ($_POST['teaser_sort'] != "")) {
 $Edit_Sort = $_POST['teaser_sort'];
 $Edit_id = $_POST['sort_to_adjust'];
      

mysqli_query($SMB, "UPDATE SMBDU_Teasers SET sort='$Edit_Sort' WHERE id = '$Edit_id'"); 
	
	$insertGoTo = "../manage-teasers.php";
	header("Location: $insertGoTo");

}

// Edit Module Sort
if((isset($_POST['module_sort'])) && ($_POST['module_sort'] != "")) {
 $Edit_Sort = $_POST['module_sort'];
 $Edit_id = $_POST['sort_to_adjust'];
$Edit_MID = $_POST['MID'];
      

mysqli_query($SMB, "UPDATE School_ModuleVideos SET sort='$Edit_Sort' WHERE id = '$Edit_id'"); 
	
	$insertGoTo = "../modules-edit.php?module=$Edit_MID";
	header("Location: $insertGoTo");

}

// Edit Course Sort
if((isset($_POST['course_sort'])) && ($_POST['course_sort'] != "")) {
 $Edit_Sort = $_POST['course_sort'];
 $Edit_id = $_POST['sort_to_adjust'];
$Edit_CID = $_POST['CID'];
      

mysqli_query($SMB, "UPDATE SMBDU_CourseModules SET sort='$Edit_Sort' WHERE id = '$Edit_id'"); 
	
	$insertGoTo = "../course-edit.php?id=$Edit_CID";
	header("Location: $insertGoTo");

}

  //Edit Promo
if ((isset($_POST["Promo"])) && ($_POST["Promo"] == "Edit")) {
  $promo = $_POST['promo'];
  $Module = $_POST['Module'];
  $Course = $_POST['Course'];
  $Book = $_POST['Book'];
  $Service = $_POST['Service']; 
  $discount = $_POST['discount'];
  $start = date('Y-m-d', strtotime($_POST['start_date']));
  $end = date('Y-m-d', strtotime($_POST['end_date']));
 $id = $_POST['id'];

      

 mysqli_query($SMB, "UPDATE SMBDU_Promo SET promo='$promo', Module='$Module', Course='$Course', Book='$Book', Service='$Service', discount='$discount', start_date='$start', end_date='$end' WHERE id='$id'"); 
   
   $AddGoTo = "../edit-promos.php?promo=$id";
   header("Location: $AddGoTo");
   }

//Edit Order Item
if ((isset($_POST["OrderItem"])) && ($_POST["OrderItem"] == "Edit")) {
  $EndDate = date('Y-m-d', strtotime($_POST['end_date']));
  $duration = $_POST['durationDescription'];
  $id = $_POST['id'];
 

 mysqli_query($SMB, "UPDATE School_OrdersCart SET end_date='$EndDate', durationDescription='$duration' WHERE id='$id'"); 
   
   $AddGoTo = "../edit-order-items.php?id=$id";
   header("Location: $AddGoTo");
   }


//Edit Add On Status
if ((isset($_POST["AddOnItem"])) && ($_POST["AddOnItem"] == "Edit")) {
  $id = $_POST['id'];
  $Addon_Complete = $_POST['AddOn_Complete'];
  $AddOn_Date = date("Y-m-d H:i:s"); 
 

 mysqli_query($SMB, "UPDATE School_OrdersCart SET AddOn_Complete='$Addon_Complete', AddOn_CompleteDate='$AddOn_Date' WHERE id='$id'"); 
   
   $AddGoTo = "../user-addons.php?id=$id";
   header("Location: $AddGoTo");
   }

//Edit Notification Text
if ((isset($_POST["Notify"])) && ($_POST["Notify"] == "Edit")) {
$id = $_POST['id'];
$subject = mysqli_real_escape_string($SMB, $_POST['subject']);
$header = mysqli_real_escape_string($SMB, $_POST['header']);
$topText = mysqli_real_escape_string($SMB, $_POST['top_text']);
$endText = mysqli_real_escape_string($SMB, $_POST['end_text']);
 

 mysqli_query($SMB, "UPDATE SMBDU_Notifications SET subject='$subject', header='$header', top_text='$topText', end_text='$endText' WHERE id='$id'"); 
   
   $AddGoTo = "../notification-edit.php?id=$id";
   header("Location: $AddGoTo");
   }

// Edit Handout Sort
if((isset($_POST['handout_sort'])) && ($_POST['handout_sort'] != "")) {
 $Edit_Sort = $_POST['handout_sort'];
 $Edit_id = $_POST['handout_to_adjust'];
$Edit_MID = $_POST['MID'];
      

mysqli_query($SMB, "UPDATE SMBDU_ModuleHandouts SET sort='$Edit_Sort' WHERE id = '$Edit_id'"); 
	
	$insertGoTo = "../modules-edit.php?module=$Edit_MID";
	header("Location: $insertGoTo");

}

// Edit Question Sort
if((isset($_POST['question_sort'])) && ($_POST['question_sort'] != "")) {
 $Edit_Sort = $_POST['question_sort'];
 $Edit_id = $_POST['question_to_adjust'];
$Edit_MID = $_POST['MID'];
      

mysqli_query($SMB, "UPDATE SMBDU_TestQuestions SET sort='$Edit_Sort' WHERE id = '$Edit_id'"); 
	
	$insertGoTo = "../modules-edit.php?module=$Edit_MID";
	header("Location: $insertGoTo");

}

// Edit Answer Sort
if((isset($_POST['answer_sort'])) && ($_POST['answer_sort'] != "")) {
 $Edit_Sort = $_POST['answer_sort'];
 $Edit_id = $_POST['sort_to_adjust'];
$Edit_QID = $_POST['QID'];
      

mysqli_query($SMB, "UPDATE SMBDU_TestAnswers SET sort='$Edit_Sort' WHERE id = '$Edit_id'"); 
	
	$insertGoTo = "../test-edit.php?id=$Edit_QID";
	header("Location: $insertGoTo");

}

// Edit Answer Sort
if((isset($_POST['correct_to_adjust'])) && ($_POST['correct_to_adjust'] != "")) {
 $Edit_Sort = $_POST['Correct'];
 $Edit_id = $_POST['correct_to_adjust'];
$Edit_QID = $_POST['QID'];
      

mysqli_query($SMB, "UPDATE SMBDU_TestAnswers SET correct='$Edit_Sort' WHERE id = '$Edit_id'"); 
	
	$insertGoTo = "../test-edit.php?id=$Edit_QID";
	header("Location: $insertGoTo");

}
// Edit Test Question
if((isset($_POST['TestQuestion'])) && ($_POST['TestQuestion'] != "")) {
 $Edit_Question = mysqli_real_escape_string($SMB, $_POST['Question']);
 $AnswerOne = mysqli_real_escape_string($SMB, $_POST['Answer_1']);
  $AnswerTwo = mysqli_real_escape_string($SMB, $_POST['Answer_2']);
  $AnswerThree = mysqli_real_escape_string($SMB, $_POST['Answer_3']);
  $AnswerFour = mysqli_real_escape_string($SMB, $_POST['Answer_4']);
  $CorrectOne = $_POST['Correct_1'];
  $CorrectTwo = $_POST['Correct_2'];
  $CorrectThree = $_POST['Correct_3'];
  $CorrectFour = $_POST['Correct_4'];
 $Edit_Sort = $_POST['sort'];
$Edit_ID = $_POST['id'];
      

mysqli_query($SMB, "UPDATE SMBDU_TestQuestions SET Question='$Edit_Question', sort='$Edit_Sort', Answer_1='$AnswerOne', Answer_2='$AnswerTwo', Answer_3='$AnswerThree', Answer_4='$AnswerFour', Correct_1='$CorrectOne', Correct_2='$CorrectTwo', Correct_3='$CorrectThree', Correct_4='$CorrectFour'  WHERE id = '$Edit_ID'"); 
	
	$insertGoTo = "../test-edit.php?id=$Edit_ID";
	header("Location: $insertGoTo");

}

// Edit PopUp Content
if((isset($_POST['PopUp'])) && ($_POST['PopUp'] != "")) {
 $Edit_Header = $_POST['header'];
 $Edit_Text = $_POST['text'];
$Edit_ID = $_POST['id'];

mysqli_query($SMB, "UPDATE SMBDU_PopupText SET header='$Edit_Header', text='$Edit_Text' WHERE id = '$Edit_ID'"); 
	
	$insertGoTo = "../manage-popup.php?id=$Edit_ID";
	header("Location: $insertGoTo");

}
//CE Template
if ((isset($_POST["Edit"])) && ($_POST["Edit"] == "CE")) {
  $ID= $_POST['id'];
  $TemplateName = mysqli_real_escape_string($SMB, $_POST['TemplateName']);
  $hdr = mysqli_real_escape_string($SMB, $_POST['hdr']);
  $topText = mysqli_real_escape_string($SMB, $_POST['topText']);
  $sponsor = mysqli_real_escape_string($SMB, $_POST['sponsor']);
  $sponsor_code = mysqli_real_escape_string($SMB, $_POST['sponsor_code']);
  $CE_code = mysqli_real_escape_string($SMB, $_POST['CE_Code']);
  $state_delivered = mysqli_real_escape_string($SMB, $_POST['state_delivered']);
  $FooterText = mysqli_real_escape_string($SMB, $_POST['FooterText']);
  $SignatureTitle = mysqli_real_escape_string($SMB, $_POST['SignatureTitle']);
  $disclaimer = mysqli_real_escape_string($SMB, $_POST['disclaimer']);
      

 mysqli_query($SMB, "UPDATE CElayout SET TemplateName='$TemplateName', hdr='$hdr', topText='$topText', sponsor='$sponsor', sponsor_code='$sponsor_code', state_delivered='$state_delivered', FooterText='$FooterText', SignatureTitle='$SignatureTitle', disclaimer='$disclaimer', CE_Code='$CE_code' WHERE id='$ID'"); 

   
   $AddGoTo = "../edit-CE-template.php?template=$ID";
   header("Location: $AddGoTo");
   }

//CE Template Content Image
if ((isset($_POST["Edit"])) && ($_POST["Edit"] == "CEimg")) {
  $file = ""; $file = $file . basename( $_FILES['TextIMG']['name']); 
  $vid = $_POST['vid'];
  $ext_1 = pathinfo($file, PATHINFO_EXTENSION);
  $TextImg = "SMBDU-TextImg-".$vid.".".$ext_1;
  $ID= $_POST['id'];
      

 mysqli_query($SMB, "UPDATE CElayout SET TextIMG='$TextImg' WHERE id='$ID'"); 
 
 if(move_uploaded_file($_FILES['TextIMG']['tmp_name'], "../videos/" .$TextImg));
   
   $AddGoTo = "../edit-CE-template.php?template=$ID";
   header("Location: $AddGoTo");
   }

//CE Template Signature Image
if ((isset($_POST["Edit"])) && ($_POST["Edit"] == "SignIMG")) {
  $signature = ""; $signature = $signature . basename( $_FILES['SignatureImg']['name']); 
  $vid = $_POST['vid'];
  $ext_2 = pathinfo($signature, PATHINFO_EXTENSION);
  $SignImg = "SMBDU-SignImg-".$vid.".".$ext_2; 
  $ID= $_POST['id'];
      

 mysqli_query($SMB, "UPDATE CElayout SET SignatureImg='$SignImg' WHERE id='$ID'");

 if(move_uploaded_file($_FILES['SignatureImg']['tmp_name'], "../videos/" .$SignImg));
   
   $AddGoTo = "../edit-CE-template.php?template=$ID";
   header("Location: $AddGoTo");
   }

//Edit Module Test Question and Answers
if ((isset($_POST["TestQuestion"])) && ($_POST["TestQuestion"] == "Edit")) {
  $ModuleID = $_POST['MID'];
  $ID = $_POST['ID'];
  $Question = mysqli_real_escape_string($SMB, $_POST['Question']);
  $AnswerOne = mysqli_real_escape_string($SMB, $_POST['Answer_1']);
  $AnswerTwo = mysqli_real_escape_string($SMB, $_POST['Answer_2']);
  $AnswerThree = mysqli_real_escape_string($SMB, $_POST['Answer_3']);
  $AnswerFour = mysqli_real_escape_string($SMB, $_POST['Answer_4']);
  $CorrectOne = $_POST['Correct_1'];
  $CorrectTwo = $_POST['Correct_2'];
  $CorrectThree = $_POST['Correct_3'];
  $CorrectFour = $_POST['Correct_4'];
  

mysqli_query($SMB, "UPDATE SMBDU_TestQuestions SET Question='$Question', Answer_1='$AnswerOne', Answer_2='$AnswerTwo', Answer_3='$AnswerThree', Answer_4='$AnswerFour', Correct_1='$CorrectOne', Correct_2='$CorrectTwo', Correct_3='$CorrectThree', Correct_4='$CorrectFour' WHERE id='$ID'"); 


   
   $AddGoTo = "../modules-edit.php?module=$ModuleID";
   header("Location: $AddGoTo");
   }

 //Edit User
if ((isset($_POST["Edit"])) && ($_POST["Edit"] == "User")) {
  $practice = mysqli_real_escape_string($SMB, $_POST['practice']);
  $dentist = mysqli_real_escape_string($SMB, $_POST['Dentist']);
  $first_name = mysqli_real_escape_string($SMB, $_POST['first_name']);
  $last_name = mysqli_real_escape_string($SMB, $_POST['last_name']);
  $degree = $_POST['degree'];
  $email_address = $_POST['email_address'];
  $phone_number = $_POST['phone_number'];
  $address = mysqli_real_escape_string($SMB, $_POST['address']);
  $city = $_POST['city'];
  $state = $_POST['state'];
  $zip = $_POST['zip'];
  $id = $_POST['id'];
      

 mysqli_query($SMB, "UPDATE School_Users SET practice='$practice', first_name='$first_name', last_name='$last_name', degree='$degree', email_address='$email_address', phone_number='$phone_number', address='$address', city='$city', state='$state', zip='$zip', Dentist='$dentist' WHERE id='$id'"); 
   
   $AddGoTo = "../users-manager.php?userID=$id";
   header("Location: $AddGoTo");
   }

 //Edit Order
if ((isset($_POST["Edit"])) && ($_POST["Edit"] == "Order")) {
  $practice = mysqli_real_escape_string($SMB, $_POST['practice']);
  $dentist = mysqli_real_escape_string($SMB, $_POST['dentist']);
  $first_name = mysqli_real_escape_string($SMB, $_POST['first_name']);
  $last_name = mysqli_real_escape_string($SMB, $_POST['last_name']);
  $email_address = $_POST['email_address'];
  $phone_number = $_POST['phone_number'];
  $address = mysqli_real_escape_string($SMB, $_POST['address']);
  $city = $_POST['city'];
  $state = $_POST['state'];
  $zip = $_POST['zip'];
  $Status = $_POST['status'];
  $id = $_POST['id'];
      

 mysqli_query($SMB, "UPDATE School_Orders SET practice='$practice', first_name='$first_name', last_name='$last_name', email_address='$email_address', phone_number='$phone_number', address='$address', city='$city', state='$state', zip='$zip', dentist='$dentist', status = '$Status' WHERE id='$id'"); 
	
   
   $AddGoTo = "../edit-order.php?orderID=$id";
   header("Location: $AddGoTo");
   }

?>