";
echo "UserRole: $userRole
";
echo "FirstName: $firstName
";
echo "MiddleName: $middleName
";
echo "LastName: $lastName
";
echo "DAddress: $DAddress
";
echo "PhoneNo: $PhoneNo
";
echo "UserName: $userName
";
echo "NewPassword: $newPassword
";
*/
// Check if a new password was provided
if (!empty($newPassword)) {
// Hash the new password
$hashedPassword = password_hash($newPassword, PASSWORD_DEFAULT);
// Update the user's password in the database
$updatePasswordSQL = "UPDATE tbluserauth SET password = '$hashedPassword' WHERE userid = $userID";
echo "Update Password SQL: $updatePasswordSQL
"; // Debugging output
$result = mysqli_query($conn, $updatePasswordSQL);
if (!$result) {
echo "Error updating password: " . mysqli_error($conn);
}
}
// Update other user information based on the userRole
$updateUserSQL = "";
if ($userRole === 'Doc') {
// Update doctor data
$Specialization = isset($_POST["specialization"]) ? $_POST["specialization"] : "";
$LicenseNo = isset($_POST["licno"]) ? $_POST["licno"] : "";
$updateUserSQL = "UPDATE tbldoctor SET fname = '$firstName', mname = '$middleName', lname = '$lastName', phonenum = '$PhoneNo', address = '$DAddress', specialization = '$Specialization', licensenum = '$LicenseNo' WHERE doctorid = $userID";
} elseif ($userRole === 'Sec') {
// Update secretary data
$updateUserSQL = "UPDATE tblsec SET fname = '$firstName', mname = '$middleName', lname = '$lastName', phonenum = '$PhoneNo', address = '$DAddress' WHERE userid = $userID";
}
// Debugging output for updateUserSQL
echo "Update User SQL: $updateUserSQL
";
if (!empty($updateUserSQL)) {
$result = mysqli_query($conn, $updateUserSQL);
if ($result) {
header("Location: adminindex.php?msg=User data updated successfully");
} else {
echo "Error updating user data: " . mysqli_error($conn);
}
}
}