<?php
require_once("header.php");
echo $page_content;

if(sizeof($loggedcreds) > 0):
	$tab = isset($_GET['tab']) ? sanitize(escape($_GET['tab'])) : NULL;
	$id = isset($_GET['id']) ? sanitize(escape($_GET['id'])) : NULL;

	$focus = encrypt('[UPDATE_PROFILE]');

	$stmt = $mysqli->prepare("SELECT name FROM users WHERE (userid = ? AND email = ?) LIMIT 1") or die(result(false, "An error occurred. Please try after some time."));
	$stmt->bind_param('is', $loggedid, $loggedemail);
	$stmt->execute();
	$stmt->store_result();
	$count_rows = $stmt->num_rows();
	$stmt->bind_result($name);
	$stmt->fetch();
	$stmt->close();
	if($count_rows == 1):
		$enloggedid = encrypt($loggedid);
		$enloggedemail = encrypt($loggedemail);
echo <<<EOJ
		<div class="fluid account">
			<div class="head">
				<input type="button" value="update profile" class="button default" onclick="$('.account form').slideToggle(0);$('.output').hide(0);$('.account :input').prop('disabled', false).show(0);$('.loader').hide(0);" />
			</div>
			<p class="noscript">Your browser doesn&rsquo;t support javascript. Please use another browser.</p>
			<form action="{$baseurl}{$filename}" method="post" name="profileupdationform" class="form ajax-form" enctype="multipart/form-data" onsubmit="return submitform(this)">
				<input type="hidden" name="token" value="{$token}" autocomplete="off" readonly="readonly" />
				<input type="hidden" name="focus" value="{$focus}" autocomplete="off" readonly="readonly" />
				<input type="hidden" name="lguid" value="{$enloggedid}" autocomplete="off" readonly="readonly" />
				<input type="hidden" name="lgeid" value="{$enloggedemail}" autocomplete="off" readonly="readonly" />
				<div class="body">
					<div class="row">
						<label class="flbl">Full Name<span>*</span></label>
						<input type="text" name="name" value="{$name}" autocomplete="off" class="field" />
					</div>
					<div class="row">
						<label class="flbl">Password</label>
						<input type="password" name="password" autocomplete="off" class="field" />
					</div>
					<div class="row">
						<label class="flbl">Re-enter Password</label>
						<input type="password" name="repassword" autocomplete="off" class="field" />
					</div>
					<div class="row link">
						<input type="submit" name="submit" value="save changes" disabled="disabled" class="button" />
						<div class="loader">Please Wait...</div>
					</div>
				</div>
			</form>
			<div class="output"></div>
EOJ;
		if(($tab && $id)):
			$stmt = $mysqli->prepare("SELECT title, status, publish, creation FROM articlestatus WHERE articlestatusid = ? ORDER BY creation DESC") or die("An error occurred. Please try after some time.");
			$stmt->bind_param('i', $id);
			$stmt->execute();
			$stmt->store_result();
			$count_rows = $stmt->num_rows();
			$stmt->bind_result($title, $status, $publish, $creation);
			$stmt->fetch();
			$stmt->close();
			$publish = ($publish) ? 'Not Published' : date('d/m/Y', strtotime($publish));
			$creation = date('d/m/Y h:i A', strtotime($creation));
echo <<<EOJ
			<h4>{$title}</h4><br clear="all">
			<table border="0" cellpadding="0" cellspacing="0" class="fluid articles" style="table-layout:fixed">
			<tr>
			<th align="center" valign="middle">Status</th>
			<th align="center" valign="middle">Publish Date</th>
			<th align="center" valign="middle">Submit Date</th>
			</tr>
			<tr>
			<td align="center" valign="middle" style="padding:5px 0px">{$status}</td>
			<td align="center" valign="middle" style="padding:5px 0px">{$publish}</td>
			<td align="center" valign="middle" style="padding:5px 0px">{$creation}</td>
			</tr>
			</table>
EOJ;
		else:
			$snum = 0;
			$stmt = $mysqli->prepare("SELECT articlestatusid, title FROM articlestatus WHERE email = ? ORDER BY creation DESC") or die("An error occurred. Please try after some time.");
			$stmt->bind_param('s', $loggedemail);
			$stmt->execute();
			$stmt->store_result();
			if($stmt->num_rows() > 0):
				$stmt->bind_result($articlestatusid, $title);
echo <<<EOJ
				<table border="0" cellpadding="0" cellspacing="0" class="fluid articles">
				<tr>
				<th align="center" valign="middle" class="xs">S. No.</th>
				<th align="left" valign="middle">Title</th>
				</tr>
EOJ;
				while($stmt->fetch()):
					$snum = $snum + 1;
					$title = strip_tags(html_entity_decode($title), '<i><em>');
					echo '<tr>';
					echo '<td align="center" valign="top" class="xs">' . $snum . '</td>';
					echo '<td align="left" valign="top" style="text-align:justify">';
					echo '<a href="' . $baseurl . 'account/article/' . $articlestatusid . '">' . $title . '</a>';
					echo '</td>';
					echo '</tr>';
				endwhile;
				echo '</table>';
			else:
				echo 'You have not submitted any article.';
			endif;
			$stmt->close();
		endif;
		echo '</div>';
	else:
		unset($_SESSION);
		session_destroy();
		echo 'User not found.';
	endif;
else:
	echo 'You are not logged in. <a href="' . $baseurl . 'login">Click here</a> to login.';
endif;

require_once("footer.php");
?>