Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
BCE Home cover_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:07
BCE Introduction_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:07
BCE RESOURCE AND SUPPORT_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:08
BCE RULES AND REGULATIONS_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:07
BCE THE LEARNING PROGRAMME_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:08
SpryAssets	[ DIR ]	drwxr-sr-x	2013-02-14 22:54
ajax	[ DIR ]	drwxr-sr-x	2026-08-20 14:43
assignments	[ DIR ]	drwxr-sr-x	2022-03-07 13:03
docthumbs	[ DIR ]	drwxr-sr-x	2022-03-14 09:40
facilitators	[ DIR ]	drwxr-sr-x	2012-01-18 08:00
guidelines	[ DIR ]	drwxr-sr-x	2021-04-29 08:34
images	[ DIR ]	drwxr-sr-x	2023-04-18 07:54
includes	[ DIR ]	drwxr-sr-x	2024-02-23 09:41
lightbox	[ DIR ]	drwxr-sr-x	2012-07-02 08:44
pdf	[ DIR ]	drwxr-sr-x	2012-03-15 12:53
pdf-viewer	[ DIR ]	drwxr-sr-x	2025-02-20 13:18
visual-countdown-timer	[ DIR ]	drwxr-sr-x	2021-11-03 09:27
activities.php	6.49 KB	-rw-r--r--	2024-02-23 09:36
activityadd.php	7.44 KB	-rw-r--r--	2024-02-23 09:36
advisory.php	1.37 KB	-rw-r--r--	2024-02-23 09:36
assignmentadd.php	43.1 KB	-rw-r--r--	2026-08-19 12:45
assignmentinfo.php	2.96 KB	-rw-r--r--	2025-02-24 16:01
assignmentpack.php	4.66 KB	-rw-r--r--	2024-02-23 09:36
assignmentpdf.php	3.64 KB	-rw-r--r--	2024-02-23 09:36
assignments.php	14.04 KB	-rw-r--r--	2026-06-24 12:03
assigsummary.php	12.25 KB	-rw-r--r--	2025-04-14 08:46
calendar.js	13.28 KB	-rw-r--r--	2024-02-23 09:36
calendar.php	502 B	-rw-r--r--	2024-02-23 09:47
cceregister.php	22.5 KB	-rw-r--r--	2013-10-09 08:40
changedates.php	1.35 KB	-rw-r--r--	2024-02-23 09:36
contacts.php	4.87 KB	-rw-r--r--	2025-06-26 12:42
contacts_students.php	2.34 KB	-rw-r--r--	2024-02-27 11:36
details.php	9.24 KB	-rw-r--r--	2025-02-06 10:38
document-pdf-proxy.php	1.95 KB	-rw-r--r--	2025-06-27 10:14
document-view.php	7.35 KB	-rw-r--r--	2025-06-27 12:42
download_student_agreement.php	1.71 KB	-rw-r--r--	2026-03-16 11:53
evaluations.php	6.85 KB	-rw-r--r--	2024-02-23 09:36
exam.php	47.02 KB	-rw-r--r--	2026-08-25 07:11
examresults.php	3.01 KB	-rw-r--r--	2026-02-17 09:45
extension.php	11.33 KB	-rw-r--r--	2026-08-19 12:45
feedback.php	3.91 KB	-rw-r--r--	2024-02-23 09:36
feedbackmsgs.php	5.04 KB	-rw-r--r--	2024-03-25 10:07
file-download.php	343 B	-rw-r--r--	2026-06-24 12:03
forgotpwd.php	2.57 KB	-rw-r--r--	2024-02-23 09:36
gallery.php	1.75 KB	-rw-r--r--	2024-02-23 09:36
guideline-view.php	812 B	-rw-r--r--	2026-02-17 09:45
guideline.php	1 KB	-rw-r--r--	2026-02-17 09:45
guideline_intro.php	14.2 KB	-rw-r--r--	2024-02-23 09:36
guideline_notes.php	2.35 KB	-rw-r--r--	2024-02-23 09:36
guideline_programme.php	39.82 KB	-rw-r--r--	2024-02-23 09:36
guideline_resources.php	21.47 KB	-rw-r--r--	2024-02-23 09:36
guideline_rules.php	44.97 KB	-rw-r--r--	2024-02-23 09:36
inc_dashboard.php	28.4 KB	-rw-r--r--	2026-08-20 12:16
inc_footer.php	412 B	-rw-r--r--	2025-02-20 13:01
inc_footer_html.php	59 B	-rw-r--r--	2024-02-23 09:36
inc_functions.php	1.86 KB	-rw-r--r--	2026-06-24 12:03
inc_guidelinemenu.php	944 B	-rw-r--r--	2024-02-23 09:36
inc_header.php	2.46 KB	-rw-r--r--	2025-02-20 13:01
inc_header_html.php	1.34 KB	-rw-r--r--	2024-02-23 09:36
inc_shared.php	27.07 KB	-rw-r--r--	2026-08-19 12:45
inc_sidebar.php	9.54 KB	-rw-r--r--	2026-05-13 15:17
index.php	8.47 KB	-rw-r--r--	2026-06-02 08:33
library-old.php	8.46 KB	-rw-r--r--	2024-02-16 11:19
library-render.php	11.09 KB	-rw-r--r--	2026-04-29 07:23
library.php	474 B	-rw-r--r--	2024-02-25 11:44
login.php	2.79 KB	-rw-r--r--	2025-02-06 10:39
logout.php	129 B	-rw-r--r--	2024-02-23 09:36
markmessagesread.php	546 B	-rw-r--r--	2024-02-23 09:36
messages.php	4.14 KB	-rw-r--r--	2026-05-05 11:48
modcontact.php	26.51 KB	-rw-r--r--	2026-07-30 15:46
module.php	2.78 KB	-rw-r--r--	2024-02-23 09:36
notices.php	2.73 KB	-rw-r--r--	2024-02-23 09:36
password.php	2.52 KB	-rw-r--r--	2024-02-23 09:36
pdfthumb.php	230 B	-rw-r--r--	2024-02-23 09:36
php_errors.log	14.11 KB	-rw-r--r--	2026-08-21 08:24
phpinfo.php	17 B	-rw-r--r--	2025-06-09 13:16
popups.php	1.71 KB	-rw-r--r--	2024-02-23 09:36
profile.php	14.69 KB	-rw-r--r--	2026-03-16 11:53
profile_mentor.php	4.23 KB	-rw-r--r--	2024-02-23 09:36
progress_report.php	2.53 KB	-rw-r--r--	2026-05-13 15:17
readmessage.php	2.49 KB	-rw-r--r--	2026-05-19 07:04
recommended.php	5.94 KB	-rw-r--r--	2024-02-16 11:18
resources.php	4.14 KB	-rw-r--r--	2024-02-23 09:36
results.php	1.54 KB	-rw-r--r--	2024-02-23 09:36
saveexam.php	5.72 KB	-rw-r--r--	2025-11-19 09:45
sentmessages.php	1.66 KB	-rw-r--r--	2024-03-27 09:30
style.css	26.86 KB	-rw-r--r--	2025-02-20 13:04
submittedactivities.php	2.98 KB	-rw-r--r--	2024-02-23 09:36
submittedassignments.php	7.78 KB	-rw-r--r--	2026-06-24 12:03
templates.php	2.08 KB	-rw-r--r--	2024-02-23 09:36
timetable-render.php	2.27 KB	-rw-r--r--	2025-02-20 13:03
timetable.php	476 B	-rw-r--r--	2024-03-16 16:02
v3_feedback_form.php	2.52 KB	-rw-r--r--	2026-05-27 08:23
v3_feedback_submit.php	2.55 KB	-rw-r--r--	2026-05-27 08:23
videos.php	4.06 KB	-rw-r--r--	2024-02-23 09:36

Rename

<?php
include("inc_functions.php");

// ini_set('display_errors', 1);
// error_reporting(E_ALL);

if (!isset($_SESSION["StudentID"]) || empty($_SESSION["StudentID"]) || $_SESSION["StudentID"] == null)
    header("Location: /cesanet/login.php");

include_once($_SERVER['DOCUMENT_ROOT'] . "/cesanet/includes/html_begin.php");
?>
<h1> Your Details</h1>
<?php
if (!CurrentStudent()) {
    echo "<p><b>Only available to current students.</b></p>";
    die();
}

// Handle student agreement upload (same request as profile update or standalone).
// Files go to cceadmin/students/ and filename follows cceadmin convention: firstname_surname_-_student_agreement_-student_agreement.pdf
$studentAgreementUploadDir = $_SERVER['DOCUMENT_ROOT'] . '/cceadmin/students/';
$allowedAgreementTypes = array('application/pdf', 'image/jpeg', 'image/png', 'image/gif');
$allowedAgreementExtensions = array('pdf', 'jpg', 'jpeg', 'png', 'gif');
$maxAgreementSize = 5 * 1024 * 1024; // 5MB

if (isset($_FILES['student_agreement']) && isset($_FILES['student_agreement']['name']) && strlen($_FILES['student_agreement']['name']) > 0) {
    echo "<pre>DEBUG student_agreement _FILES:\n";
    print_r($_FILES['student_agreement']);
    echo "</pre>";

$file = $_FILES['student_agreement'];
    if ($file['error'] === UPLOAD_ERR_OK) {
        $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
        $finfo = finfo_open(FILEINFO_MIME_TYPE);
        $mime = finfo_file($finfo, $file['tmp_name']);
        finfo_close($finfo);
        if (!in_array($ext, $allowedAgreementExtensions) || !in_array($mime, $allowedAgreementTypes)) {
            echo "<div class=\"alert alert-danger\">Invalid file type. Please upload a PDF or image (JPG, PNG, GIF).</div>";
        } elseif ($file['size'] > $maxAgreementSize) {
            echo "<div class=\"alert alert-danger\">File is too large. Maximum size is 5MB.</div>";
        } else {
            if (!is_dir($studentAgreementUploadDir)) {
                mkdir($studentAgreementUploadDir, 0755, true);
            }
            $sqlSt = "SELECT FirstName, Surname FROM CCEStudents WHERE CCEStudentID=" . (int)$_SESSION["StudentID"];
            $recSt = mysql_query($sqlSt);
            $rowSt = mysql_fetch_assoc($recSt);
            $first = isset($rowSt['FirstName']) ? preg_replace('/[^a-zA-Z0-9\s-]/', '', $rowSt['FirstName']) : 'student';
            $surname = isset($rowSt['Surname']) ? preg_replace('/[^a-zA-Z0-9\s-]/', '', $rowSt['Surname']) : (int)$_SESSION["StudentID"];
            $first = strtolower(trim(preg_replace('/\s+/', '_', $first)));
            $surname = strtolower(trim(preg_replace('/\s+/', '_', $surname)));
            $filename = $first . '_' . $surname . '_-_student_agreement_-student_agreement.' . $ext;
            $targetPath = $studentAgreementUploadDir . $filename;

echo "<pre>DEBUG upload path info:\n";
            echo "DOCUMENT_ROOT: " . htmlspecialchars($_SERVER['DOCUMENT_ROOT']) . "\n";
            echo "Upload dir: " . htmlspecialchars($studentAgreementUploadDir) . "\n";
            echo "Target path: " . htmlspecialchars($targetPath) . "\n";
            echo "Tmp name: " . htmlspecialchars($file['tmp_name']) . "\n";
            echo "</pre>";

$moved = move_uploaded_file($file['tmp_name'], $targetPath);
            echo "<pre>DEBUG move_uploaded_file result: " . ($moved ? "true" : "false") . "</pre>";

if ($moved) {
                $sql = "UPDATE CCEStudents SET AgreementFile='" . addslashes($filename) . "' WHERE CCEStudentID=" . (int)$_SESSION["StudentID"];
                mysql_query($sql);
                echo "<div class=\"alert alert-success\">Your signed student agreement has been uploaded successfully.</div>";
            } else {
                echo "<div class=\"alert alert-danger\">Upload failed. Please try again.</div>";
            }
        }
    } elseif ($file['error'] !== UPLOAD_ERR_NO_FILE) {
        echo "<div class=\"alert alert-danger\">Upload error. Please try again.</div>";
    }
}

if (isset($_POST["go"]) && ($_POST["go"] == 1)) {
    $sql = "SELECT * FROM CCEStudents WHERE CCEStudentID=" . $_SESSION["StudentID"];
    $rec = mysql_query($sql);
    $row = mysql_fetch_assoc($rec);

$msg = "<p>" . $row["FirstName"] . " " . $row["Surname"] . " has updated the following information on his/her profile:</p>"
        . "<table border='1' width='95%' align='center'>"
        . "<tr>"
        . "<td>&nbsp;</td>"
        . "<td width='35%'><b>Current Value</b></td>"
        . "<td width='35%'><b>New Value</b></td>"
        . "</tr>";
    $arrPost = $_POST;
    foreach ($_POST as $key => $value) {
        if (isset($row[$key]) && ($row[$key] != $value)) {
            $msg .= "<tr>"
                . "<td nowrap><b>" . $key . "</b></td>"
                . "<td width='35%'>" . $row[$key] . "</td>"
                . "<td width='35%'>" . $value . "</td>"
                . "</tr>";
            $arrSQL[] = $key . "='" . addslashes(stripslashes($value)) . "' ";
        }
    }
    //	echo $msg;
    //	var_dump($arrSQL);
    if (isset($arrSQL) && (count($arrSQL) > 0)) {
        $sql = "UPDATE CCEStudents SET " . implode(",", $arrSQL) . " WHERE CCEStudentID='" . $_SESSION["StudentID"] . "'";
        //		echo $sql;
        mysql_query($sql);
        $msg .= "</table>";
        $headers = 'MIME-Version: 1.0' . "\r\n";
        $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
        mail("cce@cesa.co.za", "Update of CESAnet student profile", $msg, $headers);
    }

echo "<div class=\"alert alert-success\">Your changes have been made.</div>";
}

$sql = "SELECT * FROM CCEStudents WHERE CCEStudentID=" . $_SESSION["StudentID"];
$rec = mysql_query($sql);
$row = mysql_fetch_assoc($rec);
?>
<form id="form1" name="form1" method="post" action="profile.php" enctype="multipart/form-data">
    <input type="hidden" name="go" value="1">
    <table border="0" cellpadding="5" cellspacing="0" width="95%" align="center">
        <tbody>
            <tr>
                <td width="10%" nowrap>Title:</td>
                <td><input name="Title" type="text" id="Title" class="form-control" value="<?php echo $row["Title"]; ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap>
                    <p>First Name:</p>
                </td>
                <td>
                    <input name="FirstName" type="text" id="FirstName" class="form-control" value="<?php echo $row["FirstName"]; ?>" />
                </td>
            </tr>
            <tr>
                <td width="10%" nowrap>
                    <p>Surname:</p>
                </td>
                <td><input name="Surname" type="text" id="Surname" class="form-control" value="<?php echo $row["Surname"]; ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap>
                    <p>Preferred Name (Known As):</p>
                </td>
                <td>
                    <input name="KnownAs" type="text" id="KnownAs" class="form-control" value="<?php echo $row["KnownAs"]; ?>" />
                </td>
            </tr>
            <tr>
                <td>ECSA Number:</td>
                <td><input name="ECSANumber" type="text" id="ECSANumber" size="30" class="form-control" value="<?php echo $row["ECSANumber"]; ?>" /></td>
            </tr>
            <tr>
                <td>ECSA Registration Category:</td>
                <td>
                    <?php
                    $cceStudentObj = new CCEStudents($sqlf);
                    echo $cceStudentObj->getECSACategorySelectList($row["ECSACategory"]);
                    ?>
                </td>
            </tr>
            <tr>
                <td>Other Statutory Body Name:</td>
                <td><input name="OtherStatutoryBodyName" type="text" id="OtherStatutoryBodyName" size="30" class="form-control" value="<?php echo $row["OtherStatutoryBodyName"]; ?>" /></td>
            </tr>
            <tr>
                <td>Other Statutory Body Number:</td>
                <td><input name="OtherStatutoryBodyNumber" type="text" id="OtherStatutoryBodyNumber" size="30" class="form-control" value="<?php echo $row["OtherStatutoryBodyNumber"]; ?>" /></td>
            </tr>
            <tr>
                <td>Other Statutory Body Category:</td>
                <td><input name="OtherStatutoryBodyCategory" type="text" id="OtherStatutoryBodyCategory" size="30" class="form-control" value="<?php echo $row["OtherStatutoryBodyCategory"]; ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap>ID Number:</td>
                <td><input name="IDNumber" type="text" id="IDNumber" class="form-control" value="<?php echo $row["IDNumber"]; ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap>
                    <p>Telephone No:</p>
                </td>
                <td>
                    <input name="Telephone" type="text" id="Telephone" class="form-control" value="<?php echo $row["Telephone"]; ?>" />
                </td>
            </tr>
            <tr>
                <td width="10%" nowrap>
                    <p>Cell No.&nbsp;:</p>
                </td>
                <td>
                    <input name="Cellphone" type="text" id="Cellphone" class="form-control" value="<?php echo $row["Cellphone"]; ?>" />
                </td>
            </tr>
            <tr>
                <td width="10%" nowrap>
                    <p>E-mail Address:</p>
                </td>
                <td>
                    <input name="EmailAddress" type="text" id="EmailAddress" class="form-control" value="<?php echo $row["EmailAddress"]; ?>" />
                </td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">Organisation:</td>
                <td><input name="Organisation" type="text" id="Organisation" class="form-control" value="<?php echo $row["Organisation"]; ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap>Designation:</td>
                <td><input name="Designation" type="text" id="Designation3" class="form-control" value="<?php echo $row["Designation"]; ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">Organisation Type:</td>
                <td><input name="OrganisationType" type="text" id="OrganisationType" class="form-control" value="<?php echo $row["OrganisationType"]; ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">VAT No:</td>
                <td><input name="VATNo" type="text" id="VATNo" class="form-control" value="<?php echo $row["VATNo"]; ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">
                    <p>Home Address:</p>
                </td>
                <td>
                    <textarea name="HomeAddress" id="HomeAddress" class="form-control"><?php echo stripslashes($row["HomeAddress"]); ?>
                    </textarea>
                </td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">
                    <p>Work Address:</p>
                </td>
                <td>
                    <textarea name="WorkAddress" id="WorkAddress" class="form-control"><?php echo stripslashes($row["WorkAddress"]); ?>
                    </textarea>
                </td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">
                    <p>Postal Address:</p>
                </td>
                <td>
                    <textarea name="PostalAddress" id="PostalAddress" class="form-control"><?php echo stripslashes($row["PostalAddress"]); ?>
                    </textarea>
                </td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">Mentor First Name:</td>
                <td><input name="MentorFirstName" type="text" id="MentorFirstName" class="form-control" value="<?php echo stripslashes($row["MentorFirstName"]); ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">Mentor Surname:</td>
                <td><input name="MentorSurname" type="text" id="MentorSurname" class="form-control" value="<?php echo stripslashes($row["MentorSurname"]); ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">Mentor Tel No:</td>
                <td><input name="MentorTel" type="text" id="MentorTel" class="form-control" value="<?php echo stripslashes($row["MentorTel"]); ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">Mentor Cell No:</td>
                <td><input name="MentorCell" type="text" id="MentorCell" class="form-control" value="<?php echo stripslashes($row["MentorCell"]); ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">Mentor Email:</td>
                <td><input name="MentorEmail" type="text" id="MentorEmail" class="form-control" value="<?php echo stripslashes($row["MentorEmail"]); ?>" /></td>
            </tr>
            <tr>
                <td width="10%" nowrap valign="top">Signed Student Agreement:</td>
                <td>
                    <?php
                    if (!empty($row["AgreementFile"])) {
                        $agreementPath = $_SERVER['DOCUMENT_ROOT'] . '/cceadmin/students/' . $row["AgreementFile"];
                        if (file_exists($agreementPath)) {
                            echo '<p class="mb-2">Current file: <a href="download_student_agreement.php" target="_blank">' . htmlspecialchars($row["AgreementFile"]) . '</a></p>';
                        } else {
                            echo '<p class="mb-2 text-muted">Previously uploaded file is no longer on server. Please upload again.</p>';
                        }
                    } else {
                        echo '<p class="mb-2 text-muted">No agreement uploaded yet.</p>';
                    }
                    ?>
                    <input name="student_agreement" type="file" id="student_agreement" class="form-control" accept=".pdf,.jpg,.jpeg,.png,.gif" />
                    <small class="form-text text-muted">Upload a signed copy (PDF or image). Maximum 5MB.</small>
                </td>
            </tr>
        </tbody>
    </table>

<div class="row p-3">
        <div class="d-grid gap-2 d-md-block text-center">
            <input type="submit" name="button" id="button" class="btn btn-primary" value="Update Now" />
        </div>
    </div>
</form>
<?php
include_once($_SERVER['DOCUMENT_ROOT'] . "/cesanet/includes/html_end.php");