admin/include/update.php

<?php
/**********************************************************
Function Library: update.php
Original Author: Paul Bramscher <brams006@umn.edu>
Last Modified: 03.16.2004 by Paul Bramscher
***********************************************************
Comments:
This library brings together all SQL update functions for
LibData general setup tables.  Those pertaining to
PageScribe and SubjectBuilder are located in
scribe_application.php and subject_builder.php
respectively.
***********************************************************
Table of Contents:
purgePassword
updateCoursesub
updateFaculty
updateFeature
updateInfotype
updateLibunit
updateLocation
updatePassword
updateResource
updateService
updateSingleField
updateStaff
updateStyle
updateSubject
updateVendor
**********************************************************/


/********************************************************** 
Function: purgePassword
Author: Paul Bramscher
Last Modified: 03.15.2004
***********************************************************
Purpose:
This function purges the locally encrypted mySQL stored
password for the supplied staff id (sets to NULL).  Note
that at no point does this system actually retrieve the
value of the password and bring it to an HTML form, neither
in plaintext nor in a "password" type HTML form field.
**********************************************************/
function purgePassword($staff_id){

        msgTableOpen(1, "Purging Password...");
        printf("<b>Messages:</b><br>\n");

        if ($staff_id > 0) {

                $sql = "UPDATE staff SET password = NULL WHERE staff_id = " . $staff_id;
                if (xx_tryquery ($sql)) printf("Successfully purged password for this staff account.");

        }
        else printf("Staff ID not found.");

        printf("<br><br>\n");
        msgTableClose();
}


/**********************************************************
Function: updateCoursesub
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Update supplied course subject id.
**********************************************************/
function updateCoursesub($campus_id, $cip_code, $coursesub, $coursesub_descr, $coursesub_id) {

        msgTableOpen(1, "Updating Course Subject (ID# " . $coursesub_id . ")");
        printf("<b>Messages:</b><br>\n");

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $coursesub_display = $coursesub;
        $coursesub_search = textSearchmySQL($coursesub);

        // Check to see if already exists
        $exists = recordCount("coursesub", "coursesub", $coursesub_search, "A");
        $exists_id = lookupField("coursesub", "coursesub", $coursesub_search, "coursesub_id");
        
        // If exists in the courseub table under a different coursesub_id
        if ($exists > 0 && $exists_id != $coursesub_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $coursesub_display . "</b> already exists in the course subject table.";
        }
        
        // Check for blank entry
        if ($coursesub == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the course subject.";
        }

        // Perform the update only if no errors encountered
        if ($err_code == 0) {

                // Clean up strings
                $coursesub = textInmySQL($coursesub);
                $coursesub_descr = textInmySQL($coursesub_descr);
                $cip_code = textInmySQL($cip_code);
        
                // Build the SQL
                $sql = "UPDATE coursesub SET coursesub = '"
                        . $coursesub
                        . "', coursesub_descr ='"
                        . $coursesub_descr
                        . "', cip_code = '"
                        . $cip_code
                        . "', campus_id = "
                        . $campus_id
                        . " WHERE coursesub_id ="
                        . $coursesub_id;
                if (xx_tryquery ($sql)) printf("Successfully updated <b>%s</b> course subject.", $coursesub_display);
        }
        else printf("%s", $err_msg);
        
        printf("<br><br>\n");
        msgTableClose();
}


/**********************************************************
Function: updateFaculty
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Update supplied faculty id.  Faculty must have both a
unique non-blank staff_account, and non-blank last name.
**********************************************************/
function updateFaculty($faculty_email, $faculty_firstname,
        $faculty_id, $faculty_lastname, $faculty_account) {

        msgTableOpen(1, "Updating Faculty (ID# " . $faculty_id . ")");
        printf("<b>Messages:</b><br>\n");

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $faculty_name_display = $faculty_firstname . " " . $faculty_lastname;

        // Check to see if already exists
        $exists_id = existsFaculty($faculty_firstname, $faculty_lastname);

        if ($exists_id > 0 && $exists_id != $faculty_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $faculty_name_display . "</b> already exists in the Faculty table.";
        }

        // Check for blank last name
        if ($faculty_lastname == "") {
                $err_code = 2;
                $err_msg = "Failed.  Cannot have a blank Last Name.";
        }

        if ($err_code == 0 ) {

                // Clean up strings
                if (strlen($faculty_lastname) > 0) $faculty_lastname = textInmySQL($faculty_lastname);
                if (strlen($faculty_firstname) > 0) $faculty_firstname = textInmySQL($faculty_firstname);
                if (strlen($faculty_email) > 0) $faculty_email = textInmySQL($faculty_email);
                if (strlen($faculty_account) > 0) $faculty_account = textInmySQL($faculty_account);
                
                // Build the SQL
                $sql = "UPDATE faculty SET faculty_lastname = '"
                        . $faculty_lastname
                        . "', faculty_firstname ='"
                        . $faculty_firstname
                        . "', faculty_email ='"
                        . $faculty_email
                        . "', faculty_account ='"
                        . $faculty_account
                        . "' WHERE faculty_id ="
                        . $faculty_id;
                if (xx_tryquery ($sql)) printf("Successfully updated faculty person <b>%s</b>.", $faculty_name_display);
        }
        else printf("%s", $err_msg);
        
        printf("<br><br>\n");
        msgTableClose();
}


/**********************************************************
Function: updateFeature
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Update supplied feature id.
**********************************************************/
function updateFeature($feature, $feature_id, $image_alt, $image_path) {

        msgTableOpen(1, "Updating Feature (ID# " . $feature_id . ")");
        printf("<b>Messages:</b><br>\n");

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $feature_display = $feature;
        $feature_search = textSearchmySQL($feature);

        // Check to see if already exists
        $exists = recordCount("feature", "feature", $feature_search, "A");
        $exists_id = lookupField("feature", "feature", $feature_search, "feature_id");
        
        // If exists in the feature table under a different feature_id
        if ($exists > 0 && $exists_id != $feature_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $feature_display . "</b> already exists in the feature table.";
        }
        
        // Check for blank entry
        if ($feature == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the feature.";
        }

        // Perform the update only if no errors encountered
        if ($err_code == 0) {

                // Clean up strings
                $feature = textInmySQL($feature);
                $image_alt = textInmySQL($image_alt);
                $image_path = textInmySQL($image_path);
        
                // Build the SQL
                $sql = "UPDATE feature SET feature = '"
                        . $feature
                        . "', image_alt ='"
                        . $image_alt
                        . "', image_path ='"
                        . $image_path
                        . "' WHERE feature_id ="
                        . $feature_id;
                if (xx_tryquery ($sql)) printf("Successfully updated <b>%s</b> feature.", $feature_display);
        }
        else printf("%s", $err_msg);

        printf("<br><br>\n");
        msgTableClose();

}


/**********************************************************
Function: updateInfotype
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Update supplied infotype id.
**********************************************************/
function updateInfotype($infotype, $infotype_id, $masterinfotype_id, $mastersubject_id) {

        msgTableOpen(1, "Updating Information Type (ID# " . $infotype_id . ")");
        printf("<b>Messages:</b><br>\n");

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness purposes
        $infotype_display = $infotype;
        $infotype_search = textSearchmySQL($infotype);

        // Check to see if already exists
        $exists = recordCount("infotype", "infotype", $infotype_search, "A");
        $exists_id = lookupField("infotype", "infotype", $infotype_search, "infotype_id");
        
        // If exists in the infotype table under a different infotype_id (not editing the name of this infotype)
        if ($exists > 0 && $exists_id != $infotype_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $infotype_display . "</b> already exists in the Information Type table.";
        }
        
        // Check for blank entry
        if ($infotype == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the Information Type name.";
        }
                
        // Proceed if no errors encountered
        if ($err_code == 0) {

                // Clean up strings
                $infotype = textInmySQL($infotype);             

                // First, update affected RQS relationships
                $sql = "UPDATE res_sub_infotype SET masterinfotype_id = "
                        . $masterinfotype_id
                        . " WHERE infotype_id = "
                        . $infotype_id;
                if (xx_tryquery ($sql)) printf("Updated affected RQS relationships (if any).<BR>\n");

                // Build the SQL
                $sql = "UPDATE infotype SET infotype = '"
                        . $infotype
                        . "', masterinfotype_id ="
                        . $masterinfotype_id
                        . ", mastersubject_id ="
                        . $mastersubject_id
                        . " WHERE infotype_id ="
                        . $infotype_id;
                if (xx_tryquery ($sql)) printf("Successfully updated <b>%s</b> information type.", $infotype_display);
        }
        else printf("%s", $err_msg);

        printf("<br><br>\n");
        msgTableClose();

}


/**********************************************************
Function: updateLibunit
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Updates the supplied library unit id with new information.
Library Units must have both a unique name and unique
abbreviation e.g. "Digital Library Developement
Laboratory" and "DLDL".
**********************************************************/
function updateLibunit($head_staff_id, $libunit, $libunit_abbrev, $libunit_id) {

        // Error flag
        $err_code = 0;

        // Need for display/uniqueness purposes
        $libunit_display = $libunit;
        $libunit_abbrev_display = $libunit_abbrev;
        $libunit_search = textSearchmySQL($libunit);
        $libunit_abbrev_search = textSearchmySQL($libunit_abbrev);

        // Check to see if libunit already exists
        $exists = recordCount("libunit", "libunit", $libunit_search, "A");
        $exists_id = lookupField("libunit", "libunit", $libunit_search, "libunit_id");
        if ($exists > 0 && $exists_id != $libunit_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $libunit_display . "</b> already exists in the Library Unit table.";
        }

        // Check to see if libunit abbreviation already exists
        $exists = recordCount("libunit", "libunit_abbrev", $libunit_abbrev_search, "A");
        $exists_id = lookupField("libunit", "libunit_abbrev", $libunit_abbrev_search, "libunit_id");

        if ($exists > 0 && $exists_id != $libunit_id) {
                $err_code = 2;
                $err_msg = "Failed. <b>" . $libunit_abbrev_display . "</b> abbreviation already exists in the Library Unit table.";
        }

        // Check for blank linunit entry
        if ($libunit == "") {
                $err_code = 3;
                $err_msg = "Failed.  Cannot enter a blank Library Unit.";
        }

        // Check for blank linunit abbrev entry
        if ($libunit_abbrev == "") {
                $err_code = 4;
                $err_msg = "Failed.  Cannot enter a blank Library Unit abbreviation.";
        }

        // Add only if no errors encountered
        if ($err_code == 0) {

                if (strlen($libunit) > 0) $libunit = textInmySQL($libunit);
                if (strlen($libunit_abbrev) > 0) $libunit_abbrev = textInmySQL($libunit_abbrev);

                // Build the SQL
                $sql = "UPDATE libunit SET libunit = '"
                        . $libunit
                        . "', libunit_abbrev ='"
                        . $libunit_abbrev
                        . "', head_staff_id ="
                        . $head_staff_id
                        . " WHERE libunit_id ="
                        . $libunit_id;
                xx_tryquery ($sql);
                formLibunit($libunit_id);
        }
        
        else {
                msgTableOpen(1, "Updating Library Unit (ID# " . $libunit_id . ")");
                printf("<b>Messages:</b><br>\n");       
                printf("%s", $err_msg);
                printf("<br><br>\n");
                msgTableClose();
        }
}


/**********************************************************
Function: updateLocation
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Update supplied location id.
**********************************************************/
function updateLocation($address1, $address2,
        $address3, $address4, $campus, $hoursURL, $location, $location_descr,
        $location_id, $mainURL, $mapURL, $referenceURL, $telephone) {

        msgTableOpen(1, "Updating Locating (ID# " . $location_id . ")");
        printf("<b>Messages:</b><br>\n");

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness purposes
        $location_display = $location;
        $location_search = textSearchmySQL($location);

        // Check to see if already exists
        $exists = recordCount("location", "location", $location_search, "A");
        $exists_id = lookupField("location", "location", $location_search, "location_id");
        
        // If exists in the location table under a different location_id
        if ($exists > 0 && $exists_id != $location_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $location_display . "</b> already exists in the location table.";
        }
        
        // Check for blank entry
        if ($location == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the location name.";
        }

        // Perform the update only if no errors encountered
        if ($err_code == 0) {

                // Clean up strings
                if (strlen($location) > 0) $location = textInmySQL($location);
                if (strlen($location_descr) > 0) $location_descr = textInmySQL($location_descr);
                if (strlen($campus) > 0) $campus = textInmySQL($campus);
                if (strlen($address1) > 0) $address1 = textInmySQL($address1);
                if (strlen($address2) > 0) $address2 = textInmySQL($address2);
                if (strlen($address3) > 0) $address3 = textInmySQL($address3);
                if (strlen($address4) > 0) $address4 = textInmySQL($address4);          
                if (strlen($telephone) > 0) $telephone = textInmySQL($telephone);
                if (strlen($mainURL) > 0) $mainURL = textInmySQL($mainURL);
                if (strlen($referenceURL) > 0) $referenceURL = textInmySQL($referenceURL);
                if (strlen($mapURL) > 0) $mapURL = textInmySQL($mapURL);
                if (strlen($hoursURL) > 0) $hoursURL = textInmySQL($hoursURL);
                
                // Build the SQL
                $sql = "UPDATE location SET location = '"
                        . $location
                        . "', location_descr ='"
                        . $location_descr
                        . "', campus ='"
                        . $campus
                        . "', address1 ='"
                        . $address1
                        . "', address2 ='"
                        . $address2
                        . "', address3 ='"
                        . $address3
                        . "', address4 ='"
                        . $address4
                        . "', mainURL ='"
                        . $mainURL
                        . "', hoursURL ='"
                        . $hoursURL
                        . "', referenceURL ='"
                        . $referenceURL
                        . "', mapURL ='"
                        . $mapURL
                        . "', telephone ='"
                        . $telephone
                        . "' WHERE location_id ="
                        . $location_id;
                if (xx_tryquery ($sql)) printf("Successfully updated <b>%s</b> location.", $location_display);
        }
        else printf("%s", $err_msg);

        printf("<br><br>\n");
        msgTableClose();

}  


/**********************************************************
Function: updatePassword
Author: Paul Bramscher
Last Modified: 03.15.2004
***********************************************************
Purpose:
Changes the locally encrypted and mySQL stored password to
the newly supplied value.  Note that the new password and
the "confirm" must match, and it must be 6 characters
minimum.  As with purgePassword, at no time does this
system bring the password out of the database and present
it on an HTML form, neither in plaintext nor in a
"password" type HTML form field.  The password in plaintext
is never viewable to the system, nor to mySQL itself.  If
a user forgets his/her password, it must be reset by an
administrator.
**********************************************************/
function updatePassword($password, $password_confirm, $staff_id) {

        // Error flag
        $err_code = 0;

        // Check for less than 6 char.
        if (strlen($password) < 6) {
                $err_code = 1;
                $err_msg = "Failed.  Password must be 6 characters minimum.";
        }
        
        // Check for mis-matched password and confirm
        if ($password != $password_confirm) {
                $err_code = 2;
                $err_msg = "Failed.  Password and confirm password didn't match.";
        }       

        // Update only if no errors encountered
        if ($err_code == 0) {

                // Build the SQL
                $sql = "UPDATE staff SET password = password('"
                        . $password
                        . "') WHERE staff_id ="
                        . $staff_id;

                xx_tryquery ($sql);
                formStaff($staff_id);
        }
        
        else {
                msgTableOpen(1, "Updating Local Password...");
                printf("<b>Messages:</b><br>\n");       
                printf("%s", $err_msg);
                printf("<br><br>\n");
                msgTableClose();
        }
}


/**********************************************************
Function: updateResource
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Update supplied resource id, and call formResource back
again.
**********************************************************/
function updateResource($annotation, $author, $call_no, $cat_num, $coverage_detail,
        $edition, $guide_url, $infotype_id, $key_id, $other_title, $pub_date, $publisher,
        $resource_message, $resource_status, $sess_staff_account, $sources_indexed,
        $title, $url, $vendor_id) {

        $resource_id = (int) $key_id;

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness purposes
        $title_display = $title;
        $title_search = textSearchmySQL($title);

        // Check to see if already exists
        $exists = recordCount("resource", "title", $title_search, "A");
        $exists_id = lookupField("resource", "title", $title_search, "resource_id");
        
        // If exists in the resource table under a different resource_id
        if ($exists > 0 && $exists_id != $resource_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $title_display . "</b> already exists in the resource table.";
        }
        
        // Check for blank entry
        if ($title == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the resource title.";
        }
        
        // Clean up strings
        if (strlen($annotation) > 0) $annotation = textInmySQL($annotation);
        if (strlen($author) > 0) $author = textInmySQL($author);
        if (strlen($call_no) > 0) $call_no = textInmySQL($call_no);
        if (strlen($cat_num) > 0) $cat_num = textInmySQL($cat_num);
        if (strlen($coverage_detail) > 0) $coverage_detail = textInmySQL($coverage_detail);
        if (strlen($edition) > 0) $edition = textInmySQL($edition);
        if (strlen($other_title) > 0) $other_title = textInmySQL($other_title);
        if (strlen($pub_date) > 0) $pub_date = textInmySQL($pub_date);
        if (strlen($publisher) > 0) $publisher = textInmySQL($publisher);
        if (strlen($sources_indexed) > 0) $sources_indexed = textInmySQL($sources_indexed);
        if (strlen($title)> 0) $title = textInmySQL($title);
        if (strlen($url) > 0) $url = textInmySQL($url);
        if (strlen($guide_url) > 0) $guide_url = textInmySQL($guide_url);       
        if (strlen($resource_message) > 0) $resource_message = textInmySQL($resource_message);
        if ($resource_status < 1) {
                $resource_status = "";
                $resource_message = "";
        }       

        // Update only if no errors encountered
        if ($err_code == 0) {

                // Set up SQL
                $sql = "UPDATE resource SET annotation = '"
                        . $annotation
                        . "', author = '"
                        . $author
                        . "', call_no = '"
                        . $call_no
                        . "', cat_num = '"
                        . $cat_num
                        . "', coverage_detail = '"
                        . $coverage_detail
                        . "', date_modified = now() "
                        . ", edition = '"
                        . $edition
                        . "', guide_url = '"
                        . $guide_url
                        . "', infotype_id = "
                        . $infotype_id
                        . ", other_title = '"
                        . $other_title
                        . "', pub_date = '"
                        . $pub_date
                        . "', publisher = '"
                        . $publisher
                        . "', resource_message = '"
                        . $resource_message
                        . "', resource_status = '"
                        . $resource_status
                        . "', sources_indexed = '"
                        . $sources_indexed
                        . "', title = '"
                        . $title
                        . "', url = '"
                        . $url
                        . "', vendor_id = '"
                        . $vendor_id
                        . "', account_modified = '"
                        . $sess_staff_account
                        . "' WHERE resource_id = "
                        . $key_id;

                xx_tryquery ($sql);
                formResource($key_id, 0, 0, '');
        }

        else {
                msgTableOpen(1, "Updating Resource (ID# " . $resource_id . ")");
                printf("<b>Messages:</b><br>\n");       
                printf("%s", $err_msg);
                printf("<br><br>\n");
                msgTableClose();
        }
}


/**********************************************************
Function: updateService
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Update supplied service id and call formService back again.
**********************************************************/
function updateService($address1, $address2, $address3, $address4, $email,
        $fax, $nonaff, $service, $serviceDescr, $service_id, $serviceURL, $telephone) {

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $service_display = $service;
        $service_search = textSearchmySQL($service);

        // Check to see if already exists
        $exists = recordCount("service", "service", $service_search, "A");
        $exists_id = lookupField("service", "service", $service_search, "service_id");
        
        if ($exists > 0 && $exists_id != $service_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $service_display . "</b> already exists in the service table.";
        }
        
        // Check for blank entry
        if ($service == "") {
                $err_code = 2;
                $err_msg = "Failed.  Cannot enter a blank service.";
        }

        if ($err_code == 0) {

                // Clean up strings
                if (strlen($address1) > 0) $address1 = textInmySQL($address1);
                if (strlen($address2) > 0) $address2 = textInmySQL($address2);
                if (strlen($address3) > 0) $address3 = textInmySQL($address3);
                if (strlen($address4) > 0) $address4 = textInmySQL($address4);
                if (strlen($email) > 0) $email = textInmySQL($email);
                if (strlen($fax) > 0) $fax = textInmySQL($fax);
                if (strlen($service) > 0) $service = textInmySQL($service);
                if (strlen($serviceDescr) > 0) $serviceDescr = textInmySQL($serviceDescr);
                if (strlen($serviceURL) > 0) $serviceURL = textInmySQL($serviceURL);
                if (strlen($telephone) > 0) $telephone = textInmySQL($telephone);
        
                // Build the SQL
                $sql = "UPDATE service SET service = '"
                        . $service
                        . "', serviceDescr ='"
                        . $serviceDescr
                        . "', address1 ='"
                        . $address1
                        . "', address2 ='"
                        . $address2
                        . "', address3 ='"
                        . $address3
                        . "', address4 ='"
                        . $address4
                        . "', serviceURL ='"
                        . $serviceURL
                        . "', email ='"
                        . $email
                        . "', fax ='"
                        . $fax
                        . "', telephone ='"
                        . $telephone
                        . "', nonaff = '"
                        . $nonaff
                        . "' WHERE service_id ="
                        . $service_id;

                xx_tryquery ($sql);
                formService($service_id);
        
        }

        else {
                msgTableOpen(1, "Updating Service (ID# " . $service_id . ")");
                printf("<b>Messages:</b><br>\n");       
                printf("%s", $err_msg);
                printf("<br><br>\n");
                msgTableClose();
        }
}  


/**********************************************************
Function: updateSingleField 
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Updates any single field in any supplied table.  Checks
for uniqueness and blank value.
**********************************************************/
function updateSingleField($display, $display_field, $key_field,
        $key_id, $newValue, $table){

        msgTableOpen(1, "Updating " . $display . " (ID# " . $key_id . ")");
        printf("<b>Messages:</b><br>\n");
        
        // Error flag
        $err_code = 0;  

        $newValue_search = textSearchmySQL($newValue);

        // Check to see if already exists
        $exists = recordCount($table, $display_field, $newValue_search, "A");
        $exists_id = lookupField($table, $display_field, $newValue_search, $key_field);
        
        // If exists in the infotype table under a different infotype_id (not editing the name of this infotype)
        if ($exists > 0 && $exists_id != $key_field) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $newValue . "</b> already exists in the <b>"
                        . $table
                        . "</b> table.\n";
        }
        
        // Check for blank entry
        if ($newValue == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the <b>"
                        . $display
                        . "</b>.";
        }
        
        // Continue if no errors
        if ($err_code == 0) {
        
                $newValue_display = $newValue;
                $newValue = textInmySQL($newValue);
        
                // Build the SQL
                $sql = "UPDATE "
                        . $table
                        . " SET "
                        . $display_field
                        . " = '"
                        . $newValue
                        . "' WHERE "
                        . $key_field
                        . " = "
                        . $key_id;
                if (xx_tryquery ($sql)) printf("Successfully changed %s to <b>%s</b>.", $display, $newValue_display);
        
        }
        else printf("%s", $err_msg);

        printf("<br><br>\n");
        msgTableClose();
}  


/**********************************************************
Function: updateStaff
Author: Paul Bramscher
Last Modified: 03.15.2004
***********************************************************
Purpose:
Updates the supplied staff id with new information.  Staff
must have, at a minimum, a last name, first name, and
unique staff account name.  Uniqueness is enforced only on
staff_account.
**********************************************************/
function updateStaff($access_id, $first_name,
        $last_name, $sess_access_level, $staff_account,
        $staff_email, $staff_id, $stafftitle_id) {

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness purposes
        $staff_account_display = $staff_account;
        $staff_account_search = textSearchmySQL($staff_account);

        // Check to see if the staff_account already exists
        $exists = recordCount("staff", "staff_account", $staff_account_search, "A");
        $exists_id = lookupField("staff", "staff_account", $staff_account_search, "staff_id");
        
        if ($exists > 0 && $exists_id != $staff_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $staff_account_display . "</b> already exists in the Staff table.";
        }

        // Check for blank first name or last name
        if ($first_name == "" || $last_name == "") {
                $err_code = 2;
                $err_msg = "Failed.  A first and last name must be supplied for all staff.";
        }

        // Check for blank staff_account
        if ($staff_account == "") {
                $err_code = 3;
                $err_msg = "Failed.  A staff account must be supplied for all staff.";
        }

        // Check for access level higher than current access
        $this_access_level = lookupfield("access", "access_id", $access_id, "access_level");
        if ($this_access_level > $sess_access_level) {
                $err_code = 4;
                $err_msg = "Failed.  You may not promote staff to higher privileges than your own.";
        }

        // Continue only if no errors.
        if ($err_code == 0) {

                // Clean up strings
                if (strlen($first_name) > 0) $first_name = textInmySQL($first_name);
                if (strlen($last_name) > 0) $last_name = textInmySQL($last_name);
                if (strlen($staff_account) > 0) $staff_account = textInmySQL($staff_account);
                if (strlen($staff_email) > 0) $staff_email = textInmySQL($staff_email);
                
                // Build the SQL
                $sql = "UPDATE staff SET access_id = "
                        . $access_id
                        . ", first_name ='"     
                        . $first_name
                        . "', last_name ='"
                        . $last_name
                        . "', stafftitle_id = "
                        . $stafftitle_id
                        . ", staff_account = '"
                        . $staff_account
                        . "', staff_email = '"
                        . $staff_email
                        . "' WHERE staff_id ="
                        . $staff_id;

                xx_tryquery ($sql);
                formStaff($staff_id);
        }
        else {
                msgTableOpen(1, "Updating Staff ID# " . $staff_id);
                printf("<b>Messages:</b><br>\n");       
                printf("%s", $err_msg);
                printf("<br><br>\n");
                msgTableClose();
        }
}


/**********************************************************
Function: updateStyle
Author: Paul Bramscher
Last Modified: 03.15.2004
***********************************************************
Purpose:
Update the supplied style id.  As with the insert transaction,
no error checking is done to ensure that the supplied files
actually exist and have proper permissions.
**********************************************************/
function updateStyle($css_file, $footer_file, $header_file, $style_id, $style_title) {

        msgTableOpen(1, "Updating Style ID# " . $style_id);
        printf("<b>Messages:</b><br>\n");

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $style_title_display = $style_title;
        $style_title_search = textSearchmySQL($style_title);

        // Check to see if already exists under a different style_id
        $exists = recordCount("style", "style_title", $style_title_search, "A");
        $exists_id = lookupField("style", "style_title", $style_title_search, "style_id");

        if ($exists > 0 && $exists_id != $style_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $style_title_display . "</b> already exists in the style table.";
        }
        
        // Check for blank entry
        if ($style_title == "") {
                $err_code = 2;
                $err_msg = "Failed.  Cannot enter a blank style.";
        }

        if ($err_code == 0) {

                // Clean up strings
                if (strlen($css_file) > 0) $css_file = textInmySQL($css_file);
                if (strlen($footer_file) > 0) $footer_file = textInmySQL($footer_file);
                if (strlen($header_file) > 0) $header_file = textInmySQL($header_file);
                if (strlen($style_title) > 0) $style_title = textInmySQL($style_title);
                
                // Build the SQL
                $sql = "UPDATE style SET style_title = '"
                        . $style_title
                        . "', css_file ='"
                        . $css_file
                        . "', footer_file ='"
                        . $footer_file
                        . "', header_file ='"
                        . $header_file
                        . "' WHERE style_id ="
                        . $style_id;
                if (xx_tryquery ($sql)) printf("Successfully updated <b>%s</b> style.", $style_title_display);
        }
        else printf("%s", $err_msg);
        
        printf("<br><br>\n");
        msgTableClose();
}


/**********************************************************
Function: updateSubject
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Update the supplied subject id, and call formSubject back
again.
**********************************************************/
function updateSubject($subject, $subject_descr, $subject_id, $sublocation_id) {

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness purposes
        $subject_display = $subject;
        $subject_search = textSearchmySQL($subject);

        // Check to see if already exists
        $exists = recordCount("subject", "subject", $subject_search, "A");
        $exists_id = lookupField("subject", "subject", $subject_search, "subject_id");
        
        // If exists in the subject table under a different subject_id (not editing the name of this subject)
        if ($exists > 0 && $exists_id != $subject_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $subject . "</b> already exists in the subject table.";
        }
        
        // Check for blank entry
        if ($subject == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the subject name.";
        }

        // Perform the update only if no errors encountered
        if ($err_code == 0) {

                // Clean up strings
                $subject = textInmySQL($subject);
                if (strlen($subject_descr) > 0) $subject_descr = textInmySQL($subject_descr);

                // Build the SQL
                $sql = "UPDATE subject SET subject = '"
                        . $subject
                        . "', subject_descr = '"
                        . $subject_descr
                        . "', sublocation_id ="
                        . $sublocation_id
                        . " WHERE subject_id = " . $subject_id;
                xx_tryquery($sql);
                formSubject($subject_id);
        }

        else {
                msgTableOpen(1, "Updating Subject (ID# " . $subject_id . ")");
                printf("<b>Messages:</b><br>\n");       
                printf("%s", $err_msg);
                printf("<br><br>\n");
                msgTableClose();
        }
}


/**********************************************************
Function: updateVendor
Author: Paul Bramscher
Last Modified: 03.16.2004
***********************************************************
Purpose:
Update supplied vendor id.
**********************************************************/
function updateVendor($vendor, $vendor_descr, $vendor_id,
        $vendor_message, $vendor_status) {

        msgTableOpen(1, "Updating Vendor (ID# " . $vendor_id . ")");
        printf("<b>Messages:</b><br>\n");

        // Error flag
        $err_code = 0;  

        // Need for display/uniqueness
        $vendor_display = $vendor;
        $vendor_search = textSearchmySQL($vendor);

        // Check to see if already exists
        $exists = recordCount("vendor", "vendor", $vendor_search, "A");
        $exists_id = lookupField("vendor", "vendor", $vendor_search, "vendor_id");
        
        // If exists in the vendor table under a different vendor_id
        if ($exists > 0 && $exists_id != $vendor_id) {
                $err_code = 1;
                $err_msg = "Failed. <b>" . $vendor_display . "</b> already exists in the vendor table.";
        }
        
        // Check for blank entry
        if ($vendor == "") {
                $err_code = 2;
                $err_msg = "Failed.  Must supply some value for the vendor.";
        }

        // Perform the update only if no errors encountered
        if ($err_code == 0) {

                // Clean up strings
                $vendor = textInmySQL($vendor);
                if (strlen($vendor_descr) > 0) $vendor_descr = textInmySQL($vendor_descr);
                if (strlen($vendor_message) > 0) $vendor_message = textInmySQL($vendor_message);
                if ($vendor_status < 1) {
                        $vendor_status = "";
                        $vendor_message = "";
                }

                // Build the SQL
                $sql = "UPDATE vendor SET vendor = '"
                        . $vendor
                        . "', vendor_descr ='"
                        . $vendor_descr
                        . "', vendor_message ='"
                        . $vendor_message
                        . "', vendor_status ='"
                        . $vendor_status
                        . "' WHERE vendor_id ="
                        . $vendor_id;
                if (xx_tryquery ($sql)) printf("Successfully updated <b>%s</b> vendor.", $vendor_display);
        }
        else printf("%s", $err_msg);

        printf("<br><br>\n");
        msgTableClose();
}
?>