<?php
// members.php
if(isset($_GET["id"]))
{
	// Check if user exists in the database
	$member = $_GET["id"];
	require_once("classes/DbConnector.php");
	$db = new DbConnector();
	$db->connect();
	$query = "SELECT * FROM members WHERE username='$member'";
	$result = $db->query($query);
	$exists = mysql_num_rows($result);  // Does the row exists?
 
	if($exists !="0"){ // Presentation exists so display it
		$rows = $db->fetchArray($result); // Get the profile from database
		echo $rows["presentation"]."<br/><br/>"; 
 
 
		//TODO: Display guestbook here
 
	}	
	else 
	{
		echo "That member does not exist";
	}
}
?>

if(isset($_GET["edit"])) // Edit profile
{	
	// First lets make sure the user is logged in 	
	if(session_is_registered("username") && session_is_registered ("password") && $_SESSION["username"] == $_GET["edit"])
	{
		if(isset($_GET["update"]))
		{
			require_once("classes/DbConnector.php");
			$member = $_GET["edit"];
			$db = new DbConnector();
			$db->connect();
			$presentation = $_POST["presentation"];
			$query = "UPDATE members SET presentation='$presentation' WHERE username='$member'";
			$result = $db->query($query);
			echo "Profile updated!";		
		}
		else 
		{	// Display edit box
			require_once("classes/DbConnector.php");
			$member = $_GET["edit"];
			$db = new DbConnector();
			$db->connect();
			$query = "SELECT * FROM members WHERE username='$member'";
			$result = $db->query($query);
			$rows = $db->fetchArray($result);
			echo "<center><br/><b>Edit your profile</b><br/>
				<form action=\"member.php?edit=".$_GET["edit"]."&update\" method='POST'>
					<textarea name='presentation' rows='10' cols='80' align='left'>"
					.$rows["presentation"].
					"</textarea><br/>
					<input type='submit' value='Update' name='submit'>
				</form>
				</center>
			";
 
		}
	}
}