csrtechnew.ohctech.in/trainer_form_save.php

89 lines
3.1 KiB
PHP
Raw Normal View History

2025-04-14 13:28:09 +05:30
<?php
include('includes/config/config.php'); // Include your database connection script
include('includes/auth/auth.php'); // Include authentication script
include('includes/functions.php'); // Include common functions
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
// Start session and get the logged-in user ID
session_start();
$modified_by = $_SESSION['user_name'];
// Get the posted data and escape special characters to prevent SQL injection
$id = $_POST['id'];
$trainer_name = mysqli_real_escape_string($conn, $_POST['trainer_name']);
$age_birth_date = mysqli_real_escape_string($conn, $_POST['age_birth_date']);
$gender = mysqli_real_escape_string($conn, $_POST['gender']);
$marital_status = mysqli_real_escape_string($conn, $_POST['martial_status']);
$email = mysqli_real_escape_string($conn, $_POST['email']);
$phone_number = mysqli_real_escape_string($conn, $_POST['phone_number']);
$date_of_joining = mysqli_real_escape_string($conn, $_POST['date_of_joining']);
$date_of_leaving = mysqli_real_escape_string($conn, $_POST['date_of_leaving']);
$residing_village = mysqli_real_escape_string($conn, $_POST['residing_village']);
$post = mysqli_real_escape_string($conn, $_POST['post']);
$district = mysqli_real_escape_string($conn, $_POST['district']);
$state = mysqli_real_escape_string($conn, $_POST['state']);
$tehsil = mysqli_real_escape_string($conn, $_POST['tehsil']);
$pin_code = mysqli_real_escape_string($conn, $_POST['pin_code']);
$qualification = mysqli_real_escape_string($conn, $_POST['qualification']);
$subjects = mysqli_real_escape_string($conn, $_POST['subjects']);
$trainer_batches = mysqli_real_escape_string($conn, $_POST['trainer_batches']);
$distribution_center = mysqli_real_escape_string($conn, $_POST['distribution_center']);
$ohc_type_id = $_SESSION['current_ohcttype'];
error_log("check_date : ".$date_of_joining."/".$date_of_leaving);
// Insert data into the beneficiaryinfo table
$sql = "INSERT INTO trainerinfo(
trainer_name,
age_birth_date,
gender,
marital_status,
email,
phone_number,
date_of_joining,
date_of_leaving,
residing_village,
post,
district,
state,
tehsil,
pin_code,
qualification,
subjects,
trainer_batches,
distribution_center,
ohc_type_id
) VALUES (
'$trainer_name',
'$age_birth_date',
'$gender',
'$marital_status',
'$email',
'$phone_number',
'$date_of_joining',
'$date_of_leaving',
'$residing_village',
'$post',
'$district',
'$state',
'$tehsil',
'$pin_code',
'$qualification',
'$subjects',
'$trainer_batches',
'$distribution_center',
'$ohc_type_id'
)";
if (mysqli_query($conn, $sql)) {
echo "Trainer Information Saved Successfully";
} else {
echo "Error: " . $sql . "<br>" . mysqli_error($conn);
}
mysqli_close($conn);
} else {
echo "Invalid request method.";
}
?>