sgi/alumnos/action/datos_update.php

<?php
require_once("../include/nocache.php");
require_once("../include/bd_pdo.php");

$pag="../datos_confirm.php";

if(isset($_POST["nombre"], $_POST["apellidos"], $_POST["id"], $_POST["cambio"]) && isset($_POST["contactos"], $_POST["curp"], $_POST["contactos"], $_POST["emergencia"])
    && trim($_POST["nombre"]) != "" && trim($_POST["apellidos"]) != ""){
    $nombre = trim(filter_input(INPUT_POST, "nombre", FILTER_SANITIZE_STRING,array('flags' => FILTER_FLAG_STRIP_LOW)));//limpia texto
    $apellidos = trim(filter_input(INPUT_POST, "apellidos", FILTER_SANITIZE_STRING,array('flags' => FILTER_FLAG_STRIP_LOW)));//limpia texto
    $id = filter_input(INPUT_POST, "id", FILTER_SANITIZE_NUMBER_INT);//limpia texto
    $cambio = filter_input(INPUT_POST, "cambio", FILTER_SANITIZE_NUMBER_INT);//limpia texto

    //$correo1 = mb_strtolower(trim(filter_input(INPUT_POST, "correo1", FILTER_SANITIZE_STRING,array('flags' => FILTER_FLAG_STRIP_LOW))), 'UTF-8');//limpia texto
    //$correo2 = mb_strtolower(trim(filter_input(INPUT_POST, "correo2", FILTER_SANITIZE_STRING,array('flags' => FILTER_FLAG_STRIP_LOW))), 'UTF-8');//limpia texto
    $curp = strtoupper(trim(filter_input(INPUT_POST, "curp", FILTER_SANITIZE_STRING,array('flags' => FILTER_FLAG_STRIP_LOW))));//limpia texto
    
    /*if(strpos($correo1, "lasalle.mx") === false && strpos($correo2, "lasallistas.org.mx") === false){
        header("Location: ".$pag."?error=0");
        exit();
    }*/

/*
    if(isset($_POST["correo_id1"]) && $_POST["correo_id1"]!="")
        $correo_id1 = filter_input(INPUT_POST, "correo_id1", FILTER_SANITIZE_NUMBER_INT);//limpia texto
    if(isset($_POST["correo_id2"]) && $_POST["correo_id2"]!="")
        $correo_id2 = filter_input(INPUT_POST, "correo_id2", FILTER_SANITIZE_NUMBER_INT);//limpia texto
*/

    try{
        $pdo->beginTransaction();
        if($cambio == 1)
            $stmt = $pdo->prepare('Select * from fi_checkusuario(:id, true, NULL, :nom, :apell, :curp, NULL, NULL)');
        else
            $stmt = $pdo->prepare('Select * from fi_checkusuario(:id, false, NULL, :nom, :apell, :curp, NULL, NULL)');
        $stmt->bindParam(":id", $id);
        $stmt->bindParam(":nom", $nombre);
        $stmt->bindParam(":apell", $apellidos);
        $stmt->bindParam(":curp", $curp);
        if(!$stmt->execute()){
            $pdo->rollBack();
            header("Location: ".$pag."?error=1");
            exit();
        }

        $hasLasalle = false;
        $hasLasallistas = false;
        $error = false;

        $contactoObj  = json_decode($_POST["contactos"], true);
        foreach($contactoObj as $contacto){

            /*if($contacto["contacto_valor"] && $_POST["correo_id1"]!="")
                $correo_id1 = filter_input(INPUT_POST, "correo_id1", FILTER_SANITIZE_NUMBER_INT);//limpia texto
            if(isset($_POST["correo_id2"]) && $_POST["correo_id2"]!="")
                $correo_id2 = filter_input(INPUT_POST, "correo_id2", FILTER_SANITIZE_NUMBER_INT);//limpia texto
*/
            //echo $id." ".$contacto["num"]."<br>";
            //if(!empty($contacto["contacto_id"])){
                $stmt = $pdo->prepare('Select * from fd_checkcontacto(:id, :num)');
                $stmt->bindParam(":id", $id);
                $stmt->bindParam(":num", $contacto["num"]);
                $stmt->execute();
            //}

            if(!empty($contacto["contacto_valor"])){
                $query = ":id, :num, ";
                if(!empty($contacto["contacto_id"])){
                    $query .= ":contacto_id, ";
                }else{
                    $query .= "NULL,";
                }
                $query .= ":contacto,";
                $query .= ":perfil, :tipo, ";
                if(!empty($contacto["subtipo"])){
                    $query .= ":subtipo";
                }else{
                    $query .= "NULL";
                }
                //echo $query."<br>";

                $stmt = $pdo->prepare('Select * from fi_checkcontacto('.$query.')');
                if(!empty($contacto["contacto_id"])){ $stmt->bindParam(":contacto_id", $contacto["contacto_id"]); }
                if(!empty($contacto["subtipo"])){ $stmt->bindParam(":subtipo", $contacto["subtipo"]); }
                $stmt->bindParam(":id", $id);
                $stmt->bindParam(":num", $contacto["num"]);
                $stmt->bindParam(":contacto", $contacto["contacto_valor"]);
                $stmt->bindParam(":perfil", $contacto["perfil"]);
                $stmt->bindParam(":tipo", $contacto["tipo"]);
                if(!$stmt->execute()){
                    $error=true;
                }
            }
        }

        $emergenciaObj  = json_decode($_POST["emergencia"], true);
        //echo $emergenciaObj;
        //echo "<p>".!$error." ".!empty($emergenciaObj["emergencia_nombre"])."</p>";
        
        if(!$error && !empty($emergenciaObj["emergencia_nombre"])){
            $stmt = $pdo->prepare('Select * from fi_checkemergencia(:id, :nom, :tel)');
            $stmt->bindParam(":id", $id);
            $stmt->bindParam(":nom", $emergenciaObj["emergencia_nombre"]);
            $stmt->bindParam(":tel", $emergenciaObj["emergencia_tel"]);
            if(!$stmt->execute()){
                $error=true;
            }
        }
        

        if(!$error){
            $pdo->commit();
        }else{
            $pdo->rollBack();
            header("Location: ".$pag."?error=1");
            exit();
        }
    } catch(PDOException $e) {
        $pdo->rollBack();
        header("Location:".$pag."?error=1");
        //print_r($e);
        exit();
    }

}else{
    
    header("Location: ".$pag."?error=0");
    exit();
}
header("Location: ".$pag);
?>