Menu
▾
▴
#3 Admin Info Forms
An admin cannot currently edit its info because when the admin is created its not being submitted into the Alumni table. Therefore the Personal Information forms cannot be filled because Graduation Year is pulled from the Alumni Table.
An admin account should be only be allowed to edit his name and should not be able to be searched. A solution to this could be made in form1.php that would detect if the user is an Admin or Alumni. If Admin then a different Personal Information page should be brought up (preferably from the User Table in the DB). If Alumni, than the regular table from the Alumni Table in the database should be showed. Another issue that would come up during this would be if a user is an Admin and a Alumni. This should be disallowed in order to prevent confusion.
Logged In: YES
user_id=1762163
Originator: NO
This is currently being resolved by reworking the way admins are created and maintained. They shouldn't have publicly consumable info and shouldn't even be able to visit the information form pages. The database will be revisited and possibly hardened to prevent overlapping user types.