Fix staff profile page to display correct user

HashJProgramming · HashJProgramming · commit da484a8a158d · 2023-11-16T20:24:57.000+08:00
information
diff --git a/functions/views/staff.php b/functions/views/staff.php
@@ -17,7 +17,7 @@
             <td><img class="rounded-circle me-2" width="30" height="30" src="assets/img/profile.png"><?php echo $row['username']; ?></td>
             <td><?php echo $row['created_at']; ?></td>
             <td class="text-center">
-                <a class="mx-1" href="profile-staff.php" role="button"><i class="far fa-eye" style="font-size: 20px;"></i></a>
+                <a class="mx-1" href="profile-staff.php?id=<?php echo $row['id']?>" role="button"><i class="far fa-eye" style="font-size: 20px;"></i></a>
                 <a class="mx-1" href="#" role="button" data-bs-target="#update" data-bs-toggle="modal" data-id="<?php echo $row['id']?>" data-username="<?php echo $row['username']?>"><i class="far fa-edit text-warning" style="font-size: 20px;"></i></a>
                 <a class="mx-1" href="#" role="button" data-bs-target="#remove" data-bs-toggle="modal" data-id="<?php echo $row['id']?>"><i class="far fa-trash-alt text-danger" style="font-size: 20px;"></i></a>
             </td>
diff --git a/profile-staff.php b/profile-staff.php
@@ -2,8 +2,7 @@
     include_once 'functions/authentication.php';
     include_once 'functions/connection.php';
     
-    $id = $_SESSION['id'];
-    $username = $_SESSION['username'];
+    $id = $_GET['id'];
     $sql = 'SELECT Transactions.id, Transactions.kilo, Transactions.total, Transactions.status, Transactions.created_at, users.username, customers.fullname 
             FROM Transactions 
             JOIN users ON Transactions.user_id = users.id 
@@ -13,6 +12,15 @@
     $stmt->bindParam(':id', $id);
     $stmt->execute();
     $results = $stmt->fetchAll();
+
+    $sql = 'SELECT username 
+        FROM users 
+        WHERE id = :id';
+$stmt = $db->prepare($sql);
+$stmt->bindParam(':id', $id);
+$stmt->execute();
+$info = $stmt->fetch();
+$username = $info['username'] ?? 'None';
 ?>
 
 <!DOCTYPE html>
