<?php
session_start();
$usuarioSession = $_SESSION['USUARIO'];
$grupo = $_SESSION['GRUPO'];
$contacto = $_SESSION['CONTACTO'];
$awa_session_id = $_SESSION['AWA_SESION_ID'];
include('../includes/conex.php');
include('../includes/eat.php');
include('../includes/historial.php');
if(!isset($usuarioSession) or $awa_session_id != $awa_id)
{
    eatCookies();
    header('Location:../index.php');
}
if(isset($_COOKIE['usuario']) AND $_COOKIE['usuario'] != $staticUsu )
{
    eatCookies();
    header('Loction:../index.php');
}
if(isset($_COOKIE['idioma']))
{
    include('../lg/LG_' . $_COOKIE['idioma'] . '.php');
}
else
{
    include('../lg/LG_SP.php');
}
$variable = "";
$nombre = htmlspecialchars(mysqli_real_escape_string($con,$_POST['nombre']));
$apellido = htmlspecialchars(mysqli_real_escape_string($con,$_POST['apellido']));
$variable .= " APELLIDO1 = '$apellido'";
if(!empty($_POST['segundo_apellido']))
{
    $apellido2 = htmlspecialchars(mysqli_real_escape_string($con,$_POST['segundo_apellido']));
    $variable .= ", APELLIDO2 = '$apellido2'";
}
$mostrar = $nombre . " " . $apellido; 
$email = htmlspecialchars(mysqli_real_escape_string($con,$_POST['email']));
$telefono = htmlspecialchars(mysqli_real_escape_string($con,$_POST['telefono']));
if(!empty($_POST['otros_datos']))
{
    $notas = htmlspecialchars(mysqli_real_escape_string($con,$_POST['otros_datos']));
    $variable .= ", NOTAS = '$notas'"; 
}
$codigo_contacto = htmlspecialchars(mysqli_real_escape_string($con,$_POST['codigo_contacto']));
$sql = "UPDATE CONTACTOS 
SET NOMBRE = '$nombre', MOSTRAR = '$mostrar', EMAIL1 = '$email', TLFNO1 = '$telefono', $variable
WHERE CODIGO = $codigo_contacto";
$con->query($sql);
$_SESSION['msg'] = 1;
header("Location:../tasacion-listado.php?codigo=" . $_SESSION['CODIGO_TASACION_LISTADO']);
?>