Someone

<?php



  //gift certificates  	
		if(isset($_GET['personalTo']))
		{
			include 'include/mysql.php';			
			$mysql = new sql_queries();
			$mysql->do_mysql_connect();
			
			//filter input
			$personalTo = $mysql->mysql_safe($_GET['personalTo']);
			$personalFrom = $mysql->mysql_safe($_GET['personalFrom']);
			$personalService = $mysql->mysql_safe($_GET['personalService']);
			$personalAmount = $mysql->mysql_safe($_GET['personalAmount']);
			$personalGiftWrapped = $mysql->mysql_safe($_GET['personalGiftWrapped']);
			$personalTotal = $mysql->mysql_safe($_GET['personalTotal']);
			$pickup = $mysql->mysql_safe($_GET['pickup']);
			$pickupName = $mysql->mysql_safe($_GET['pickupName']);
			$pickupEmail = $mysql->mysql_safe($_GET['pickupEmail']);
			$pickupPhone = $mysql->mysql_safe($_GET['pickupPhone']);
			$mailtoName = $mysql->mysql_safe($_GET['mailtoName']);
			$mailtoEmail = $mysql->mysql_safe($_GET['mailtoEmail']);
			$mailtoPhone = $mysql->mysql_safe($_GET['mailtoPhone']);
			$mailtoStreet = $mysql->mysql_safe($_GET['mailtoStreet']);
			$mailtoCity = $mysql->mysql_safe($_GET['mailtoCity']);
			$mailtoState = $mysql->mysql_safe($_GET['mailtoState']);
			$mailtoZip = $mysql->mysql_safe($_GET['mailtoZip']);
			$billtoStreet = $mysql->mysql_safe($_GET['billtoStreet']);
			$billtoCity = $mysql->mysql_safe($_GET['billtoCity']);
			$billtoState = $mysql->mysql_safe($_GET['billtoState']);
			$billtoZip = $mysql->mysql_safe($_GET['billtoZip']);
			
			if($_POST['sameAsMailing'] != "") 
			{
				$billtoStreet = "Same as Mailing";
				$billtoCity = "Same as Mailing";
				$billtoState = "Same as Mailing";
				$billtoZip = "Same as Mailing";
			}
			
			$sql = "INSERT INTO gift_certificates (Send_To, Send_From, Service, Amount, Gift_Wrap, Total, Pickup_Location,
					Pickup_Name, Pickup_Email, Pickup_Phone, Mailto_Name, Mailto_Email, Mailto_Phone, Mailto_Street, Mailto_City, 
					Mailto_State, Mailto_Zip, Billing_Address, Billing_City, Billing_State, Billing_Zip) VALUES(
					$personalTo, $personalFrom, $personalService, $personalAmount, $personalGiftWrapped, $personalTotal, 
					$pickup, $pickupName, $pickupEmail, $pickupPhone, $mailtoName, $mailtoEmail, $mailtoPhone, $mailtoStreet,
					$mailtoCity, $mailtoState, $mailtoZip, $billtoStreet, $billtoCity, $billtoState, $billtoZip)";
			
			$mysql->run_sql_query($sql);
		}
		
		require('includes/application_top.php');