All pastes #482684 Raw Edit

Yancho

public php v1 · immutable
·published 2007-05-11 11:22 UTC
rendered paste body
bookings.php :<?php// Main Booking Filesession_start();$choice = $_GET['choice'];$option = $_GET['option'];require 'functions.php';require_once 'menu_html.php';//include 'new_transport.php';if ($choice == 'empty') {  // Still no choice - first screen after login  draw_header();  draw_empty_form();  draw_footer();}if ($choice == 'transport') {  //Checking which action             if ($option == 'new') {              include 'new_transport_booking.php';             }             if ($option == 'edit') {               include 'edit_transport_booking.php';             }}?>================================edit_transport_booking.php<?phpinclude_once 'functions.php';include 'functions_edit_transport_booking.php';include_once 'menu_html.php';//Edit Bookingsession_start();connect_db();sethin();if ($_POST['edited'] == "true")   {     $vid = $_POST['vid'];     $voucherid = "TRANS-".$vid;     $updated = date("Y:m:d H:i:s");     if ($_POST['delete'] == "false") {         $groupno = $_POST['groupno'];         $leadername = $_POST['leadername'];         $leadermob = $_POST['leadermobile'];             $gurnata = $_POST['gurnata'];         $day = $_POST['day'];         $month = $_POST['month'];         $year = $_POST['year'];         $depdate = $year."-".$month."-".$day;             $hr = $_POST['hr'];         $min = $_POST['min'];         $deptime = $hr.":".$min.":00" ;                  $deppoint = $_POST['R1']; // departure point                  if ( $deppoint == 'other' ) {           $deppoint = $_POST['other']; //custom dep point         }                  $typeoftransport = $_POST['typeoftransport'];                  $pax = $_POST['pax'];         $leaders = $_POST['pax'];                  $activitytype = $_POST['R2']; // activitytype                  $typeofpayment = $_POST['R3']; //typeofpayment                  $destination = $_POST['R4']; //destination                  if ( $destination == 'other' ) {            $destination = $_POST['other_destination'];         } //custom destiantion             $hr1 = $_POST['hr0'];         $min1 = $_POST['min0'];         $rettime = $hr1.":".$min1.":00" ;                  $returnfrom = $_POST['returnfrom'];         $returnto = $_POST['returnto'];                  $updated = date("Y:m:d H:i:s");         $updatedby = $_SESSION['rname']; //updated by         $active = "1";             $manageremail = "matthew@solutions-lab.net" ;         $supplieremail = "yancho@mepa-clan.info";                  $recepient[0] = $manageremail;         $recepient[1] = $supplieremail;                      foreach ($recepient AS $i => $value) {}  {              echo "$i $recepient $value $recepient[$i]  ";         $mime_boundary = "----EF Malta----".md5(time());                # -=-=-=- MAIL HEADERS                $to = $recepient[$i];            $subject = "Edited Transport Booking from EF";                        $headers = "From: Beach Club <beachclub@efbookings.info>\n";            $headers .= "Reply-To: Jeff Galea <jeff@efbookings.info>\n";            $headers .= "MIME-Version: 1.0\n";            $headers .= "Content-Type: multipart/alternative; boundary=\"$mime_boundary\"\n";                        # -=-=-=- TEXT EMAIL PART                        $message = "--$mime_boundary\n";            $message .= "Content-Type: text/plain; charset=UTF-8\n";            $message .= "Content-Transfer-Encoding: 8bit\n\n";                        $message .= "Editing Booking:\n\n";            $message .= "Voucher Number : $voucherid\n";            $message .= "Group Number : $groupno\n";            $message .= "Leader Name : $leadername\n";            $message .= "Leader Mobile Number : $leadermob\n";            $message .= "\n\n";            $message .= "Departure Date : $gurnata : $day / $month / $year\n";            $message .= "Departure Time : $hr:$min\n";            $message .= "Type of Activity : $activitytype\n";            $message .= "Destination : $destination\n";            $message .= "Return at $hr1:$min1 from $returnfrom\n";            $message .= "Return Point : $returnto\n\n";            $message .= "\n\n";            $message .= "Number of Paying Students : $pax\n";            $message .= "Number of Free Leaders : $leaders\n";            $message .= "Type of Transport Requested : $typeoftransport\n";            $message .= "\n\n";            $message .= "Booking made by : $updatedby\n";            $message .= "Date : $updated\n";            $message .= "Thank You.\n\n";                                    # -=-=-=- FINAL BOUNDARY                        $message .= "--$mime_boundary--\n\n";                # -=-=-=- SEND MAIL                        $mail_sent = mail( $to, $subject, $message, $headers );         }                  // SQL INSERT QUERY                  $updatequery = "UPDATE transport SET groupno='$groupno', leadername='$leadername', leadermobile='$leadermobile', ";         $updatequery .= "depdate='$depdate', deppoint='$deppoint', typeoftransport='$typeoftransport', pax='$pax', ";         $updatequery .= "leaders='$leaders', activitytype='$activitytype', typeofpayment='$typeofpayment', destination='$destination', ";         $updatequery .= "rettime='$rettime', returnfrom='$returnfrom', returnto='$returnto', updated='$updated', updatedby='$updatedby', active='$active'";         $updatequery .= "WHERE vid = '$vid'";         echo "\n\n\n$updatequery\n\n\n";         mysql_query($updatequery) or die('Error, query failed With this error : ' . mysql_error());                      //outputting confirmation          display_confirmation();         }                           if (($_POST['delete'] == 'ON')) {            createconfirm("form11");            $deletequery = "UPDATE transport SET updated='$updated', updatedby='$updatedby', active = '0' WHERE vid = '$vid'";            mysql_query($deletequery) or die('Error, query failed With this error : ' . mysql_error());                        $manageremail = "matthew@solutions-lab.net" ;            $supplieremail = "yancho@mepa-clan.info";                     $recepient[0] = $manageremail;            $recepient[1] = $supplieremail;                          foreach ($recepient AS $i => $value) {}  {              echo "$i $recepient $value $recepient[$i]  ";              $mime_boundary = "----EF Malta----".md5(time());            # -=-=-=- MAIL HEADERS                $to = $recepient[$i];            $subject = "Booking Removed from EF";                        $headers = "From: Beach Club <beachclub@efbookings.info>\n";            $headers .= "Reply-To: Jeff Galea <jeff@efbookings.info>\n";            $headers .= "MIME-Version: 1.0\n";            $headers .= "Content-Type: multipart/alternative; boundary=\"$mime_boundary\"\n";                        # -=-=-=- TEXT EMAIL PART                        $message = "--$mime_boundary\n";            $message .= "Content-Type: text/plain; charset=UTF-8\n";            $message .= "Content-Transfer-Encoding: 8bit\n\n";                        $message .= "Delete Booking:\n\n";            $message .= "Voucher Number : $voucherid\n";            $message .= "Group Number : $groupno\n";            $message .= "Leader Name : $leadername\n";            $message .= "Leader Mobile Number : $leadermob\n";            $message .= "\n\n";            $message .= "Departure Date : $gurnata : $day / $month / $year\n";            $message .= "Departure Time : $hr:$min\n";            $message .= "Type of Activity : $activitytype\n";            $message .= "Destination : $destination\n";            $message .= "\n\n";            $message .= "Booking deleted by : $updatedby\n";            $message .= "Date : $updated\n";            $message .= "Thank You.\n\n";                        # -=-=-=- FINAL BOUNDARY                        $message .= "--$mime_boundary--\n\n";                # -=-=-=- SEND MAIL                        $mail_sent = mail( $to, $subject, $message, $headers );         }            //outputting confirmation            display_confirmation("The Receipt you selected has been set to INACTIVE");         }           }  // End the part where data has already been edited //Displaying the 'old' dataelse {    if (!isset($_SESSION['search'])) {   display_transport(); //displaying the search form    $_SESSION['search'] = "true";  }  if ($_SESSION['search'] == "true") {    //searching the database  after reading the form        $grooupno = $_POST['gr0upno'];    $day = $_POST['d4y'];    $month = $_POST['m0nth'];    $year = $_POST['y34r'];    $deppdate = $year."-".$month."-".$day;        $query22 = "SELECT vid, groupno, leadername, leadermobile, depdate, deptime, deppoint, typeoftransport, ";    $query22 .= "pax, leaders, activitytype, typeofpayment, destination, rettime, returnfrom, returnto, updated, ";    $query22 .= "updatedby, active FROM transport WHERE groupno='$grooupno' AND depdate = '$deppdate' AND active='1'";         $result22 = mysql_query($query22);     if (!$result22) {       $message  = 'Invalid query: ' . mysql_error() . "\n";       $message .= 'Whole query: ' . $query22;       die($message);    }    while ($row = mysql_fetch_assoc($result22)) {      $vid = $row['vid'];      $groupno = $row['groupno'];      $leadername = $row['leadername'];      $leadermobile = $row['leadermobile'];      $depdate = $row['depdate'];      list($year,$month,$day) = explode('-',$depdate);      $deptime = $row['deptime'];      list($hour,$min,$sec) = explode(':',$deptime);      $deppoint = $row['deppoint'];      $typeoftransport = $row['typeoftransport'];      $pax = $row['pax'];      $leaders = $row['leaders'];      $activitytype = $row['activitytype'];      $typeofpayment = $row['typeofpayment'];      $destination = $row['destination'];      $rettime = $row['rettime'];      list($hr,$min,$sec) = explode(':',$deptime);      $returnfrom = $row['returnfrom'];      $returnto = $row['returnto'];    }    redraw_transport();  }}?>=====================a function in menu_html.phpfunction display_transport(){  ?><div align="center">&nbsp;<p>&nbsp;</p><form method="post" "<?php echo $_SERVER['PHP_SELF'];?>">	<table border="0" width="31%" id="table1">		<tr>			<td colspan="2" height="34" bgcolor="#CCFFFF">			<p align="center"><font face="Rockwell Extra Bold" color="#0541B2">			Search Booking</font></td>		</tr>		<tr>			<td width="68%" colspan="2">&nbsp;</td>		</tr>		<tr>			<td width="29%"><font face="Consolas">&nbsp; Group Number :</font></td>			<td width="39%"><input type="text" name="gr0upno" size="20"></td>		</tr>		<tr>			<td width="29%"><font face="Consolas">&nbsp; Date of Activity : </font></td>			<td width="39%"><input type="text" name="d4y" size="2"> /					<input type="text" name="m0nth" size="2"> /					<input type="text" name="y34r" size="4"></td>		</tr>		<tr>			<td width="68%" colspan="2">&nbsp;</td>		</tr>		<input type="hidden" name="searching" value="true">		<tr>			<td width="75%" colspan="2">			<p align="center"><input type="submit" value="Submit" name="B1"></td>		</tr>	</table>	</form></div><?}?>