rendered paste body<?php
ini_set("display_errors","1");
ini_set("display_startup_errors","1");
set_magic_quotes_runtime(0);
include("include/dbcommon.php");
include("include/evac_info_prereg_variables.php");
include("include/languages.php");
// check if logged in
if(!@$_SESSION["UserID"] || !CheckSecurity(@$_SESSION["OwnerID"],"Add"))
{
$_SESSION["MyURL"]=$_SERVER["SCRIPT_NAME"]."?".$_SERVER["QUERY_STRING"];
header("Location: login.php?message=expired");
return;
}
// ----------------------------------------------
if($_SESSION["RecentTransfer"]==true)
{
$newID = $_SESSION["newID"];
Header("Location: evac_info_edit.php?editid1=$newID");
}
// ----------------------------------------------
$_SESSION["RecentTransfer"] = false;
$filename="";
$message="";
$error_happened=false;
$readavalues=false;
...
// add filenames to values
foreach($afilename_values as $akey=>$value)
$avalues[$akey]=$value;
// make SQL string
$strSQL = "insert into ".AddTableWrappers("evac_info")." ";
$strFields="(";
$strValues="(";
// before Add event
$retval = true;
if(function_exists("BeforeAdd"))
$retval=BeforeAdd($avalues);
if($retval)
{
foreach($avalues as $akey=>$value)
{
$strFields.=AddFieldWrappers($akey).", ";
$strValues.=add_db_quotes($akey,$value).", ";
}
if(substr($strFields,-2)==", ")
$strFields=substr($strFields,0,strlen($strFields)-2);
if(substr($strValues,-2)==", ")
$strValues=substr($strValues,0,strlen($strValues)-2);
$strSQL.=$strFields.") values ".$strValues.")";
LogInfo($strSQL);
$key= $_SESSION["keyID"];
// TRANSFER SQL QUERY
$strSQL="INSERT INTO `evac_info` (`LastName`, `FirstName`, `MiddleInitial`, `Gender`, `Race`, `Height`, `Weight`, `HairColor`, `EyeColor`, `DOB`, `DLState`, `DLNumber`, `Address`, `AptUnit`, `City`, `State`, `Zip`, `HomePhone`, `CellPhone`, `SexOffender`, `EmerContName`, `EmerContNum`, `SpecNeedCat`, `SpecialNeeds`) SELECT `LastName`, `FirstName`, `MiddleInitial`, `Gender`, `Race`, `Height`, `Weight`, `HairColor`, `EyeColor`, `DOB`, `DLState`, `DLNumber`, `Address`, `AptUnit`, `City`, `State`, `Zip`, `HomePhone`, `CellPhone`, `SexOffender`, `EmerContName`, `EmerContNum`, `SpecNeedCat`, `SpecialNeeds` FROM `evac_info_prereg` WHERE `evac_info_prereg`.`ID` = $key";
set_error_handler("add_error_handler");
db_exec($strSQL,$conn);
// set newID
$_SESSION["newID"] = mysql_insert_id();
echo $_SESSION["newID"];
//remove record now
$strSQL="DELETE FROM `evac_info_prereg` WHERE `ID` = $key LIMIT 1";
db_exec($strSQL,$conn);
set_error_handler("error_handler");
// move files
if(!$error_happened)
{
foreach ($files_move as $file)
move_uploaded_file($file[0],$file[1]);
$message="<div class=message><<< Record Transfered >>></div>";
$_SESSION["RecentTransfer"] = true;
// after add event
if(function_exists("AfterAdd"))
AfterAdd();
}
}
else
$readavalues=true;
}
$defvalues=array();
$keys=array();
$keys["ID"]=postvalue("transid1");
$keyID=postvalue("transid1");
$_SESSION["keyID"] = $keyID;
...
$smarty->assign("linkdata",$linkdata);
$smarty->display("evac_info_prereg_trans.htm");
function add_error_handler($errno, $errstr, $errfile, $errline)
{
global $readavalues, $message, $error_happened;
$message="<div class=message><<< ".mlang_message("RECORD_NOT_ADDED")." >>><br><br>".$errstr."</div>";
$readavalues=true;
$error_happened=true;
}
?>