Anonymous

<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

// Insert New Member
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "addMemberForm")) {
  $insertSQL = sprintf("INSERT INTO members (first_name, middle_name, last_name, email, b_date, notes) VALUES (%s, %s, %s, %s, %s, %s)",
                       GetSQLValueString($_POST['first_name'], "text"),
                       GetSQLValueString($_POST['middle_name'], "text"),
                       GetSQLValueString($_POST['last_name'], "text"),
                       GetSQLValueString($_POST['email'], "text"),
                       GetSQLValueString($_POST['b_date'], "date"),
                       GetSQLValueString($_POST['notes'], "text"));

  mysql_select_db($database_Monqiboy, $Monqiboy);
  $Result = mysql_query($insertSQL, $Monqiboy) or die(mysql_error());
  $_SESSION['last_memberId'] = mysql_insert_id();
  echo '1234 test';
}

// insert addresses
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "addressForm")) {
  $insertSQL = sprintf("INSERT INTO members_addresses (member_id, street, apt_unit, zip) VALUES (%s, %s, %s, %s)",
                       GetSQLValueString($_POST['member_id'], "int"),
                       GetSQLValueString($_POST['street'], "text"),
                       GetSQLValueString($_POST['apt_unit'], "text"),
                       GetSQLValueString($_POST['zip'], "double"));

  mysql_select_db($database_Monqiboy, $Monqiboy);
  $Result = mysql_query($insertSQL, $Monqiboy) or die(mysql_error());
}


// Show active members Recordset table
mysql_select_db($database_Monqiboy, $Monqiboy);
$query_RsMembers = "SELECT * FROM members";
$RsMembers = mysql_query($query_RsMembers, $Monqiboy) or die(mysql_error());
$row_RsMembers = mysql_fetch_assoc($RsMembers);
$totalRows_RsMembers = mysql_num_rows($RsMembers);


//Show addresses recordset by memberId
$colname_RsAddresses = "-1";
if (isset($_SESSION['last_memberId'])) {
  $colname_RsAddresses = $_SESSION['last_memberId'];
}
mysql_select_db($database_Monqiboy, $Monqiboy);
$query_RsAddresses = sprintf("SELECT members_addresses.*, citystatezip.stateAb, citystatezip.city, citystatezip.state
							 	FROM (members_addresses LEFT JOIN citystatezip ON citystatezip.zip=members_addresses.zip)
							  WHERE members_addresses.member_id = %s", GetSQLValueString($colname_RsAddresses, "int"));
$RsAddresses = mysql_query($query_RsAddresses, $Monqiboy) or die(mysql_error());
$row_RsAddresses = mysql_fetch_assoc($RsAddresses);
$totalRows_RsAddresses = mysql_num_rows($RsAddresses);