Your IP : 216.73.217.79

Current Path : /var/www/cesa.co.za/autosuggest/
Upload File :
Current File : /var/www/cesa.co.za/autosuggest/contacts.php

<?php
header("Content-type: text/xml");

/*the returned xml has the following structure
<results>
	<rs>foo</rs>
	<rs>bar</rs>
</results>*/

include("../php/inc_db.php");

?>
<results>
<?php
	
	$sSqlWrk = "SELECT * FROM Contacts
	WHERE ";
/*
	if (empty($_GET["Type"])) {
		$sSqlWrk.="(ContactType NOT IN ('OFFICE','SERVPROV','YPF') OR ContactType IS NULL) AND ";
	} else {
		$sSqlWrk.="ContactType='".addslashes($_GET["Type"])."' AND ";
	}
*/	
	$sSqlWrk.=" (UPPER(ContactFirstName) LIKE '%".strtoupper($_GET["Input"])."%'
	OR UPPER(ContactSurname) LIKE '%".strtoupper($_GET["Input"])."%'
	OR UPPER(OrgName) LIKE '%".strtoupper($_GET["Input"])."%')
	 ORDER BY ContactSurname, ContactFirstName, OrgName";
	//echo $sSqlWrk;
	$recwrk = mysql_query($sSqlWrk);
	while ($rswrk = mysql_fetch_assoc($recwrk)) {
		if (!empty($rswrk["ContactSurname"])) {
?><rs id="<?php echo $rswrk["ContactsID"]; ?>" info="<?php 
if ($rswrk["ContactType"]=="OFFICE") {
	echo "Member, ";
} elseif ($rswrk["ContactType"]=="YPF") {
	echo "YPF, ";
} elseif ($rswrk["ContactType"]=="SERVPROV") {
	echo "Serv Prov, ";
} else echo "Other, ";
echo htmlentities(preg_replace('/[\x00-\x1F\x7F-\xFF]/', '', $rswrk["OrgName"])); 
?>"><?php echo preg_replace('/[\x00-\x1F\x7F-\xFF]/', '', $rswrk["ContactFirstName"])." ".preg_replace('/[\x00-\x1F\x7F-\xFF]/', '', $rswrk["ContactSurname"]); ?></rs>
<?php
		}
	}
	mysql_free_result($recwrk);
?></results>