Your IP : 216.73.217.79

Current Path : /var/www/cesa.co.za/cceconvenors/
Upload File :
Current File : /var/www/cesa.co.za/cceconvenors/inc_sendmessage.php

<?php
		$sSentTo = "";
		$arrEmails = array();
		
		$sModule = "None / General";
		if (!empty($_POST["modid"])) {
			$sql = "SELECT * FROM CCEModules WHERE CCEModuleID=".$_POST["modid"];
			$rec=mysql_query($sql);
			if ($row=mysql_fetch_assoc($rec)) {
				$sModule = $row["ModuleName"];
			}
			mysql_free_result($rec);
		}
		
		$sMessage = "You have received the following CESAnet message (please reply through CESAnet, and NOT to this email):

From: ".$sFrom."
Module: ".$sModule."

Subject: ".$_POST["subject"]."

".$_POST["message"]."

";

		$sStudentFooter = "Please login to CESAnet to respond: www.cesa.co.za/cesanet";

		$sFacilitatorFooter = "Please login to CESAnet to respond: www.cesa.co.za/convenors";

		$sModuleID = $_POST["modid"];
		if (empty($sModuleID)) $sModuleID="NULL";
		$sql = "INSERT INTO CCEMessages (CCEModuleID, SentByName, SentDateTime, MessageSubject, MessageText)
		VALUES (".$sModuleID.", '".$sFrom."', '".date("Y-m-d H:i:s")."', '".$_POST["subject"]."', '".$_POST["message"]."')";
		mysql_query($sql);
//		die($sql);
		$CCEMessageID = mysql_insert_id();


		for ($i=0; $i < count($arrSendTo); $i++) {
			if ($arrSendTo[$i] == "CESA") {
				mail("julia@xe.co.za", "CESAnet Message Received", $sMessage);
				$sSentTo .= "CESA Programme Coordinator, ";
			} elseif ($arrSendTo[$i] == "FAll") {
				$sql = "SELECT FacilitatorID, EmailAddress FROM CCEFacilitators";
				$rec = mysql_query($sql);
				while ($row=mysql_fetch_assoc($rec)) {
					mail($row["EmailAddress"], "CESAnet Message Received", $sMessage.$sFacilitatorFooter);
					$arrEmails[] = $row["EmailAddress"];
					mysql_query("INSERT INTO CCEMessagesSentTo (CCEMessageID, SentType, SentID) VALUES ('".$CCEMessageID."', 'Facilitator', '".$row["FacilitatorID"]."')");
				}
				mysql_free_result($rec);
				$sSentTo .= "All Convenors, ";
			} elseif ($arrSendTo[$i] == "SAll") {
				$sql = "SELECT CCEStudentID, EmailAddress FROM CCEStudents";
				$rec = mysql_query($sql);
				while ($row=mysql_fetch_assoc($rec)) {
					mail($row["EmailAddress"], "CESAnet Message Received", $sMessage.$sStudentFooter);
					$arrEmails[] = $row["EmailAddress"];
					mysql_query("INSERT INTO CCEMessagesSentTo (CCEMessageID, SentType, SentID) VALUES ('".$CCEMessageID."', 'Student', '".$row["CCEStudentID"]."')");
				}
				mysql_free_result($rec);
				$sSentTo .= "All Students, ";
			} elseif (substr($arrSendTo[$i],0,1)=="F") {
				$sql = "SELECT FacilitatorID, FacilitatorName, EmailAddress FROM CCEFacilitators WHERE FacilitatorID=".substr($arrSendTo[$i],1);
				$rec = mysql_query($sql);
				if ($row=mysql_fetch_assoc($rec)) {
					if (!in_array($row["EmailAddress"], $arrEmails)) {
						mail($row["EmailAddress"], "CESAnet Message Received", $sMessage.$sFacilitatorFooter);
						$arrEmails[] = $row["EmailAddress"];
						$sSentTo .= $row["FacilitatorName"].", ";
						mysql_query("INSERT INTO CCEMessagesSentTo (CCEMessageID, SentType, SentID) VALUES ('".$CCEMessageID."', 'Facilitator', '".$row["FacilitatorID"]."')");
					}
				}
				mysql_free_result($rec);
			} elseif (substr($arrSendTo[$i],0,1)=="S") {
				$sql = "SELECT CCEStudentID, FirstName, Surname, EmailAddress FROM CCEStudents WHERE CCEStudentID=".substr($arrSendTo[$i],1);
				$rec = mysql_query($sql);
				if ($row=mysql_fetch_assoc($rec)) {
					if (!in_array($row["EmailAddress"], $arrEmails)) {
						mail($row["EmailAddress"], "CESAnet Message Received", $sMessage.$sStudentFooter);
						$arrEmails[] = $row["EmailAddress"];
						$sSentTo .= $row["FirstName"]." ".$row["Surname"].", ";
						mysql_query("INSERT INTO CCEMessagesSentTo (CCEMessageID, SentType, SentID) VALUES ('".$CCEMessageID."', 'Student', '".$row["CCEStudentID"]."')");
					}
				}
				mysql_free_result($rec);
			}
		}
		
		$sql = "UPDATE CCEMessages SET SentTo='".$sSentTo."' WHERE CCEMessageID=".$CCEMessageID;
		mysql_query($sql);
		echo "<p><b>Your message has been sent!</b></p>";
?>