Your IP : 216.73.217.79
<?php
include("inc_functions.php");
if (!isset($_SESSION["StudentID"]) || empty($_SESSION["StudentID"])) header("Location: /cesanet/login.php");
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>CESAnet</title>
<link href="style.css" rel="stylesheet" type="text/css" />
<!--[if IE 5]>
<style type="text/css">
/* place css box model fixes for IE 5* in this conditional comment */
.twoColFixLtHdr #sidebar1 { width: 230px; }
</style>
<![endif]--><!--[if IE]>
<style type="text/css">
/* place css fixes for all versions of IE in this conditional comment */
.twoColFixLtHdr #sidebar1 { padding-top: 30px; }
.twoColFixLtHdr #mainContent { zoom: 1; }
/* the above proprietary zoom property gives IE the hasLayout it needs to avoid several bugs */
</style>
<![endif]-->
</head>
<body class="twoColFixLtHdr">
<div id="container">
<?php include("inc_header.php"); ?>
<?php include("inc_sidebar.php"); ?>
<div id="mainContent">
<h1>Upload Activity Workbook</h1>
<?php
if (isset($_REQUEST["go"]) && ($_REQUEST["go"]==1)) {
$sql = "SELECT * FROM CCEStudentActivities WHERE CCEStudentID=".$_SESSION["StudentID"]." AND CCEActivityID='".addslashes($_REQUEST["activityid"])."' ORDER BY CCEStudentAssigID DESC";
$rec=mysql_query($sql);
if ($row=mysql_fetch_assoc($rec)) {
echo "<p><b>You have already submitted this activity. You cannot submit the same activity more than once.</b></p>";
} else {
$uploaddir = '../cceadmin/activitiesupload/';
$uploadfilename1="";
$uploadfilename2="";
$uploadfilename3="";
$uploadfilename4="";
$uploadfilename5="";
$uploadfilename6="";
if (isset($_FILES['file1'])) {
$uploadfilename1 = strtolower(str_replace(array("'","\"","(",")","#"," "), "_", basename(stripslashes($_FILES['file1']['name']))));
$uploadfile1 = $uploaddir . $uploadfilename1;
$ifilenum=1;
while (file_exists($uploadfile1) && !empty($uploadfilename1)) {
$uploadfile1 = $uploaddir . $ifilenum."_".$uploadfilename1;
$ifilenum++;
}
move_uploaded_file($_FILES['file1']['tmp_name'], $uploadfile1);
}
if (isset($_FILES['file2'])) {
$uploadfilename2 = strtolower(str_replace(array("'","\"","(",")","#"," "), "_", basename(stripslashes($_FILES['file2']['name']))));
$uploadfile2 = $uploaddir . $uploadfilename2;
$ifilenum=1;
while (file_exists($uploadfile2) && !empty($uploadfilename2)) {
$uploadfile2 = $uploaddir . $ifilenum."_".$uploadfilename2;
$ifilenum++;
}
move_uploaded_file($_FILES['file2']['tmp_name'], $uploadfile2);
}
if (isset($_FILES['file3'])) {
$uploadfilename3 = strtolower(str_replace(array("'","\"","(",")","#"," "), "_", basename(stripslashes($_FILES['file3']['name']))));
$uploadfile3 = $uploaddir . $uploadfilename3;
$ifilenum=1;
while (file_exists($uploadfile3) && !empty($uploadfilename3)) {
$uploadfile3 = $uploaddir . $ifilenum."_".$uploadfilename3;
$ifilenum++;
}
move_uploaded_file($_FILES['file3']['tmp_name'], $uploadfile3);
}
if (isset($_FILES['file4'])) {
$uploadfilename4 = strtolower(str_replace(array("'","\"","(",")","#"," "), "_", basename(stripslashes($_FILES['file4']['name']))));
$uploadfile3 = $uploaddir . $uploadfilename3;
$ifilenum=1;
while (file_exists($uploadfile4) && !empty($uploadfilename4)) {
$uploadfile3 = $uploaddir . $ifilenum."_".$uploadfilename4;
$ifilenum++;
}
move_uploaded_file($_FILES['file4']['tmp_name'], $uploadfile4);
}
if (isset($_FILES['file5'])) {
$uploadfilename5 = strtolower(str_replace(array("'","\"","(",")","#"," "), "_", basename(stripslashes($_FILES['file5']['name']))));
$uploadfile5 = $uploaddir . $uploadfilename5;
$ifilenum=1;
while (file_exists($uploadfile5) && !empty($uploadfilename5)) {
$uploadfile5 = $uploaddir . $ifilenum."_".$uploadfilename5;
$ifilenum++;
}
move_uploaded_file($_FILES['file5']['tmp_name'], $uploadfile5);
}
if (isset($_FILES['file6'])) {
$uploadfilename6 = strtolower(str_replace(array("'","\"","(",")","#"," "), "_", basename(stripslashes($_FILES['file6']['name']))));
$uploadfile6 = $uploaddir . $uploadfilename6;
$ifilenum=1;
while (file_exists($uploadfile6) && !empty($uploadfilename6)) {
$uploadfile6 = $uploaddir . $ifilenum."_".$uploadfilename6;
$ifilenum++;
}
move_uploaded_file($_FILES['file6']['tmp_name'], $uploadfile6);
}
$sql="INSERT INTO CCEStudentActivities (CCEStudentID, CCEActivityID, AssignmentFile1, AssignmentFile2, AssignmentFile3, AssignmentFile4, AssignmentFile5, AssignmentFile6, DateSubmitted, AcceptStatus)
VALUES ('".$_SESSION["StudentID"]."', '".$_REQUEST["activityid"]."', '".str_replace('../cceadmin/activitiesupload/', '', $uploadfile1)."',
'".str_replace('../cceadmin/activitiesupload/', '', $uploadfile2)."',
'".str_replace('../cceadmin/activitiesupload/', '', $uploadfile3)."',
'".str_replace('../cceadmin/activitiesupload/', '', $uploadfile4)."',
'".str_replace('../cceadmin/activitiesupload/', '', $uploadfile5)."',
'".str_replace('../cceadmin/activitiesupload/', '', $uploadfile6)."',
'".date("Y-m-d H:i:s")."', 0)";
mysql_query($sql);
$sql="UPDATE CCEStudentActivities, CCEActivities SET CCEStudentActivities.ActivityRef=CCEActivities.RefNum WHERE CCEStudentActivities.CCEActivityID=CCEActivities.CCEActivityID";
mysql_query($sql);
?>
<p><b>Thank you for uploading your activity workbook.</b></p>
<p><a href="submittedactivities.php">To view your list of workbooks, click here.</a></p>
<?php
}
}
?>
<form action="activityadd.php" method="post" enctype="multipart/form-data" name="form1" id="form1">
<input type="hidden" name="go" value="1" />
<p><b>Please note the following instructions:</b><br />
<ul>
<li>Please do not submit more than once for the same activity, add all of your activity files to this submission.<br />
<br />
</li>
<li>Please do not use unusual characters, especially subscripts, superscripts and symbols, when naming your files. File names may contain letters, numbers, spaces, hyphens and underscores, but no other characters are allowed.<br />
<br />
</li>
<li>Please ensure you have selected the correct module for which you are uploading.<br />
</li>
<li><strong>Please enter the reference (e.g. <?php echo date("Y"); ?>.WB.01) exactly as it appears on the front of your workbook.</strong></li>
</ul></p>
<p>Activity Workbook (please select): <select name="activityid">
<?php
$sql = "SELECT * FROM CCEActivities WHERE Archived=0 AND ReleaseDate<=NOW() ORDER BY RefNum";
$rec = mysql_query($sql);
while ($row = mysql_fetch_assoc($rec)) {
?>
<option value="<?php echo $row["CCEActivityID"]; ?>"><?php echo $row["WorkbookName"]; ?></option>
<?php
}
?>
</select>
</p>
<p>Select your scanned workbook file/s here:</p>
<p>
File 1: <input type="file" name="file1" id="file1" /><br />
File 2: <input type="file" name="file2" id="file2" /><br />
File 3: <input type="file" name="file3" id="file3" /><br />
File 4: <input type="file" name="file3" id="file4" /><br />
File 5: <input type="file" name="file3" id="file5" /><br />
File 6: <input type="file" name="file3" id="file6" />
</p>
<p>
<label>
<input type="submit" name="button" id="button" value="Upload" />
</label>
</p>
</form>
<p> </p>
</div>
<?php include("inc_footer.php"); ?>
<!-- end #container --></div>
</body>
</html>