Your IP : 216.73.217.79
<?php
$Notify="brenda@cesa.co.za";
include("inc_db.php");
$bShowForm=true;
if (isset($_REQUEST["go"])) {
$bShowForm=false;
$sql="SELECT * FROM HRForum WHERE LOWER(Email)='".strtolower(addslashes($_REQUEST["Email"]))."'";
$rec=mysqli_query($conni, $sql);
if ($row=mysqli_fetch_assoc($rec)) {
echo "<p><b style='color:red'>Error: </b>The email address provided is already subscribed to the mailing list.</p>";
$bShowForm=true;
} else {
$sql="INSERT INTO HRForum (FirstName, Surname, FirmID, CompanyPosition, Email, Telephone, Mobile, Comments, Subscribed)
VALUES ('".addslashes($_REQUEST["FirstName"])."', '".addslashes($_REQUEST["Surname"])."', '".addslashes($_REQUEST["FirmID"])."',
'".addslashes($_REQUEST["CompanyPosition"])."', '".addslashes($_REQUEST["Email"])."', '".addslashes($_REQUEST["Telephone"])."',
'".addslashes($_REQUEST["Mobile"])."', 'Subscribed via online form on ".date("Y-m-d H:i")."', 1)";
mysqli_query($conni, $sql);
echo "<p><b style='color:green'>Success: </b>Thank you, you have been subscribed to the mailing list.</p>
<p>Should you wish to unsubscribe at any time, please use this link:<br>
<a href='https://www.cesa.co.za/sce/unsubscribe-hr-forum/'>https://www.cesa.co.za/sce/unsubscribe-hr-forum/</a></p>";
}
}
if ($bShowForm) {
?>
<h1>Subscribe to the HR Forum Mailing List</h1>
<form method="post" action="/sce/subscribe-hr-forum/">
<input type="hidden" name="go" value="1">
<table border="1">
<tr><td><strong>First Name:</strong></td>
<td><input type="text" placeholder="Required" required="required" name="FirstName" /></td>
</tr>
<tr><td><strong>Surname:</strong></td>
<td><input type="text" placeholder="Required" required="required" name="Surname" /></td>
</tr>
<tr><td><strong>Email Address:</strong></td>
<td><input type="text" placeholder="Required" required="required" name="Email" /></td>
</tr>
<tr><td><strong>Company:</strong></td>
<td><select name="FirmID" required>
<option value="">Please select a CESA member firm</option>
<?php
$sql="SELECT FirmID, FirmName FROM tblMemberFirms WHERE MemberStatus='Member' ORDER BY FirmName";
$rec=mysqli_query($conni, $sql);
while ($row=mysqli_fetch_assoc($rec)) {
?>
<option value="<?php echo $row["FirmID"]; ?>"><?php echo $row["FirmName"]; ?></option>
<?php
}
?>
</select></td>
</tr>
<tr><td><strong>Position in company:</strong></td>
<td><input type="text" name="CompanyPosition" /></td>
</tr>
<tr><td><strong>Telephone number:</strong></td>
<td><input type="text" name="Telephone" /></td>
</tr>
<tr><td><strong>Cellphone number:</strong></td>
<td><input type="text" name="Mobile" /></td>
</tr>
</table>
<input type="submit" value="Subscribe" /></form>
<?php
}
?>