| Current Path : /var/www/cesa.co.za/php/ |
| Current File : /var/www/cesa.co.za/php/membersearch.php |
<?php
session_start();
include( 'inc_db.php' );
// If the form is submitted process here
//$graylight ="#EAEAEA";
extract($_REQUEST);
$recSkills = mysqli_query($conni, "SELECT COUNT(*) AS Num FROM FirmSkillsList");
$rowSkills = mysqli_fetch_assoc($recSkills);
$iMaxSkills = $rowSkills["Num"];
mysqli_free_result($recSkills);
if ($officeid) {
$sql = "SELECT tblMemberFirmOffices.FirmID,
tblMemberFirmOffices.OfficeStatus,
tblMemberFirmOffices.OfficeName,
tblMemberFirmOffices.Address2,
tblMemberFirmOffices.PostalAddress,
tblMemberFirmOffices.GeoLocation,
tblMemberFirmOffices.TownCity,
tblMemberFirmOffices.PostalCode,
tblMemberFirmOffices.Country,
tblMemberFirmOffices.BldgName,
tblMemberFirmOffices.StreetName,
tblMemberFirmOffices.Suburb,
tblMemberFirmOffices.Telephone,
tblMemberFirmOffices.Fax,
tblMemberFirmOffices.Email,
tblMemberFirmOffices.FullOrPartTime,
tblMemberFirmOffices.OtherStaff,
tblMemberFirmOffices.ProfessionalStaff,
tblMemberFirmOffices.NonProfTechStaff,
tblMemberFirms.URL,
tblMemberFirms.QMSISOComply,
tblMemberFirms.QMSISOCert,
tblMemberFirms.BBBEE
FROM tblMemberFirmOffices, tblMemberFirms WHERE (tblMemberFirmOffices.OfficeID = '$officeid')
AND (tblMemberFirmOffices.FullOrPartTime = 'Full Time') AND (tblMemberFirmOffices.FirmID = tblMemberFirms.FirmID)";
// echo 'Please ignore debug info: ' . $sql;
$result = mysqli_query($conni, $sql) or die('An error has occured. Please go back and select another option.');
$result_rows = mysqli_num_rows($result);
if ($result_rows > 0) {
if ($row = mysqli_fetch_array($result)) {
$pagetitle = $pagetitle . $row["OfficeName"];
echo "<h1>Member Firm Details</h1>";
?>
<!--<form method="post" action="/membersearch" enctype="multipart/form-data">
<?php
foreach ($_REQUEST as $key => $val) {
if (is_array($val)) {
foreach ($val as $key2 => $val2) {
echo "<input type='hidden' name='" . $key . "[]' value='" . $val2 . "'>
";
}
} else {
echo "<input type='hidden' name='" . $key . "' value='" . $val . "'>
";
}
}
?>
<input type="submit" value="Return to Search Results">
</form>
-->
<?php
echo "<p>";
echo "<h4>" . $row["OfficeName"] . "</h4>";
echo "<p>";
echo "<table width=\"600\" border=\"0\" cellpadding=\"5\" cellspacing=\"1\">";
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Company</td><td valign=\"top\">" . $row["OfficeName"] . "</td></tr>";
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Office</td><td valign=\"top\">" . $row["OfficeStatus"] . "</td></tr>";
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Physical Address</td><td valign=\"top\">";
if ($row["BldgName"] != '') {
echo $row["BldgName"] . "<br>";
}
echo $row["StreetName"] . "<br>" . $row["Suburb"] . "</td></tr>";
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Postal Address</td><td valign=\"top\">";
if ($row["Address2"] != '') {
echo $row["Address2"] . "<br>";
}
echo $row["PostalAddress"] . "<br>" . $row["TownCity"] . "<br>" . $row["GeoLocation"] . "<br>" . $row["PostalCode"] . "<br>" . $row["Country"] . "</td></tr>";
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Geographic Location</td><td valign=\"top\">" . $row["GeoLocation"] . "</td></tr>";
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Telephone</td><td valign=\"top\">" . $row["Telephone"] . "</td></tr>";
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Email</td><td valign=\"top\">" . generate_obfuscated_mailto($row["Email"]) . "</td></tr>";
if ($row["URL"]) {
if (eregi("http://", $row["URL"])) {
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Website</td><td valign=\"top\"><a href=\"" . $row["URL"] . "\" target=\"new\">" . $row["URL"] . "</a></td></tr>";
} else {
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Website</td><td valign=\"top\"><a href=\"http://" . $row["URL"] . "\" target=\"new\">" . $row["URL"] . "</a></td></tr>";
}
} else {
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Website</td><td valign=\"top\">None</td></tr>";
}
//echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Full or Part Time</td><td valign=\"top\">".$row["FullOrPartTime"]."</td></tr>";
$total = $row["ProfessionalStaff"] + $row["NonProfTechStaff"] + $row["OtherStaff"];
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Total Staff</td><td valign=\"top\">" . $total . "</td></tr>";
if (!empty($row["BBBEE"])) {
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">BBBEE Level</td><td valign=\"top\">" . $row["BBBEE"] . "</td></tr>";
}
echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Skills & Specialisations</td><td valign=\"top\">";
$sql = "SELECT SkillName FROM FirmSkillsList JOIN tblMemberFirmSkills USING (SkillsListID) WHERE FirmID=" . $row["FirmID"] . " ORDER BY SkillPriority, SkillName";
$recSkills = mysqli_query($conni, $sql);
while ($rowSkills = mysqli_fetch_assoc($recSkills))
echo $rowSkills["SkillName"] . "<br>";
if (strtolower($row["QMSISOComply"]) == "y") {
echo "<br>Has implemented a Quality Management System<br>";
}
if (strtolower($row["QMSISOCert"]) == "y") {
echo "<br>(ISO Certified QMS)<br>";
}
echo "</td></tr>";
echo "</table>";
echo "</p>";
} //end if
} //end if
else {
echo "No details found";
}
} else {
switch ($action) {
case 1 :
// Removed the Full Time office filter
// AND tblMemberFirmOffices.FullOrPartTime = 'Full Time'
$sql = "SELECT DISTINCT tblMemberFirms.FirmID, tblMemberFirms.DeclarationReceived, tblMemberFirms.FirmName
FROM tblMemberFirms, tblMemberFirmOffices
WHERE tblMemberFirms.FirmID = tblMemberFirmOffices.FirmID
AND tblMemberFirms.MemberStatus='Member'
AND DeclarationReceived > '2005-01-01 00:00'";
switch ($country) {
case 'any' :
break;
case 'outside' :
$sql .= " AND tblMemberFirmOffices.Country != 'South Africa'";
break;
default :
$sql .= " AND tblMemberFirmOffices.Country = '$country'";
break;
} //end switch
switch ($province) {
case 'any' :
break;
default :
$sql .= " AND tblMemberFirmOffices.Province = '$province'";
break;
} //end switch
if (!empty($towncity)) {
$sql .= " AND (tblMemberFirmOffices.TownCity LIKE '%$towncity%' OR tblMemberFirmOffices.GeoLocation LIKE '%$towncity%')";
}
if ($containing) {
$sql .= " AND tblMemberFirms.FirmName LIKE '%$containing%'";
}
if (isset($_REQUEST["Skills"]) && is_array($_REQUEST["Skills"]) && count($_REQUEST["Skills"]) > 0 && count($_REQUEST["Skills"]) < $iMaxSkills) {
$sql .= " AND EXISTS (SELECT * FROM tblMemberFirmSkills WHERE tblMemberFirmSkills.FirmID=tblMemberFirms.FirmID AND tblMemberFirmSkills.SkillsListID IN (" . implode(",", $_REQUEST["Skills"]) . "))";
}
if ($QMS == "1")
$sql .= " AND tblMemberFirms.QMSISOComply IN ('Y','y')";
if ($ISO == "1")
$sql .= " AND tblMemberFirms.QMSISOCert IN ('Y','y')";
switch ($SMME) {
case '' :
break;
default :
if ($SMME == "QSE_EME") {
$sql .= " AND (tblMemberFirms.SMME LIKE 'QSE%' OR tblMemberFirms.SMME LIKE 'EME%')";
} else {
$sql .= " AND tblMemberFirms.SMME LIKE '" . $SMME . "%'";
}
break;
} //end switch
switch ($BlackOwned) {
case '' :
break;
default :
$sql .= " AND tblMemberFirms.BlackOwned = '$BlackOwned'";
break;
} //end switch
switch ($BlackWomenOwned) {
case '' :
break;
default :
$sql .= " AND tblMemberFirms.BlackWomenOwned = '$BlackWomenOwned'";
break;
} //end switch
$sql .= " ORDER BY RAND()";
echo "<!-- " . $sql . " -->";
$result = mysqli_query($conni, $sql);
$result_rows = mysqli_num_rows($result);
echo "<h1>Matching Member Firms:</h1>";
if ($result_rows > 0) {
echo "<p class=\"footer\">The following results match your search criteria.<br>Please note: The order of the displayed results have been randomised to provide equal opportunity for our members.</p><p class=\"footer\">Click on a company name for further information</p>";
if (($_REQUEST["from"] == "smme") && !empty($_REQUEST["SMME"])) {
echo "<p class=\"footer\">CESA member firms may download an Excel spreadsheet of the returned results. You are required to login as a member to do so.<br><b>";
if (isset($_SESSION["CID"]) && !empty($_SESSION['CID'])) {
$sQS = "SMME=" . filter_var($_REQUEST["SMME"], FILTER_SANITIZE_STRING);
$sQS .= "&BlackOwned=" . urlencode(filter_var($_REQUEST["BlackOwned"], FILTER_SANITIZE_STRING));
$sQS .= "&BlackWomenOwned=" . urlencode(filter_var($_REQUEST["BlackWomenOwned"], FILTER_SANITIZE_STRING));
$sQS .= "&country=" . urlencode(filter_var($_REQUEST["country"], FILTER_SANITIZE_STRING));
$sQS .= "&province=" . urlencode(filter_var($_REQUEST["province"], FILTER_SANITIZE_STRING));
$sQS .= "&towncity=" . urlencode(filter_var($_REQUEST["towncity"], FILTER_SANITIZE_STRING));
$sQS .= "&containing=" . urlencode(filter_var($_REQUEST["containing"], FILTER_SANITIZE_STRING));
$sQS .= "&QMS=" . urlencode(filter_var($_REQUEST["QMS"], FILTER_SANITIZE_STRING));
$sQS .= "&ISO=" . urlencode(filter_var($_REQUEST["ISO"], FILTER_SANITIZE_STRING));
echo "<a href='/downloadsmme.php?" . $sQS . "' target='_blank'><u>Click here to download a spreadsheet now</u></a>";
} else {
echo "<a href='/login/'>Login Now</a>";
}
echo "</b></p>";
}
echo "<table width=\"600\" border=\"0\" cellpadding=\"5\" cellspacing=\"0\"><tr><th>Member</th><th>Geographic Region</th></tr>";
while ($row = mysqli_fetch_array($result)) {
$sql = "SELECT tblMemberFirmOffices.OfficeID, tblMemberFirmOffices.GeoLocation
FROM tblMemberFirmOffices WHERE FirmID=" . $row["FirmID"];
switch ($country) {
case 'any' :
break;
case 'outside' :
$sql .= " AND tblMemberFirmOffices.Country != 'South Africa'";
break;
default :
$sql .= " AND tblMemberFirmOffices.Country = '$country'";
break;
} //end switch
switch ($province) {
case 'any' :
break;
default :
$sql .= " AND tblMemberFirmOffices.Province = '$province'";
break;
} //end switch
if (!empty($towncity)) {
$sql .= " AND (tblMemberFirmOffices.TownCity LIKE '%$towncity%' OR tblMemberFirmOffices.GeoLocation LIKE '%$towncity%')";
}
$sql .= " ORDER BY GeoLocation";
$rec2 = mysqli_query($conni, $sql);
while ($row2 = mysqli_fetch_assoc($rec2)) {
echo "<tr><td><a href=\"" . strtok($_SERVER['REQUEST_URI'], '?') . "?officeid=" . $row2["OfficeID"] . "\">" . $row["FirmName"] . "</a></td>
<td>" . $row2["GeoLocation"] . "</td></tr>";
}
mysqli_free_result($rec2);
}
echo "</table>";
} else {
echo "<p><b>Sorry, there were no matches for your search criteria.</b><br> Please <a href=\"" . strtok($_SERVER['REQUEST_URI'], '?') . "\">go back</a> and try more general search options.</p>";
}
// Free Database Memory
mysqli_free_result($result);
break;
default :
?>
<h1>Welcome to the Consulting Engineers South Africa (CESA) Online Directory</h1>
<form method="get" action="<?php echo strtok($_SERVER['REQUEST_URI'], '?'); ?>" enctype="multipart/form-data">
<p><b>Search for a member</b></p>
<p>Country:
<select name="country">
<option value="any" selected>Any Country</option>
<option value="South Africa">South Africa</option>
<option value="outside">Outside of South Africa</option>
<?php
/* $sql = "select distinct Country from tblMemberFirmOffices order by Country";
$result = mysql_query($sql);
while ($row=mysql_fetch_array($result)) {
echo "<option value=\"".$row["Country"]."\">".$row["Country"];
}
*/
?>
</select>
Province:
<select name="province">
<option value="any" selected>Any
<?php
$sql = "select distinct TRIM(Province) AS Province from tblMemberFirmOffices WHERE Province != '' order by Province";
$result = mysqli_query($conni, $sql);
while ($row = mysqli_fetch_array($result)) {
echo "<option value=\"" . $row["Province"] . "\">" . $row["Province"];
}
?>
</select>
City/town:
<input name="towncity" type="text" placeholder="Leave blank for all">
</p>
<p>
<b>With a name containing the words </b><input name="containing" type="text" placeholder="Leave blank for all" size="40">
</p>
<p>
<b>and having the following specialisations or skills</b>:
<input type="button" onclick="javascript: jQuery('.skill').prop('checked', false);" value="Select none">
<input type="button" onclick="javascript: jQuery('.skill').prop('checked', true);" value="Select all">
<table width="600" border="0" cellpadding="2">
<tr><td valign="top" nowrap="nowrap">
<?php
$sql = "SELECT * FROM FirmSkillsList "
// . "WHERE SkillPriority=1 "
. "ORDER BY SkillName";
$recSkills = mysqli_query($conni, $sql);
$iNumS = 0;
while ($rowSkills = mysqli_fetch_assoc($recSkills)) {
?>
<input type="checkbox" class="skill" name="Skills[]" value="<?php echo $rowSkills["SkillsListID"]; ?>" checked id="skill<?php echo $rowSkills["SkillsListID"]; ?>"><?php echo $rowSkills["SkillName"]; ?><br>
<?php
$iNumS++;
if ($iNumS >= 40) {
$iNumS = 0;
?>
</td><td valign="top" nowrap="nowrap">
<?php
}
}
?>
</td></tr></table>
<p>
<input type="checkbox" name="QMS" value="1" id="QMS" />
Has implemented a
Quality Management System
<br>
<input type="checkbox" name="ISO" value="1" id="ISO" />
QMS is ISO Certified
<br>
</p>
<p><b>Turnover:</b><br>
<table width="600" border="0" cellpadding="2">
<tr><td valign="top" nowrap="nowrap">
<input name="SMME" type="radio" id="SMME_any" value="" checked="checked" />
Any / all<br>
<input type="radio" name="SMME" value="EME" id="SMME_small" />
EME < R6 million<br>
<input type="radio" name="SMME" value="QSE" id="SMME_medium" />
QSE >= R6 million and < R25 million<br>
</td>
<td valign="top" nowrap="nowrap">
<input type="radio" name="SMME" value="GEN1" id="SMME_large" />
GEN 1 >= R25 million and < R35 million<br>
<input type="radio" name="SMME" value="GEN2" id="SMME_large2" />
GEN 2 >= R35 million and < R50 million<br>
<input type="radio" name="SMME" value="GEN3" id="SMME_large3" />
GEN 3 >= R50 million and < R60 million<br>
<input type="radio" name="SMME" value="GEN4" id="SMME_large4" />
GEN 4 >= R60 million and < R70 million<br>
</td>
<td valign="top" nowrap="nowrap">
<input type="radio" name="SMME" value="GEN5" id="SMME_large5" />
GEN 5 >= R70 million and < R80 million<br>
<input type="radio" name="SMME" value="GEN6" id="SMME_large6" />
GEN 6 >= R80 million and < R90 million<br>
<input type="radio" name="SMME" value="GEN7" id="SMME_large7" />
GEN 7 >= R90 million and < R100 million<br>
<input type="radio" name="SMME" value="GEN8" id="SMME_large8" />
GEN 8 >= R100 million<br>
</td>
</tr>
<tr>
<td colspan="2" valign="top" nowrap="nowrap">
<strong>Black Ownership:</strong><br>
<input name="BlackOwned" type="radio" id="BlackOwned" value="" checked="true" />
Any / all<br>
<input type="radio" name="BlackOwned" value="Equal to or greater than 25 and less than 51%" id="BlackOwned4" />
Equal to or greater than 25 and less than 51%<br>
<input type="radio" name="BlackOwned" value="100%" id="BlackOwned5" />
100% Black Owned</td>
<td colspan="2" valign="top" nowrap="nowrap">
<br>
<input name="BlackOwned" type="radio" id="BlackOwned" value="Less than 10%" />
Less than 10%<br>
<input type="radio" name="BlackOwned" value="Equal to or greater than 51 and less than 100%" id="BlackOwned3" />
Equal to or greater than 51 and less than 100%</td>
</tr>
<tr>
<td colspan="2" valign="top" nowrap="nowrap"><strong>Black Women
Ownership:</strong><br>
<input name="BlackWomenOwned" type="radio" id="BlackOwned6" checked="true" value="" />
Any / all<br>
<input type="radio" name="BlackWomenOwned" value="Less than 10%" id="BlackOwned9" />
Less than 10%<br>
<input type="radio" name="BlackWomenOwned" value="Equal to or greater than 10 and less than 30%" id="BlackOwned9" />
Equal to or greater than 10 and less than 30%<br>
<input type="radio" name="BlackWomenOwned" value="100%" id="BlackOwned8" />
100% Black Women Owned</td>
<td colspan="2" valign="top" nowrap="nowrap">
<br>
<input type="radio" name="BlackWomenOwned" value="Equal to or greater than 30 and less than 51%" id="BlackOwned7" />
Equal to or greater than 30 and less than 51%
<br>
<input type="radio" name="BlackWomenOwned" value="Equal to or greater than 51 and less than 100%" id="BlackOwned7" />
Equal to or greater than 51 and less than 100%</td>
</tr>
</table>
<input type="hidden" name="action" value="1">
<input type="submit" name="search" value="search for a member firm"> <input type="reset" name="reset" value="clear the form">
</form>
<p></p>
<?php
break;
} //end case
}//end if else
?>