Your IP : 216.73.217.79


Current Path : /var/www/cesa.co.za/php/
Upload File :
Current File : /var/www/cesa.co.za/php/membersearch.php

<?php
session_start();
include( 'inc_db.php' );
// If the form is submitted process here
//$graylight ="#EAEAEA";
extract($_REQUEST);

$recSkills = mysqli_query($conni, "SELECT COUNT(*) AS Num FROM FirmSkillsList");
$rowSkills = mysqli_fetch_assoc($recSkills);
$iMaxSkills = $rowSkills["Num"];
mysqli_free_result($recSkills);

if ($officeid) {

    $sql = "SELECT tblMemberFirmOffices.FirmID,
		tblMemberFirmOffices.OfficeStatus,
		tblMemberFirmOffices.OfficeName,
		tblMemberFirmOffices.Address2,
		tblMemberFirmOffices.PostalAddress,
		tblMemberFirmOffices.GeoLocation,
		tblMemberFirmOffices.TownCity,
		tblMemberFirmOffices.PostalCode,
		tblMemberFirmOffices.Country,
		tblMemberFirmOffices.BldgName,
		tblMemberFirmOffices.StreetName,
		tblMemberFirmOffices.Suburb,
		tblMemberFirmOffices.Telephone,
		tblMemberFirmOffices.Fax,
		tblMemberFirmOffices.Email,
		tblMemberFirmOffices.FullOrPartTime,
		tblMemberFirmOffices.OtherStaff,
		tblMemberFirmOffices.ProfessionalStaff,
		tblMemberFirmOffices.NonProfTechStaff,
		tblMemberFirms.URL,
		tblMemberFirms.QMSISOComply,
		tblMemberFirms.QMSISOCert,
		tblMemberFirms.BBBEE
		FROM tblMemberFirmOffices, tblMemberFirms WHERE (tblMemberFirmOffices.OfficeID = '$officeid')
		AND (tblMemberFirmOffices.FullOrPartTime = 'Full Time') AND (tblMemberFirmOffices.FirmID = tblMemberFirms.FirmID)";
    
    // echo 'Please ignore debug info: ' . $sql;

    $result = mysqli_query($conni, $sql) or die('An error has occured. Please go back and select another option.');
    $result_rows = mysqli_num_rows($result);
    if ($result_rows > 0) {
        if ($row = mysqli_fetch_array($result)) {
            $pagetitle = $pagetitle . $row["OfficeName"];
            echo "<h1>Member Firm Details</h1>";
            ?>
            <!--<form method="post" action="/membersearch" enctype="multipart/form-data">
            <?php
            foreach ($_REQUEST as $key => $val) {
                if (is_array($val)) {
                    foreach ($val as $key2 => $val2) {
                        echo "<input type='hidden' name='" . $key . "[]' value='" . $val2 . "'>
							";
                    }
                } else {
                    echo "<input type='hidden' name='" . $key . "' value='" . $val . "'>
						";
                }
            }
            ?>
            <input type="submit" value="Return to Search Results">
            </form>
            -->
            <?php
            echo "<p>";
            echo "<h4>" . $row["OfficeName"] . "</h4>";
            echo "<p>";
            echo "<table width=\"600\" border=\"0\" cellpadding=\"5\" cellspacing=\"1\">";
            echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Company</td><td valign=\"top\">" . $row["OfficeName"] . "</td></tr>";
            echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Office</td><td valign=\"top\">" . $row["OfficeStatus"] . "</td></tr>";
            echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Physical Address</td><td valign=\"top\">";
            if ($row["BldgName"] != '') {
                echo $row["BldgName"] . "<br>";
            }
            echo $row["StreetName"] . "<br>" . $row["Suburb"] . "</td></tr>";
            echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Postal Address</td><td valign=\"top\">";
            if ($row["Address2"] != '') {
                echo $row["Address2"] . "<br>";
            }
            echo $row["PostalAddress"] . "<br>" . $row["TownCity"] . "<br>" . $row["GeoLocation"] . "<br>" . $row["PostalCode"] . "<br>" . $row["Country"] . "</td></tr>";
            echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Geographic Location</td><td valign=\"top\">" . $row["GeoLocation"] . "</td></tr>";
            echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Telephone</td><td valign=\"top\">" . $row["Telephone"] . "</td></tr>";
            echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Email</td><td valign=\"top\">" . generate_obfuscated_mailto($row["Email"]) . "</td></tr>";
            if ($row["URL"]) {
                if (eregi("http://", $row["URL"])) {
                    echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Website</td><td valign=\"top\"><a href=\"" . $row["URL"] . "\" target=\"new\">" . $row["URL"] . "</a></td></tr>";
                } else {
                    echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Website</td><td valign=\"top\"><a href=\"http://" . $row["URL"] . "\" target=\"new\">" . $row["URL"] . "</a></td></tr>";
                }
            } else {
                echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Website</td><td valign=\"top\">None</td></tr>";
            }
            //echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Full or Part Time</td><td valign=\"top\">".$row["FullOrPartTime"]."</td></tr>";
            $total = $row["ProfessionalStaff"] + $row["NonProfTechStaff"] + $row["OtherStaff"];
            echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Total Staff</td><td valign=\"top\">" . $total . "</td></tr>";
            if (!empty($row["BBBEE"])) {
                echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">BBBEE Level</td><td valign=\"top\">" . $row["BBBEE"] . "</td></tr>";
            }
            echo "<tr><td valign=\"top\" bgcolor=\"$graylight\">Skills & Specialisations</td><td valign=\"top\">";
            $sql = "SELECT SkillName FROM FirmSkillsList JOIN tblMemberFirmSkills USING (SkillsListID) WHERE FirmID=" . $row["FirmID"] . " ORDER BY SkillPriority, SkillName";
            $recSkills = mysqli_query($conni, $sql);
            while ($rowSkills = mysqli_fetch_assoc($recSkills))
                echo $rowSkills["SkillName"] . "<br>";

            if (strtolower($row["QMSISOComply"]) == "y") {
                echo "<br>Has implemented a Quality Management System<br>";
            }
            if (strtolower($row["QMSISOCert"]) == "y") {
                echo "<br>(ISO Certified QMS)<br>";
            }

            echo "</td></tr>";
            echo "</table>";
            echo "</p>";
        } //end if
    } //end if
    else {
        echo "No details found";
    }
} else {
    switch ($action) {
        case 1 :
            
            // Removed the Full Time office filter
            // AND tblMemberFirmOffices.FullOrPartTime = 'Full Time' 

            $sql = "SELECT DISTINCT tblMemberFirms.FirmID, tblMemberFirms.DeclarationReceived, tblMemberFirms.FirmName
			FROM tblMemberFirms, tblMemberFirmOffices 
            WHERE tblMemberFirms.FirmID = tblMemberFirmOffices.FirmID  
                AND tblMemberFirms.MemberStatus='Member' 
                AND DeclarationReceived > '2005-01-01 00:00'";
            
            switch ($country) {
                case 'any' :
                    break;
                case 'outside' :
                    $sql .= " AND tblMemberFirmOffices.Country != 'South Africa'";
                    break;
                default :
                    $sql .= " AND tblMemberFirmOffices.Country = '$country'";
                    break;
            } //end switch
            switch ($province) {
                case 'any' :
                    break;
                default :
                    $sql .= " AND tblMemberFirmOffices.Province = '$province'";
                    break;
            } //end switch
            if (!empty($towncity)) {
                $sql .= " AND (tblMemberFirmOffices.TownCity LIKE '%$towncity%' OR tblMemberFirmOffices.GeoLocation LIKE '%$towncity%')";
            }
            if ($containing) {
                $sql .= " AND tblMemberFirms.FirmName LIKE '%$containing%'";
            }

            if (isset($_REQUEST["Skills"]) && is_array($_REQUEST["Skills"]) && count($_REQUEST["Skills"]) > 0 && count($_REQUEST["Skills"]) < $iMaxSkills) {
                $sql .= " AND EXISTS (SELECT * FROM tblMemberFirmSkills WHERE tblMemberFirmSkills.FirmID=tblMemberFirms.FirmID AND tblMemberFirmSkills.SkillsListID IN (" . implode(",", $_REQUEST["Skills"]) . "))";
            }

            if ($QMS == "1")
                $sql .= " AND tblMemberFirms.QMSISOComply IN ('Y','y')";
            if ($ISO == "1")
                $sql .= " AND tblMemberFirms.QMSISOCert IN ('Y','y')";

            switch ($SMME) {
                case '' :
                    break;
                default :
                    if ($SMME == "QSE_EME") {
                        $sql .= " AND (tblMemberFirms.SMME LIKE 'QSE%' OR tblMemberFirms.SMME LIKE 'EME%')";
                    } else {
                        $sql .= " AND tblMemberFirms.SMME LIKE '" . $SMME . "%'";
                    }
                    break;
            } //end switch

            switch ($BlackOwned) {
                case '' :
                    break;
                default :
                    $sql .= " AND tblMemberFirms.BlackOwned = '$BlackOwned'";
                    break;
            } //end switch

            switch ($BlackWomenOwned) {
                case '' :
                    break;
                default :
                    $sql .= " AND tblMemberFirms.BlackWomenOwned = '$BlackWomenOwned'";
                    break;
            } //end switch

            $sql .= " ORDER BY RAND()";

            echo "<!-- " . $sql . " -->";
            $result = mysqli_query($conni, $sql);
            $result_rows = mysqli_num_rows($result);

            echo "<h1>Matching Member Firms:</h1>";

            if ($result_rows > 0) {

                echo "<p class=\"footer\">The following results match your search criteria.<br>Please note: The order of the displayed results have been randomised to provide equal opportunity for our members.</p><p class=\"footer\">Click on a company name for further information</p>";
                if (($_REQUEST["from"] == "smme") && !empty($_REQUEST["SMME"])) {
                    echo "<p class=\"footer\">CESA member firms may download an Excel spreadsheet of the returned results. You are required to login as a member to do so.<br><b>";
                    if (isset($_SESSION["CID"]) && !empty($_SESSION['CID'])) {
                        $sQS = "SMME=" . filter_var($_REQUEST["SMME"], FILTER_SANITIZE_STRING);
                        $sQS .= "&BlackOwned=" . urlencode(filter_var($_REQUEST["BlackOwned"], FILTER_SANITIZE_STRING));
                        $sQS .= "&BlackWomenOwned=" . urlencode(filter_var($_REQUEST["BlackWomenOwned"], FILTER_SANITIZE_STRING));
                        $sQS .= "&country=" . urlencode(filter_var($_REQUEST["country"], FILTER_SANITIZE_STRING));
                        $sQS .= "&province=" . urlencode(filter_var($_REQUEST["province"], FILTER_SANITIZE_STRING));
                        $sQS .= "&towncity=" . urlencode(filter_var($_REQUEST["towncity"], FILTER_SANITIZE_STRING));
                        $sQS .= "&containing=" . urlencode(filter_var($_REQUEST["containing"], FILTER_SANITIZE_STRING));
                        $sQS .= "&QMS=" . urlencode(filter_var($_REQUEST["QMS"], FILTER_SANITIZE_STRING));
                        $sQS .= "&ISO=" . urlencode(filter_var($_REQUEST["ISO"], FILTER_SANITIZE_STRING));
                        echo "<a href='/downloadsmme.php?" . $sQS . "' target='_blank'><u>Click here to download a spreadsheet now</u></a>";
                    } else {
                        echo "<a href='/login/'>Login Now</a>";
                    }
                    echo "</b></p>";
                }

                echo "<table width=\"600\" border=\"0\" cellpadding=\"5\" cellspacing=\"0\"><tr><th>Member</th><th>Geographic Region</th></tr>";

                while ($row = mysqli_fetch_array($result)) {
                    $sql = "SELECT tblMemberFirmOffices.OfficeID, tblMemberFirmOffices.GeoLocation
					FROM tblMemberFirmOffices WHERE FirmID=" . $row["FirmID"];
                    switch ($country) {
                        case 'any' :
                            break;
                        case 'outside' :
                            $sql .= " AND tblMemberFirmOffices.Country != 'South Africa'";
                            break;
                        default :
                            $sql .= " AND tblMemberFirmOffices.Country = '$country'";
                            break;
                    } //end switch
                    switch ($province) {
                        case 'any' :
                            break;
                        default :
                            $sql .= " AND tblMemberFirmOffices.Province = '$province'";
                            break;
                    } //end switch
                    if (!empty($towncity)) {
                        $sql .= " AND (tblMemberFirmOffices.TownCity LIKE '%$towncity%' OR tblMemberFirmOffices.GeoLocation LIKE '%$towncity%')";
                    }
                    $sql .= " ORDER BY GeoLocation";
                    $rec2 = mysqli_query($conni, $sql);
                    while ($row2 = mysqli_fetch_assoc($rec2)) {
                        echo "<tr><td><a href=\"" . strtok($_SERVER['REQUEST_URI'], '?') . "?officeid=" . $row2["OfficeID"] . "\">" . $row["FirmName"] . "</a></td>
						<td>" . $row2["GeoLocation"] . "</td></tr>";
                    }
                    mysqli_free_result($rec2);
                }

                echo "</table>";
            } else {

                echo "<p><b>Sorry, there were no matches for your search criteria.</b><br> Please <a href=\"" . strtok($_SERVER['REQUEST_URI'], '?') . "\">go back</a> and try more general search options.</p>";
            }
            // Free Database Memory
            mysqli_free_result($result);
            break;
        default :
            ?>
            <h1>Welcome to the Consulting Engineers South Africa (CESA) Online Directory</h1>
            <form method="get" action="<?php echo strtok($_SERVER['REQUEST_URI'], '?'); ?>" enctype="multipart/form-data">
                <p><b>Search for a member</b></p>
                <p>Country:
                    <select name="country">
                        <option value="any" selected>Any Country</option>
                        <option value="South Africa">South Africa</option>
                        <option value="outside">Outside of South Africa</option>
                        <?php
                        /* 			$sql = "select distinct Country from tblMemberFirmOffices order by Country";
                          $result = mysql_query($sql);
                          while ($row=mysql_fetch_array($result)) {
                          echo "<option value=\"".$row["Country"]."\">".$row["Country"];
                          }
                         */
                        ?>
                    </select>

                    Province:
                    <select name="province">
                        <option value="any" selected>Any
                            <?php
                            $sql = "select distinct TRIM(Province) AS Province from tblMemberFirmOffices WHERE Province != '' order by Province";
                            $result = mysqli_query($conni, $sql);
                            while ($row = mysqli_fetch_array($result)) {
                                echo "<option value=\"" . $row["Province"] . "\">" . $row["Province"];
                            }
                            ?>
                    </select>

                    City/town:
                    <input name="towncity" type="text" placeholder="Leave blank for all">
                </p>
                <p>
                    <b>With a name containing the words </b><input name="containing" type="text" placeholder="Leave blank for all" size="40">
                </p>
                <p>
                    <b>and having the following specialisations or skills</b>:
                    <input type="button" onclick="javascript: jQuery('.skill').prop('checked', false);" value="Select none">
                    <input type="button" onclick="javascript: jQuery('.skill').prop('checked', true);" value="Select all">


                <table width="600" border="0" cellpadding="2">
                    <tr><td valign="top" nowrap="nowrap">
                            <?php
                            $sql = "SELECT * FROM FirmSkillsList "
//                                    . "WHERE SkillPriority=1 "
                                    . "ORDER BY SkillName";
                            $recSkills = mysqli_query($conni, $sql);
                            $iNumS = 0;
                            while ($rowSkills = mysqli_fetch_assoc($recSkills)) {
                                ?>
                                <input type="checkbox" class="skill" name="Skills[]" value="<?php echo $rowSkills["SkillsListID"]; ?>" checked id="skill<?php echo $rowSkills["SkillsListID"]; ?>"><?php echo $rowSkills["SkillName"]; ?><br>
                                <?php
                                $iNumS++;
                                if ($iNumS >= 40) {
                                    $iNumS = 0;
                                    ?>
                                </td><td valign="top" nowrap="nowrap">
                                    <?php
                                }
                            }
                            ?>
                        </td></tr></table>
                <p>
                    <input type="checkbox" name="QMS" value="1" id="QMS" />
                    Has implemented a
                    Quality Management System
                    <br>
                    <input type="checkbox" name="ISO" value="1" id="ISO" />
                    QMS is ISO Certified
                    <br>
                </p>
                <p><b>Turnover:</b><br>
                <table width="600" border="0" cellpadding="2">
                    <tr><td valign="top" nowrap="nowrap">
                            <input name="SMME" type="radio" id="SMME_any" value="" checked="checked" />
                            Any / all<br>
                            <input type="radio" name="SMME" value="EME" id="SMME_small" />
                            EME &lt; R6 million<br>
                            <input type="radio" name="SMME" value="QSE" id="SMME_medium" />
                            QSE &gt;= R6 million and &lt; R25 million<br>
                        </td>
                        <td valign="top" nowrap="nowrap">
                            <input type="radio" name="SMME" value="GEN1" id="SMME_large" />
                            GEN 1 &gt;= R25 million and &lt; R35 million<br>
                            <input type="radio" name="SMME" value="GEN2" id="SMME_large2" />
                            GEN 2 &gt;= R35 million and &lt; R50 million<br>
                            <input type="radio" name="SMME" value="GEN3" id="SMME_large3" />
                            GEN 3 &gt;= R50 million and &lt; R60 million<br>
                            <input type="radio" name="SMME" value="GEN4" id="SMME_large4" />
                            GEN 4 &gt;= R60 million and &lt; R70 million<br>
                        </td>
                        <td valign="top" nowrap="nowrap">
                            <input type="radio" name="SMME" value="GEN5" id="SMME_large5" />
                            GEN 5 &gt;= R70 million and &lt; R80 million<br>
                            <input type="radio" name="SMME" value="GEN6" id="SMME_large6" />
                            GEN 6 &gt;= R80 million and &lt; R90 million<br>
                            <input type="radio" name="SMME" value="GEN7" id="SMME_large7" />
                            GEN 7 &gt;= R90 million and &lt; R100 million<br>
                            <input type="radio" name="SMME" value="GEN8" id="SMME_large8" />
                            GEN 8 &gt;= R100 million<br>
                        </td>
                    </tr>
                    <tr>
                        <td colspan="2" valign="top" nowrap="nowrap">
                            <strong>Black Ownership:</strong><br>
                            <input name="BlackOwned" type="radio" id="BlackOwned" value="" checked="true" />
                            Any / all<br>
                            <input type="radio" name="BlackOwned" value="Equal to or greater than 25 and less than 51%" id="BlackOwned4" />
                            Equal to or greater than 25 and less than 51%<br>
                            <input type="radio" name="BlackOwned" value="100%" id="BlackOwned5" />
                            100% Black Owned</td>
                        <td colspan="2" valign="top" nowrap="nowrap">
                            <br>
                            <input name="BlackOwned" type="radio" id="BlackOwned" value="Less than 10%" />
                            Less than 10%<br>
                            <input type="radio" name="BlackOwned" value="Equal to or greater than 51 and less than 100%" id="BlackOwned3" />
                            Equal to or greater than 51 and less than 100%</td>
                    </tr>
                    <tr>
                        <td colspan="2" valign="top" nowrap="nowrap"><strong>Black Women
                                Ownership:</strong><br>
                            <input name="BlackWomenOwned" type="radio" id="BlackOwned6" checked="true" value="" />
                            Any / all<br>
                            <input type="radio" name="BlackWomenOwned" value="Less than 10%" id="BlackOwned9" />
                            Less than 10%<br>
                            <input type="radio" name="BlackWomenOwned" value="Equal to or greater than 10 and less than 30%" id="BlackOwned9" />
                            Equal to or greater than 10 and less than 30%<br>
                            <input type="radio" name="BlackWomenOwned" value="100%" id="BlackOwned8" />
                            100% Black Women Owned</td>
                        <td colspan="2" valign="top" nowrap="nowrap">
                            <br>
                            <input type="radio" name="BlackWomenOwned" value="Equal to or greater than 30 and less than 51%" id="BlackOwned7" />
                            Equal to or greater than 30 and less than 51%
                            <br>
                            <input type="radio" name="BlackWomenOwned" value="Equal to or greater than 51 and less than 100%" id="BlackOwned7" />
                            Equal to or greater than 51 and less than 100%</td>
                    </tr>
                </table>
                <input type="hidden" name="action" value="1">
                <input type="submit" name="search" value="search for a member firm"> <input type="reset" name="reset" value="clear the form">
            </form>
            <p></p>
            <?php
            break;
    } //end case
}//end if else
?>