Your IP : 216.73.217.79
<?php
require_once $_SERVER['DOCUMENT_ROOT'] . '/php/includes/load_phpmailer.php';
use PHPMailer\PHPMailer\PHPMailer;
function GenPassword()
{
// Password generation
$length = 8; // Must be a multiple of 2
$conso = array("b", "c", "d", "f", "g", "h", "j", "k", "l", "m", "n", "p", "r", "s", "t", "v", "w", "x", "y", "z");
$vocal = array("a", "e", "i", "o", "u");
$password = "";
srand((float) microtime() * 1000000);
$max = $length / 2;
for ($i = 1; $i <= $max; $i++) {
$password .= $conso[rand(0, 19)];
$password .= $vocal[rand(0, 4)];
}
return $password;
}
function CaseCorrect($str)
{
$newstr = ucwords(strtolower($str));
return $newstr;
}
function XMail($to, $subject, $msg, $from, $CC, $type)
{
$mail = new PHPMailer;
$mail->Mailer = "mail";
/*
$mail->Mailer="smtp";
$mail->Host="relay.aitonline.co.za";
$mail->Port=587;
$mail->Username="mail@cesa.co.za";
$mail->Password="c3SAmail!@!";
$mail->SMTPDebug=false;
$mail->SMTPAuth=true;
*/
if ($type == "html")
$mail->IsHTML(true);
$mail->From = $from;
$mail->FromName = $from;
$arrto = explode(",", $to);
for ($i = 0; $i < count($arrto); $i++) {
$mail->AddAddress($arrto[$i]);
}
$mail->Subject = $subject;
$mail->Body = $msg;
if (!$mail->Send())
echo $mail->ErrorInfo;
}
$sendfrom = "bonolo@cesa.co.za";
$sendto = "bonolo@cesa.co.za,athromethm@cesa.co.za,events@cesa.co.za";
$sEmailFooter = "<p><b>Consulting Engineers South Africa</b><br>Tel: 011 463 2022<br>Website: www.cesa.co.za</p><p><img src='https://www.cesa.co.za/images/emailfooter.jpg'></p>";
//$sendto = "julia@xe.co.za";
$EventID = $_POST["EventID"];
$Organisation = $_POST["Organisation"];
$CompanyType = $_POST["CompanyType"];
$Address1 = $_POST["Address1"];
$Address2 = $_POST["Address2"];
$Address3 = $_POST["Address3"];
$City = $_POST["City"];
$PostalCode = $_POST["PostalCode"];
$OrderNumber = $_POST["OrderNumber"];
$VATNumber = $_POST["VATNumber"];
$SAACEMemNum = $_POST["SAACEMemNum"];
$BookingName = $_POST["BookingName"];
$BookingTel = $_POST["BookingTel"];
$BookingFax = $_POST["BookingFax"];
$BookingEmail = $_POST["BookingEmail"];
$bFormErrors = false;
if (!reCaptcha($_POST["g-recaptcha-response"])) {
$bFormErrors = true;
$sError[] = "You could not be verified as not being a robot, please tick the reCaptcha verification option at the bottom of the form.";
} else {
if (empty($Organisation)) {
$bFormErrors = true;
$sError[] = "Your organisation is required.";
}
$i = 1;
if (empty($_POST["FirstName" . $i])) {
$bFormErrors = true;
$sError[] = "Attendee " . $i . "'s first name is required.";
}
if (empty($_POST["Surname" . $i])) {
$bFormErrors = true;
$sError[] = "Attendee " . $i . "'s surname is required.";
}
/*
if (empty($_POST["KnownAs".$i])) {
$bFormErrors = true;
$sError[] = "Attendee ".$i."'s name \"known as\" is required.";
}
*/
if (empty($_POST["Email" . $i])) {
$bFormErrors = true;
$sError[] = "Attendee " . $i . "'s email address is required.";
}
if (!filter_var($_POST["Email" . $i], FILTER_VALIDATE_EMAIL)) {
$bFormErrors = true;
$sError[] = "Your email address is invalid.";
}
}
if (!$bFormErrors) {
// Save all the form fields
foreach ($_POST as $FieldName => $FieldValue) {
$sql = "INSERT INTO EventFormFields (EventID, FirstName, LastName, FieldName, FieldValue, DateCreated) VALUES ('" . $EventID . "', '" . $FirstName . "', '" . $Surname . "', '" . $FieldName . "', '" . $FieldValue . "', '" . date("Y-m-d H:i:s") . "')";
$queryresult = mysql_query($sql);
}
//Send the confirmation
//ini_set("SMTP", "SAACEMAIL");
$sql = "SELECT MarketingEvents.EventName, MarketingEvents.EventName, MarketingEvents.Level, MarketingEvents.City, MarketingEvents.Venue, MarketingEvents.RegDeadline,
MarketingEvents.MemberDiscount, MarketingEvents.EarlyBirdDiscount, MarketingEvents.BankAccName,
MarketingEvents.AvailableSpaces, MarketingEvents.CostPerPerson,
MarketingEvents.Hours, MarketingEvents.CPD, MarketingEvents.CODE,
MarketingEvents.AccredNum, MarketingEvents.Province, StartDate,
EndDate
FROM MarketingEvents
WHERE MarketingEvents.EventID=" . $EventID;
$queryresult = mysql_query($sql);
if ($row = mysql_fetch_array($queryresult)) {
$CostPrice = $row["CostPerPerson"];
// Member Discount
if (!empty($row["MemberDiscount"]) && ($row["MemberDiscount"] > 0) && (!empty($SAACEMemNum))) {
$CostPrice = $row["CostPerPerson"] - $row["MemberDiscount"];
}
// Early Bird Discount
if (!empty($row["EarlyBirdDiscount"]) && ($row["EarlyBirdDiscount"] > 0) && (!empty($row["RegDeadline"]))) {
// Early bird deadline is midnight of that day
if ((strtotime($row["RegDeadline"]) + 86400) > time()) {
$CostPrice = $CostPrice - $row["EarlyBirdDiscount"];
}
}
// Bank account
$sBankAccName = "SAACE";
if (!empty($row["BankAccName"]))
$sBankAccName = $row["BankAccName"];
$sqlbank = "SELECT * FROM SchoolBankAccs WHERE BankAccName = '" . $sBankAccName . "'";
$recbank = mysql_query($sqlbank);
if ($rowbank = mysql_fetch_assoc($recbank)) {
extract($rowbank);
}
// Venue details
$Venue = "";
if (!empty($row["Venue"]))
$sVenue = $row["Venue"];
$sqlvenue = "SELECT * FROM CourseVenues WHERE CourseVenueName = '" . $sVenue . "'";
$recvenue = mysql_query($sqlvenue);
if ($rowvenue = mysql_fetch_assoc($recvenue)) {
extract($rowvenue);
}
$files = '';
if ($handle = opendir('../school/eventdocs')) {
/* This is the correct way to loop over the directory. */
while (false !== ($file = readdir($handle))) {
if ($file != "." && $file != "..") {
$tofind = "." . $EventID;
$pos = strpos($file, $tofind);
if ($pos > 0) {
$handle2 = opendir('../school/eventdocs/' . $file);
while (false !== ($file2 = readdir($handle2))) {
if (substr($file2, 0, 1) != ".") {
//$files .= str_replace(" ", "%20", urlencode('https://www.cesa.co.za/school/eventdocs/'.$file.'/'.$file2)).chr(10).chr(13);
$files .= str_replace(" ", "%20", 'https://www.cesa.co.za/school/eventdocs/' . $file . '/' . $file2) . chr(10) . chr(13);
}
}
closedir($handle2);
}
}
}
closedir($handle);
}
$formmsgtop = '<html><body><img align=left src=https://www.cesa.co.za/images/cesa.gif>
<h1 align=center>REGISTRATION FORM<br>
<br>
<u>' . $row["EventName"] . '</u></h1>
<table border=1 cellspacing=0 cellpadding=2 width=100%>
<tr>
<td nowrap> <p align=center style=text-align:center><b>·</b>' . date("D j F Y", strtotime($row["StartDate"])) . '</p></td>
<td>' . $row["Venue"] . '</td>
</tr>
</table>
<table width=100% border=1 cellpadding=2 cellspacing=0 bgcolor=#EFEFEF style=clear:both>
<tr>
<td valign=top> <p>Organisation:
</p></td>
<td valign=top bgcolor=#FFFFFF>' . $Organisation . '</td>
</tr>
</table> ';
$iNumInserted = 0;
$iNumDuplicates = 0;
$formmsg = "";
for ($i = 1; $i <= 2; $i++) {
if (isset($_POST["FirstName" . $i]) && !empty($_POST["FirstName" . $i])) {
$Designation = $_POST["Designation" . $i];
$Title = $_POST["Title" . $i];
$FirstName = $_POST["FirstName" . $i];
$Surname = $_POST["Surname" . $i];
// $KnownAs = $_POST["KnownAs".$i];
$Tel = $_POST["Tel" . $i];
$Mobile = $_POST["Mobile" . $i];
$Fax = $_POST["Fax" . $i];
$Email = $_POST["Email" . $i];
$DietaryReq = $_POST["DietaryReq" . $i];
$IDNumber = $_POST["IDNumber" . $i];
$ECSANumber = $_POST["ECSANumber" . $i];
$SAICENumber = $_POST["SAICENumber" . $i];
$bInserted = false;
// Try to correct case
$FirstName = CaseCorrect($FirstName);
$Surname = CaseCorrect($Surname);
//$KnownAs = CaseCorrect($KnownAs);
$KnownAs = $FirstName;
// Check for duplicates
$sql = "SELECT * FROM MarketingAttendees "
. "WHERE ContactFirstName='" . mysql_real_escape_string($FirstName) . "' "
. "AND ContactLastName='" . mysql_real_escape_string($Surname) . "' "
. "AND PhoneNumber='" . mysql_real_escape_string($Tel) . "' "
. "AND EmailAddress='" . mysql_real_escape_string($Email) . "' "
. "AND EventID=" . $EventID;
$queryresult = mysql_query($sql);
if ($queryrows = mysql_fetch_assoc($queryresult)) {
// echo "You are already registered for this event!";
// die();
$iNumDuplicates++;
} else {
$sPassword = GenPassword();
$sql = "INSERT INTO MarketingAttendees (ContactTitle, ContactFirstName, ContactLastName, CompanyName, AddressLine1, AddressLine2, AddressLine3,
City, PostalCode, PhoneNumber, MobileNumber, FaxNumber, EmailAddress, DietaryReq, EventID, Attended, OrderNum, OrgVATNum, IDNumber, SAACEMemNumber,
ECSANumber, SAICEMemNumber, Designation, BookingName, BookingTel, BookingFax, BookingEmail, KnownAs, CompanyType, Password, TablesRequired,
SeatsRequired, DateBooked, Category)
VALUES ('" . mysql_real_escape_string($Title) . "', '" . mysql_real_escape_string($FirstName) . "', '" . mysql_real_escape_string($Surname) . "',
'" . mysql_real_escape_string($Organisation) . "', '" . mysql_real_escape_string($Address1) . "', '" . mysql_real_escape_string($Address2) . "',
'" . mysql_real_escape_string($Address3) . "', '" . mysql_real_escape_string($City) . "', '" . mysql_real_escape_string($PostalCode) . "',
'" . mysql_real_escape_string($Tel) . "', '" . mysql_real_escape_string($Mobile) . "', '" . mysql_real_escape_string($Fax) . "',
'" . mysql_real_escape_string($Email) . "', '" . mysql_real_escape_string($DietaryReq) . "', " . $EventID . ", 'u',
'" . mysql_real_escape_string($OrderNumber) . "', '" . mysql_real_escape_string($VATNumber) . "', '" . mysql_real_escape_string($IDNumber) . "',
'" . mysql_real_escape_string($SAACEMemNum) . "', '" . mysql_real_escape_string($ECSANumber) . "',
'" . mysql_real_escape_string($SAICENumber) . "',
'" . mysql_real_escape_string($Designation) . "', '" . mysql_real_escape_string($BookingName) . "', '" . mysql_real_escape_string($BookingTel) . "',
'" . mysql_real_escape_string($BookingFax) . "', '" . mysql_real_escape_string($BookingEmail) . "',
'" . mysql_real_escape_string($KnownAs) . "', '" . mysql_real_escape_string($CompanyType) . "', '" . $sPassword . "',
'" . mysql_real_escape_string($_REQUEST["tables"]) . "', '" . mysql_real_escape_string($_REQUEST["seats"]) . "',
'" . date("Y-m-d H:i:s") . "', '" . mysql_real_escape_string($_REQUEST["type"]) . "')";
$queryresult = mysql_query($sql);
if (!$queryresult) {
maill(
"cesa-events@igotafrica.com",
"Error on marketing db insert",
mysql_error(get_current_connection()) . ' - ' . $sql,
null,
[
'from-name' => 'CESA Events',
'from-address' => 'events@cesa.co.za',
'reply-to-address' => 'events@cesa.co.za',
]
);
} else {
$bInserted = true;
$iNumInserted++;
}
}
if ($bInserted) {
$FirstName = stripslashes($FirstName);
$Surname = stripslashes($Surname);
$CourseType = $row["Level"];
if (empty($CourseType))
$CourseType = "Course";
$msg = "<p>Dear " . $FirstName . " " . $Surname . ",</p>
<p>We are delighted to have received your online booking for CESA Aon Awards Gala Dinner to be held from 18h30 on Wed 14 August 2019 at Vodaworld Midrand. Please direct any questions to events@cesa.co.za.</p>";
if (($_REQUEST["type"] != "vip") && ($_REQUEST["type"] != "ypf"))
$msg .= "<p>To register the details of the attendees seated at your table, please login at: <a href='https://www.cesa.co.za/eventtables'>https://www.cesa.co.za/eventtables</a> using your email address and the password: <b>" . $sPassword . "</b>. Please save this email for future reference.</p>";
$msg .= "<p>With kind regards,</p>
CESA Events</p>" . $sEmailFooter;
maill(
$Email . "," . $BookingEmail,
"Confirmation of CESA Event Registration",
"<html>
<head>
<style>
body, td {
font-family: Arial, Verdana, sans-serif;
font-size: 11pt;
}
</style>
</head>
<body>" . $msg . "</body></html>",
null,
array(
'from-address' => $sendfrom,
'from-name' => 'CESA Events',
'isHTML' => true,
'i-cal' => Mailer::getICalText($row, array(
'ContactFirstName' => $FirstName,
'ContactLastName' => $Surname,
'EmailAddress' => $Email,
)),
'bcc' => ['cesa-events@igotafrica.com'],
)
);
$formmsg .= '
<table width=100% border=1 cellpadding=2 cellspacing=0 bgcolor=#EFEFEF style=clear:both>
<tr>
<td valign=top> <p><strong>Attendee ' . $i . '</strong></p></td>
<td valign=top bgcolor=#FFFFFF> </td>
<td valign=top bgcolor=#FFFFFF> </td>
<td valign=top bgcolor=#FFFFFF> </td>
</tr>
<tr>
<td valign=top> <p>Title:</p></td>
<td valign=top bgcolor=#FFFFFF>' . $Title . '</td>
<td valign=top> <p>Designation:</p></td>
<td valign=top bgcolor=#FFFFFF>' . $Designation . '</td>
</tr>
<tr>
<td valign=top> <p>First Name:</p></td>
<td valign=top bgcolor=#FFFFFF>' . $FirstName . '</td>
<td valign=top> <p>Surname:</p></td>
<td valign=top bgcolor=#FFFFFF>' . $Surname . '</td>
</tr>
<tr>
<td valign=top> <p>Telephone:
</p></td>
<td valign=top bgcolor=#FFFFFF>' . $Tel . '</td><td valign=top> <p>Mobile: </p></td>
<td valign=top bgcolor=#FFFFFF>' . $Mobile . '</td></tr>
<tr>
<td valign=top> <p>Facsimile:
</p></td>
<td valign=top bgcolor=#FFFFFF>' . $Fax . '</td><td valign=top> <p>E-mail:
</p></td>
<td valign=top bgcolor=#FFFFFF>' . $Email . '</td></tr>
<tr>
<td valign=top> <p><b>Dietary restrictions / allergies:</b>
</p></td>
<td colspan=3 valign=top bgcolor=#FFFFFF>' . $DietaryReq . '</td></tr> ';
if (isset($_REQUEST["tables"]) || isset($_REQUEST["seats"])) {
$formmsg .= '
<tr>
<td valign=top> <p><b>Table/s Required:</b>
</p></td>
<td colspan=3 valign=top bgcolor=#FFFFFF>' . $_REQUEST['tables'] . '</td></tr>
<tr>
<td valign=top> <p><b>Seat/s Required:</b>
</p></td>
<td colspan=3 valign=top bgcolor=#FFFFFF>' . $_REQUEST['seats'] . '</td></tr>
';
}
$formmsg .= '
</table> ';
}
}
}
if ($iNumInserted == 0) {
?>
<p><b>No attendees were registered.</b></p>
<?php
if ($iNumDuplicates > 0) {
echo "<p><b>" . $iNumDuplicates . " duplicate(s) were found, these attendees have already been registered for this event.</b></p>";
}
} else {
$formmsgend = "</body></html>";
maill(
$sendto,
"Event Registration",
$formmsgtop . $formmsg . $formmsgend,
null,
array(
'from-address' => $sendfrom,
'from-name' => 'CESA Events',
'isHTML' => true,
'bcc' => ['cesa-events@igotafrica.com'],
)
);
?>
<p align="center" style="font-size:20px"><i><b>Thank you for your booking</b></i></p>
<!-- <p align="center">You will be contacted shortly to confirm your registration
and your partner's details.</p> -->
<?php
if ($_REQUEST["type"] == "booktables")
echo "<p>To register the details of the attendees at your table, please login at: <a href='https://www.cesa.co.za/eventtables'>https://www.cesa.co.za/eventtables</a> using your email address and the password: <b>" . $sPassword . "</b>. You will receive this password by email as well for your future reference.</p>";
?>
<p align="center">We look forward to welcoming you to this event.</p>
<p align="center"><a href="/images/AWARDSMAP.jpg" target="_blank"><img src="/images/btnmap.jpg" border="0"></a><br>Click here to view the map to the venue.</p>
<p align="center">If you have any queries, please contact Bonolo Nkgodi on 011 463 2022</p>
<?php
if (($_REQUEST["type"] == "booktables") || ($_REQUEST["type"] == "buyer")) {
?>
<!--<p align="left"><b><i>Deposit payment to account:</i></b>
<table border=0>
<tr><td><b>Account Name:</b></td><td><?php echo $BankAccName; ?></td></tr>
<tr><td><b>Bank:</b></td><td><?php echo $BankAccBank; ?></td></tr>
<tr><td><b>Branch Name:</b></td><td><?php echo $BankAccBranch; ?></td></tr>
<tr><td><b>Branch Code:</b></td><td><?php echo $BankAccBranchCode; ?></td></tr>
<tr><td><b>Account No:</b></td><td><?php echo $BankAccNo; ?></td></tr>
</table>
</p>
-->
<?php
}
// echo $formmsg;
}
}
}
?>