Your IP : 216.73.217.79

Current Path : /proc/thread-self/root/var/www/cesa.co.za/
Upload File :
Current File : //proc/thread-self/root/var/www/cesa.co.za/savequestionnaire.php

<?php
// ini_set('display_errors', 1);
// ini_set('display_startup_errors', 1);
// error_reporting(E_ALL);

include("php/inc_db.php");

?>
<html>

<head>
	<title>Questionnaire</title>
	<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
	<link href="/sites/default/files/color/cesa-24ce7d4e/style.css?C" rel="stylesheet" type="text/css">
</head>

<body>
	<?php
	$conn = $conni;

	$GroupID = intval($_POST["id"]);
	$Questionnaire_ID = intval($_POST["qid"]);

	// var_dump($_POST);
	// echo '<br />';
	// echo 'Questionnaire_ID: ' . $Questionnaire_ID . '<br />';
	// echo 'GroupID: ' . $GroupID . '<br />';

	$sql = "SELECT * FROM Questionnaires WHERE Questionnaire_ID='" . $Questionnaire_ID . "'";
	$rec = mysqli_query($conn, $sql);
	if ($row = mysqli_fetch_assoc($rec)) {
		extract($row);
	}
	mysqli_free_result($rec);

	if (isset($_POST["Question_3610_11431"])) {
		$FirstName = $_POST["Question_3610_11431"];
		$Surname = $_POST["Question_3611_11432"];
		$Email = $_POST["Question_3612_11433"];
		$RespondeeName = $FirstName . " " . $Surname;
	} elseif (isset($_POST["Question_3614_11435"])) {
		$FirstName = $_POST["Question_3614_11435"];
		$Surname = $_POST["Question_3615_11436"];
		$Email = $_POST["Question_3616_11437"];
		$RespondeeName = $FirstName . " " . $Surname;
	} else {
		$RespondeeName = $_POST["yourname"];
		$Email = $_POST["email"];
	}

	$attendeeId = intval($_POST["attendeeId"]) + 0;
	$AnonCompanyID = 0;

	$sql = "INSERT INTO AnonRespondees "
		. "(Anon_Respondee_Name, Anon_Respondee_Email, Questionnaire_ID, GroupID, Response_Date, IPAddress, SchoolAttendeeID) "
		. "VALUES ('" . addslashes($RespondeeName) . "', '" . addslashes($Email) . "', " . $Questionnaire_ID . ", "
		. $GroupID . ", '" . date("Y-m-d H:i:s") . "', '" . $_SERVER['REMOTE_ADDR'] . "', " . $attendeeId . ")";
	mysqli_query($conn, $sql);
	$iRespondeeID = mysqli_insert_id($conn);

	if (isset($_POST["subscribe"]) && ($_POST["subscribe"] == 1)) {
		$sql = "INSERT INTO MailingList (FirstName, Surname, EmailAddress, Source) VALUES ('" . addslashes($FirstName) . "', '" . addslashes($Surname) . "', '" . addslashes($Email) . "', 'MISA Survey')";
		//	mysqli_query($conn,$sql);
	}

	?>
	<table width="900" border="0" align="center" cellpadding="20" cellspacing="0" bgcolor="#FFFFFF">
		<tr>
			<td valign="top">
				<h1><?php echo htmlspecialchars($Questionnaire_Name); ?></h1>
				<?php
				$sql = "SELECT Questions.IsMulti, Answers.* "
					. "FROM Answers JOIN Questions USING (Question_ID) WHERE Questions.Questionnaire_ID='" . $Questionnaire_ID . "'";
				// echo $sql . '<br />';
				$rec = mysqli_query($conn, $sql);
				$User_Score = 0;
				while ($row = mysqli_fetch_assoc($rec)) {
					if (empty($row["Answer"])) {
						// This is a free text answer
						//		for ($i=0; $i<count($_POST["Question_".$row["Question_ID"]]); $i++) {
						if (isset($_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]])) {
							$sTextAnswer = $_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]];
						} else {
							$sTextAnswer = $_POST["Question_" . $row["Question_ID"]];
						}
						$sql = "INSERT INTO Anon_User_Answers (GroupID, AnonCompanyID, Questionnaire_ID, Question_ID, Answer_ID, Answer_Text, Respondee_ID) "
							. "VALUES (" . $GroupID . ", " . $AnonCompanyID . ", " . $Questionnaire_ID . ", " . $row["Question_ID"] . ", " . $row["Answer_ID"]
							. ", '" . addslashes($sTextAnswer) . "', " . $iRespondeeID . ")";
						// echo $sql . '<br />';
						mysqli_query($conn, $sql);
						//		}
					} elseif ($row["IsMulti"] == 1) {
						$sql = "INSERT INTO Anon_User_Answers (GroupID, AnonCompanyID, Questionnaire_ID, Question_ID, Answer_ID, Answer_Text, Respondee_ID) "
							. "VALUES (" . $GroupID . ", " . $AnonCompanyID . ", " . $Questionnaire_ID . ", " . $row["Question_ID"] . ", " . $row["Answer_ID"]
							. ", '" . implode(",", $_POST["Question_" . $row["Question_ID"]]) . "', " . $iRespondeeID . ")";
						// echo $sql . '<br />';
						mysqli_query($conn, $sql);
					} else {
						if ($_POST["Question_" . $row["Question_ID"]] == $row["Answer_ID"]) {
							if (isset($_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]]) && !empty($_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]])) {
								$sTextAnswer = $_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]];
							} else {
								$sTextAnswer = '';
							}
							$sql = "INSERT INTO Anon_User_Answers (GroupID, AnonCompanyID, Questionnaire_ID, Question_ID, Answer_ID, Respondee_ID, Answer_Text) "
								. "VALUES (" . $GroupID . ", " . $AnonCompanyID . ", " . $Questionnaire_ID . ", " . $row["Question_ID"] . ", "
								. $_POST["Question_" . $row["Question_ID"]] . ", "
								. $iRespondeeID . ", '" . addslashes($sTextAnswer) . "')";
							// echo $sql . '<br />';
							mysqli_query($conn, $sql);
						}
					}
				}
				?>
				<h1>Thank you!</h1>
				<p>Thank you for your submission, we have received your answers and appreciate your effort.</p>
				<?php
				if ($HasScore == 1) {
					$sql = "SELECT SUM(Answers.Answer_Score) AS SumScore FROM Answers, Anon_User_Answers "
						. "WHERE Answers.`Answer_ID`=Anon_User_Answers.`Answer_ID` AND Questionnaire_ID=" . $Questionnaire_ID . " "
						. "AND Anon_User_Answers.Respondee_ID=" . $iRespondeeID;
					// echo $sql . '<br />';
					$rec = mysqli_query($conn, $sql);
					if ($row = mysqli_fetch_assoc($rec)) {
						// echo $row . '<br />';
						$sql = "UPDATE AnonRespondees SET Score=" . $row["SumScore"] . " WHERE Anon_RespondeeID=" . $iRespondeeID;
						mysqli_query($conn, $sql);
						$PercScore = intval($row["SumScore"]) / $Score;
					}
				?>
					<p><b>Your score: <?php echo number_format($PercScore, 0); ?>%</b></p>
				<?php
					if ($PercScore >= $PassPerc) {
						echo $GoodResultText;
					} else {
						echo $BadResultText;
					}
				}

				?>
				<p>&nbsp;</p>
				<p>&nbsp;</p>
			</td>
		</tr>
	</table>

</body>

</html>